diff options
| author | Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi> | 2017-10-07 17:47:24 +0300 |
|---|---|---|
| committer | Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi> | 2017-10-07 21:45:34 +0300 |
| commit | efd0e778aa733a83053c6079ffbfe2eb76f7808c (patch) | |
| tree | 59f64daf030a3fd863f6d91987f6e69d7ca3692b | |
| parent | 61db7099f10c34818b00b9c36126a29ae2aa829f (diff) | |
| download | awall-efd0e778aa733a83053c6079ffbfe2eb76f7808c.tar.bz2 awall-efd0e778aa733a83053c6079ffbfe2eb76f7808c.tar.xz | |
test: limit
| -rw-r--r-- | test/mandatory/filter-limit.lua | 20 | ||||
| -rw-r--r-- | test/mandatory/limit.json | 1 | ||||
| -rw-r--r-- | test/output/dump | 30967 | ||||
| -rw-r--r-- | test/output/rules-save | 6733 | ||||
| -rw-r--r-- | test/output/rules6-save | 6733 |
5 files changed, 31270 insertions, 13184 deletions
diff --git a/test/mandatory/filter-limit.lua b/test/mandatory/filter-limit.lua index a45540d..00c6dcf 100644 --- a/test/mandatory/filter-limit.lua +++ b/test/mandatory/filter-limit.lua @@ -38,16 +38,18 @@ function add(limit_type, filter) add_limit(limit) if not high_rate then - limit.name = 'A' + for _, name in ipairs{'A', 'C'} do + limit.name = name - for _, addr in ipairs{false, 'dest'} do - limit.addr = addr or nil + for _, addr in ipairs{false, 'dest'} do + limit.addr = addr or nil - limit.update = nil - add_limit(limit) + limit.update = nil + add_limit(limit) - limit.update = false - add_limit(limit) + limit.update = false + add_limit(limit) + end end end end @@ -59,7 +61,9 @@ add('conn', {out='B'}) add('flow') add('flow', {['in']='A', out='_fw', ['no-track']=true}) -table.insert(res, {['update-limit']='A'}) +for _, name in ipairs{'A', 'B', 'C', 'D'} do + table.insert(res, {['update-limit']=name}) +end for _, measure in ipairs{'conn', 'flow'} do for _, addr in ipairs{'src', 'dest'} do diff --git a/test/mandatory/limit.json b/test/mandatory/limit.json new file mode 100644 index 0000000..8fff64b --- /dev/null +++ b/test/mandatory/limit.json @@ -0,0 +1 @@ +{ "limit": { "B": true, "C": 7, "D": { "inet": 22, "inet6": 58 } } } diff --git a/test/output/dump b/test/output/dump index 6916535..64a0272 100644 --- a/test/output/dump +++ b/test/output/dump @@ -598,2106 +598,3802 @@ Filter 42 {"action":"pass","conn-limit":{"addr":"dest", inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-36 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-36 -Filter 43 {"conn-limit":{"log":false},"out":"B"} +Filter 43 {"conn-limit":{"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-36 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-36 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-36 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-36 - inet/filter/limit-36 -m recent --name limit-36 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-36 -m recent --name limit-36 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-36 -m recent --name limit-36 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-36 -m recent --name limit-36 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-37 + inet6/filter/limit-36 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-37 + inet/filter/logdrop-37 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-37 -m limit --limit 1/second -j LOG + inet/filter/logdrop-37 -j DROP + inet6/filter/logdrop-37 -j DROP + inet/filter/limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-36 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 44 {"action":"pass","conn-limit":{"log":false},"out":"B"} +Filter 44 {"action":"pass","conn-limit":{"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-37 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-37 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-37 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-37 - inet/filter/limit-37 -m recent --name limit-37 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-37 -m recent --name limit-37 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-37 -m recent --name limit-37 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-37 -m recent --name limit-37 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-38 + inet6/filter/limit-37 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-38 + inet/filter/logdrop-38 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-38 -m limit --limit 1/second -j LOG + inet/filter/logdrop-38 -j DROP + inet6/filter/logdrop-38 -j DROP + inet/filter/limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-37 -m recent --name user:C --rsource --mask fe00:: --set -Filter 45 {"conn-limit":{"log":false},"log":true,"out":"B"} +Filter 45 {"conn-limit":{"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-38 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-38 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-38 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-38 - inet/filter/limit-38 -m recent --name limit-38 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-38 -m recent --name limit-38 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-39 + inet6/filter/limit-38 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-39 + inet/filter/logdrop-39 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-39 -m limit --limit 1/second -j LOG + inet/filter/logdrop-39 -j DROP + inet6/filter/logdrop-39 -j DROP inet/filter/limit-38 -m limit --limit 1/second -j LOG inet6/filter/limit-38 -m limit --limit 1/second -j LOG - inet/filter/limit-38 -m recent --name limit-38 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-38 -m recent --name limit-38 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-38 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 46 {"action":"pass","conn-limit":{"log":false},"log":true,"out":"B"} +Filter 46 {"action":"pass","conn-limit":{"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-39 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-39 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-39 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-39 - inet/filter/limit-39 -m recent --name limit-39 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-39 -m recent --name limit-39 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-39 -m recent --name limit-39 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-39 -m recent --name limit-39 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-40 + inet6/filter/limit-39 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-40 + inet/filter/logdrop-40 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-40 -m limit --limit 1/second -j LOG + inet/filter/logdrop-40 -j DROP + inet6/filter/logdrop-40 -j DROP + inet/filter/limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-39 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 47 {"conn-limit":{"log":false},"log":"none","out":"B"} +Filter 47 {"conn-limit":{"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-40 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-40 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-40 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-40 - inet/filter/limit-40 -m recent --name limit-40 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-40 -m recent --name limit-40 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-40 -m recent --name limit-40 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-40 -m recent --name limit-40 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-41 + inet6/filter/limit-40 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-41 + inet/filter/logdrop-41 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-41 -m limit --limit 1/second -j LOG + inet/filter/logdrop-41 -j DROP + inet6/filter/logdrop-41 -j DROP + inet/filter/limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-40 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 48 {"action":"pass","conn-limit":{"log":false},"log":"none","out":"B"} +Filter 48 {"action":"pass","conn-limit":{"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-41 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-41 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-41 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-41 - inet/filter/limit-41 -m recent --name limit-41 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-41 -m recent --name limit-41 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-41 -m recent --name limit-41 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-41 -m recent --name limit-41 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-42 + inet6/filter/limit-41 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-42 + inet/filter/logdrop-42 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-42 -m limit --limit 1/second -j LOG + inet/filter/logdrop-42 -j DROP + inet6/filter/logdrop-42 -j DROP + inet/filter/limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-41 -m recent --name user:C --rsource --mask fe00:: --set -Filter 49 {"conn-limit":{"log":false,"name":"A"},"out":"B"} +Filter 49 {"conn-limit":{"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-42 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-42 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-42 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-42 - inet/filter/limit-42 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-42 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-42 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-42 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-42 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-43 + inet6/filter/limit-42 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-43 + inet/filter/logdrop-43 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-43 -m limit --limit 1/second -j LOG + inet/filter/logdrop-43 -j DROP + inet6/filter/logdrop-43 -j DROP + inet/filter/limit-42 -j ACCEPT + inet6/filter/limit-42 -j ACCEPT -Filter 50 {"action":"pass","conn-limit":{"log":false,"name":"A"},"out":"B"} +Filter 50 {"action":"pass","conn-limit":{"name":"C","update":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-43 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-43 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-43 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-43 - inet/filter/limit-43 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-43 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-43 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-43 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-44 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-44 -Filter 51 {"conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} +Filter 51 {"conn-limit":{"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-44 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-44 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-44 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-44 - inet/filter/limit-44 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-44 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-44 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-45 + inet6/filter/limit-44 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-45 + inet/filter/logdrop-45 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-45 -m limit --limit 1/second -j LOG + inet/filter/logdrop-45 -j DROP + inet6/filter/logdrop-45 -j DROP inet/filter/limit-44 -m limit --limit 1/second -j LOG inet6/filter/limit-44 -m limit --limit 1/second -j LOG - inet/filter/limit-44 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-44 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-44 -j ACCEPT + inet6/filter/limit-44 -j ACCEPT -Filter 52 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} +Filter 52 {"action":"pass","conn-limit":{"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-45 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-45 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-45 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-45 - inet/filter/limit-45 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-45 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-45 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-45 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-45 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-46 + inet6/filter/limit-45 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-46 + inet/filter/logdrop-46 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-46 -m limit --limit 1/second -j LOG + inet/filter/logdrop-46 -j DROP + inet6/filter/logdrop-46 -j DROP + inet/filter/limit-45 -m limit --limit 1/second -j LOG + inet6/filter/limit-45 -m limit --limit 1/second -j LOG -Filter 53 {"conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} +Filter 53 {"conn-limit":{"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-46 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-46 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-46 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-46 - inet/filter/limit-46 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-46 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-46 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-46 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-46 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-47 + inet6/filter/limit-46 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-47 + inet/filter/logdrop-47 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-47 -m limit --limit 1/second -j LOG + inet/filter/logdrop-47 -j DROP + inet6/filter/logdrop-47 -j DROP + inet/filter/limit-46 -j ACCEPT + inet6/filter/limit-46 -j ACCEPT -Filter 54 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} +Filter 54 {"action":"pass","conn-limit":{"name":"C","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-47 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-47 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-47 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-47 - inet/filter/limit-47 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-47 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-47 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-47 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-48 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-48 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-48 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-48 -Filter 55 {"conn-limit":{"log":false,"name":"A","update":false},"out":"B"} +Filter 55 {"conn-limit":{"addr":"dest","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-48 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-48 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-48 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-48 - inet/filter/limit-48 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-48 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-48 -j ACCEPT - inet6/filter/limit-48 -j ACCEPT - -Filter 56 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 57 {"conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} + inet/filter/limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-49 + inet6/filter/limit-48 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-49 + inet/filter/logdrop-49 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-49 -m limit --limit 1/second -j LOG + inet/filter/logdrop-49 -j DROP + inet6/filter/logdrop-49 -j DROP + inet/filter/limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-48 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 56 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-49 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-49 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-49 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-49 + inet/filter/limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-50 + inet6/filter/limit-49 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-50 + inet/filter/logdrop-50 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-50 -m limit --limit 1/second -j LOG + inet/filter/logdrop-50 -j DROP + inet6/filter/logdrop-50 -j DROP + inet/filter/limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-49 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 57 {"conn-limit":{"addr":"dest","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-50 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-50 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-50 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-50 - inet/filter/limit-50 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-50 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-51 + inet6/filter/limit-50 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-51 + inet/filter/logdrop-51 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-51 -m limit --limit 1/second -j LOG + inet/filter/logdrop-51 -j DROP + inet6/filter/logdrop-51 -j DROP inet/filter/limit-50 -m limit --limit 1/second -j LOG inet6/filter/limit-50 -m limit --limit 1/second -j LOG - inet/filter/limit-50 -j ACCEPT - inet6/filter/limit-50 -j ACCEPT + inet/filter/limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-50 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 58 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 58 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-51 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-51 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-51 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-51 - inet/filter/limit-51 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-51 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-51 -m limit --limit 1/second -j LOG - inet6/filter/limit-51 -m limit --limit 1/second -j LOG + inet/filter/limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-52 + inet6/filter/limit-51 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-52 + inet/filter/logdrop-52 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-52 -m limit --limit 1/second -j LOG + inet/filter/logdrop-52 -j DROP + inet6/filter/logdrop-52 -j DROP + inet/filter/limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-51 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 59 {"conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 59 {"conn-limit":{"addr":"dest","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-52 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-52 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-52 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-52 - inet/filter/limit-52 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-52 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-52 -j ACCEPT - inet6/filter/limit-52 -j ACCEPT - -Filter 60 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 61 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} + inet/filter/limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-53 + inet6/filter/limit-52 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-53 + inet/filter/logdrop-53 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-53 -m limit --limit 1/second -j LOG + inet/filter/logdrop-53 -j DROP + inet6/filter/logdrop-53 -j DROP + inet/filter/limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-52 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 60 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-53 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-53 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-53 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-53 + inet/filter/limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-54 + inet6/filter/limit-53 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-54 + inet/filter/logdrop-54 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-54 -m limit --limit 1/second -j LOG + inet/filter/logdrop-54 -j DROP + inet6/filter/logdrop-54 -j DROP + inet/filter/limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-53 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 61 {"conn-limit":{"addr":"dest","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-54 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-54 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-54 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-54 - inet/filter/limit-54 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-54 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-54 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-54 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-54 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-55 + inet6/filter/limit-54 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-55 + inet/filter/logdrop-55 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-55 -m limit --limit 1/second -j LOG + inet/filter/logdrop-55 -j DROP + inet6/filter/logdrop-55 -j DROP + inet/filter/limit-54 -j ACCEPT + inet6/filter/limit-54 -j ACCEPT -Filter 62 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} +Filter 62 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-55 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-55 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-55 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-55 - inet/filter/limit-55 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-55 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-55 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-55 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56 -Filter 63 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} +Filter 63 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-56 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-56 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-56 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-56 - inet/filter/limit-56 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-56 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-56 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-57 + inet6/filter/limit-56 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-57 + inet/filter/logdrop-57 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-57 -m limit --limit 1/second -j LOG + inet/filter/logdrop-57 -j DROP + inet6/filter/logdrop-57 -j DROP inet/filter/limit-56 -m limit --limit 1/second -j LOG inet6/filter/limit-56 -m limit --limit 1/second -j LOG - inet/filter/limit-56 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-56 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-56 -j ACCEPT + inet6/filter/limit-56 -j ACCEPT -Filter 64 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} +Filter 64 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-57 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-57 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-57 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-57 - inet/filter/limit-57 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-57 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-57 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-57 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-57 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-58 + inet6/filter/limit-57 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-58 + inet/filter/logdrop-58 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-58 -m limit --limit 1/second -j LOG + inet/filter/logdrop-58 -j DROP + inet6/filter/logdrop-58 -j DROP + inet/filter/limit-57 -m limit --limit 1/second -j LOG + inet6/filter/limit-57 -m limit --limit 1/second -j LOG -Filter 65 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} +Filter 65 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-58 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-58 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-58 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-58 - inet/filter/limit-58 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-58 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-58 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-58 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-58 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-59 + inet6/filter/limit-58 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-59 + inet/filter/logdrop-59 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-59 -m limit --limit 1/second -j LOG + inet/filter/logdrop-59 -j DROP + inet6/filter/logdrop-59 -j DROP + inet/filter/limit-58 -j ACCEPT + inet6/filter/limit-58 -j ACCEPT -Filter 66 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} +Filter 66 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-59 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-59 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-59 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-59 - inet/filter/limit-59 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-59 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-59 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-59 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-60 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-60 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-60 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-60 -Filter 67 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} +Filter 67 {"conn-limit":{"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-60 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-60 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-60 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-60 - inet/filter/limit-60 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-60 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-60 -j ACCEPT - inet6/filter/limit-60 -j ACCEPT + inet/filter/limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 68 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} +Filter 68 {"action":"pass","conn-limit":{"log":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-61 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-61 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-61 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-61 + inet/filter/limit-61 -m recent --name limit-61 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-61 -m recent --name limit-61 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-61 -m recent --name limit-61 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-61 -m recent --name limit-61 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 69 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 69 {"conn-limit":{"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-62 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-62 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-62 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-62 - inet/filter/limit-62 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-62 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-62 -m recent --name limit-62 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-62 -m recent --name limit-62 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-62 -m limit --limit 1/second -j LOG inet6/filter/limit-62 -m limit --limit 1/second -j LOG - inet/filter/limit-62 -j ACCEPT - inet6/filter/limit-62 -j ACCEPT + inet/filter/limit-62 -m recent --name limit-62 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-62 -m recent --name limit-62 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 70 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 70 {"action":"pass","conn-limit":{"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-63 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-63 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-63 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-63 - inet/filter/limit-63 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-63 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-63 -m limit --limit 1/second -j LOG - inet6/filter/limit-63 -m limit --limit 1/second -j LOG + inet/filter/limit-63 -m recent --name limit-63 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-63 -m recent --name limit-63 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-63 -m recent --name limit-63 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-63 -m recent --name limit-63 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 71 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 71 {"conn-limit":{"log":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-64 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-64 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-64 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-64 - inet/filter/limit-64 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-64 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-64 -j ACCEPT - inet6/filter/limit-64 -j ACCEPT + inet/filter/limit-64 -m recent --name limit-64 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-64 -m recent --name limit-64 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-64 -m recent --name limit-64 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-64 -m recent --name limit-64 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 72 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 72 {"action":"pass","conn-limit":{"log":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-65 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-65 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-65 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-65 + inet/filter/limit-65 -m recent --name limit-65 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-65 -m recent --name limit-65 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-65 -m recent --name limit-65 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-65 -m recent --name limit-65 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 73 {"conn-limit":{"log":"none"},"out":"B"} +Filter 73 {"conn-limit":{"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-66 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-66 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-66 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-66 - inet/filter/limit-66 -m recent --name limit-66 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-66 -m recent --name limit-66 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-66 -m recent --name limit-66 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-66 -m recent --name limit-66 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-66 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-66 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-66 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-66 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 74 {"action":"pass","conn-limit":{"log":"none"},"out":"B"} +Filter 74 {"action":"pass","conn-limit":{"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-67 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-67 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-67 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-67 - inet/filter/limit-67 -m recent --name limit-67 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-67 -m recent --name limit-67 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-67 -m recent --name limit-67 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-67 -m recent --name limit-67 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-67 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-67 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-67 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-67 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 75 {"conn-limit":{"log":"none"},"log":true,"out":"B"} +Filter 75 {"conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-68 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-68 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-68 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-68 - inet/filter/limit-68 -m recent --name limit-68 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-68 -m recent --name limit-68 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-68 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-68 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-68 -m limit --limit 1/second -j LOG inet6/filter/limit-68 -m limit --limit 1/second -j LOG - inet/filter/limit-68 -m recent --name limit-68 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-68 -m recent --name limit-68 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-68 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-68 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 76 {"action":"pass","conn-limit":{"log":"none"},"log":true,"out":"B"} +Filter 76 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-69 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-69 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-69 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-69 - inet/filter/limit-69 -m recent --name limit-69 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-69 -m recent --name limit-69 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-69 -m recent --name limit-69 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-69 -m recent --name limit-69 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 77 {"conn-limit":{"log":"none"},"log":"none","out":"B"} +Filter 77 {"conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-70 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-70 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-70 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-70 - inet/filter/limit-70 -m recent --name limit-70 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-70 -m recent --name limit-70 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-70 -m recent --name limit-70 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-70 -m recent --name limit-70 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 78 {"action":"pass","conn-limit":{"log":"none"},"log":"none","out":"B"} +Filter 78 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-71 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-71 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-71 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-71 - inet/filter/limit-71 -m recent --name limit-71 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-71 -m recent --name limit-71 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-71 -m recent --name limit-71 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-71 -m recent --name limit-71 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 79 {"conn-limit":{"log":"none","name":"A"},"out":"B"} +Filter 79 {"conn-limit":{"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-72 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-72 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-72 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-72 - inet/filter/limit-72 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-72 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-72 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-72 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-72 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-72 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-72 -j ACCEPT + inet6/filter/limit-72 -j ACCEPT -Filter 80 {"action":"pass","conn-limit":{"log":"none","name":"A"},"out":"B"} +Filter 80 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-73 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-73 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-73 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-73 - inet/filter/limit-73 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-73 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-73 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-73 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 81 {"conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} +Filter 81 {"conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-74 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-74 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-74 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-74 - inet/filter/limit-74 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-74 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-74 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-74 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-74 -m limit --limit 1/second -j LOG inet6/filter/limit-74 -m limit --limit 1/second -j LOG - inet/filter/limit-74 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-74 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-74 -j ACCEPT + inet6/filter/limit-74 -j ACCEPT -Filter 82 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} +Filter 82 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-75 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-75 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-75 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-75 - inet/filter/limit-75 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-75 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-75 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-75 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-75 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-75 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-75 -m limit --limit 1/second -j LOG + inet6/filter/limit-75 -m limit --limit 1/second -j LOG -Filter 83 {"conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} +Filter 83 {"conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-76 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-76 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-76 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-76 - inet/filter/limit-76 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-76 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-76 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-76 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-76 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-76 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-76 -j ACCEPT + inet6/filter/limit-76 -j ACCEPT -Filter 84 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} +Filter 84 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-77 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-77 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-77 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-77 - inet/filter/limit-77 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-77 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-77 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-77 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 85 {"conn-limit":{"log":"none","name":"A","update":false},"out":"B"} +Filter 85 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-78 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-78 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-78 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-78 - inet/filter/limit-78 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-78 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-78 -j ACCEPT - inet6/filter/limit-78 -j ACCEPT + inet/filter/limit-78 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-78 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-78 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-78 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 86 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"out":"B"} +Filter 86 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-79 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-79 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-79 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-79 + inet/filter/limit-79 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-79 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-79 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-79 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 87 {"conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 87 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-80 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-80 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-80 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-80 - inet/filter/limit-80 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-80 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-80 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-80 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-80 -m limit --limit 1/second -j LOG inet6/filter/limit-80 -m limit --limit 1/second -j LOG - inet/filter/limit-80 -j ACCEPT - inet6/filter/limit-80 -j ACCEPT + inet/filter/limit-80 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-80 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 88 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 88 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-81 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-81 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-81 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-81 - inet/filter/limit-81 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-81 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-81 -m limit --limit 1/second -j LOG - inet6/filter/limit-81 -m limit --limit 1/second -j LOG + inet/filter/limit-81 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-81 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-81 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-81 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 89 {"conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 89 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-82 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-82 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-82 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-82 - inet/filter/limit-82 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-82 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-82 -j ACCEPT - inet6/filter/limit-82 -j ACCEPT + inet/filter/limit-82 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-82 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-82 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-82 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 90 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 90 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-83 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-83 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-83 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-83 + inet/filter/limit-83 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-83 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-83 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-83 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 91 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} +Filter 91 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-84 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-84 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-84 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-84 - inet/filter/limit-84 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-84 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-84 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-84 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-84 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-84 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-84 -j ACCEPT + inet6/filter/limit-84 -j ACCEPT -Filter 92 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} +Filter 92 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-85 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-85 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-85 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-85 - inet/filter/limit-85 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-85 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-85 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-85 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 93 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} +Filter 93 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-86 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-86 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-86 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-86 - inet/filter/limit-86 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-86 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-86 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-86 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-86 -m limit --limit 1/second -j LOG inet6/filter/limit-86 -m limit --limit 1/second -j LOG - inet/filter/limit-86 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-86 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-86 -j ACCEPT + inet6/filter/limit-86 -j ACCEPT -Filter 94 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} +Filter 94 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-87 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-87 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-87 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-87 - inet/filter/limit-87 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-87 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-87 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-87 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-87 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-87 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-87 -m limit --limit 1/second -j LOG + inet6/filter/limit-87 -m limit --limit 1/second -j LOG -Filter 95 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} +Filter 95 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-88 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-88 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-88 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-88 - inet/filter/limit-88 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-88 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-88 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-88 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-88 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-88 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-88 -j ACCEPT + inet6/filter/limit-88 -j ACCEPT -Filter 96 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} +Filter 96 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-89 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-89 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-89 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-89 - inet/filter/limit-89 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-89 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-89 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-89 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 97 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} +Filter 97 {"conn-limit":{"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-90 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-90 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-90 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-90 - inet/filter/limit-90 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-90 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-90 -j ACCEPT - inet6/filter/limit-90 -j ACCEPT + inet/filter/limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-90 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-90 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 98 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} +Filter 98 {"action":"pass","conn-limit":{"log":false,"name":"C"},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-91 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-91 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-91 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-91 + inet/filter/limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-91 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-91 -m recent --name user:C --rsource --mask fe00:: --set -Filter 99 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 99 {"conn-limit":{"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-92 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-92 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-92 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-92 - inet/filter/limit-92 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-92 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-92 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-92 -m limit --limit 1/second -j LOG inet6/filter/limit-92 -m limit --limit 1/second -j LOG - inet/filter/limit-92 -j ACCEPT - inet6/filter/limit-92 -j ACCEPT + inet/filter/limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-92 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 100 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 100 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-93 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-93 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-93 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-93 - inet/filter/limit-93 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-93 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-93 -m limit --limit 1/second -j LOG - inet6/filter/limit-93 -m limit --limit 1/second -j LOG + inet/filter/limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-93 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-93 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 101 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 101 {"conn-limit":{"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-94 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-94 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-94 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-94 - inet/filter/limit-94 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-94 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-94 -j ACCEPT - inet6/filter/limit-94 -j ACCEPT + inet/filter/limit-94 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-94 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-94 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-94 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 102 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 102 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-95 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-95 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-95 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-95 + inet/filter/limit-95 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-95 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-95 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-95 -m recent --name user:C --rsource --mask fe00:: --set -Filter 103 {"conn-limit":{"interval":5},"out":"B"} +Filter 103 {"conn-limit":{"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-96 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-96 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-96 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-96 - inet/filter/limit-96 -m recent --name limit-96 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-37 - inet6/filter/limit-96 -m recent --name limit-96 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-37 - inet/filter/logdrop-37 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-37 -m limit --limit 1/second -j LOG - inet/filter/logdrop-37 -j DROP - inet6/filter/logdrop-37 -j DROP - inet/filter/limit-96 -m recent --name limit-96 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-96 -m recent --name limit-96 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-96 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-96 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-96 -j ACCEPT + inet6/filter/limit-96 -j ACCEPT -Filter 104 {"action":"pass","conn-limit":{"interval":5},"out":"B"} +Filter 104 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-97 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-97 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-97 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-97 - inet/filter/limit-97 -m recent --name limit-97 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-38 - inet6/filter/limit-97 -m recent --name limit-97 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-38 - inet/filter/logdrop-38 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-38 -m limit --limit 1/second -j LOG - inet/filter/logdrop-38 -j DROP - inet6/filter/logdrop-38 -j DROP - inet/filter/limit-97 -m recent --name limit-97 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-97 -m recent --name limit-97 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 105 {"conn-limit":{"interval":5},"log":true,"out":"B"} +Filter 105 {"conn-limit":{"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-98 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-98 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-98 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-98 - inet/filter/limit-98 -m recent --name limit-98 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-39 - inet6/filter/limit-98 -m recent --name limit-98 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-39 - inet/filter/logdrop-39 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-39 -m limit --limit 1/second -j LOG - inet/filter/logdrop-39 -j DROP - inet6/filter/logdrop-39 -j DROP + inet/filter/limit-98 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-98 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-98 -m limit --limit 1/second -j LOG inet6/filter/limit-98 -m limit --limit 1/second -j LOG - inet/filter/limit-98 -m recent --name limit-98 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-98 -m recent --name limit-98 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-98 -j ACCEPT + inet6/filter/limit-98 -j ACCEPT -Filter 106 {"action":"pass","conn-limit":{"interval":5},"log":true,"out":"B"} +Filter 106 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-99 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-99 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-99 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-99 - inet/filter/limit-99 -m recent --name limit-99 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-40 - inet6/filter/limit-99 -m recent --name limit-99 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-40 - inet/filter/logdrop-40 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-40 -m limit --limit 1/second -j LOG - inet/filter/logdrop-40 -j DROP - inet6/filter/logdrop-40 -j DROP - inet/filter/limit-99 -m recent --name limit-99 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-99 -m recent --name limit-99 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-99 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-99 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-99 -m limit --limit 1/second -j LOG + inet6/filter/limit-99 -m limit --limit 1/second -j LOG -Filter 107 {"conn-limit":{"interval":5},"log":"none","out":"B"} +Filter 107 {"conn-limit":{"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-100 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-100 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-100 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-100 - inet/filter/limit-100 -m recent --name limit-100 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-41 - inet6/filter/limit-100 -m recent --name limit-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-41 - inet/filter/logdrop-41 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-41 -m limit --limit 1/second -j LOG - inet/filter/logdrop-41 -j DROP - inet6/filter/logdrop-41 -j DROP - inet/filter/limit-100 -m recent --name limit-100 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-100 -m recent --name limit-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-100 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-100 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-100 -j ACCEPT + inet6/filter/limit-100 -j ACCEPT -Filter 108 {"action":"pass","conn-limit":{"interval":5},"log":"none","out":"B"} +Filter 108 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-101 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-101 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-101 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-101 - inet/filter/limit-101 -m recent --name limit-101 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-42 - inet6/filter/limit-101 -m recent --name limit-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-42 - inet/filter/logdrop-42 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-42 -m limit --limit 1/second -j LOG - inet/filter/logdrop-42 -j DROP - inet6/filter/logdrop-42 -j DROP - inet/filter/limit-101 -m recent --name limit-101 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-101 -m recent --name limit-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 109 {"conn-limit":{"interval":5,"name":"A"},"out":"B"} +Filter 109 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-102 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-102 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-102 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-102 - inet/filter/limit-102 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-43 - inet6/filter/limit-102 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-43 - inet/filter/logdrop-43 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-43 -m limit --limit 1/second -j LOG - inet/filter/logdrop-43 -j DROP - inet6/filter/logdrop-43 -j DROP - inet/filter/limit-102 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-102 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-102 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-102 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-102 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-102 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 110 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"out":"B"} +Filter 110 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-103 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-103 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-103 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-103 - inet/filter/limit-103 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-44 - inet6/filter/limit-103 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-44 - inet/filter/logdrop-44 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-44 -m limit --limit 1/second -j LOG - inet/filter/logdrop-44 -j DROP - inet6/filter/logdrop-44 -j DROP - inet/filter/limit-103 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-103 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-103 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-103 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-103 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-103 -m recent --name user:C --rdest --mask fe00:: --set -Filter 111 {"conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} +Filter 111 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-104 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-104 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-104 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-104 - inet/filter/limit-104 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-45 - inet6/filter/limit-104 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-45 - inet/filter/logdrop-45 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-45 -m limit --limit 1/second -j LOG - inet/filter/logdrop-45 -j DROP - inet6/filter/logdrop-45 -j DROP + inet/filter/limit-104 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-104 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-104 -m limit --limit 1/second -j LOG inet6/filter/limit-104 -m limit --limit 1/second -j LOG - inet/filter/limit-104 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-104 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-104 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-104 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 112 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} +Filter 112 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-105 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-105 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-105 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-105 - inet/filter/limit-105 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-46 - inet6/filter/limit-105 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-46 - inet/filter/logdrop-46 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-46 -m limit --limit 1/second -j LOG - inet/filter/logdrop-46 -j DROP - inet6/filter/logdrop-46 -j DROP - inet/filter/limit-105 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-105 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-105 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-105 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-105 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-105 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 113 {"conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} +Filter 113 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-106 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-106 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-106 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-106 - inet/filter/limit-106 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-47 - inet6/filter/limit-106 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-47 - inet/filter/logdrop-47 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-47 -m limit --limit 1/second -j LOG - inet/filter/logdrop-47 -j DROP - inet6/filter/logdrop-47 -j DROP - inet/filter/limit-106 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-106 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-106 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-106 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 114 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} +Filter 114 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-107 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-107 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-107 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-107 - inet/filter/limit-107 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-48 - inet6/filter/limit-107 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-48 - inet/filter/logdrop-48 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-48 -m limit --limit 1/second -j LOG - inet/filter/logdrop-48 -j DROP - inet6/filter/logdrop-48 -j DROP - inet/filter/limit-107 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-107 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-107 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-107 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-107 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-107 -m recent --name user:C --rdest --mask fe00:: --set -Filter 115 {"conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} +Filter 115 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-108 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-108 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-108 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-108 - inet/filter/limit-108 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-49 - inet6/filter/limit-108 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-49 - inet/filter/logdrop-49 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-49 -m limit --limit 1/second -j LOG - inet/filter/logdrop-49 -j DROP - inet6/filter/logdrop-49 -j DROP + inet/filter/limit-108 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-108 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-108 -j ACCEPT inet6/filter/limit-108 -j ACCEPT -Filter 116 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} +Filter 116 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-50 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-50 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-50 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-50 + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 117 {"conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} +Filter 117 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-110 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-110 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-110 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-110 - inet/filter/limit-110 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-51 - inet6/filter/limit-110 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-51 - inet/filter/logdrop-51 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-51 -m limit --limit 1/second -j LOG - inet/filter/logdrop-51 -j DROP - inet6/filter/logdrop-51 -j DROP + inet/filter/limit-110 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-110 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-110 -m limit --limit 1/second -j LOG inet6/filter/limit-110 -m limit --limit 1/second -j LOG inet/filter/limit-110 -j ACCEPT inet6/filter/limit-110 -j ACCEPT -Filter 118 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} +Filter 118 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-111 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-111 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-111 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-111 - inet/filter/limit-111 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-52 - inet6/filter/limit-111 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-52 - inet/filter/logdrop-52 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-52 -m limit --limit 1/second -j LOG - inet/filter/logdrop-52 -j DROP - inet6/filter/logdrop-52 -j DROP + inet/filter/limit-111 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-111 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-111 -m limit --limit 1/second -j LOG inet6/filter/limit-111 -m limit --limit 1/second -j LOG -Filter 119 {"conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} +Filter 119 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-112 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-112 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-112 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-112 - inet/filter/limit-112 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-53 - inet6/filter/limit-112 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-53 - inet/filter/logdrop-53 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-53 -m limit --limit 1/second -j LOG - inet/filter/logdrop-53 -j DROP - inet6/filter/logdrop-53 -j DROP + inet/filter/limit-112 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-112 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-112 -j ACCEPT inet6/filter/limit-112 -j ACCEPT -Filter 120 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} +Filter 120 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-54 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-54 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-54 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-54 + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 121 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} +Filter 121 {"conn-limit":{"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-114 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-114 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-114 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-114 - inet/filter/limit-114 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-55 - inet6/filter/limit-114 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-55 - inet/filter/logdrop-55 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-55 -m limit --limit 1/second -j LOG - inet/filter/logdrop-55 -j DROP - inet6/filter/logdrop-55 -j DROP - inet/filter/limit-114 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-114 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-114 -m recent --name limit-114 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-114 -m recent --name limit-114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-114 -m recent --name limit-114 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-114 -m recent --name limit-114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 122 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} +Filter 122 {"action":"pass","conn-limit":{"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-115 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-115 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-115 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-115 - inet/filter/limit-115 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-56 - inet6/filter/limit-115 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-56 - inet/filter/logdrop-56 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-56 -m limit --limit 1/second -j LOG - inet/filter/logdrop-56 -j DROP - inet6/filter/logdrop-56 -j DROP - inet/filter/limit-115 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-115 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-115 -m recent --name limit-115 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-115 -m recent --name limit-115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-115 -m recent --name limit-115 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-115 -m recent --name limit-115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 123 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} +Filter 123 {"conn-limit":{"log":"none"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-116 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-116 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-116 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-116 - inet/filter/limit-116 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-57 - inet6/filter/limit-116 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-57 - inet/filter/logdrop-57 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-57 -m limit --limit 1/second -j LOG - inet/filter/logdrop-57 -j DROP - inet6/filter/logdrop-57 -j DROP + inet/filter/limit-116 -m recent --name limit-116 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-116 -m recent --name limit-116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-116 -m limit --limit 1/second -j LOG inet6/filter/limit-116 -m limit --limit 1/second -j LOG - inet/filter/limit-116 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-116 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-116 -m recent --name limit-116 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-116 -m recent --name limit-116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 124 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} +Filter 124 {"action":"pass","conn-limit":{"log":"none"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-117 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-117 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-117 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-117 - inet/filter/limit-117 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-58 - inet6/filter/limit-117 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-58 - inet/filter/logdrop-58 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-58 -m limit --limit 1/second -j LOG - inet/filter/logdrop-58 -j DROP - inet6/filter/logdrop-58 -j DROP - inet/filter/limit-117 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-117 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-117 -m recent --name limit-117 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-117 -m recent --name limit-117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-117 -m recent --name limit-117 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-117 -m recent --name limit-117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 125 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} +Filter 125 {"conn-limit":{"log":"none"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-118 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-118 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-118 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-118 - inet/filter/limit-118 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-59 - inet6/filter/limit-118 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-59 - inet/filter/logdrop-59 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-59 -m limit --limit 1/second -j LOG - inet/filter/logdrop-59 -j DROP - inet6/filter/logdrop-59 -j DROP - inet/filter/limit-118 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-118 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-118 -m recent --name limit-118 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-118 -m recent --name limit-118 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 126 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} +Filter 126 {"action":"pass","conn-limit":{"log":"none"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-119 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-119 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-119 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-119 - inet/filter/limit-119 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-60 - inet6/filter/limit-119 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-60 - inet/filter/logdrop-60 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-60 -m limit --limit 1/second -j LOG - inet/filter/logdrop-60 -j DROP - inet6/filter/logdrop-60 -j DROP - inet/filter/limit-119 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-119 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-119 -m recent --name limit-119 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-119 -m recent --name limit-119 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 127 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} +Filter 127 {"conn-limit":{"log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-120 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-120 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-120 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-120 - inet/filter/limit-120 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-61 - inet6/filter/limit-120 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-61 - inet/filter/logdrop-61 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-61 -m limit --limit 1/second -j LOG - inet/filter/logdrop-61 -j DROP - inet6/filter/logdrop-61 -j DROP - inet/filter/limit-120 -j ACCEPT - inet6/filter/limit-120 -j ACCEPT + inet/filter/limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 128 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} +Filter 128 {"action":"pass","conn-limit":{"log":"none","name":"A"},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-62 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-62 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-62 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-62 + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-121 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-121 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-121 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-121 + inet/filter/limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 129 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} +Filter 129 {"conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-122 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-122 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-122 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-122 - inet/filter/limit-122 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-63 - inet6/filter/limit-122 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-63 - inet/filter/logdrop-63 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-63 -m limit --limit 1/second -j LOG - inet/filter/logdrop-63 -j DROP - inet6/filter/logdrop-63 -j DROP + inet/filter/limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-122 -m limit --limit 1/second -j LOG inet6/filter/limit-122 -m limit --limit 1/second -j LOG - inet/filter/limit-122 -j ACCEPT - inet6/filter/limit-122 -j ACCEPT + inet/filter/limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 130 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} +Filter 130 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-123 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-123 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-123 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-123 - inet/filter/limit-123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-64 - inet6/filter/limit-123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-64 - inet/filter/logdrop-64 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-64 -m limit --limit 1/second -j LOG - inet/filter/logdrop-64 -j DROP - inet6/filter/logdrop-64 -j DROP - inet/filter/limit-123 -m limit --limit 1/second -j LOG - inet6/filter/limit-123 -m limit --limit 1/second -j LOG + inet/filter/limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 131 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} +Filter 131 {"conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-124 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-124 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-124 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-124 - inet/filter/limit-124 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-65 - inet6/filter/limit-124 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-65 - inet/filter/logdrop-65 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-65 -m limit --limit 1/second -j LOG - inet/filter/logdrop-65 -j DROP - inet6/filter/logdrop-65 -j DROP - inet/filter/limit-124 -j ACCEPT - inet6/filter/limit-124 -j ACCEPT + inet/filter/limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 132 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} +Filter 132 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-66 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-66 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-66 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-66 + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-125 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-125 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-125 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-125 + inet/filter/limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 133 {"conn-limit":{"interval":5,"log":false},"out":"B"} +Filter 133 {"conn-limit":{"log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-126 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-126 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-126 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-126 - inet/filter/limit-126 -m recent --name limit-126 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-126 -m recent --name limit-126 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-126 -m recent --name limit-126 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-126 -m recent --name limit-126 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-126 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-126 -j ACCEPT + inet6/filter/limit-126 -j ACCEPT -Filter 134 {"action":"pass","conn-limit":{"interval":5,"log":false},"out":"B"} +Filter 134 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-127 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-127 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-127 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-127 - inet/filter/limit-127 -m recent --name limit-127 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-127 -m recent --name limit-127 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-127 -m recent --name limit-127 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-127 -m recent --name limit-127 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 135 {"conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} +Filter 135 {"conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-128 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-128 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-128 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-128 - inet/filter/limit-128 -m recent --name limit-128 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-128 -m recent --name limit-128 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-128 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-128 -m limit --limit 1/second -j LOG inet6/filter/limit-128 -m limit --limit 1/second -j LOG - inet/filter/limit-128 -m recent --name limit-128 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-128 -m recent --name limit-128 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-128 -j ACCEPT + inet6/filter/limit-128 -j ACCEPT -Filter 136 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} +Filter 136 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-129 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-129 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-129 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-129 - inet/filter/limit-129 -m recent --name limit-129 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-129 -m recent --name limit-129 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-129 -m recent --name limit-129 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-129 -m recent --name limit-129 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-129 -m limit --limit 1/second -j LOG + inet6/filter/limit-129 -m limit --limit 1/second -j LOG -Filter 137 {"conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} +Filter 137 {"conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-130 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-130 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-130 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-130 - inet/filter/limit-130 -m recent --name limit-130 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-130 -m recent --name limit-130 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-130 -m recent --name limit-130 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-130 -m recent --name limit-130 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-130 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-130 -j ACCEPT + inet6/filter/limit-130 -j ACCEPT -Filter 138 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} +Filter 138 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-131 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-131 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-131 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-131 - inet/filter/limit-131 -m recent --name limit-131 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-131 -m recent --name limit-131 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-131 -m recent --name limit-131 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-131 -m recent --name limit-131 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 139 {"conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} +Filter 139 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-132 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-132 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-132 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-132 - inet/filter/limit-132 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-132 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-132 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-132 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 140 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} +Filter 140 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-133 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-133 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-133 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-133 - inet/filter/limit-133 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-133 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-133 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-133 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 141 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +Filter 141 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-134 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-134 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-134 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-134 - inet/filter/limit-134 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-134 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-134 -m limit --limit 1/second -j LOG inet6/filter/limit-134 -m limit --limit 1/second -j LOG - inet/filter/limit-134 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-134 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 142 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +Filter 142 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-135 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-135 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-135 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-135 - inet/filter/limit-135 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-135 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-135 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-135 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 143 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +Filter 143 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-136 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-136 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-136 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-136 - inet/filter/limit-136 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-136 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-136 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-136 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 144 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +Filter 144 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-137 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-137 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-137 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-137 - inet/filter/limit-137 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-137 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-137 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-137 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 145 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} +Filter 145 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-138 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-138 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-138 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-138 - inet/filter/limit-138 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-138 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-138 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-138 -j ACCEPT inet6/filter/limit-138 -j ACCEPT -Filter 146 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} +Filter 146 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 147 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 147 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-140 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-140 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-140 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-140 - inet/filter/limit-140 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-140 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-140 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-140 -m limit --limit 1/second -j LOG inet6/filter/limit-140 -m limit --limit 1/second -j LOG inet/filter/limit-140 -j ACCEPT inet6/filter/limit-140 -j ACCEPT -Filter 148 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 148 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-141 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-141 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-141 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-141 - inet/filter/limit-141 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-141 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-141 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-141 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-141 -m limit --limit 1/second -j LOG inet6/filter/limit-141 -m limit --limit 1/second -j LOG -Filter 149 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 149 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-142 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-142 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-142 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-142 - inet/filter/limit-142 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-142 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-142 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-142 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-142 -j ACCEPT inet6/filter/limit-142 -j ACCEPT -Filter 150 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 150 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 151 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} +Filter 151 {"conn-limit":{"log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-144 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-144 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-144 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-144 - inet/filter/limit-144 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-144 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-144 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-144 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-144 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-144 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-144 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-144 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 152 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} +Filter 152 {"action":"pass","conn-limit":{"log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-145 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-145 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-145 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-145 - inet/filter/limit-145 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-145 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-145 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-145 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-145 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-145 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-145 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-145 -m recent --name user:C --rsource --mask fe00:: --set -Filter 153 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +Filter 153 {"conn-limit":{"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-146 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-146 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-146 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-146 - inet/filter/limit-146 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-146 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-146 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-146 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-146 -m limit --limit 1/second -j LOG inet6/filter/limit-146 -m limit --limit 1/second -j LOG - inet/filter/limit-146 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-146 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-146 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-146 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 154 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +Filter 154 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-147 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-147 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-147 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-147 - inet/filter/limit-147 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-147 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-147 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-147 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-147 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-147 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-147 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-147 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 155 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +Filter 155 {"conn-limit":{"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-148 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-148 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-148 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-148 - inet/filter/limit-148 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-148 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-148 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-148 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-148 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-148 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 156 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +Filter 156 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-149 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-149 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-149 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-149 - inet/filter/limit-149 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-149 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-149 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-149 -m recent --name user:C --rsource --mask fe00:: --set -Filter 157 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} +Filter 157 {"conn-limit":{"log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-150 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-150 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-150 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-150 - inet/filter/limit-150 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-150 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-150 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-150 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-150 -j ACCEPT inet6/filter/limit-150 -j ACCEPT -Filter 158 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} +Filter 158 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 159 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 159 {"conn-limit":{"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-152 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-152 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-152 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-152 - inet/filter/limit-152 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-152 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-152 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-152 -m limit --limit 1/second -j LOG inet6/filter/limit-152 -m limit --limit 1/second -j LOG inet/filter/limit-152 -j ACCEPT inet6/filter/limit-152 -j ACCEPT -Filter 160 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 160 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-153 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-153 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-153 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-153 - inet/filter/limit-153 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-153 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-153 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-153 -m limit --limit 1/second -j LOG inet6/filter/limit-153 -m limit --limit 1/second -j LOG -Filter 161 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 161 {"conn-limit":{"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-154 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-154 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-154 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-154 - inet/filter/limit-154 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-154 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-154 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-154 -j ACCEPT inet6/filter/limit-154 -j ACCEPT -Filter 162 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 162 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 163 {"conn-limit":{"interval":5,"log":"none"},"out":"B"} +Filter 163 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-156 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-156 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-156 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-156 - inet/filter/limit-156 -m recent --name limit-156 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-156 -m recent --name limit-156 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-156 -m recent --name limit-156 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-156 -m recent --name limit-156 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-156 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-156 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-156 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-156 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 164 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"out":"B"} +Filter 164 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-157 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-157 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-157 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-157 - inet/filter/limit-157 -m recent --name limit-157 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-157 -m recent --name limit-157 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-157 -m recent --name limit-157 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-157 -m recent --name limit-157 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-157 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-157 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-157 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-157 -m recent --name user:C --rdest --mask fe00:: --set -Filter 165 {"conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} +Filter 165 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-158 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-158 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-158 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-158 - inet/filter/limit-158 -m recent --name limit-158 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-158 -m recent --name limit-158 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-158 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-158 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-158 -m limit --limit 1/second -j LOG inet6/filter/limit-158 -m limit --limit 1/second -j LOG - inet/filter/limit-158 -m recent --name limit-158 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-158 -m recent --name limit-158 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-158 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-158 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 166 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} +Filter 166 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-159 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-159 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-159 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-159 - inet/filter/limit-159 -m recent --name limit-159 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-159 -m recent --name limit-159 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-159 -m recent --name limit-159 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-159 -m recent --name limit-159 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-159 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-159 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 167 {"conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} +Filter 167 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-160 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-160 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-160 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-160 - inet/filter/limit-160 -m recent --name limit-160 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-160 -m recent --name limit-160 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-160 -m recent --name limit-160 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-160 -m recent --name limit-160 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-160 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-160 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 168 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} +Filter 168 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-161 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-161 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-161 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-161 - inet/filter/limit-161 -m recent --name limit-161 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-161 -m recent --name limit-161 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-161 -m recent --name limit-161 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-161 -m recent --name limit-161 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-161 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-161 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-161 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-161 -m recent --name user:C --rdest --mask fe00:: --set -Filter 169 {"conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} +Filter 169 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-162 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-162 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-162 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-162 - inet/filter/limit-162 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-162 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-162 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-162 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-162 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-162 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-162 -j ACCEPT + inet6/filter/limit-162 -j ACCEPT -Filter 170 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} +Filter 170 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-163 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-163 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-163 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-163 - inet/filter/limit-163 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-163 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-163 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-163 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 171 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +Filter 171 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-164 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-164 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-164 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-164 - inet/filter/limit-164 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-164 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-164 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-164 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-164 -m limit --limit 1/second -j LOG inet6/filter/limit-164 -m limit --limit 1/second -j LOG - inet/filter/limit-164 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-164 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-164 -j ACCEPT + inet6/filter/limit-164 -j ACCEPT -Filter 172 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +Filter 172 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-165 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-165 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-165 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-165 - inet/filter/limit-165 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-165 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-165 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-165 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-165 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-165 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-165 -m limit --limit 1/second -j LOG + inet6/filter/limit-165 -m limit --limit 1/second -j LOG -Filter 173 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +Filter 173 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-166 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-166 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-166 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-166 - inet/filter/limit-166 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-166 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-166 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-166 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-166 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-166 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-166 -j ACCEPT + inet6/filter/limit-166 -j ACCEPT -Filter 174 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +Filter 174 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-167 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-167 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-167 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-167 - inet/filter/limit-167 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-167 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-167 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-167 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 175 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} +Filter 175 {"conn-limit":{"interval":5},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-168 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-168 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-168 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-168 - inet/filter/limit-168 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-168 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-168 -j ACCEPT - inet6/filter/limit-168 -j ACCEPT - -Filter 176 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 177 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} + inet/filter/limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-61 + inet6/filter/limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-61 + inet/filter/logdrop-61 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-61 -m limit --limit 1/second -j LOG + inet/filter/logdrop-61 -j DROP + inet6/filter/logdrop-61 -j DROP + inet/filter/limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 176 {"action":"pass","conn-limit":{"interval":5},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-169 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-169 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-169 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-169 + inet/filter/limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-62 + inet6/filter/limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-62 + inet/filter/logdrop-62 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-62 -m limit --limit 1/second -j LOG + inet/filter/logdrop-62 -j DROP + inet6/filter/logdrop-62 -j DROP + inet/filter/limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 177 {"conn-limit":{"interval":5},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-170 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-170 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-170 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-170 - inet/filter/limit-170 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-170 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-63 + inet6/filter/limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-63 + inet/filter/logdrop-63 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-63 -m limit --limit 1/second -j LOG + inet/filter/logdrop-63 -j DROP + inet6/filter/logdrop-63 -j DROP inet/filter/limit-170 -m limit --limit 1/second -j LOG inet6/filter/limit-170 -m limit --limit 1/second -j LOG - inet/filter/limit-170 -j ACCEPT - inet6/filter/limit-170 -j ACCEPT + inet/filter/limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 178 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 178 {"action":"pass","conn-limit":{"interval":5},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-171 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-171 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-171 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-171 - inet/filter/limit-171 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-171 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-171 -m limit --limit 1/second -j LOG - inet6/filter/limit-171 -m limit --limit 1/second -j LOG + inet/filter/limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-64 + inet6/filter/limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-64 + inet/filter/logdrop-64 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-64 -m limit --limit 1/second -j LOG + inet/filter/logdrop-64 -j DROP + inet6/filter/logdrop-64 -j DROP + inet/filter/limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 179 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 179 {"conn-limit":{"interval":5},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-172 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-172 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-172 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-172 - inet/filter/limit-172 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-172 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-172 -j ACCEPT - inet6/filter/limit-172 -j ACCEPT - -Filter 180 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 181 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} + inet/filter/limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-65 + inet6/filter/limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-65 + inet/filter/logdrop-65 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-65 -m limit --limit 1/second -j LOG + inet/filter/logdrop-65 -j DROP + inet6/filter/logdrop-65 -j DROP + inet/filter/limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 180 {"action":"pass","conn-limit":{"interval":5},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-173 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-173 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-173 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-173 + inet/filter/limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-66 + inet6/filter/limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-66 + inet/filter/logdrop-66 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-66 -m limit --limit 1/second -j LOG + inet/filter/logdrop-66 -j DROP + inet6/filter/logdrop-66 -j DROP + inet/filter/limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 181 {"conn-limit":{"interval":5,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-174 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-174 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-174 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-174 - inet/filter/limit-174 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-174 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-174 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-174 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-67 + inet6/filter/limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-67 + inet/filter/logdrop-67 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-67 -m limit --limit 1/second -j LOG + inet/filter/logdrop-67 -j DROP + inet6/filter/logdrop-67 -j DROP + inet/filter/limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 182 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} +Filter 182 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-175 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-175 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-175 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-175 - inet/filter/limit-175 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-175 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-175 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-175 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-68 + inet6/filter/limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-68 + inet/filter/logdrop-68 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-68 -m limit --limit 1/second -j LOG + inet/filter/logdrop-68 -j DROP + inet6/filter/logdrop-68 -j DROP + inet/filter/limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 183 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +Filter 183 {"conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-176 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-176 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-176 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-176 - inet/filter/limit-176 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-69 + inet6/filter/limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-69 + inet/filter/logdrop-69 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-69 -m limit --limit 1/second -j LOG + inet/filter/logdrop-69 -j DROP + inet6/filter/logdrop-69 -j DROP inet/filter/limit-176 -m limit --limit 1/second -j LOG inet6/filter/limit-176 -m limit --limit 1/second -j LOG - inet/filter/limit-176 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 184 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +Filter 184 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-177 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-177 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-177 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-177 - inet/filter/limit-177 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-177 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-70 + inet6/filter/limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-70 + inet/filter/logdrop-70 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-70 -m limit --limit 1/second -j LOG + inet/filter/logdrop-70 -j DROP + inet6/filter/logdrop-70 -j DROP + inet/filter/limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 185 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +Filter 185 {"conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-178 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-178 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-178 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-178 - inet/filter/limit-178 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-178 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-178 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-178 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-71 + inet6/filter/limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-71 + inet/filter/logdrop-71 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-71 -m limit --limit 1/second -j LOG + inet/filter/logdrop-71 -j DROP + inet6/filter/logdrop-71 -j DROP + inet/filter/limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 186 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +Filter 186 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-179 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-179 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-179 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-179 - inet/filter/limit-179 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-179 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-72 + inet6/filter/limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-72 + inet/filter/logdrop-72 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-72 -m limit --limit 1/second -j LOG + inet/filter/logdrop-72 -j DROP + inet6/filter/logdrop-72 -j DROP + inet/filter/limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 187 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} +Filter 187 {"conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-180 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-180 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-180 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-180 - inet/filter/limit-180 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-180 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-180 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-73 + inet6/filter/limit-180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-73 + inet/filter/logdrop-73 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-73 -m limit --limit 1/second -j LOG + inet/filter/logdrop-73 -j DROP + inet6/filter/logdrop-73 -j DROP inet/filter/limit-180 -j ACCEPT inet6/filter/limit-180 -j ACCEPT -Filter 188 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} +Filter 188 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-74 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-74 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-74 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-74 -Filter 189 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 189 {"conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-182 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-182 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-182 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-182 - inet/filter/limit-182 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-182 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-182 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-75 + inet6/filter/limit-182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-75 + inet/filter/logdrop-75 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-75 -m limit --limit 1/second -j LOG + inet/filter/logdrop-75 -j DROP + inet6/filter/logdrop-75 -j DROP inet/filter/limit-182 -m limit --limit 1/second -j LOG inet6/filter/limit-182 -m limit --limit 1/second -j LOG inet/filter/limit-182 -j ACCEPT inet6/filter/limit-182 -j ACCEPT -Filter 190 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 190 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-183 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-183 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-183 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-183 - inet/filter/limit-183 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-183 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-183 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-76 + inet6/filter/limit-183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-76 + inet/filter/logdrop-76 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-76 -m limit --limit 1/second -j LOG + inet/filter/logdrop-76 -j DROP + inet6/filter/logdrop-76 -j DROP inet/filter/limit-183 -m limit --limit 1/second -j LOG inet6/filter/limit-183 -m limit --limit 1/second -j LOG -Filter 191 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 191 {"conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-184 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-184 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-184 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-184 - inet/filter/limit-184 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-184 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-184 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-77 + inet6/filter/limit-184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-77 + inet/filter/logdrop-77 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-77 -m limit --limit 1/second -j LOG + inet/filter/logdrop-77 -j DROP + inet6/filter/logdrop-77 -j DROP inet/filter/limit-184 -j ACCEPT inet6/filter/limit-184 -j ACCEPT -Filter 192 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 192 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-78 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-78 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-78 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-78 -Filter 193 {"conn-limit":150,"out":"B"} +Filter 193 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-186 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-186 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-186 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-186 - inet/filter/limit-186 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-186 -j ACCEPT - inet6/filter/limit-186 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-186 -j ACCEPT - inet/filter/limit-186 -m limit --limit 1/second -j LOG - inet6/filter/limit-186 -m limit --limit 1/second -j LOG - inet/filter/limit-186 -j DROP - inet6/filter/limit-186 -j DROP + inet/filter/limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-79 + inet6/filter/limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-79 + inet/filter/logdrop-79 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-79 -m limit --limit 1/second -j LOG + inet/filter/logdrop-79 -j DROP + inet6/filter/logdrop-79 -j DROP + inet/filter/limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 194 {"action":"pass","conn-limit":150,"out":"B"} +Filter 194 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-187 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-187 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-187 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-187 - inet/filter/limit-187 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-187 -j RETURN - inet6/filter/limit-187 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-187 -j RETURN - inet/filter/limit-187 -m limit --limit 1/second -j LOG - inet6/filter/limit-187 -m limit --limit 1/second -j LOG - inet/filter/limit-187 -j DROP - inet6/filter/limit-187 -j DROP + inet/filter/limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-80 + inet6/filter/limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-80 + inet/filter/logdrop-80 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-80 -m limit --limit 1/second -j LOG + inet/filter/logdrop-80 -j DROP + inet6/filter/logdrop-80 -j DROP + inet/filter/limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 195 {"conn-limit":150,"log":true,"out":"B"} +Filter 195 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-188 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-188 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-188 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-188 - inet/filter/limit-188 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-188 -j logaccept-0 - inet6/filter/limit-188 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-188 -j logaccept-0 - inet/filter/logaccept-0 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-0 -m limit --limit 1/second -j LOG - inet/filter/logaccept-0 -j ACCEPT - inet6/filter/logaccept-0 -j ACCEPT + inet/filter/limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-81 + inet6/filter/limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-81 + inet/filter/logdrop-81 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-81 -m limit --limit 1/second -j LOG + inet/filter/logdrop-81 -j DROP + inet6/filter/logdrop-81 -j DROP inet/filter/limit-188 -m limit --limit 1/second -j LOG inet6/filter/limit-188 -m limit --limit 1/second -j LOG - inet/filter/limit-188 -j DROP - inet6/filter/limit-188 -j DROP + inet/filter/limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 196 {"conn-limit":150,"log":"none","out":"B"} +Filter 196 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-189 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-189 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-189 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-189 - inet/filter/limit-189 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-189 -j ACCEPT - inet6/filter/limit-189 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-189 -j ACCEPT - inet/filter/limit-189 -m limit --limit 1/second -j LOG - inet6/filter/limit-189 -m limit --limit 1/second -j LOG - inet/filter/limit-189 -j DROP - inet6/filter/limit-189 -j DROP + inet/filter/limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-82 + inet6/filter/limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-82 + inet/filter/logdrop-82 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-82 -m limit --limit 1/second -j LOG + inet/filter/logdrop-82 -j DROP + inet6/filter/logdrop-82 -j DROP + inet/filter/limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 197 {"conn-limit":{"count":150},"out":"B"} +Filter 197 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-190 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-190 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-190 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-190 - inet/filter/limit-190 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-190 -j ACCEPT - inet6/filter/limit-190 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-190 -j ACCEPT - inet/filter/limit-190 -m limit --limit 1/second -j LOG - inet6/filter/limit-190 -m limit --limit 1/second -j LOG - inet/filter/limit-190 -j DROP - inet6/filter/limit-190 -j DROP + inet/filter/limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-83 + inet6/filter/limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-83 + inet/filter/logdrop-83 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-83 -m limit --limit 1/second -j LOG + inet/filter/logdrop-83 -j DROP + inet6/filter/logdrop-83 -j DROP + inet/filter/limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 198 {"action":"pass","conn-limit":{"count":150},"out":"B"} +Filter 198 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-191 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-191 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-191 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-191 - inet/filter/limit-191 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-191 -j RETURN - inet6/filter/limit-191 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-191 -j RETURN - inet/filter/limit-191 -m limit --limit 1/second -j LOG - inet6/filter/limit-191 -m limit --limit 1/second -j LOG - inet/filter/limit-191 -j DROP - inet6/filter/limit-191 -j DROP + inet/filter/limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-84 + inet6/filter/limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-84 + inet/filter/logdrop-84 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-84 -m limit --limit 1/second -j LOG + inet/filter/logdrop-84 -j DROP + inet6/filter/logdrop-84 -j DROP + inet/filter/limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 199 {"conn-limit":{"count":150},"log":true,"out":"B"} +Filter 199 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-192 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-192 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-192 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-192 - inet/filter/limit-192 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-192 -j logaccept-1 - inet6/filter/limit-192 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-192 -j logaccept-1 - inet/filter/logaccept-1 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-1 -m limit --limit 1/second -j LOG - inet/filter/logaccept-1 -j ACCEPT - inet6/filter/logaccept-1 -j ACCEPT - inet/filter/limit-192 -m limit --limit 1/second -j LOG - inet6/filter/limit-192 -m limit --limit 1/second -j LOG - inet/filter/limit-192 -j DROP - inet6/filter/limit-192 -j DROP - -Filter 200 {"conn-limit":{"count":150},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-193 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-193 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-193 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-193 - inet/filter/limit-193 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-193 -j ACCEPT - inet6/filter/limit-193 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-193 -j ACCEPT - inet/filter/limit-193 -m limit --limit 1/second -j LOG - inet6/filter/limit-193 -m limit --limit 1/second -j LOG - inet/filter/limit-193 -j DROP - inet6/filter/limit-193 -j DROP - -Filter 201 {"conn-limit":{"count":150,"log":false},"out":"B"} + inet/filter/limit-192 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-85 + inet6/filter/limit-192 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-85 + inet/filter/logdrop-85 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-85 -m limit --limit 1/second -j LOG + inet/filter/logdrop-85 -j DROP + inet6/filter/logdrop-85 -j DROP + inet/filter/limit-192 -j ACCEPT + inet6/filter/limit-192 -j ACCEPT + +Filter 200 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-86 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-86 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-86 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-86 + +Filter 201 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-194 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-194 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-194 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-194 - inet/filter/limit-194 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-194 -j ACCEPT - inet6/filter/limit-194 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-194 -j ACCEPT - inet/filter/limit-194 -j DROP - inet6/filter/limit-194 -j DROP + inet/filter/limit-194 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-87 + inet6/filter/limit-194 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-87 + inet/filter/logdrop-87 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-87 -m limit --limit 1/second -j LOG + inet/filter/logdrop-87 -j DROP + inet6/filter/logdrop-87 -j DROP + inet/filter/limit-194 -m limit --limit 1/second -j LOG + inet6/filter/limit-194 -m limit --limit 1/second -j LOG + inet/filter/limit-194 -j ACCEPT + inet6/filter/limit-194 -j ACCEPT -Filter 202 {"action":"pass","conn-limit":{"count":150,"log":false},"out":"B"} +Filter 202 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-195 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-195 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-195 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-195 - inet/filter/limit-195 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-195 -j RETURN - inet6/filter/limit-195 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-195 -j RETURN - inet/filter/limit-195 -j DROP - inet6/filter/limit-195 -j DROP + inet/filter/limit-195 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-88 + inet6/filter/limit-195 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-88 + inet/filter/logdrop-88 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-88 -m limit --limit 1/second -j LOG + inet/filter/logdrop-88 -j DROP + inet6/filter/logdrop-88 -j DROP + inet/filter/limit-195 -m limit --limit 1/second -j LOG + inet6/filter/limit-195 -m limit --limit 1/second -j LOG -Filter 203 {"conn-limit":{"count":150,"log":false},"log":true,"out":"B"} +Filter 203 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-196 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-196 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-196 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-196 - inet/filter/limit-196 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-196 -j logaccept-2 - inet6/filter/limit-196 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-196 -j logaccept-2 - inet/filter/logaccept-2 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-2 -m limit --limit 1/second -j LOG - inet/filter/logaccept-2 -j ACCEPT - inet6/filter/logaccept-2 -j ACCEPT - inet/filter/limit-196 -j DROP - inet6/filter/limit-196 -j DROP + inet/filter/limit-196 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-89 + inet6/filter/limit-196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-89 + inet/filter/logdrop-89 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-89 -m limit --limit 1/second -j LOG + inet/filter/logdrop-89 -j DROP + inet6/filter/logdrop-89 -j DROP + inet/filter/limit-196 -j ACCEPT + inet6/filter/limit-196 -j ACCEPT -Filter 204 {"conn-limit":{"count":150,"log":false},"log":"none","out":"B"} +Filter 204 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-197 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-197 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-197 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-197 - inet/filter/limit-197 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-197 -j ACCEPT - inet6/filter/limit-197 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-197 -j ACCEPT - inet/filter/limit-197 -j DROP - inet6/filter/limit-197 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-90 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-90 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-90 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-90 -Filter 205 {"conn-limit":{"count":150,"log":"none"},"out":"B"} +Filter 205 {"conn-limit":{"interval":5,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-198 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-198 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-198 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-198 - inet/filter/limit-198 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-198 -j ACCEPT - inet6/filter/limit-198 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-198 -j ACCEPT - inet/filter/limit-198 -j DROP - inet6/filter/limit-198 -j DROP + inet/filter/limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-91 + inet6/filter/limit-198 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-91 + inet/filter/logdrop-91 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-91 -m limit --limit 1/second -j LOG + inet/filter/logdrop-91 -j DROP + inet6/filter/logdrop-91 -j DROP + inet/filter/limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-198 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 206 {"action":"pass","conn-limit":{"count":150,"log":"none"},"out":"B"} +Filter 206 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-199 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-199 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-199 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-199 - inet/filter/limit-199 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-199 -j RETURN - inet6/filter/limit-199 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-199 -j RETURN - inet/filter/limit-199 -j DROP - inet6/filter/limit-199 -j DROP + inet/filter/limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-92 + inet6/filter/limit-199 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-92 + inet/filter/logdrop-92 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-92 -m limit --limit 1/second -j LOG + inet/filter/logdrop-92 -j DROP + inet6/filter/logdrop-92 -j DROP + inet/filter/limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-199 -m recent --name user:C --rsource --mask fe00:: --set -Filter 207 {"conn-limit":{"count":150,"log":"none"},"log":true,"out":"B"} +Filter 207 {"conn-limit":{"interval":5,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-200 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-200 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-200 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-200 - inet/filter/limit-200 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-200 -j logaccept-3 - inet6/filter/limit-200 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-200 -j logaccept-3 - inet/filter/logaccept-3 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-3 -m limit --limit 1/second -j LOG - inet/filter/logaccept-3 -j ACCEPT - inet6/filter/logaccept-3 -j ACCEPT - inet/filter/limit-200 -j DROP - inet6/filter/limit-200 -j DROP + inet/filter/limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-93 + inet6/filter/limit-200 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-93 + inet/filter/logdrop-93 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-93 -m limit --limit 1/second -j LOG + inet/filter/logdrop-93 -j DROP + inet6/filter/logdrop-93 -j DROP + inet/filter/limit-200 -m limit --limit 1/second -j LOG + inet6/filter/limit-200 -m limit --limit 1/second -j LOG + inet/filter/limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-200 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 208 {"conn-limit":{"count":150,"log":"none"},"log":"none","out":"B"} +Filter 208 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-201 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-201 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-201 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-201 - inet/filter/limit-201 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-201 -j ACCEPT - inet6/filter/limit-201 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-201 -j ACCEPT - inet/filter/limit-201 -j DROP - inet6/filter/limit-201 -j DROP + inet/filter/limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-94 + inet6/filter/limit-201 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-94 + inet/filter/logdrop-94 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-94 -m limit --limit 1/second -j LOG + inet/filter/logdrop-94 -j DROP + inet6/filter/logdrop-94 -j DROP + inet/filter/limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-201 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 209 {"conn-limit":{"count":150,"interval":5},"out":"B"} +Filter 209 {"conn-limit":{"interval":5,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-202 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-202 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-202 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-202 - inet/filter/limit-202 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-202 -j ACCEPT - inet6/filter/limit-202 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-202 -j ACCEPT - inet/filter/limit-202 -m limit --limit 1/second -j LOG - inet6/filter/limit-202 -m limit --limit 1/second -j LOG - inet/filter/limit-202 -j DROP - inet6/filter/limit-202 -j DROP + inet/filter/limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-95 + inet6/filter/limit-202 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-95 + inet/filter/logdrop-95 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-95 -m limit --limit 1/second -j LOG + inet/filter/logdrop-95 -j DROP + inet6/filter/logdrop-95 -j DROP + inet/filter/limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-202 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 210 {"action":"pass","conn-limit":{"count":150,"interval":5},"out":"B"} +Filter 210 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-203 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-203 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-203 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-203 - inet/filter/limit-203 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-203 -j RETURN - inet6/filter/limit-203 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-203 -j RETURN - inet/filter/limit-203 -m limit --limit 1/second -j LOG - inet6/filter/limit-203 -m limit --limit 1/second -j LOG - inet/filter/limit-203 -j DROP - inet6/filter/limit-203 -j DROP + inet/filter/limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-96 + inet6/filter/limit-203 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-96 + inet/filter/logdrop-96 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-96 -m limit --limit 1/second -j LOG + inet/filter/logdrop-96 -j DROP + inet6/filter/logdrop-96 -j DROP + inet/filter/limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-203 -m recent --name user:C --rsource --mask fe00:: --set -Filter 211 {"conn-limit":{"count":150,"interval":5},"log":true,"out":"B"} +Filter 211 {"conn-limit":{"interval":5,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-204 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-204 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-204 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-204 - inet/filter/limit-204 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-204 -j logaccept-4 - inet6/filter/limit-204 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-204 -j logaccept-4 - inet/filter/logaccept-4 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-4 -m limit --limit 1/second -j LOG - inet/filter/logaccept-4 -j ACCEPT - inet6/filter/logaccept-4 -j ACCEPT - inet/filter/limit-204 -m limit --limit 1/second -j LOG - inet6/filter/limit-204 -m limit --limit 1/second -j LOG - inet/filter/limit-204 -j DROP - inet6/filter/limit-204 -j DROP - -Filter 212 {"conn-limit":{"count":150,"interval":5},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-205 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-205 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-205 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-205 - inet/filter/limit-205 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-205 -j ACCEPT - inet6/filter/limit-205 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-205 -j ACCEPT - inet/filter/limit-205 -m limit --limit 1/second -j LOG - inet6/filter/limit-205 -m limit --limit 1/second -j LOG - inet/filter/limit-205 -j DROP - inet6/filter/limit-205 -j DROP - -Filter 213 {"conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} + inet/filter/limit-204 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-97 + inet6/filter/limit-204 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-97 + inet/filter/logdrop-97 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-97 -m limit --limit 1/second -j LOG + inet/filter/logdrop-97 -j DROP + inet6/filter/logdrop-97 -j DROP + inet/filter/limit-204 -j ACCEPT + inet6/filter/limit-204 -j ACCEPT + +Filter 212 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-98 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-98 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-98 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-98 + +Filter 213 {"conn-limit":{"interval":5,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-206 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-206 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-206 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-206 - inet/filter/limit-206 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-206 -j ACCEPT - inet6/filter/limit-206 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-206 -j ACCEPT - inet/filter/limit-206 -j DROP - inet6/filter/limit-206 -j DROP + inet/filter/limit-206 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-99 + inet6/filter/limit-206 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-99 + inet/filter/logdrop-99 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-99 -m limit --limit 1/second -j LOG + inet/filter/logdrop-99 -j DROP + inet6/filter/logdrop-99 -j DROP + inet/filter/limit-206 -m limit --limit 1/second -j LOG + inet6/filter/limit-206 -m limit --limit 1/second -j LOG + inet/filter/limit-206 -j ACCEPT + inet6/filter/limit-206 -j ACCEPT -Filter 214 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} +Filter 214 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-207 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-207 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-207 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-207 - inet/filter/limit-207 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-207 -j RETURN - inet6/filter/limit-207 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-207 -j RETURN - inet/filter/limit-207 -j DROP - inet6/filter/limit-207 -j DROP + inet/filter/limit-207 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-100 + inet6/filter/limit-207 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-100 + inet/filter/logdrop-100 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-100 -m limit --limit 1/second -j LOG + inet/filter/logdrop-100 -j DROP + inet6/filter/logdrop-100 -j DROP + inet/filter/limit-207 -m limit --limit 1/second -j LOG + inet6/filter/limit-207 -m limit --limit 1/second -j LOG -Filter 215 {"conn-limit":{"count":150,"interval":5,"log":false},"log":true,"out":"B"} +Filter 215 {"conn-limit":{"interval":5,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-208 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-208 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-208 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-208 - inet/filter/limit-208 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-208 -j logaccept-5 - inet6/filter/limit-208 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-208 -j logaccept-5 - inet/filter/logaccept-5 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-5 -m limit --limit 1/second -j LOG - inet/filter/logaccept-5 -j ACCEPT - inet6/filter/logaccept-5 -j ACCEPT - inet/filter/limit-208 -j DROP - inet6/filter/limit-208 -j DROP + inet/filter/limit-208 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-101 + inet6/filter/limit-208 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-101 + inet/filter/logdrop-101 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-101 -m limit --limit 1/second -j LOG + inet/filter/logdrop-101 -j DROP + inet6/filter/logdrop-101 -j DROP + inet/filter/limit-208 -j ACCEPT + inet6/filter/limit-208 -j ACCEPT -Filter 216 {"conn-limit":{"count":150,"interval":5,"log":false},"log":"none","out":"B"} +Filter 216 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-209 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-209 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-209 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-209 - inet/filter/limit-209 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-209 -j ACCEPT - inet6/filter/limit-209 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-209 -j ACCEPT - inet/filter/limit-209 -j DROP - inet6/filter/limit-209 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-102 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-102 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-102 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-102 -Filter 217 {"conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} +Filter 217 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-210 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-210 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-210 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-210 - inet/filter/limit-210 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-210 -j ACCEPT - inet6/filter/limit-210 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-210 -j ACCEPT - inet/filter/limit-210 -j DROP - inet6/filter/limit-210 -j DROP + inet/filter/limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-103 + inet6/filter/limit-210 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-103 + inet/filter/logdrop-103 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-103 -m limit --limit 1/second -j LOG + inet/filter/logdrop-103 -j DROP + inet6/filter/logdrop-103 -j DROP + inet/filter/limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-210 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 218 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} +Filter 218 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-211 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-211 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-211 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-211 - inet/filter/limit-211 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-211 -j RETURN - inet6/filter/limit-211 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-211 -j RETURN - inet/filter/limit-211 -j DROP - inet6/filter/limit-211 -j DROP + inet/filter/limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-104 + inet6/filter/limit-211 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-104 + inet/filter/logdrop-104 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-104 -m limit --limit 1/second -j LOG + inet/filter/logdrop-104 -j DROP + inet6/filter/logdrop-104 -j DROP + inet/filter/limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-211 -m recent --name user:C --rdest --mask fe00:: --set -Filter 219 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":true,"out":"B"} +Filter 219 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-212 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-212 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-212 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-212 - inet/filter/limit-212 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-212 -j logaccept-6 - inet6/filter/limit-212 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-212 -j logaccept-6 - inet/filter/logaccept-6 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-6 -m limit --limit 1/second -j LOG - inet/filter/logaccept-6 -j ACCEPT - inet6/filter/logaccept-6 -j ACCEPT - inet/filter/limit-212 -j DROP - inet6/filter/limit-212 -j DROP + inet/filter/limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-105 + inet6/filter/limit-212 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-105 + inet/filter/logdrop-105 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-105 -m limit --limit 1/second -j LOG + inet/filter/logdrop-105 -j DROP + inet6/filter/logdrop-105 -j DROP + inet/filter/limit-212 -m limit --limit 1/second -j LOG + inet6/filter/limit-212 -m limit --limit 1/second -j LOG + inet/filter/limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-212 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 220 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":"none","out":"B"} +Filter 220 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-213 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-213 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-213 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-213 - inet/filter/limit-213 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-213 -j ACCEPT - inet6/filter/limit-213 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-213 -j ACCEPT - inet/filter/limit-213 -j DROP - inet6/filter/limit-213 -j DROP - -Filter 221 {"flow-limit":1} -(filter-limit) - inet/filter/FORWARD -j limit-214 - inet6/filter/FORWARD -j limit-214 - inet/filter/INPUT -j limit-214 - inet6/filter/INPUT -j limit-214 - inet/filter/OUTPUT -j limit-214 - inet6/filter/OUTPUT -j limit-214 - inet/filter/limit-214 -m recent --name limit-214 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-67 - inet6/filter/limit-214 -m recent --name limit-214 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-67 - inet/filter/logdrop-67 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-67 -m limit --limit 1/second -j LOG - inet/filter/logdrop-67 -j DROP - inet6/filter/logdrop-67 -j DROP - inet/filter/limit-214 -m recent --name limit-214 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-214 -m recent --name limit-214 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-106 + inet6/filter/limit-213 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-106 + inet/filter/logdrop-106 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-106 -m limit --limit 1/second -j LOG + inet/filter/logdrop-106 -j DROP + inet6/filter/logdrop-106 -j DROP + inet/filter/limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-213 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 221 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-214 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-214 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-214 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-214 + inet/filter/limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-107 + inet6/filter/limit-214 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-107 + inet/filter/logdrop-107 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-107 -m limit --limit 1/second -j LOG + inet/filter/logdrop-107 -j DROP + inet6/filter/logdrop-107 -j DROP + inet/filter/limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-214 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 222 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-215 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-215 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-215 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-215 + inet/filter/limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-108 + inet6/filter/limit-215 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-108 + inet/filter/logdrop-108 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-108 -m limit --limit 1/second -j LOG + inet/filter/logdrop-108 -j DROP + inet6/filter/logdrop-108 -j DROP + inet/filter/limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-215 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 223 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-216 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-216 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-216 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-216 + inet/filter/limit-216 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-109 + inet6/filter/limit-216 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-109 + inet/filter/logdrop-109 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-109 -m limit --limit 1/second -j LOG + inet/filter/logdrop-109 -j DROP + inet6/filter/logdrop-109 -j DROP + inet/filter/limit-216 -j ACCEPT + inet6/filter/limit-216 -j ACCEPT + +Filter 224 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-110 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-110 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-110 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-110 + +Filter 225 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-218 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-218 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-218 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-218 + inet/filter/limit-218 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-111 + inet6/filter/limit-218 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-111 + inet/filter/logdrop-111 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-111 -m limit --limit 1/second -j LOG + inet/filter/logdrop-111 -j DROP + inet6/filter/logdrop-111 -j DROP + inet/filter/limit-218 -m limit --limit 1/second -j LOG + inet6/filter/limit-218 -m limit --limit 1/second -j LOG + inet/filter/limit-218 -j ACCEPT + inet6/filter/limit-218 -j ACCEPT + +Filter 226 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-219 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-219 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-219 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-219 + inet/filter/limit-219 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-112 + inet6/filter/limit-219 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-112 + inet/filter/logdrop-112 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-112 -m limit --limit 1/second -j LOG + inet/filter/logdrop-112 -j DROP + inet6/filter/logdrop-112 -j DROP + inet/filter/limit-219 -m limit --limit 1/second -j LOG + inet6/filter/limit-219 -m limit --limit 1/second -j LOG + +Filter 227 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-220 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-220 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-220 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-220 + inet/filter/limit-220 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-113 + inet6/filter/limit-220 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-113 + inet/filter/logdrop-113 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-113 -m limit --limit 1/second -j LOG + inet/filter/logdrop-113 -j DROP + inet6/filter/logdrop-113 -j DROP + inet/filter/limit-220 -j ACCEPT + inet6/filter/limit-220 -j ACCEPT + +Filter 228 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-114 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-114 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-114 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-114 + +Filter 229 {"conn-limit":{"interval":5,"log":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-222 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-222 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-222 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-222 + inet/filter/limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 230 {"action":"pass","conn-limit":{"interval":5,"log":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-223 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-223 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-223 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-223 + inet/filter/limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 231 {"conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-224 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-224 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-224 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-224 + inet/filter/limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-224 -m limit --limit 1/second -j LOG + inet6/filter/limit-224 -m limit --limit 1/second -j LOG + inet/filter/limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 232 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-225 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-225 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-225 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-225 + inet/filter/limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 233 {"conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-226 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-226 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-226 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-226 + inet/filter/limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 234 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-227 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-227 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-227 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-227 + inet/filter/limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 235 {"conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-228 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-228 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-228 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-228 + inet/filter/limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 236 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-229 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-229 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-229 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-229 + inet/filter/limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 237 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-230 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-230 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-230 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-230 + inet/filter/limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-230 -m limit --limit 1/second -j LOG + inet6/filter/limit-230 -m limit --limit 1/second -j LOG + inet/filter/limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 238 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-231 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-231 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-231 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-231 + inet/filter/limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 239 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-232 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-232 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-232 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-232 + inet/filter/limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 240 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-233 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-233 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-233 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-233 + inet/filter/limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 241 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-234 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-234 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-234 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-234 + inet/filter/limit-234 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-234 -j ACCEPT + inet6/filter/limit-234 -j ACCEPT + +Filter 242 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 243 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-236 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-236 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-236 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-236 + inet/filter/limit-236 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-236 -m limit --limit 1/second -j LOG + inet6/filter/limit-236 -m limit --limit 1/second -j LOG + inet/filter/limit-236 -j ACCEPT + inet6/filter/limit-236 -j ACCEPT + +Filter 244 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-237 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-237 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-237 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-237 + inet/filter/limit-237 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-237 -m limit --limit 1/second -j LOG + inet6/filter/limit-237 -m limit --limit 1/second -j LOG + +Filter 245 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-238 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-238 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-238 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-238 + inet/filter/limit-238 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-238 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-238 -j ACCEPT + inet6/filter/limit-238 -j ACCEPT + +Filter 246 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 247 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-240 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-240 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-240 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-240 + inet/filter/limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 248 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-241 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-241 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-241 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-241 + inet/filter/limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 249 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-242 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-242 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-242 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-242 + inet/filter/limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-242 -m limit --limit 1/second -j LOG + inet6/filter/limit-242 -m limit --limit 1/second -j LOG + inet/filter/limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 250 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-243 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-243 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-243 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-243 + inet/filter/limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 251 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-244 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-244 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-244 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-244 + inet/filter/limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 252 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-245 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-245 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-245 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-245 + inet/filter/limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 253 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-246 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-246 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-246 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-246 + inet/filter/limit-246 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-246 -j ACCEPT + inet6/filter/limit-246 -j ACCEPT + +Filter 254 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 255 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-248 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-248 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-248 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-248 + inet/filter/limit-248 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-248 -m limit --limit 1/second -j LOG + inet6/filter/limit-248 -m limit --limit 1/second -j LOG + inet/filter/limit-248 -j ACCEPT + inet6/filter/limit-248 -j ACCEPT + +Filter 256 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-249 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-249 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-249 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-249 + inet/filter/limit-249 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-249 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-249 -m limit --limit 1/second -j LOG + inet6/filter/limit-249 -m limit --limit 1/second -j LOG + +Filter 257 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-250 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-250 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-250 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-250 + inet/filter/limit-250 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-250 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-250 -j ACCEPT + inet6/filter/limit-250 -j ACCEPT + +Filter 258 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 259 {"conn-limit":{"interval":5,"log":false,"name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-252 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-252 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-252 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-252 + inet/filter/limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-252 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-252 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 260 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-253 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-253 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-253 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-253 + inet/filter/limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-253 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-253 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 261 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-254 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-254 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-254 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-254 + inet/filter/limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-254 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-254 -m limit --limit 1/second -j LOG + inet6/filter/limit-254 -m limit --limit 1/second -j LOG + inet/filter/limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-254 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 262 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-255 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-255 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-255 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-255 + inet/filter/limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-255 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-255 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 263 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-256 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-256 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-256 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-256 + inet/filter/limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-256 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-256 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 264 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-257 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-257 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-257 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-257 + inet/filter/limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-257 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-257 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 265 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-258 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-258 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-258 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-258 + inet/filter/limit-258 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-258 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-258 -j ACCEPT + inet6/filter/limit-258 -j ACCEPT + +Filter 266 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 267 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-260 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-260 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-260 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-260 + inet/filter/limit-260 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-260 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-260 -m limit --limit 1/second -j LOG + inet6/filter/limit-260 -m limit --limit 1/second -j LOG + inet/filter/limit-260 -j ACCEPT + inet6/filter/limit-260 -j ACCEPT + +Filter 268 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-261 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-261 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-261 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-261 + inet/filter/limit-261 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-261 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-261 -m limit --limit 1/second -j LOG + inet6/filter/limit-261 -m limit --limit 1/second -j LOG + +Filter 269 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-262 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-262 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-262 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-262 + inet/filter/limit-262 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-262 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-262 -j ACCEPT + inet6/filter/limit-262 -j ACCEPT + +Filter 270 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 271 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-264 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-264 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-264 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-264 + inet/filter/limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-264 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-264 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 272 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-265 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-265 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-265 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-265 + inet/filter/limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-265 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-265 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 273 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-266 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-266 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-266 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-266 + inet/filter/limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-266 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-266 -m limit --limit 1/second -j LOG + inet6/filter/limit-266 -m limit --limit 1/second -j LOG + inet/filter/limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-266 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 274 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-267 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-267 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-267 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-267 + inet/filter/limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-267 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-267 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 275 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-268 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-268 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-268 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-268 + inet/filter/limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-268 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-268 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 276 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-269 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-269 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-269 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-269 + inet/filter/limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-269 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-269 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 277 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-270 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-270 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-270 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-270 + inet/filter/limit-270 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-270 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-270 -j ACCEPT + inet6/filter/limit-270 -j ACCEPT + +Filter 278 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 279 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-272 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-272 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-272 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-272 + inet/filter/limit-272 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-272 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-272 -m limit --limit 1/second -j LOG + inet6/filter/limit-272 -m limit --limit 1/second -j LOG + inet/filter/limit-272 -j ACCEPT + inet6/filter/limit-272 -j ACCEPT + +Filter 280 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-273 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-273 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-273 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-273 + inet/filter/limit-273 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-273 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-273 -m limit --limit 1/second -j LOG + inet6/filter/limit-273 -m limit --limit 1/second -j LOG + +Filter 281 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-274 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-274 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-274 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-274 + inet/filter/limit-274 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-274 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-274 -j ACCEPT + inet6/filter/limit-274 -j ACCEPT + +Filter 282 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 283 {"conn-limit":{"interval":5,"log":"none"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-276 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-276 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-276 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-276 + inet/filter/limit-276 -m recent --name limit-276 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-276 -m recent --name limit-276 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-276 -m recent --name limit-276 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-276 -m recent --name limit-276 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 284 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-277 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-277 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-277 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-277 + inet/filter/limit-277 -m recent --name limit-277 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-277 -m recent --name limit-277 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-277 -m recent --name limit-277 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-277 -m recent --name limit-277 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 285 {"conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-278 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-278 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-278 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-278 + inet/filter/limit-278 -m recent --name limit-278 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-278 -m recent --name limit-278 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-278 -m limit --limit 1/second -j LOG + inet6/filter/limit-278 -m limit --limit 1/second -j LOG + inet/filter/limit-278 -m recent --name limit-278 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-278 -m recent --name limit-278 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 286 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-279 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-279 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-279 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-279 + inet/filter/limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 287 {"conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-280 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-280 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-280 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-280 + inet/filter/limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 288 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-281 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-281 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-281 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-281 + inet/filter/limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 289 {"conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-282 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-282 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-282 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-282 + inet/filter/limit-282 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-282 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 290 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-283 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-283 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-283 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-283 + inet/filter/limit-283 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-283 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 291 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-284 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-284 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-284 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-284 + inet/filter/limit-284 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-284 -m limit --limit 1/second -j LOG + inet6/filter/limit-284 -m limit --limit 1/second -j LOG + inet/filter/limit-284 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 292 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-285 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-285 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-285 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-285 + inet/filter/limit-285 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-285 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 293 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-286 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-286 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-286 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-286 + inet/filter/limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 294 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-287 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-287 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-287 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-287 + inet/filter/limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 295 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-288 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-288 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-288 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-288 + inet/filter/limit-288 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-288 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-288 -j ACCEPT + inet6/filter/limit-288 -j ACCEPT + +Filter 296 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 297 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-290 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-290 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-290 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-290 + inet/filter/limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-290 -m limit --limit 1/second -j LOG + inet6/filter/limit-290 -m limit --limit 1/second -j LOG + inet/filter/limit-290 -j ACCEPT + inet6/filter/limit-290 -j ACCEPT + +Filter 298 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-291 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-291 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-291 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-291 + inet/filter/limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-291 -m limit --limit 1/second -j LOG + inet6/filter/limit-291 -m limit --limit 1/second -j LOG + +Filter 299 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-292 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-292 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-292 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-292 + inet/filter/limit-292 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-292 -j ACCEPT + inet6/filter/limit-292 -j ACCEPT + +Filter 300 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 301 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-294 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-294 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-294 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-294 + inet/filter/limit-294 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-294 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 302 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-295 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-295 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-295 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-295 + inet/filter/limit-295 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-295 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 303 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-296 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-296 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-296 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-296 + inet/filter/limit-296 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-296 -m limit --limit 1/second -j LOG + inet6/filter/limit-296 -m limit --limit 1/second -j LOG + inet/filter/limit-296 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 304 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-297 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-297 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-297 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-297 + inet/filter/limit-297 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-297 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 305 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-298 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-298 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-298 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-298 + inet/filter/limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 306 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-299 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-299 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-299 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-299 + inet/filter/limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 307 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-300 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-300 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-300 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-300 + inet/filter/limit-300 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-300 -j ACCEPT + inet6/filter/limit-300 -j ACCEPT + +Filter 308 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 309 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-302 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-302 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-302 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-302 + inet/filter/limit-302 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-302 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-302 -m limit --limit 1/second -j LOG + inet6/filter/limit-302 -m limit --limit 1/second -j LOG + inet/filter/limit-302 -j ACCEPT + inet6/filter/limit-302 -j ACCEPT + +Filter 310 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-303 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-303 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-303 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-303 + inet/filter/limit-303 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-303 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-303 -m limit --limit 1/second -j LOG + inet6/filter/limit-303 -m limit --limit 1/second -j LOG + +Filter 311 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-304 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-304 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-304 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-304 + inet/filter/limit-304 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-304 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-304 -j ACCEPT + inet6/filter/limit-304 -j ACCEPT + +Filter 312 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 313 {"conn-limit":{"interval":5,"log":"none","name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-306 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-306 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-306 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-306 + inet/filter/limit-306 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-306 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-306 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-306 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 314 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-307 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-307 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-307 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-307 + inet/filter/limit-307 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-307 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-307 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-307 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 315 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-308 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-308 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-308 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-308 + inet/filter/limit-308 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-308 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-308 -m limit --limit 1/second -j LOG + inet6/filter/limit-308 -m limit --limit 1/second -j LOG + inet/filter/limit-308 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-308 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 316 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-309 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-309 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-309 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-309 + inet/filter/limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-309 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-309 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 317 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-310 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-310 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-310 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-310 + inet/filter/limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-310 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-310 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 318 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-311 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-311 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-311 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-311 + inet/filter/limit-311 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-311 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-311 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-311 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 319 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-312 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-312 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-312 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-312 + inet/filter/limit-312 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-312 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-312 -j ACCEPT + inet6/filter/limit-312 -j ACCEPT + +Filter 320 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 321 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-314 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-314 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-314 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-314 + inet/filter/limit-314 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-314 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-314 -m limit --limit 1/second -j LOG + inet6/filter/limit-314 -m limit --limit 1/second -j LOG + inet/filter/limit-314 -j ACCEPT + inet6/filter/limit-314 -j ACCEPT + +Filter 322 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-315 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-315 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-315 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-315 + inet/filter/limit-315 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-315 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-315 -m limit --limit 1/second -j LOG + inet6/filter/limit-315 -m limit --limit 1/second -j LOG + +Filter 323 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-316 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-316 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-316 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-316 + inet/filter/limit-316 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-316 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-316 -j ACCEPT + inet6/filter/limit-316 -j ACCEPT + +Filter 324 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 325 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-318 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-318 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-318 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-318 + inet/filter/limit-318 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-318 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-318 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-318 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 326 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-319 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-319 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-319 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-319 + inet/filter/limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-319 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-319 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 327 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-320 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-320 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-320 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-320 + inet/filter/limit-320 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-320 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-320 -m limit --limit 1/second -j LOG + inet6/filter/limit-320 -m limit --limit 1/second -j LOG + inet/filter/limit-320 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-320 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 328 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-321 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-321 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-321 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-321 + inet/filter/limit-321 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-321 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-321 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-321 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 329 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-322 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-322 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-322 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-322 + inet/filter/limit-322 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-322 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-322 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-322 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 330 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-323 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-323 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-323 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-323 + inet/filter/limit-323 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-323 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-323 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-323 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 331 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-324 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-324 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-324 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-324 + inet/filter/limit-324 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-324 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-324 -j ACCEPT + inet6/filter/limit-324 -j ACCEPT + +Filter 332 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 333 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-326 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-326 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-326 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-326 + inet/filter/limit-326 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-326 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-326 -m limit --limit 1/second -j LOG + inet6/filter/limit-326 -m limit --limit 1/second -j LOG + inet/filter/limit-326 -j ACCEPT + inet6/filter/limit-326 -j ACCEPT + +Filter 334 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-327 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-327 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-327 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-327 + inet/filter/limit-327 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-327 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-327 -m limit --limit 1/second -j LOG + inet6/filter/limit-327 -m limit --limit 1/second -j LOG + +Filter 335 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-328 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-328 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-328 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-328 + inet/filter/limit-328 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-328 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-328 -j ACCEPT + inet6/filter/limit-328 -j ACCEPT + +Filter 336 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 337 {"conn-limit":150,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-330 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-330 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-330 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-330 + inet/filter/limit-330 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-330 -j ACCEPT + inet6/filter/limit-330 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-330 -j ACCEPT + inet/filter/limit-330 -m limit --limit 1/second -j LOG + inet6/filter/limit-330 -m limit --limit 1/second -j LOG + inet/filter/limit-330 -j DROP + inet6/filter/limit-330 -j DROP + +Filter 338 {"action":"pass","conn-limit":150,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-331 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-331 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-331 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-331 + inet/filter/limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-331 -j RETURN + inet6/filter/limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-331 -j RETURN + inet/filter/limit-331 -m limit --limit 1/second -j LOG + inet6/filter/limit-331 -m limit --limit 1/second -j LOG + inet/filter/limit-331 -j DROP + inet6/filter/limit-331 -j DROP + +Filter 339 {"conn-limit":150,"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-332 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-332 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-332 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-332 + inet/filter/limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-332 -j logaccept-0 + inet6/filter/limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-332 -j logaccept-0 + inet/filter/logaccept-0 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-0 -m limit --limit 1/second -j LOG + inet/filter/logaccept-0 -j ACCEPT + inet6/filter/logaccept-0 -j ACCEPT + inet/filter/limit-332 -m limit --limit 1/second -j LOG + inet6/filter/limit-332 -m limit --limit 1/second -j LOG + inet/filter/limit-332 -j DROP + inet6/filter/limit-332 -j DROP + +Filter 340 {"conn-limit":150,"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-333 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-333 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-333 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-333 + inet/filter/limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-333 -j ACCEPT + inet6/filter/limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-333 -j ACCEPT + inet/filter/limit-333 -m limit --limit 1/second -j LOG + inet6/filter/limit-333 -m limit --limit 1/second -j LOG + inet/filter/limit-333 -j DROP + inet6/filter/limit-333 -j DROP + +Filter 341 {"conn-limit":{"count":150},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-334 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-334 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-334 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-334 + inet/filter/limit-334 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-334 -j ACCEPT + inet6/filter/limit-334 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-334 -j ACCEPT + inet/filter/limit-334 -m limit --limit 1/second -j LOG + inet6/filter/limit-334 -m limit --limit 1/second -j LOG + inet/filter/limit-334 -j DROP + inet6/filter/limit-334 -j DROP + +Filter 342 {"action":"pass","conn-limit":{"count":150},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-335 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-335 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-335 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-335 + inet/filter/limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-335 -j RETURN + inet6/filter/limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-335 -j RETURN + inet/filter/limit-335 -m limit --limit 1/second -j LOG + inet6/filter/limit-335 -m limit --limit 1/second -j LOG + inet/filter/limit-335 -j DROP + inet6/filter/limit-335 -j DROP + +Filter 343 {"conn-limit":{"count":150},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-336 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-336 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-336 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-336 + inet/filter/limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-336 -j logaccept-1 + inet6/filter/limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-336 -j logaccept-1 + inet/filter/logaccept-1 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-1 -m limit --limit 1/second -j LOG + inet/filter/logaccept-1 -j ACCEPT + inet6/filter/logaccept-1 -j ACCEPT + inet/filter/limit-336 -m limit --limit 1/second -j LOG + inet6/filter/limit-336 -m limit --limit 1/second -j LOG + inet/filter/limit-336 -j DROP + inet6/filter/limit-336 -j DROP + +Filter 344 {"conn-limit":{"count":150},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-337 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-337 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-337 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-337 + inet/filter/limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-337 -j ACCEPT + inet6/filter/limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-337 -j ACCEPT + inet/filter/limit-337 -m limit --limit 1/second -j LOG + inet6/filter/limit-337 -m limit --limit 1/second -j LOG + inet/filter/limit-337 -j DROP + inet6/filter/limit-337 -j DROP + +Filter 345 {"conn-limit":{"count":150,"log":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-338 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-338 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-338 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-338 + inet/filter/limit-338 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-338 -j ACCEPT + inet6/filter/limit-338 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-338 -j ACCEPT + inet/filter/limit-338 -j DROP + inet6/filter/limit-338 -j DROP + +Filter 346 {"action":"pass","conn-limit":{"count":150,"log":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-339 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-339 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-339 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-339 + inet/filter/limit-339 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-339 -j RETURN + inet6/filter/limit-339 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-339 -j RETURN + inet/filter/limit-339 -j DROP + inet6/filter/limit-339 -j DROP + +Filter 347 {"conn-limit":{"count":150,"log":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-340 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-340 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-340 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-340 + inet/filter/limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-340 -j logaccept-2 + inet6/filter/limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-340 -j logaccept-2 + inet/filter/logaccept-2 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-2 -m limit --limit 1/second -j LOG + inet/filter/logaccept-2 -j ACCEPT + inet6/filter/logaccept-2 -j ACCEPT + inet/filter/limit-340 -j DROP + inet6/filter/limit-340 -j DROP + +Filter 348 {"conn-limit":{"count":150,"log":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-341 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-341 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-341 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-341 + inet/filter/limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-341 -j ACCEPT + inet6/filter/limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-341 -j ACCEPT + inet/filter/limit-341 -j DROP + inet6/filter/limit-341 -j DROP + +Filter 349 {"conn-limit":{"count":150,"log":"none"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-342 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-342 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-342 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-342 + inet/filter/limit-342 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-342 -j ACCEPT + inet6/filter/limit-342 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-342 -j ACCEPT + inet/filter/limit-342 -j DROP + inet6/filter/limit-342 -j DROP + +Filter 350 {"action":"pass","conn-limit":{"count":150,"log":"none"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-343 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-343 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-343 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-343 + inet/filter/limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-343 -j RETURN + inet6/filter/limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-343 -j RETURN + inet/filter/limit-343 -j DROP + inet6/filter/limit-343 -j DROP + +Filter 351 {"conn-limit":{"count":150,"log":"none"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-344 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-344 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-344 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-344 + inet/filter/limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-344 -j logaccept-3 + inet6/filter/limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-344 -j logaccept-3 + inet/filter/logaccept-3 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-3 -m limit --limit 1/second -j LOG + inet/filter/logaccept-3 -j ACCEPT + inet6/filter/logaccept-3 -j ACCEPT + inet/filter/limit-344 -j DROP + inet6/filter/limit-344 -j DROP + +Filter 352 {"conn-limit":{"count":150,"log":"none"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-345 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-345 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-345 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-345 + inet/filter/limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-345 -j ACCEPT + inet6/filter/limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-345 -j ACCEPT + inet/filter/limit-345 -j DROP + inet6/filter/limit-345 -j DROP + +Filter 353 {"conn-limit":{"count":150,"interval":5},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-346 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-346 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-346 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-346 + inet/filter/limit-346 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-346 -j ACCEPT + inet6/filter/limit-346 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-346 -j ACCEPT + inet/filter/limit-346 -m limit --limit 1/second -j LOG + inet6/filter/limit-346 -m limit --limit 1/second -j LOG + inet/filter/limit-346 -j DROP + inet6/filter/limit-346 -j DROP + +Filter 354 {"action":"pass","conn-limit":{"count":150,"interval":5},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-347 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-347 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-347 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-347 + inet/filter/limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-347 -j RETURN + inet6/filter/limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-347 -j RETURN + inet/filter/limit-347 -m limit --limit 1/second -j LOG + inet6/filter/limit-347 -m limit --limit 1/second -j LOG + inet/filter/limit-347 -j DROP + inet6/filter/limit-347 -j DROP + +Filter 355 {"conn-limit":{"count":150,"interval":5},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-348 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-348 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-348 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-348 + inet/filter/limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-348 -j logaccept-4 + inet6/filter/limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-348 -j logaccept-4 + inet/filter/logaccept-4 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-4 -m limit --limit 1/second -j LOG + inet/filter/logaccept-4 -j ACCEPT + inet6/filter/logaccept-4 -j ACCEPT + inet/filter/limit-348 -m limit --limit 1/second -j LOG + inet6/filter/limit-348 -m limit --limit 1/second -j LOG + inet/filter/limit-348 -j DROP + inet6/filter/limit-348 -j DROP + +Filter 356 {"conn-limit":{"count":150,"interval":5},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-349 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-349 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-349 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-349 + inet/filter/limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-349 -j ACCEPT + inet6/filter/limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-349 -j ACCEPT + inet/filter/limit-349 -m limit --limit 1/second -j LOG + inet6/filter/limit-349 -m limit --limit 1/second -j LOG + inet/filter/limit-349 -j DROP + inet6/filter/limit-349 -j DROP + +Filter 357 {"conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-350 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-350 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-350 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-350 + inet/filter/limit-350 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-350 -j ACCEPT + inet6/filter/limit-350 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-350 -j ACCEPT + inet/filter/limit-350 -j DROP + inet6/filter/limit-350 -j DROP + +Filter 358 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-351 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-351 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-351 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-351 + inet/filter/limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-351 -j RETURN + inet6/filter/limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-351 -j RETURN + inet/filter/limit-351 -j DROP + inet6/filter/limit-351 -j DROP + +Filter 359 {"conn-limit":{"count":150,"interval":5,"log":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-352 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-352 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-352 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-352 + inet/filter/limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-352 -j logaccept-5 + inet6/filter/limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-352 -j logaccept-5 + inet/filter/logaccept-5 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-5 -m limit --limit 1/second -j LOG + inet/filter/logaccept-5 -j ACCEPT + inet6/filter/logaccept-5 -j ACCEPT + inet/filter/limit-352 -j DROP + inet6/filter/limit-352 -j DROP + +Filter 360 {"conn-limit":{"count":150,"interval":5,"log":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-353 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-353 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-353 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-353 + inet/filter/limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-353 -j ACCEPT + inet6/filter/limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-353 -j ACCEPT + inet/filter/limit-353 -j DROP + inet6/filter/limit-353 -j DROP + +Filter 361 {"conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-354 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-354 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-354 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-354 + inet/filter/limit-354 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-354 -j ACCEPT + inet6/filter/limit-354 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-354 -j ACCEPT + inet/filter/limit-354 -j DROP + inet6/filter/limit-354 -j DROP + +Filter 362 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-355 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-355 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-355 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-355 + inet/filter/limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-355 -j RETURN + inet6/filter/limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-355 -j RETURN + inet/filter/limit-355 -j DROP + inet6/filter/limit-355 -j DROP + +Filter 363 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-356 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-356 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-356 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-356 + inet/filter/limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-356 -j logaccept-6 + inet6/filter/limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-356 -j logaccept-6 + inet/filter/logaccept-6 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-6 -m limit --limit 1/second -j LOG + inet/filter/logaccept-6 -j ACCEPT + inet6/filter/logaccept-6 -j ACCEPT + inet/filter/limit-356 -j DROP + inet6/filter/limit-356 -j DROP + +Filter 364 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-357 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-357 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-357 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-357 + inet/filter/limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-357 -j ACCEPT + inet6/filter/limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-357 -j ACCEPT + inet/filter/limit-357 -j DROP + inet6/filter/limit-357 -j DROP + +Filter 365 {"flow-limit":1} +(filter-limit) + inet/filter/FORWARD -j limit-358 + inet6/filter/FORWARD -j limit-358 + inet/filter/INPUT -j limit-358 + inet6/filter/INPUT -j limit-358 + inet/filter/OUTPUT -j limit-358 + inet6/filter/OUTPUT -j limit-358 + inet/filter/limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-115 + inet6/filter/limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-115 + inet/filter/logdrop-115 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-115 -m limit --limit 1/second -j LOG + inet/filter/logdrop-115 -j DROP + inet6/filter/logdrop-115 -j DROP + inet/filter/limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -2705,39 +4401,39 @@ Filter 221 {"flow-limit":1} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 222 {"action":"pass","flow-limit":1} +Filter 366 {"action":"pass","flow-limit":1} (filter-limit) - inet/filter/FORWARD -j limit-215 - inet6/filter/FORWARD -j limit-215 - inet/filter/INPUT -j limit-215 - inet6/filter/INPUT -j limit-215 - inet/filter/OUTPUT -j limit-215 - inet6/filter/OUTPUT -j limit-215 - inet/filter/limit-215 -m recent --name limit-215 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-68 - inet6/filter/limit-215 -m recent --name limit-215 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-68 - inet/filter/logdrop-68 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-68 -m limit --limit 1/second -j LOG - inet/filter/logdrop-68 -j DROP - inet6/filter/logdrop-68 -j DROP - inet/filter/limit-215 -m recent --name limit-215 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-215 -m recent --name limit-215 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 223 {"flow-limit":1,"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-216 - inet6/filter/FORWARD -j limit-216 - inet/filter/INPUT -j limit-216 - inet6/filter/INPUT -j limit-216 - inet/filter/OUTPUT -j limit-216 - inet6/filter/OUTPUT -j limit-216 - inet/filter/limit-216 -m recent --name limit-216 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-69 - inet6/filter/limit-216 -m recent --name limit-216 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-69 - inet/filter/logdrop-69 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-69 -m limit --limit 1/second -j LOG - inet/filter/logdrop-69 -j DROP - inet6/filter/logdrop-69 -j DROP - inet/filter/limit-216 -m recent --name limit-216 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-216 -m recent --name limit-216 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j limit-359 + inet6/filter/FORWARD -j limit-359 + inet/filter/INPUT -j limit-359 + inet6/filter/INPUT -j limit-359 + inet/filter/OUTPUT -j limit-359 + inet6/filter/OUTPUT -j limit-359 + inet/filter/limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-116 + inet6/filter/limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-116 + inet/filter/logdrop-116 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-116 -m limit --limit 1/second -j LOG + inet/filter/logdrop-116 -j DROP + inet6/filter/logdrop-116 -j DROP + inet/filter/limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 367 {"flow-limit":1,"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-360 + inet6/filter/FORWARD -j limit-360 + inet/filter/INPUT -j limit-360 + inet6/filter/INPUT -j limit-360 + inet/filter/OUTPUT -j limit-360 + inet6/filter/OUTPUT -j limit-360 + inet/filter/limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-117 + inet6/filter/limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-117 + inet/filter/logdrop-117 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-117 -m limit --limit 1/second -j LOG + inet/filter/logdrop-117 -j DROP + inet6/filter/logdrop-117 -j DROP + inet/filter/limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j logaccept-final-0 inet6/filter/FORWARD -j logaccept-final-0 inet/filter/INPUT -j logaccept-final-0 @@ -2749,39 +4445,39 @@ Filter 223 {"flow-limit":1,"log":true} inet/filter/logaccept-final-0 -j ACCEPT inet6/filter/logaccept-final-0 -j ACCEPT -Filter 224 {"action":"pass","flow-limit":1,"log":true} +Filter 368 {"action":"pass","flow-limit":1,"log":true} (filter-limit) - inet/filter/FORWARD -j limit-217 - inet6/filter/FORWARD -j limit-217 - inet/filter/INPUT -j limit-217 - inet6/filter/INPUT -j limit-217 - inet/filter/OUTPUT -j limit-217 - inet6/filter/OUTPUT -j limit-217 - inet/filter/limit-217 -m recent --name limit-217 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-70 - inet6/filter/limit-217 -m recent --name limit-217 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-70 - inet/filter/logdrop-70 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-70 -m limit --limit 1/second -j LOG - inet/filter/logdrop-70 -j DROP - inet6/filter/logdrop-70 -j DROP - inet/filter/limit-217 -m recent --name limit-217 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-217 -m recent --name limit-217 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 225 {"flow-limit":1,"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-218 - inet6/filter/FORWARD -j limit-218 - inet/filter/INPUT -j limit-218 - inet6/filter/INPUT -j limit-218 - inet/filter/OUTPUT -j limit-218 - inet6/filter/OUTPUT -j limit-218 - inet/filter/limit-218 -m recent --name limit-218 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-71 - inet6/filter/limit-218 -m recent --name limit-218 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-71 - inet/filter/logdrop-71 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-71 -m limit --limit 1/second -j LOG - inet/filter/logdrop-71 -j DROP - inet6/filter/logdrop-71 -j DROP - inet/filter/limit-218 -m recent --name limit-218 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-218 -m recent --name limit-218 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j limit-361 + inet6/filter/FORWARD -j limit-361 + inet/filter/INPUT -j limit-361 + inet6/filter/INPUT -j limit-361 + inet/filter/OUTPUT -j limit-361 + inet6/filter/OUTPUT -j limit-361 + inet/filter/limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-118 + inet6/filter/limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-118 + inet/filter/logdrop-118 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-118 -m limit --limit 1/second -j LOG + inet/filter/logdrop-118 -j DROP + inet6/filter/logdrop-118 -j DROP + inet/filter/limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 369 {"flow-limit":1,"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-362 + inet6/filter/FORWARD -j limit-362 + inet/filter/INPUT -j limit-362 + inet6/filter/INPUT -j limit-362 + inet/filter/OUTPUT -j limit-362 + inet6/filter/OUTPUT -j limit-362 + inet/filter/limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-119 + inet6/filter/limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-119 + inet/filter/logdrop-119 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-119 -m limit --limit 1/second -j LOG + inet/filter/logdrop-119 -j DROP + inet6/filter/logdrop-119 -j DROP + inet/filter/limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -2789,39 +4485,39 @@ Filter 225 {"flow-limit":1,"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 226 {"action":"pass","flow-limit":1,"log":"none"} +Filter 370 {"action":"pass","flow-limit":1,"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-219 - inet6/filter/FORWARD -j limit-219 - inet/filter/INPUT -j limit-219 - inet6/filter/INPUT -j limit-219 - inet/filter/OUTPUT -j limit-219 - inet6/filter/OUTPUT -j limit-219 - inet/filter/limit-219 -m recent --name limit-219 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-72 - inet6/filter/limit-219 -m recent --name limit-219 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-72 - inet/filter/logdrop-72 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-72 -m limit --limit 1/second -j LOG - inet/filter/logdrop-72 -j DROP - inet6/filter/logdrop-72 -j DROP - inet/filter/limit-219 -m recent --name limit-219 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-219 -m recent --name limit-219 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 227 {"flow-limit":{}} -(filter-limit) - inet/filter/FORWARD -j limit-220 - inet6/filter/FORWARD -j limit-220 - inet/filter/INPUT -j limit-220 - inet6/filter/INPUT -j limit-220 - inet/filter/OUTPUT -j limit-220 - inet6/filter/OUTPUT -j limit-220 - inet/filter/limit-220 -m recent --name limit-220 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-73 - inet6/filter/limit-220 -m recent --name limit-220 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-73 - inet/filter/logdrop-73 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-73 -m limit --limit 1/second -j LOG - inet/filter/logdrop-73 -j DROP - inet6/filter/logdrop-73 -j DROP - inet/filter/limit-220 -m recent --name limit-220 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-220 -m recent --name limit-220 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j limit-363 + inet6/filter/FORWARD -j limit-363 + inet/filter/INPUT -j limit-363 + inet6/filter/INPUT -j limit-363 + inet/filter/OUTPUT -j limit-363 + inet6/filter/OUTPUT -j limit-363 + inet/filter/limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-120 + inet6/filter/limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-120 + inet/filter/logdrop-120 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-120 -m limit --limit 1/second -j LOG + inet/filter/logdrop-120 -j DROP + inet6/filter/logdrop-120 -j DROP + inet/filter/limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 371 {"flow-limit":{}} +(filter-limit) + inet/filter/FORWARD -j limit-364 + inet6/filter/FORWARD -j limit-364 + inet/filter/INPUT -j limit-364 + inet6/filter/INPUT -j limit-364 + inet/filter/OUTPUT -j limit-364 + inet6/filter/OUTPUT -j limit-364 + inet/filter/limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-121 + inet6/filter/limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-121 + inet/filter/logdrop-121 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-121 -m limit --limit 1/second -j LOG + inet/filter/logdrop-121 -j DROP + inet6/filter/logdrop-121 -j DROP + inet/filter/limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -2829,39 +4525,39 @@ Filter 227 {"flow-limit":{}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 228 {"action":"pass","flow-limit":{}} -(filter-limit) - inet/filter/FORWARD -j limit-221 - inet6/filter/FORWARD -j limit-221 - inet/filter/INPUT -j limit-221 - inet6/filter/INPUT -j limit-221 - inet/filter/OUTPUT -j limit-221 - inet6/filter/OUTPUT -j limit-221 - inet/filter/limit-221 -m recent --name limit-221 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-74 - inet6/filter/limit-221 -m recent --name limit-221 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-74 - inet/filter/logdrop-74 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-74 -m limit --limit 1/second -j LOG - inet/filter/logdrop-74 -j DROP - inet6/filter/logdrop-74 -j DROP - inet/filter/limit-221 -m recent --name limit-221 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-221 -m recent --name limit-221 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 229 {"flow-limit":{},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-222 - inet6/filter/FORWARD -j limit-222 - inet/filter/INPUT -j limit-222 - inet6/filter/INPUT -j limit-222 - inet/filter/OUTPUT -j limit-222 - inet6/filter/OUTPUT -j limit-222 - inet/filter/limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-75 - inet6/filter/limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-75 - inet/filter/logdrop-75 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-75 -m limit --limit 1/second -j LOG - inet/filter/logdrop-75 -j DROP - inet6/filter/logdrop-75 -j DROP - inet/filter/limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 372 {"action":"pass","flow-limit":{}} +(filter-limit) + inet/filter/FORWARD -j limit-365 + inet6/filter/FORWARD -j limit-365 + inet/filter/INPUT -j limit-365 + inet6/filter/INPUT -j limit-365 + inet/filter/OUTPUT -j limit-365 + inet6/filter/OUTPUT -j limit-365 + inet/filter/limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-122 + inet6/filter/limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-122 + inet/filter/logdrop-122 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-122 -m limit --limit 1/second -j LOG + inet/filter/logdrop-122 -j DROP + inet6/filter/logdrop-122 -j DROP + inet/filter/limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 373 {"flow-limit":{},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-366 + inet6/filter/FORWARD -j limit-366 + inet/filter/INPUT -j limit-366 + inet6/filter/INPUT -j limit-366 + inet/filter/OUTPUT -j limit-366 + inet6/filter/OUTPUT -j limit-366 + inet/filter/limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-123 + inet6/filter/limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-123 + inet/filter/logdrop-123 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-123 -m limit --limit 1/second -j LOG + inet/filter/logdrop-123 -j DROP + inet6/filter/logdrop-123 -j DROP + inet/filter/limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j logaccept-final-1 inet6/filter/FORWARD -j logaccept-final-1 inet/filter/INPUT -j logaccept-final-1 @@ -2873,39 +4569,39 @@ Filter 229 {"flow-limit":{},"log":true} inet/filter/logaccept-final-1 -j ACCEPT inet6/filter/logaccept-final-1 -j ACCEPT -Filter 230 {"action":"pass","flow-limit":{},"log":true} +Filter 374 {"action":"pass","flow-limit":{},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-223 - inet6/filter/FORWARD -j limit-223 - inet/filter/INPUT -j limit-223 - inet6/filter/INPUT -j limit-223 - inet/filter/OUTPUT -j limit-223 - inet6/filter/OUTPUT -j limit-223 - inet/filter/limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-76 - inet6/filter/limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-76 - inet/filter/logdrop-76 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-76 -m limit --limit 1/second -j LOG - inet/filter/logdrop-76 -j DROP - inet6/filter/logdrop-76 -j DROP - inet/filter/limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 231 {"flow-limit":{},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-224 - inet6/filter/FORWARD -j limit-224 - inet/filter/INPUT -j limit-224 - inet6/filter/INPUT -j limit-224 - inet/filter/OUTPUT -j limit-224 - inet6/filter/OUTPUT -j limit-224 - inet/filter/limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-77 - inet6/filter/limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-77 - inet/filter/logdrop-77 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-77 -m limit --limit 1/second -j LOG - inet/filter/logdrop-77 -j DROP - inet6/filter/logdrop-77 -j DROP - inet/filter/limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j limit-367 + inet6/filter/FORWARD -j limit-367 + inet/filter/INPUT -j limit-367 + inet6/filter/INPUT -j limit-367 + inet/filter/OUTPUT -j limit-367 + inet6/filter/OUTPUT -j limit-367 + inet/filter/limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-124 + inet6/filter/limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-124 + inet/filter/logdrop-124 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-124 -m limit --limit 1/second -j LOG + inet/filter/logdrop-124 -j DROP + inet6/filter/logdrop-124 -j DROP + inet/filter/limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 375 {"flow-limit":{},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-368 + inet6/filter/FORWARD -j limit-368 + inet/filter/INPUT -j limit-368 + inet6/filter/INPUT -j limit-368 + inet/filter/OUTPUT -j limit-368 + inet6/filter/OUTPUT -j limit-368 + inet/filter/limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-125 + inet6/filter/limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-125 + inet/filter/logdrop-125 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-125 -m limit --limit 1/second -j LOG + inet/filter/logdrop-125 -j DROP + inet6/filter/logdrop-125 -j DROP + inet/filter/limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -2913,39 +4609,39 @@ Filter 231 {"flow-limit":{},"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 232 {"action":"pass","flow-limit":{},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-225 - inet6/filter/FORWARD -j limit-225 - inet/filter/INPUT -j limit-225 - inet6/filter/INPUT -j limit-225 - inet/filter/OUTPUT -j limit-225 - inet6/filter/OUTPUT -j limit-225 - inet/filter/limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-78 - inet6/filter/limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-78 - inet/filter/logdrop-78 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-78 -m limit --limit 1/second -j LOG - inet/filter/logdrop-78 -j DROP - inet6/filter/logdrop-78 -j DROP - inet/filter/limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 233 {"flow-limit":{"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-226 - inet6/filter/FORWARD -j limit-226 - inet/filter/INPUT -j limit-226 - inet6/filter/INPUT -j limit-226 - inet/filter/OUTPUT -j limit-226 - inet6/filter/OUTPUT -j limit-226 - inet/filter/limit-226 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-79 - inet6/filter/limit-226 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-79 - inet/filter/logdrop-79 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-79 -m limit --limit 1/second -j LOG - inet/filter/logdrop-79 -j DROP - inet6/filter/logdrop-79 -j DROP - inet/filter/limit-226 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-226 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 376 {"action":"pass","flow-limit":{},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-369 + inet6/filter/FORWARD -j limit-369 + inet/filter/INPUT -j limit-369 + inet6/filter/INPUT -j limit-369 + inet/filter/OUTPUT -j limit-369 + inet6/filter/OUTPUT -j limit-369 + inet/filter/limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-126 + inet6/filter/limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-126 + inet/filter/logdrop-126 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-126 -m limit --limit 1/second -j LOG + inet/filter/logdrop-126 -j DROP + inet6/filter/logdrop-126 -j DROP + inet/filter/limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 377 {"flow-limit":{"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-370 + inet6/filter/FORWARD -j limit-370 + inet/filter/INPUT -j limit-370 + inet6/filter/INPUT -j limit-370 + inet/filter/OUTPUT -j limit-370 + inet6/filter/OUTPUT -j limit-370 + inet/filter/limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-127 + inet6/filter/limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-127 + inet/filter/logdrop-127 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-127 -m limit --limit 1/second -j LOG + inet/filter/logdrop-127 -j DROP + inet6/filter/logdrop-127 -j DROP + inet/filter/limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -2953,39 +4649,39 @@ Filter 233 {"flow-limit":{"name":"A"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 234 {"action":"pass","flow-limit":{"name":"A"}} +Filter 378 {"action":"pass","flow-limit":{"name":"A"}} (filter-limit) - inet/filter/FORWARD -j limit-227 - inet6/filter/FORWARD -j limit-227 - inet/filter/INPUT -j limit-227 - inet6/filter/INPUT -j limit-227 - inet/filter/OUTPUT -j limit-227 - inet6/filter/OUTPUT -j limit-227 - inet/filter/limit-227 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-80 - inet6/filter/limit-227 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-80 - inet/filter/logdrop-80 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-80 -m limit --limit 1/second -j LOG - inet/filter/logdrop-80 -j DROP - inet6/filter/logdrop-80 -j DROP - inet/filter/limit-227 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-227 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 235 {"flow-limit":{"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-228 - inet6/filter/FORWARD -j limit-228 - inet/filter/INPUT -j limit-228 - inet6/filter/INPUT -j limit-228 - inet/filter/OUTPUT -j limit-228 - inet6/filter/OUTPUT -j limit-228 - inet/filter/limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-81 - inet6/filter/limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-81 - inet/filter/logdrop-81 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-81 -m limit --limit 1/second -j LOG - inet/filter/logdrop-81 -j DROP - inet6/filter/logdrop-81 -j DROP - inet/filter/limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j limit-371 + inet6/filter/FORWARD -j limit-371 + inet/filter/INPUT -j limit-371 + inet6/filter/INPUT -j limit-371 + inet/filter/OUTPUT -j limit-371 + inet6/filter/OUTPUT -j limit-371 + inet/filter/limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-128 + inet6/filter/limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-128 + inet/filter/logdrop-128 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-128 -m limit --limit 1/second -j LOG + inet/filter/logdrop-128 -j DROP + inet6/filter/logdrop-128 -j DROP + inet/filter/limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 379 {"flow-limit":{"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-372 + inet6/filter/FORWARD -j limit-372 + inet/filter/INPUT -j limit-372 + inet6/filter/INPUT -j limit-372 + inet/filter/OUTPUT -j limit-372 + inet6/filter/OUTPUT -j limit-372 + inet/filter/limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-129 + inet6/filter/limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-129 + inet/filter/logdrop-129 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-129 -m limit --limit 1/second -j LOG + inet/filter/logdrop-129 -j DROP + inet6/filter/logdrop-129 -j DROP + inet/filter/limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j logaccept-final-2 inet6/filter/FORWARD -j logaccept-final-2 inet/filter/INPUT -j logaccept-final-2 @@ -2997,39 +4693,39 @@ Filter 235 {"flow-limit":{"name":"A"},"log":true} inet/filter/logaccept-final-2 -j ACCEPT inet6/filter/logaccept-final-2 -j ACCEPT -Filter 236 {"action":"pass","flow-limit":{"name":"A"},"log":true} +Filter 380 {"action":"pass","flow-limit":{"name":"A"},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-229 - inet6/filter/FORWARD -j limit-229 - inet/filter/INPUT -j limit-229 - inet6/filter/INPUT -j limit-229 - inet/filter/OUTPUT -j limit-229 - inet6/filter/OUTPUT -j limit-229 - inet/filter/limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-82 - inet6/filter/limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-82 - inet/filter/logdrop-82 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-82 -m limit --limit 1/second -j LOG - inet/filter/logdrop-82 -j DROP - inet6/filter/logdrop-82 -j DROP - inet/filter/limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 237 {"flow-limit":{"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-230 - inet6/filter/FORWARD -j limit-230 - inet/filter/INPUT -j limit-230 - inet6/filter/INPUT -j limit-230 - inet/filter/OUTPUT -j limit-230 - inet6/filter/OUTPUT -j limit-230 - inet/filter/limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-83 - inet6/filter/limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-83 - inet/filter/logdrop-83 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-83 -m limit --limit 1/second -j LOG - inet/filter/logdrop-83 -j DROP - inet6/filter/logdrop-83 -j DROP - inet/filter/limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j limit-373 + inet6/filter/FORWARD -j limit-373 + inet/filter/INPUT -j limit-373 + inet6/filter/INPUT -j limit-373 + inet/filter/OUTPUT -j limit-373 + inet6/filter/OUTPUT -j limit-373 + inet/filter/limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-130 + inet6/filter/limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-130 + inet/filter/logdrop-130 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-130 -m limit --limit 1/second -j LOG + inet/filter/logdrop-130 -j DROP + inet6/filter/logdrop-130 -j DROP + inet/filter/limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 381 {"flow-limit":{"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-374 + inet6/filter/FORWARD -j limit-374 + inet/filter/INPUT -j limit-374 + inet6/filter/INPUT -j limit-374 + inet/filter/OUTPUT -j limit-374 + inet6/filter/OUTPUT -j limit-374 + inet/filter/limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-131 + inet6/filter/limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-131 + inet/filter/logdrop-131 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-131 -m limit --limit 1/second -j LOG + inet/filter/logdrop-131 -j DROP + inet6/filter/logdrop-131 -j DROP + inet/filter/limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3037,37 +4733,37 @@ Filter 237 {"flow-limit":{"name":"A"},"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 238 {"action":"pass","flow-limit":{"name":"A"},"log":"none"} +Filter 382 {"action":"pass","flow-limit":{"name":"A"},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-231 - inet6/filter/FORWARD -j limit-231 - inet/filter/INPUT -j limit-231 - inet6/filter/INPUT -j limit-231 - inet/filter/OUTPUT -j limit-231 - inet6/filter/OUTPUT -j limit-231 - inet/filter/limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-84 - inet6/filter/limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-84 - inet/filter/logdrop-84 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-84 -m limit --limit 1/second -j LOG - inet/filter/logdrop-84 -j DROP - inet6/filter/logdrop-84 -j DROP - inet/filter/limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 239 {"flow-limit":{"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-232 - inet6/filter/FORWARD -j limit-232 - inet/filter/INPUT -j limit-232 - inet6/filter/INPUT -j limit-232 - inet/filter/OUTPUT -j limit-232 - inet6/filter/OUTPUT -j limit-232 - inet/filter/limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-85 - inet6/filter/limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-85 - inet/filter/logdrop-85 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-85 -m limit --limit 1/second -j LOG - inet/filter/logdrop-85 -j DROP - inet6/filter/logdrop-85 -j DROP + inet/filter/FORWARD -j limit-375 + inet6/filter/FORWARD -j limit-375 + inet/filter/INPUT -j limit-375 + inet6/filter/INPUT -j limit-375 + inet/filter/OUTPUT -j limit-375 + inet6/filter/OUTPUT -j limit-375 + inet/filter/limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-132 + inet6/filter/limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-132 + inet/filter/logdrop-132 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-132 -m limit --limit 1/second -j LOG + inet/filter/logdrop-132 -j DROP + inet6/filter/logdrop-132 -j DROP + inet/filter/limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 383 {"flow-limit":{"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-376 + inet6/filter/FORWARD -j limit-376 + inet/filter/INPUT -j limit-376 + inet6/filter/INPUT -j limit-376 + inet/filter/OUTPUT -j limit-376 + inet6/filter/OUTPUT -j limit-376 + inet/filter/limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-133 + inet6/filter/limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-133 + inet/filter/logdrop-133 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-133 -m limit --limit 1/second -j LOG + inet/filter/logdrop-133 -j DROP + inet6/filter/logdrop-133 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3075,35 +4771,35 @@ Filter 239 {"flow-limit":{"name":"A","update":false}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 240 {"action":"pass","flow-limit":{"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-233 - inet6/filter/FORWARD -j limit-233 - inet/filter/INPUT -j limit-233 - inet6/filter/INPUT -j limit-233 - inet/filter/OUTPUT -j limit-233 - inet6/filter/OUTPUT -j limit-233 - inet/filter/limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-86 - inet6/filter/limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-86 - inet/filter/logdrop-86 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-86 -m limit --limit 1/second -j LOG - inet/filter/logdrop-86 -j DROP - inet6/filter/logdrop-86 -j DROP - -Filter 241 {"flow-limit":{"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-234 - inet6/filter/FORWARD -j limit-234 - inet/filter/INPUT -j limit-234 - inet6/filter/INPUT -j limit-234 - inet/filter/OUTPUT -j limit-234 - inet6/filter/OUTPUT -j limit-234 - inet/filter/limit-234 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-87 - inet6/filter/limit-234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-87 - inet/filter/logdrop-87 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-87 -m limit --limit 1/second -j LOG - inet/filter/logdrop-87 -j DROP - inet6/filter/logdrop-87 -j DROP +Filter 384 {"action":"pass","flow-limit":{"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-377 + inet6/filter/FORWARD -j limit-377 + inet/filter/INPUT -j limit-377 + inet6/filter/INPUT -j limit-377 + inet/filter/OUTPUT -j limit-377 + inet6/filter/OUTPUT -j limit-377 + inet/filter/limit-377 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-134 + inet6/filter/limit-377 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-134 + inet/filter/logdrop-134 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-134 -m limit --limit 1/second -j LOG + inet/filter/logdrop-134 -j DROP + inet6/filter/logdrop-134 -j DROP + +Filter 385 {"flow-limit":{"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-378 + inet6/filter/FORWARD -j limit-378 + inet/filter/INPUT -j limit-378 + inet6/filter/INPUT -j limit-378 + inet/filter/OUTPUT -j limit-378 + inet6/filter/OUTPUT -j limit-378 + inet/filter/limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-135 + inet6/filter/limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-135 + inet/filter/logdrop-135 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-135 -m limit --limit 1/second -j LOG + inet/filter/logdrop-135 -j DROP + inet6/filter/logdrop-135 -j DROP inet/filter/FORWARD -j logaccept-final-3 inet6/filter/FORWARD -j logaccept-final-3 inet/filter/INPUT -j logaccept-final-3 @@ -3115,37 +4811,37 @@ Filter 241 {"flow-limit":{"name":"A","update":false},"lo inet/filter/logaccept-final-3 -j ACCEPT inet6/filter/logaccept-final-3 -j ACCEPT -Filter 242 {"action":"pass","flow-limit":{"name":"A","update":false},"log":true} +Filter 386 {"action":"pass","flow-limit":{"name":"A","update":false},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-235 - inet6/filter/FORWARD -j limit-235 - inet/filter/INPUT -j limit-235 - inet6/filter/INPUT -j limit-235 - inet/filter/OUTPUT -j limit-235 - inet6/filter/OUTPUT -j limit-235 - inet/filter/limit-235 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-88 - inet6/filter/limit-235 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-88 - inet/filter/logdrop-88 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-88 -m limit --limit 1/second -j LOG - inet/filter/logdrop-88 -j DROP - inet6/filter/logdrop-88 -j DROP - inet/filter/limit-235 -m limit --limit 1/second -j LOG - inet6/filter/limit-235 -m limit --limit 1/second -j LOG - -Filter 243 {"flow-limit":{"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-236 - inet6/filter/FORWARD -j limit-236 - inet/filter/INPUT -j limit-236 - inet6/filter/INPUT -j limit-236 - inet/filter/OUTPUT -j limit-236 - inet6/filter/OUTPUT -j limit-236 - inet/filter/limit-236 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-89 - inet6/filter/limit-236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-89 - inet/filter/logdrop-89 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-89 -m limit --limit 1/second -j LOG - inet/filter/logdrop-89 -j DROP - inet6/filter/logdrop-89 -j DROP + inet/filter/FORWARD -j limit-379 + inet6/filter/FORWARD -j limit-379 + inet/filter/INPUT -j limit-379 + inet6/filter/INPUT -j limit-379 + inet/filter/OUTPUT -j limit-379 + inet6/filter/OUTPUT -j limit-379 + inet/filter/limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-136 + inet6/filter/limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-136 + inet/filter/logdrop-136 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-136 -m limit --limit 1/second -j LOG + inet/filter/logdrop-136 -j DROP + inet6/filter/logdrop-136 -j DROP + inet/filter/limit-379 -m limit --limit 1/second -j LOG + inet6/filter/limit-379 -m limit --limit 1/second -j LOG + +Filter 387 {"flow-limit":{"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-380 + inet6/filter/FORWARD -j limit-380 + inet/filter/INPUT -j limit-380 + inet6/filter/INPUT -j limit-380 + inet/filter/OUTPUT -j limit-380 + inet6/filter/OUTPUT -j limit-380 + inet/filter/limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-137 + inet6/filter/limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-137 + inet/filter/logdrop-137 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-137 -m limit --limit 1/second -j LOG + inet/filter/logdrop-137 -j DROP + inet6/filter/logdrop-137 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3153,37 +4849,37 @@ Filter 243 {"flow-limit":{"name":"A","update":false},"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 244 {"action":"pass","flow-limit":{"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-237 - inet6/filter/FORWARD -j limit-237 - inet/filter/INPUT -j limit-237 - inet6/filter/INPUT -j limit-237 - inet/filter/OUTPUT -j limit-237 - inet6/filter/OUTPUT -j limit-237 - inet/filter/limit-237 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-90 - inet6/filter/limit-237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-90 - inet/filter/logdrop-90 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-90 -m limit --limit 1/second -j LOG - inet/filter/logdrop-90 -j DROP - inet6/filter/logdrop-90 -j DROP - -Filter 245 {"flow-limit":{"addr":"dest","name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-238 - inet6/filter/FORWARD -j limit-238 - inet/filter/INPUT -j limit-238 - inet6/filter/INPUT -j limit-238 - inet/filter/OUTPUT -j limit-238 - inet6/filter/OUTPUT -j limit-238 - inet/filter/limit-238 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-91 - inet6/filter/limit-238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-91 - inet/filter/logdrop-91 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-91 -m limit --limit 1/second -j LOG - inet/filter/logdrop-91 -j DROP - inet6/filter/logdrop-91 -j DROP - inet/filter/limit-238 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 388 {"action":"pass","flow-limit":{"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-381 + inet6/filter/FORWARD -j limit-381 + inet/filter/INPUT -j limit-381 + inet6/filter/INPUT -j limit-381 + inet/filter/OUTPUT -j limit-381 + inet6/filter/OUTPUT -j limit-381 + inet/filter/limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-138 + inet6/filter/limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-138 + inet/filter/logdrop-138 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-138 -m limit --limit 1/second -j LOG + inet/filter/logdrop-138 -j DROP + inet6/filter/logdrop-138 -j DROP + +Filter 389 {"flow-limit":{"addr":"dest","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-382 + inet6/filter/FORWARD -j limit-382 + inet/filter/INPUT -j limit-382 + inet6/filter/INPUT -j limit-382 + inet/filter/OUTPUT -j limit-382 + inet6/filter/OUTPUT -j limit-382 + inet/filter/limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 + inet6/filter/limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 + inet/filter/logdrop-139 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-139 -m limit --limit 1/second -j LOG + inet/filter/logdrop-139 -j DROP + inet6/filter/logdrop-139 -j DROP + inet/filter/limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3191,39 +4887,39 @@ Filter 245 {"flow-limit":{"addr":"dest","name":"A"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 246 {"action":"pass","flow-limit":{"addr":"dest","name":"A"}} +Filter 390 {"action":"pass","flow-limit":{"addr":"dest","name":"A"}} (filter-limit) - inet/filter/FORWARD -j limit-239 - inet6/filter/FORWARD -j limit-239 - inet/filter/INPUT -j limit-239 - inet6/filter/INPUT -j limit-239 - inet/filter/OUTPUT -j limit-239 - inet6/filter/OUTPUT -j limit-239 - inet/filter/limit-239 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-92 - inet6/filter/limit-239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-92 - inet/filter/logdrop-92 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-92 -m limit --limit 1/second -j LOG - inet/filter/logdrop-92 -j DROP - inet6/filter/logdrop-92 -j DROP - inet/filter/limit-239 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 247 {"flow-limit":{"addr":"dest","name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-240 - inet6/filter/FORWARD -j limit-240 - inet/filter/INPUT -j limit-240 - inet6/filter/INPUT -j limit-240 - inet/filter/OUTPUT -j limit-240 - inet6/filter/OUTPUT -j limit-240 - inet/filter/limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-93 - inet6/filter/limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-93 - inet/filter/logdrop-93 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-93 -m limit --limit 1/second -j LOG - inet/filter/logdrop-93 -j DROP - inet6/filter/logdrop-93 -j DROP - inet/filter/limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j limit-383 + inet6/filter/FORWARD -j limit-383 + inet/filter/INPUT -j limit-383 + inet6/filter/INPUT -j limit-383 + inet/filter/OUTPUT -j limit-383 + inet6/filter/OUTPUT -j limit-383 + inet/filter/limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-140 + inet6/filter/limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-140 + inet/filter/logdrop-140 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-140 -m limit --limit 1/second -j LOG + inet/filter/logdrop-140 -j DROP + inet6/filter/logdrop-140 -j DROP + inet/filter/limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 391 {"flow-limit":{"addr":"dest","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-384 + inet6/filter/FORWARD -j limit-384 + inet/filter/INPUT -j limit-384 + inet6/filter/INPUT -j limit-384 + inet/filter/OUTPUT -j limit-384 + inet6/filter/OUTPUT -j limit-384 + inet/filter/limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-141 + inet6/filter/limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-141 + inet/filter/logdrop-141 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-141 -m limit --limit 1/second -j LOG + inet/filter/logdrop-141 -j DROP + inet6/filter/logdrop-141 -j DROP + inet/filter/limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j logaccept-final-4 inet6/filter/FORWARD -j logaccept-final-4 inet/filter/INPUT -j logaccept-final-4 @@ -3235,39 +4931,39 @@ Filter 247 {"flow-limit":{"addr":"dest","name":"A"},"log inet/filter/logaccept-final-4 -j ACCEPT inet6/filter/logaccept-final-4 -j ACCEPT -Filter 248 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":true} +Filter 392 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-241 - inet6/filter/FORWARD -j limit-241 - inet/filter/INPUT -j limit-241 - inet6/filter/INPUT -j limit-241 - inet/filter/OUTPUT -j limit-241 - inet6/filter/OUTPUT -j limit-241 - inet/filter/limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-94 - inet6/filter/limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-94 - inet/filter/logdrop-94 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-94 -m limit --limit 1/second -j LOG - inet/filter/logdrop-94 -j DROP - inet6/filter/logdrop-94 -j DROP - inet/filter/limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 249 {"flow-limit":{"addr":"dest","name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-242 - inet6/filter/FORWARD -j limit-242 - inet/filter/INPUT -j limit-242 - inet6/filter/INPUT -j limit-242 - inet/filter/OUTPUT -j limit-242 - inet6/filter/OUTPUT -j limit-242 - inet/filter/limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-95 - inet6/filter/limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-95 - inet/filter/logdrop-95 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-95 -m limit --limit 1/second -j LOG - inet/filter/logdrop-95 -j DROP - inet6/filter/logdrop-95 -j DROP - inet/filter/limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j limit-385 + inet6/filter/FORWARD -j limit-385 + inet/filter/INPUT -j limit-385 + inet6/filter/INPUT -j limit-385 + inet/filter/OUTPUT -j limit-385 + inet6/filter/OUTPUT -j limit-385 + inet/filter/limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-142 + inet6/filter/limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-142 + inet/filter/logdrop-142 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-142 -m limit --limit 1/second -j LOG + inet/filter/logdrop-142 -j DROP + inet6/filter/logdrop-142 -j DROP + inet/filter/limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 393 {"flow-limit":{"addr":"dest","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-386 + inet6/filter/FORWARD -j limit-386 + inet/filter/INPUT -j limit-386 + inet6/filter/INPUT -j limit-386 + inet/filter/OUTPUT -j limit-386 + inet6/filter/OUTPUT -j limit-386 + inet/filter/limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-143 + inet6/filter/limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-143 + inet/filter/logdrop-143 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-143 -m limit --limit 1/second -j LOG + inet/filter/logdrop-143 -j DROP + inet6/filter/logdrop-143 -j DROP + inet/filter/limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3275,37 +4971,37 @@ Filter 249 {"flow-limit":{"addr":"dest","name":"A"},"log inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 250 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":"none"} +Filter 394 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-243 - inet6/filter/FORWARD -j limit-243 - inet/filter/INPUT -j limit-243 - inet6/filter/INPUT -j limit-243 - inet/filter/OUTPUT -j limit-243 - inet6/filter/OUTPUT -j limit-243 - inet/filter/limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-96 - inet6/filter/limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-96 - inet/filter/logdrop-96 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-96 -m limit --limit 1/second -j LOG - inet/filter/logdrop-96 -j DROP - inet6/filter/logdrop-96 -j DROP - inet/filter/limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 251 {"flow-limit":{"addr":"dest","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-244 - inet6/filter/FORWARD -j limit-244 - inet/filter/INPUT -j limit-244 - inet6/filter/INPUT -j limit-244 - inet/filter/OUTPUT -j limit-244 - inet6/filter/OUTPUT -j limit-244 - inet/filter/limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-97 - inet6/filter/limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-97 - inet/filter/logdrop-97 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-97 -m limit --limit 1/second -j LOG - inet/filter/logdrop-97 -j DROP - inet6/filter/logdrop-97 -j DROP + inet/filter/FORWARD -j limit-387 + inet6/filter/FORWARD -j limit-387 + inet/filter/INPUT -j limit-387 + inet6/filter/INPUT -j limit-387 + inet/filter/OUTPUT -j limit-387 + inet6/filter/OUTPUT -j limit-387 + inet/filter/limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-144 + inet6/filter/limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-144 + inet/filter/logdrop-144 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-144 -m limit --limit 1/second -j LOG + inet/filter/logdrop-144 -j DROP + inet6/filter/logdrop-144 -j DROP + inet/filter/limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 395 {"flow-limit":{"addr":"dest","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-388 + inet6/filter/FORWARD -j limit-388 + inet/filter/INPUT -j limit-388 + inet6/filter/INPUT -j limit-388 + inet/filter/OUTPUT -j limit-388 + inet6/filter/OUTPUT -j limit-388 + inet/filter/limit-388 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 + inet6/filter/limit-388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-145 + inet/filter/logdrop-145 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-145 -m limit --limit 1/second -j LOG + inet/filter/logdrop-145 -j DROP + inet6/filter/logdrop-145 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3313,35 +5009,35 @@ Filter 251 {"flow-limit":{"addr":"dest","name":"A","upda inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 252 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-245 - inet6/filter/FORWARD -j limit-245 - inet/filter/INPUT -j limit-245 - inet6/filter/INPUT -j limit-245 - inet/filter/OUTPUT -j limit-245 - inet6/filter/OUTPUT -j limit-245 - inet/filter/limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-98 - inet6/filter/limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-98 - inet/filter/logdrop-98 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-98 -m limit --limit 1/second -j LOG - inet/filter/logdrop-98 -j DROP - inet6/filter/logdrop-98 -j DROP - -Filter 253 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-246 - inet6/filter/FORWARD -j limit-246 - inet/filter/INPUT -j limit-246 - inet6/filter/INPUT -j limit-246 - inet/filter/OUTPUT -j limit-246 - inet6/filter/OUTPUT -j limit-246 - inet/filter/limit-246 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-99 - inet6/filter/limit-246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-99 - inet/filter/logdrop-99 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-99 -m limit --limit 1/second -j LOG - inet/filter/logdrop-99 -j DROP - inet6/filter/logdrop-99 -j DROP +Filter 396 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-389 + inet6/filter/FORWARD -j limit-389 + inet/filter/INPUT -j limit-389 + inet6/filter/INPUT -j limit-389 + inet/filter/OUTPUT -j limit-389 + inet6/filter/OUTPUT -j limit-389 + inet/filter/limit-389 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 + inet6/filter/limit-389 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-146 + inet/filter/logdrop-146 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-146 -m limit --limit 1/second -j LOG + inet/filter/logdrop-146 -j DROP + inet6/filter/logdrop-146 -j DROP + +Filter 397 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-390 + inet6/filter/FORWARD -j limit-390 + inet/filter/INPUT -j limit-390 + inet6/filter/INPUT -j limit-390 + inet/filter/OUTPUT -j limit-390 + inet6/filter/OUTPUT -j limit-390 + inet/filter/limit-390 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 + inet6/filter/limit-390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-147 + inet/filter/logdrop-147 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-147 -m limit --limit 1/second -j LOG + inet/filter/logdrop-147 -j DROP + inet6/filter/logdrop-147 -j DROP inet/filter/FORWARD -j logaccept-final-5 inet6/filter/FORWARD -j logaccept-final-5 inet/filter/INPUT -j logaccept-final-5 @@ -3353,37 +5049,37 @@ Filter 253 {"flow-limit":{"addr":"dest","name":"A","upda inet/filter/logaccept-final-5 -j ACCEPT inet6/filter/logaccept-final-5 -j ACCEPT -Filter 254 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":true} +Filter 398 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-247 - inet6/filter/FORWARD -j limit-247 - inet/filter/INPUT -j limit-247 - inet6/filter/INPUT -j limit-247 - inet/filter/OUTPUT -j limit-247 - inet6/filter/OUTPUT -j limit-247 - inet/filter/limit-247 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-100 - inet6/filter/limit-247 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-100 - inet/filter/logdrop-100 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-100 -m limit --limit 1/second -j LOG - inet/filter/logdrop-100 -j DROP - inet6/filter/logdrop-100 -j DROP - inet/filter/limit-247 -m limit --limit 1/second -j LOG - inet6/filter/limit-247 -m limit --limit 1/second -j LOG - -Filter 255 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-248 - inet6/filter/FORWARD -j limit-248 - inet/filter/INPUT -j limit-248 - inet6/filter/INPUT -j limit-248 - inet/filter/OUTPUT -j limit-248 - inet6/filter/OUTPUT -j limit-248 - inet/filter/limit-248 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-101 - inet6/filter/limit-248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-101 - inet/filter/logdrop-101 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-101 -m limit --limit 1/second -j LOG - inet/filter/logdrop-101 -j DROP - inet6/filter/logdrop-101 -j DROP + inet/filter/FORWARD -j limit-391 + inet6/filter/FORWARD -j limit-391 + inet/filter/INPUT -j limit-391 + inet6/filter/INPUT -j limit-391 + inet/filter/OUTPUT -j limit-391 + inet6/filter/OUTPUT -j limit-391 + inet/filter/limit-391 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 + inet6/filter/limit-391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-148 + inet/filter/logdrop-148 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-148 -m limit --limit 1/second -j LOG + inet/filter/logdrop-148 -j DROP + inet6/filter/logdrop-148 -j DROP + inet/filter/limit-391 -m limit --limit 1/second -j LOG + inet6/filter/limit-391 -m limit --limit 1/second -j LOG + +Filter 399 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-392 + inet6/filter/FORWARD -j limit-392 + inet/filter/INPUT -j limit-392 + inet6/filter/INPUT -j limit-392 + inet/filter/OUTPUT -j limit-392 + inet6/filter/OUTPUT -j limit-392 + inet/filter/limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 + inet6/filter/limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-149 + inet/filter/logdrop-149 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-149 -m limit --limit 1/second -j LOG + inet/filter/logdrop-149 -j DROP + inet6/filter/logdrop-149 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3391,33 +5087,37 @@ Filter 255 {"flow-limit":{"addr":"dest","name":"A","upda inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 256 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-249 - inet6/filter/FORWARD -j limit-249 - inet/filter/INPUT -j limit-249 - inet6/filter/INPUT -j limit-249 - inet/filter/OUTPUT -j limit-249 - inet6/filter/OUTPUT -j limit-249 - inet/filter/limit-249 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-102 - inet6/filter/limit-249 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-102 - inet/filter/logdrop-102 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-102 -m limit --limit 1/second -j LOG - inet/filter/logdrop-102 -j DROP - inet6/filter/logdrop-102 -j DROP - -Filter 257 {"flow-limit":{"log":false}} -(filter-limit) - inet/filter/FORWARD -j limit-250 - inet6/filter/FORWARD -j limit-250 - inet/filter/INPUT -j limit-250 - inet6/filter/INPUT -j limit-250 - inet/filter/OUTPUT -j limit-250 - inet6/filter/OUTPUT -j limit-250 - inet/filter/limit-250 -m recent --name limit-250 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-250 -m recent --name limit-250 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-250 -m recent --name limit-250 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-250 -m recent --name limit-250 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 400 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-393 + inet6/filter/FORWARD -j limit-393 + inet/filter/INPUT -j limit-393 + inet6/filter/INPUT -j limit-393 + inet/filter/OUTPUT -j limit-393 + inet6/filter/OUTPUT -j limit-393 + inet/filter/limit-393 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-150 + inet6/filter/limit-393 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-150 + inet/filter/logdrop-150 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-150 -m limit --limit 1/second -j LOG + inet/filter/logdrop-150 -j DROP + inet6/filter/logdrop-150 -j DROP + +Filter 401 {"flow-limit":{"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-394 + inet6/filter/FORWARD -j limit-394 + inet/filter/INPUT -j limit-394 + inet6/filter/INPUT -j limit-394 + inet/filter/OUTPUT -j limit-394 + inet6/filter/OUTPUT -j limit-394 + inet/filter/limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-151 + inet6/filter/limit-394 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-151 + inet/filter/logdrop-151 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-151 -m limit --limit 1/second -j LOG + inet/filter/logdrop-151 -j DROP + inet6/filter/logdrop-151 -j DROP + inet/filter/limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-394 -m recent --name user:C --rsource --mask fe00:: --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3425,31 +5125,39 @@ Filter 257 {"flow-limit":{"log":false}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 258 {"action":"pass","flow-limit":{"log":false}} -(filter-limit) - inet/filter/FORWARD -j limit-251 - inet6/filter/FORWARD -j limit-251 - inet/filter/INPUT -j limit-251 - inet6/filter/INPUT -j limit-251 - inet/filter/OUTPUT -j limit-251 - inet6/filter/OUTPUT -j limit-251 - inet/filter/limit-251 -m recent --name limit-251 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-251 -m recent --name limit-251 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-251 -m recent --name limit-251 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-251 -m recent --name limit-251 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 259 {"flow-limit":{"log":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-252 - inet6/filter/FORWARD -j limit-252 - inet/filter/INPUT -j limit-252 - inet6/filter/INPUT -j limit-252 - inet/filter/OUTPUT -j limit-252 - inet6/filter/OUTPUT -j limit-252 - inet/filter/limit-252 -m recent --name limit-252 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-252 -m recent --name limit-252 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-252 -m recent --name limit-252 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-252 -m recent --name limit-252 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 402 {"action":"pass","flow-limit":{"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-395 + inet6/filter/FORWARD -j limit-395 + inet/filter/INPUT -j limit-395 + inet6/filter/INPUT -j limit-395 + inet/filter/OUTPUT -j limit-395 + inet6/filter/OUTPUT -j limit-395 + inet/filter/limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-152 + inet6/filter/limit-395 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-152 + inet/filter/logdrop-152 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-152 -m limit --limit 1/second -j LOG + inet/filter/logdrop-152 -j DROP + inet6/filter/logdrop-152 -j DROP + inet/filter/limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-395 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 403 {"flow-limit":{"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-396 + inet6/filter/FORWARD -j limit-396 + inet/filter/INPUT -j limit-396 + inet6/filter/INPUT -j limit-396 + inet/filter/OUTPUT -j limit-396 + inet6/filter/OUTPUT -j limit-396 + inet/filter/limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-153 + inet6/filter/limit-396 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-153 + inet/filter/logdrop-153 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-153 -m limit --limit 1/second -j LOG + inet/filter/logdrop-153 -j DROP + inet6/filter/logdrop-153 -j DROP + inet/filter/limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-396 -m recent --name user:C --rsource --mask fe00:: --set inet/filter/FORWARD -j logaccept-final-6 inet6/filter/FORWARD -j logaccept-final-6 inet/filter/INPUT -j logaccept-final-6 @@ -3461,31 +5169,39 @@ Filter 259 {"flow-limit":{"log":false},"log":true} inet/filter/logaccept-final-6 -j ACCEPT inet6/filter/logaccept-final-6 -j ACCEPT -Filter 260 {"action":"pass","flow-limit":{"log":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-253 - inet6/filter/FORWARD -j limit-253 - inet/filter/INPUT -j limit-253 - inet6/filter/INPUT -j limit-253 - inet/filter/OUTPUT -j limit-253 - inet6/filter/OUTPUT -j limit-253 - inet/filter/limit-253 -m recent --name limit-253 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-253 -m recent --name limit-253 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-253 -m recent --name limit-253 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-253 -m recent --name limit-253 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 261 {"flow-limit":{"log":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-254 - inet6/filter/FORWARD -j limit-254 - inet/filter/INPUT -j limit-254 - inet6/filter/INPUT -j limit-254 - inet/filter/OUTPUT -j limit-254 - inet6/filter/OUTPUT -j limit-254 - inet/filter/limit-254 -m recent --name limit-254 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-254 -m recent --name limit-254 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-254 -m recent --name limit-254 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-254 -m recent --name limit-254 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 404 {"action":"pass","flow-limit":{"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-397 + inet6/filter/FORWARD -j limit-397 + inet/filter/INPUT -j limit-397 + inet6/filter/INPUT -j limit-397 + inet/filter/OUTPUT -j limit-397 + inet6/filter/OUTPUT -j limit-397 + inet/filter/limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-154 + inet6/filter/limit-397 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-154 + inet/filter/logdrop-154 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-154 -m limit --limit 1/second -j LOG + inet/filter/logdrop-154 -j DROP + inet6/filter/logdrop-154 -j DROP + inet/filter/limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-397 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 405 {"flow-limit":{"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-398 + inet6/filter/FORWARD -j limit-398 + inet/filter/INPUT -j limit-398 + inet6/filter/INPUT -j limit-398 + inet/filter/OUTPUT -j limit-398 + inet6/filter/OUTPUT -j limit-398 + inet/filter/limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-155 + inet6/filter/limit-398 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-155 + inet/filter/logdrop-155 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-155 -m limit --limit 1/second -j LOG + inet/filter/logdrop-155 -j DROP + inet6/filter/logdrop-155 -j DROP + inet/filter/limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-398 -m recent --name user:C --rsource --mask fe00:: --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3493,31 +5209,37 @@ Filter 261 {"flow-limit":{"log":false},"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 262 {"action":"pass","flow-limit":{"log":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-255 - inet6/filter/FORWARD -j limit-255 - inet/filter/INPUT -j limit-255 - inet6/filter/INPUT -j limit-255 - inet/filter/OUTPUT -j limit-255 - inet6/filter/OUTPUT -j limit-255 - inet/filter/limit-255 -m recent --name limit-255 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-255 -m recent --name limit-255 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-255 -m recent --name limit-255 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-255 -m recent --name limit-255 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 263 {"flow-limit":{"log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-256 - inet6/filter/FORWARD -j limit-256 - inet/filter/INPUT -j limit-256 - inet6/filter/INPUT -j limit-256 - inet/filter/OUTPUT -j limit-256 - inet6/filter/OUTPUT -j limit-256 - inet/filter/limit-256 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-256 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 406 {"action":"pass","flow-limit":{"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-399 + inet6/filter/FORWARD -j limit-399 + inet/filter/INPUT -j limit-399 + inet6/filter/INPUT -j limit-399 + inet/filter/OUTPUT -j limit-399 + inet6/filter/OUTPUT -j limit-399 + inet/filter/limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-156 + inet6/filter/limit-399 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-156 + inet/filter/logdrop-156 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-156 -m limit --limit 1/second -j LOG + inet/filter/logdrop-156 -j DROP + inet6/filter/logdrop-156 -j DROP + inet/filter/limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-399 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 407 {"flow-limit":{"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-400 + inet6/filter/FORWARD -j limit-400 + inet/filter/INPUT -j limit-400 + inet6/filter/INPUT -j limit-400 + inet/filter/OUTPUT -j limit-400 + inet6/filter/OUTPUT -j limit-400 + inet/filter/limit-400 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-157 + inet6/filter/limit-400 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-157 + inet/filter/logdrop-157 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-157 -m limit --limit 1/second -j LOG + inet/filter/logdrop-157 -j DROP + inet6/filter/logdrop-157 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3525,31 +5247,35 @@ Filter 263 {"flow-limit":{"log":false,"name":"A"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 264 {"action":"pass","flow-limit":{"log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-257 - inet6/filter/FORWARD -j limit-257 - inet/filter/INPUT -j limit-257 - inet6/filter/INPUT -j limit-257 - inet/filter/OUTPUT -j limit-257 - inet6/filter/OUTPUT -j limit-257 - inet/filter/limit-257 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-257 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 265 {"flow-limit":{"log":false,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-258 - inet6/filter/FORWARD -j limit-258 - inet/filter/INPUT -j limit-258 - inet6/filter/INPUT -j limit-258 - inet/filter/OUTPUT -j limit-258 - inet6/filter/OUTPUT -j limit-258 - inet/filter/limit-258 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-258 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 408 {"action":"pass","flow-limit":{"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-401 + inet6/filter/FORWARD -j limit-401 + inet/filter/INPUT -j limit-401 + inet6/filter/INPUT -j limit-401 + inet/filter/OUTPUT -j limit-401 + inet6/filter/OUTPUT -j limit-401 + inet/filter/limit-401 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-158 + inet6/filter/limit-401 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-158 + inet/filter/logdrop-158 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-158 -m limit --limit 1/second -j LOG + inet/filter/logdrop-158 -j DROP + inet6/filter/logdrop-158 -j DROP + +Filter 409 {"flow-limit":{"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-402 + inet6/filter/FORWARD -j limit-402 + inet/filter/INPUT -j limit-402 + inet6/filter/INPUT -j limit-402 + inet/filter/OUTPUT -j limit-402 + inet6/filter/OUTPUT -j limit-402 + inet/filter/limit-402 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-159 + inet6/filter/limit-402 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-159 + inet/filter/logdrop-159 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-159 -m limit --limit 1/second -j LOG + inet/filter/logdrop-159 -j DROP + inet6/filter/logdrop-159 -j DROP inet/filter/FORWARD -j logaccept-final-7 inet6/filter/FORWARD -j logaccept-final-7 inet/filter/INPUT -j logaccept-final-7 @@ -3561,31 +5287,37 @@ Filter 265 {"flow-limit":{"log":false,"name":"A"},"log": inet/filter/logaccept-final-7 -j ACCEPT inet6/filter/logaccept-final-7 -j ACCEPT -Filter 266 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-259 - inet6/filter/FORWARD -j limit-259 - inet/filter/INPUT -j limit-259 - inet6/filter/INPUT -j limit-259 - inet/filter/OUTPUT -j limit-259 - inet6/filter/OUTPUT -j limit-259 - inet/filter/limit-259 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-259 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-259 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-259 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 267 {"flow-limit":{"log":false,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-260 - inet6/filter/FORWARD -j limit-260 - inet/filter/INPUT -j limit-260 - inet6/filter/INPUT -j limit-260 - inet/filter/OUTPUT -j limit-260 - inet6/filter/OUTPUT -j limit-260 - inet/filter/limit-260 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-260 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-260 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-260 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 410 {"action":"pass","flow-limit":{"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-403 + inet6/filter/FORWARD -j limit-403 + inet/filter/INPUT -j limit-403 + inet6/filter/INPUT -j limit-403 + inet/filter/OUTPUT -j limit-403 + inet6/filter/OUTPUT -j limit-403 + inet/filter/limit-403 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-160 + inet6/filter/limit-403 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-160 + inet/filter/logdrop-160 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-160 -m limit --limit 1/second -j LOG + inet/filter/logdrop-160 -j DROP + inet6/filter/logdrop-160 -j DROP + inet/filter/limit-403 -m limit --limit 1/second -j LOG + inet6/filter/limit-403 -m limit --limit 1/second -j LOG + +Filter 411 {"flow-limit":{"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-404 + inet6/filter/FORWARD -j limit-404 + inet/filter/INPUT -j limit-404 + inet6/filter/INPUT -j limit-404 + inet/filter/OUTPUT -j limit-404 + inet6/filter/OUTPUT -j limit-404 + inet/filter/limit-404 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-161 + inet6/filter/limit-404 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-161 + inet/filter/logdrop-161 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-161 -m limit --limit 1/second -j LOG + inet/filter/logdrop-161 -j DROP + inet6/filter/logdrop-161 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3593,29 +5325,37 @@ Filter 267 {"flow-limit":{"log":false,"name":"A"},"log": inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 268 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-261 - inet6/filter/FORWARD -j limit-261 - inet/filter/INPUT -j limit-261 - inet6/filter/INPUT -j limit-261 - inet/filter/OUTPUT -j limit-261 - inet6/filter/OUTPUT -j limit-261 - inet/filter/limit-261 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-261 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-261 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-261 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 269 {"flow-limit":{"log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-262 - inet6/filter/FORWARD -j limit-262 - inet/filter/INPUT -j limit-262 - inet6/filter/INPUT -j limit-262 - inet/filter/OUTPUT -j limit-262 - inet6/filter/OUTPUT -j limit-262 - inet/filter/limit-262 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-262 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +Filter 412 {"action":"pass","flow-limit":{"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-405 + inet6/filter/FORWARD -j limit-405 + inet/filter/INPUT -j limit-405 + inet6/filter/INPUT -j limit-405 + inet/filter/OUTPUT -j limit-405 + inet6/filter/OUTPUT -j limit-405 + inet/filter/limit-405 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-162 + inet6/filter/limit-405 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-162 + inet/filter/logdrop-162 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-162 -m limit --limit 1/second -j LOG + inet/filter/logdrop-162 -j DROP + inet6/filter/logdrop-162 -j DROP + +Filter 413 {"flow-limit":{"addr":"dest","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-406 + inet6/filter/FORWARD -j limit-406 + inet/filter/INPUT -j limit-406 + inet6/filter/INPUT -j limit-406 + inet/filter/OUTPUT -j limit-406 + inet6/filter/OUTPUT -j limit-406 + inet/filter/limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-163 + inet6/filter/limit-406 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-163 + inet/filter/logdrop-163 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-163 -m limit --limit 1/second -j LOG + inet/filter/logdrop-163 -j DROP + inet6/filter/logdrop-163 -j DROP + inet/filter/limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-406 -m recent --name user:C --rdest --mask fe00:: --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3623,27 +5363,39 @@ Filter 269 {"flow-limit":{"log":false,"name":"A","update inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 270 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-263 - inet6/filter/FORWARD -j limit-263 - inet/filter/INPUT -j limit-263 - inet6/filter/INPUT -j limit-263 - inet/filter/OUTPUT -j limit-263 - inet6/filter/OUTPUT -j limit-263 - inet/filter/limit-263 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-263 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 271 {"flow-limit":{"log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-264 - inet6/filter/FORWARD -j limit-264 - inet/filter/INPUT -j limit-264 - inet6/filter/INPUT -j limit-264 - inet/filter/OUTPUT -j limit-264 - inet6/filter/OUTPUT -j limit-264 - inet/filter/limit-264 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-264 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +Filter 414 {"action":"pass","flow-limit":{"addr":"dest","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-407 + inet6/filter/FORWARD -j limit-407 + inet/filter/INPUT -j limit-407 + inet6/filter/INPUT -j limit-407 + inet/filter/OUTPUT -j limit-407 + inet6/filter/OUTPUT -j limit-407 + inet/filter/limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-164 + inet6/filter/limit-407 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-164 + inet/filter/logdrop-164 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-164 -m limit --limit 1/second -j LOG + inet/filter/logdrop-164 -j DROP + inet6/filter/logdrop-164 -j DROP + inet/filter/limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-407 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 415 {"flow-limit":{"addr":"dest","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-408 + inet6/filter/FORWARD -j limit-408 + inet/filter/INPUT -j limit-408 + inet6/filter/INPUT -j limit-408 + inet/filter/OUTPUT -j limit-408 + inet6/filter/OUTPUT -j limit-408 + inet/filter/limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-165 + inet6/filter/limit-408 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-165 + inet/filter/logdrop-165 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-165 -m limit --limit 1/second -j LOG + inet/filter/logdrop-165 -j DROP + inet6/filter/logdrop-165 -j DROP + inet/filter/limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-408 -m recent --name user:C --rdest --mask fe00:: --set inet/filter/FORWARD -j logaccept-final-8 inet6/filter/FORWARD -j logaccept-final-8 inet/filter/INPUT -j logaccept-final-8 @@ -3655,29 +5407,39 @@ Filter 271 {"flow-limit":{"log":false,"name":"A","update inet/filter/logaccept-final-8 -j ACCEPT inet6/filter/logaccept-final-8 -j ACCEPT -Filter 272 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-265 - inet6/filter/FORWARD -j limit-265 - inet/filter/INPUT -j limit-265 - inet6/filter/INPUT -j limit-265 - inet/filter/OUTPUT -j limit-265 - inet6/filter/OUTPUT -j limit-265 - inet/filter/limit-265 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-265 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-265 -m limit --limit 1/second -j LOG - inet6/filter/limit-265 -m limit --limit 1/second -j LOG - -Filter 273 {"flow-limit":{"log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-266 - inet6/filter/FORWARD -j limit-266 - inet/filter/INPUT -j limit-266 - inet6/filter/INPUT -j limit-266 - inet/filter/OUTPUT -j limit-266 - inet6/filter/OUTPUT -j limit-266 - inet/filter/limit-266 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-266 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +Filter 416 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-409 + inet6/filter/FORWARD -j limit-409 + inet/filter/INPUT -j limit-409 + inet6/filter/INPUT -j limit-409 + inet/filter/OUTPUT -j limit-409 + inet6/filter/OUTPUT -j limit-409 + inet/filter/limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-166 + inet6/filter/limit-409 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-166 + inet/filter/logdrop-166 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-166 -m limit --limit 1/second -j LOG + inet/filter/logdrop-166 -j DROP + inet6/filter/logdrop-166 -j DROP + inet/filter/limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-409 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 417 {"flow-limit":{"addr":"dest","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-410 + inet6/filter/FORWARD -j limit-410 + inet/filter/INPUT -j limit-410 + inet6/filter/INPUT -j limit-410 + inet/filter/OUTPUT -j limit-410 + inet6/filter/OUTPUT -j limit-410 + inet/filter/limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-167 + inet6/filter/limit-410 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-167 + inet/filter/logdrop-167 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-167 -m limit --limit 1/second -j LOG + inet/filter/logdrop-167 -j DROP + inet6/filter/logdrop-167 -j DROP + inet/filter/limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-410 -m recent --name user:C --rdest --mask fe00:: --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3685,29 +5447,37 @@ Filter 273 {"flow-limit":{"log":false,"name":"A","update inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 274 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-267 - inet6/filter/FORWARD -j limit-267 - inet/filter/INPUT -j limit-267 - inet6/filter/INPUT -j limit-267 - inet/filter/OUTPUT -j limit-267 - inet6/filter/OUTPUT -j limit-267 - inet/filter/limit-267 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-267 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 275 {"flow-limit":{"addr":"dest","log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-268 - inet6/filter/FORWARD -j limit-268 - inet/filter/INPUT -j limit-268 - inet6/filter/INPUT -j limit-268 - inet/filter/OUTPUT -j limit-268 - inet6/filter/OUTPUT -j limit-268 - inet/filter/limit-268 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-268 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 418 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-411 + inet6/filter/FORWARD -j limit-411 + inet/filter/INPUT -j limit-411 + inet6/filter/INPUT -j limit-411 + inet/filter/OUTPUT -j limit-411 + inet6/filter/OUTPUT -j limit-411 + inet/filter/limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-168 + inet6/filter/limit-411 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-168 + inet/filter/logdrop-168 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-168 -m limit --limit 1/second -j LOG + inet/filter/logdrop-168 -j DROP + inet6/filter/logdrop-168 -j DROP + inet/filter/limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-411 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 419 {"flow-limit":{"addr":"dest","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-412 + inet6/filter/FORWARD -j limit-412 + inet/filter/INPUT -j limit-412 + inet6/filter/INPUT -j limit-412 + inet/filter/OUTPUT -j limit-412 + inet6/filter/OUTPUT -j limit-412 + inet/filter/limit-412 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-169 + inet6/filter/limit-412 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-169 + inet/filter/logdrop-169 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-169 -m limit --limit 1/second -j LOG + inet/filter/logdrop-169 -j DROP + inet6/filter/logdrop-169 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3715,31 +5485,35 @@ Filter 275 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 276 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-269 - inet6/filter/FORWARD -j limit-269 - inet/filter/INPUT -j limit-269 - inet6/filter/INPUT -j limit-269 - inet/filter/OUTPUT -j limit-269 - inet6/filter/OUTPUT -j limit-269 - inet/filter/limit-269 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-269 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 277 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-270 - inet6/filter/FORWARD -j limit-270 - inet/filter/INPUT -j limit-270 - inet6/filter/INPUT -j limit-270 - inet/filter/OUTPUT -j limit-270 - inet6/filter/OUTPUT -j limit-270 - inet/filter/limit-270 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-270 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 420 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-413 + inet6/filter/FORWARD -j limit-413 + inet/filter/INPUT -j limit-413 + inet6/filter/INPUT -j limit-413 + inet/filter/OUTPUT -j limit-413 + inet6/filter/OUTPUT -j limit-413 + inet/filter/limit-413 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-170 + inet6/filter/limit-413 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-170 + inet/filter/logdrop-170 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-170 -m limit --limit 1/second -j LOG + inet/filter/logdrop-170 -j DROP + inet6/filter/logdrop-170 -j DROP + +Filter 421 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-414 + inet6/filter/FORWARD -j limit-414 + inet/filter/INPUT -j limit-414 + inet6/filter/INPUT -j limit-414 + inet/filter/OUTPUT -j limit-414 + inet6/filter/OUTPUT -j limit-414 + inet/filter/limit-414 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-171 + inet6/filter/limit-414 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-171 + inet/filter/logdrop-171 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-171 -m limit --limit 1/second -j LOG + inet/filter/logdrop-171 -j DROP + inet6/filter/logdrop-171 -j DROP inet/filter/FORWARD -j logaccept-final-9 inet6/filter/FORWARD -j logaccept-final-9 inet/filter/INPUT -j logaccept-final-9 @@ -3751,31 +5525,37 @@ Filter 277 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/logaccept-final-9 -j ACCEPT inet6/filter/logaccept-final-9 -j ACCEPT -Filter 278 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-271 - inet6/filter/FORWARD -j limit-271 - inet/filter/INPUT -j limit-271 - inet6/filter/INPUT -j limit-271 - inet/filter/OUTPUT -j limit-271 - inet6/filter/OUTPUT -j limit-271 - inet/filter/limit-271 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-271 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-271 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-271 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 279 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-272 - inet6/filter/FORWARD -j limit-272 - inet/filter/INPUT -j limit-272 - inet6/filter/INPUT -j limit-272 - inet/filter/OUTPUT -j limit-272 - inet6/filter/OUTPUT -j limit-272 - inet/filter/limit-272 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-272 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-272 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-272 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 422 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-415 + inet6/filter/FORWARD -j limit-415 + inet/filter/INPUT -j limit-415 + inet6/filter/INPUT -j limit-415 + inet/filter/OUTPUT -j limit-415 + inet6/filter/OUTPUT -j limit-415 + inet/filter/limit-415 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-172 + inet6/filter/limit-415 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-172 + inet/filter/logdrop-172 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-172 -m limit --limit 1/second -j LOG + inet/filter/logdrop-172 -j DROP + inet6/filter/logdrop-172 -j DROP + inet/filter/limit-415 -m limit --limit 1/second -j LOG + inet6/filter/limit-415 -m limit --limit 1/second -j LOG + +Filter 423 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-416 + inet6/filter/FORWARD -j limit-416 + inet/filter/INPUT -j limit-416 + inet6/filter/INPUT -j limit-416 + inet/filter/OUTPUT -j limit-416 + inet6/filter/OUTPUT -j limit-416 + inet/filter/limit-416 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-173 + inet6/filter/limit-416 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-173 + inet/filter/logdrop-173 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-173 -m limit --limit 1/second -j LOG + inet/filter/logdrop-173 -j DROP + inet6/filter/logdrop-173 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3783,29 +5563,33 @@ Filter 279 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 280 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-273 - inet6/filter/FORWARD -j limit-273 - inet/filter/INPUT -j limit-273 - inet6/filter/INPUT -j limit-273 - inet/filter/OUTPUT -j limit-273 - inet6/filter/OUTPUT -j limit-273 - inet/filter/limit-273 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-273 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-273 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-273 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 281 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-274 - inet6/filter/FORWARD -j limit-274 - inet/filter/INPUT -j limit-274 - inet6/filter/INPUT -j limit-274 - inet/filter/OUTPUT -j limit-274 - inet6/filter/OUTPUT -j limit-274 - inet/filter/limit-274 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-274 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +Filter 424 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-417 + inet6/filter/FORWARD -j limit-417 + inet/filter/INPUT -j limit-417 + inet6/filter/INPUT -j limit-417 + inet/filter/OUTPUT -j limit-417 + inet6/filter/OUTPUT -j limit-417 + inet/filter/limit-417 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-174 + inet6/filter/limit-417 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-174 + inet/filter/logdrop-174 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-174 -m limit --limit 1/second -j LOG + inet/filter/logdrop-174 -j DROP + inet6/filter/logdrop-174 -j DROP + +Filter 425 {"flow-limit":{"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-418 + inet6/filter/FORWARD -j limit-418 + inet/filter/INPUT -j limit-418 + inet6/filter/INPUT -j limit-418 + inet/filter/OUTPUT -j limit-418 + inet6/filter/OUTPUT -j limit-418 + inet/filter/limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3813,27 +5597,31 @@ Filter 281 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 282 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-275 - inet6/filter/FORWARD -j limit-275 - inet/filter/INPUT -j limit-275 - inet6/filter/INPUT -j limit-275 - inet/filter/OUTPUT -j limit-275 - inet6/filter/OUTPUT -j limit-275 - inet/filter/limit-275 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-275 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 283 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-276 - inet6/filter/FORWARD -j limit-276 - inet/filter/INPUT -j limit-276 - inet6/filter/INPUT -j limit-276 - inet/filter/OUTPUT -j limit-276 - inet6/filter/OUTPUT -j limit-276 - inet/filter/limit-276 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-276 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +Filter 426 {"action":"pass","flow-limit":{"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-419 + inet6/filter/FORWARD -j limit-419 + inet/filter/INPUT -j limit-419 + inet6/filter/INPUT -j limit-419 + inet/filter/OUTPUT -j limit-419 + inet6/filter/OUTPUT -j limit-419 + inet/filter/limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 427 {"flow-limit":{"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-420 + inet6/filter/FORWARD -j limit-420 + inet/filter/INPUT -j limit-420 + inet6/filter/INPUT -j limit-420 + inet/filter/OUTPUT -j limit-420 + inet6/filter/OUTPUT -j limit-420 + inet/filter/limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j logaccept-final-10 inet6/filter/FORWARD -j logaccept-final-10 inet/filter/INPUT -j logaccept-final-10 @@ -3845,29 +5633,31 @@ Filter 283 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/logaccept-final-10 -j ACCEPT inet6/filter/logaccept-final-10 -j ACCEPT -Filter 284 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-277 - inet6/filter/FORWARD -j limit-277 - inet/filter/INPUT -j limit-277 - inet6/filter/INPUT -j limit-277 - inet/filter/OUTPUT -j limit-277 - inet6/filter/OUTPUT -j limit-277 - inet/filter/limit-277 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-277 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-277 -m limit --limit 1/second -j LOG - inet6/filter/limit-277 -m limit --limit 1/second -j LOG - -Filter 285 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-278 - inet6/filter/FORWARD -j limit-278 - inet/filter/INPUT -j limit-278 - inet6/filter/INPUT -j limit-278 - inet/filter/OUTPUT -j limit-278 - inet6/filter/OUTPUT -j limit-278 - inet/filter/limit-278 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-278 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +Filter 428 {"action":"pass","flow-limit":{"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-421 + inet6/filter/FORWARD -j limit-421 + inet/filter/INPUT -j limit-421 + inet6/filter/INPUT -j limit-421 + inet/filter/OUTPUT -j limit-421 + inet6/filter/OUTPUT -j limit-421 + inet/filter/limit-421 -m recent --name limit-421 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-421 -m recent --name limit-421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-421 -m recent --name limit-421 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-421 -m recent --name limit-421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 429 {"flow-limit":{"log":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-422 + inet6/filter/FORWARD -j limit-422 + inet/filter/INPUT -j limit-422 + inet6/filter/INPUT -j limit-422 + inet/filter/OUTPUT -j limit-422 + inet6/filter/OUTPUT -j limit-422 + inet/filter/limit-422 -m recent --name limit-422 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-422 -m recent --name limit-422 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-422 -m recent --name limit-422 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-422 -m recent --name limit-422 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3875,29 +5665,31 @@ Filter 285 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 286 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-279 - inet6/filter/FORWARD -j limit-279 - inet/filter/INPUT -j limit-279 - inet6/filter/INPUT -j limit-279 - inet/filter/OUTPUT -j limit-279 - inet6/filter/OUTPUT -j limit-279 - inet/filter/limit-279 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-279 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 287 {"flow-limit":{"log":"none"}} -(filter-limit) - inet/filter/FORWARD -j limit-280 - inet6/filter/FORWARD -j limit-280 - inet/filter/INPUT -j limit-280 - inet6/filter/INPUT -j limit-280 - inet/filter/OUTPUT -j limit-280 - inet6/filter/OUTPUT -j limit-280 - inet/filter/limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 430 {"action":"pass","flow-limit":{"log":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-423 + inet6/filter/FORWARD -j limit-423 + inet/filter/INPUT -j limit-423 + inet6/filter/INPUT -j limit-423 + inet/filter/OUTPUT -j limit-423 + inet6/filter/OUTPUT -j limit-423 + inet/filter/limit-423 -m recent --name limit-423 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-423 -m recent --name limit-423 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-423 -m recent --name limit-423 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-423 -m recent --name limit-423 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 431 {"flow-limit":{"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-424 + inet6/filter/FORWARD -j limit-424 + inet/filter/INPUT -j limit-424 + inet6/filter/INPUT -j limit-424 + inet/filter/OUTPUT -j limit-424 + inet6/filter/OUTPUT -j limit-424 + inet/filter/limit-424 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-424 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3905,31 +5697,31 @@ Filter 287 {"flow-limit":{"log":"none"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 288 {"action":"pass","flow-limit":{"log":"none"}} +Filter 432 {"action":"pass","flow-limit":{"log":false,"name":"A"}} (filter-limit) - inet/filter/FORWARD -j limit-281 - inet6/filter/FORWARD -j limit-281 - inet/filter/INPUT -j limit-281 - inet6/filter/INPUT -j limit-281 - inet/filter/OUTPUT -j limit-281 - inet6/filter/OUTPUT -j limit-281 - inet/filter/limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j limit-425 + inet6/filter/FORWARD -j limit-425 + inet/filter/INPUT -j limit-425 + inet6/filter/INPUT -j limit-425 + inet/filter/OUTPUT -j limit-425 + inet6/filter/OUTPUT -j limit-425 + inet/filter/limit-425 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-425 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 289 {"flow-limit":{"log":"none"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-282 - inet6/filter/FORWARD -j limit-282 - inet/filter/INPUT -j limit-282 - inet6/filter/INPUT -j limit-282 - inet/filter/OUTPUT -j limit-282 - inet6/filter/OUTPUT -j limit-282 - inet/filter/limit-282 -m recent --name limit-282 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-282 -m recent --name limit-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-282 -m recent --name limit-282 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-282 -m recent --name limit-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 433 {"flow-limit":{"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-426 + inet6/filter/FORWARD -j limit-426 + inet/filter/INPUT -j limit-426 + inet6/filter/INPUT -j limit-426 + inet/filter/OUTPUT -j limit-426 + inet6/filter/OUTPUT -j limit-426 + inet/filter/limit-426 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-426 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j logaccept-final-11 inet6/filter/FORWARD -j logaccept-final-11 inet/filter/INPUT -j logaccept-final-11 @@ -3941,31 +5733,31 @@ Filter 289 {"flow-limit":{"log":"none"},"log":true} inet/filter/logaccept-final-11 -j ACCEPT inet6/filter/logaccept-final-11 -j ACCEPT -Filter 290 {"action":"pass","flow-limit":{"log":"none"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-283 - inet6/filter/FORWARD -j limit-283 - inet/filter/INPUT -j limit-283 - inet6/filter/INPUT -j limit-283 - inet/filter/OUTPUT -j limit-283 - inet6/filter/OUTPUT -j limit-283 - inet/filter/limit-283 -m recent --name limit-283 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-283 -m recent --name limit-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-283 -m recent --name limit-283 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-283 -m recent --name limit-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 291 {"flow-limit":{"log":"none"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-284 - inet6/filter/FORWARD -j limit-284 - inet/filter/INPUT -j limit-284 - inet6/filter/INPUT -j limit-284 - inet/filter/OUTPUT -j limit-284 - inet6/filter/OUTPUT -j limit-284 - inet/filter/limit-284 -m recent --name limit-284 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-284 -m recent --name limit-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-284 -m recent --name limit-284 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-284 -m recent --name limit-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 434 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-427 + inet6/filter/FORWARD -j limit-427 + inet/filter/INPUT -j limit-427 + inet6/filter/INPUT -j limit-427 + inet/filter/OUTPUT -j limit-427 + inet6/filter/OUTPUT -j limit-427 + inet/filter/limit-427 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-427 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 435 {"flow-limit":{"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-428 + inet6/filter/FORWARD -j limit-428 + inet/filter/INPUT -j limit-428 + inet6/filter/INPUT -j limit-428 + inet/filter/OUTPUT -j limit-428 + inet6/filter/OUTPUT -j limit-428 + inet/filter/limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3973,31 +5765,29 @@ Filter 291 {"flow-limit":{"log":"none"},"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 292 {"action":"pass","flow-limit":{"log":"none"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-285 - inet6/filter/FORWARD -j limit-285 - inet/filter/INPUT -j limit-285 - inet6/filter/INPUT -j limit-285 - inet/filter/OUTPUT -j limit-285 - inet6/filter/OUTPUT -j limit-285 - inet/filter/limit-285 -m recent --name limit-285 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-285 -m recent --name limit-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-285 -m recent --name limit-285 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-285 -m recent --name limit-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 293 {"flow-limit":{"log":"none","name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-286 - inet6/filter/FORWARD -j limit-286 - inet/filter/INPUT -j limit-286 - inet6/filter/INPUT -j limit-286 - inet/filter/OUTPUT -j limit-286 - inet6/filter/OUTPUT -j limit-286 - inet/filter/limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 436 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-429 + inet6/filter/FORWARD -j limit-429 + inet/filter/INPUT -j limit-429 + inet6/filter/INPUT -j limit-429 + inet/filter/OUTPUT -j limit-429 + inet6/filter/OUTPUT -j limit-429 + inet/filter/limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 437 {"flow-limit":{"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-430 + inet6/filter/FORWARD -j limit-430 + inet/filter/INPUT -j limit-430 + inet6/filter/INPUT -j limit-430 + inet/filter/OUTPUT -j limit-430 + inet6/filter/OUTPUT -j limit-430 + inet/filter/limit-430 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4005,31 +5795,27 @@ Filter 293 {"flow-limit":{"log":"none","name":"A"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 294 {"action":"pass","flow-limit":{"log":"none","name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-287 - inet6/filter/FORWARD -j limit-287 - inet/filter/INPUT -j limit-287 - inet6/filter/INPUT -j limit-287 - inet/filter/OUTPUT -j limit-287 - inet6/filter/OUTPUT -j limit-287 - inet/filter/limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 295 {"flow-limit":{"log":"none","name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-288 - inet6/filter/FORWARD -j limit-288 - inet/filter/INPUT -j limit-288 - inet6/filter/INPUT -j limit-288 - inet/filter/OUTPUT -j limit-288 - inet6/filter/OUTPUT -j limit-288 - inet/filter/limit-288 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-288 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-288 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-288 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 438 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-431 + inet6/filter/FORWARD -j limit-431 + inet/filter/INPUT -j limit-431 + inet6/filter/INPUT -j limit-431 + inet/filter/OUTPUT -j limit-431 + inet6/filter/OUTPUT -j limit-431 + inet/filter/limit-431 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-431 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 439 {"flow-limit":{"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-432 + inet6/filter/FORWARD -j limit-432 + inet/filter/INPUT -j limit-432 + inet6/filter/INPUT -j limit-432 + inet/filter/OUTPUT -j limit-432 + inet6/filter/OUTPUT -j limit-432 + inet/filter/limit-432 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-432 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j logaccept-final-12 inet6/filter/FORWARD -j logaccept-final-12 inet/filter/INPUT -j logaccept-final-12 @@ -4041,31 +5827,29 @@ Filter 295 {"flow-limit":{"log":"none","name":"A"},"log" inet/filter/logaccept-final-12 -j ACCEPT inet6/filter/logaccept-final-12 -j ACCEPT -Filter 296 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-289 - inet6/filter/FORWARD -j limit-289 - inet/filter/INPUT -j limit-289 - inet6/filter/INPUT -j limit-289 - inet/filter/OUTPUT -j limit-289 - inet6/filter/OUTPUT -j limit-289 - inet/filter/limit-289 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-289 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-289 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-289 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 297 {"flow-limit":{"log":"none","name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-290 - inet6/filter/FORWARD -j limit-290 - inet/filter/INPUT -j limit-290 - inet6/filter/INPUT -j limit-290 - inet/filter/OUTPUT -j limit-290 - inet6/filter/OUTPUT -j limit-290 - inet/filter/limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 440 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-433 + inet6/filter/FORWARD -j limit-433 + inet/filter/INPUT -j limit-433 + inet6/filter/INPUT -j limit-433 + inet/filter/OUTPUT -j limit-433 + inet6/filter/OUTPUT -j limit-433 + inet/filter/limit-433 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-433 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-433 -m limit --limit 1/second -j LOG + inet6/filter/limit-433 -m limit --limit 1/second -j LOG + +Filter 441 {"flow-limit":{"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-434 + inet6/filter/FORWARD -j limit-434 + inet/filter/INPUT -j limit-434 + inet6/filter/INPUT -j limit-434 + inet/filter/OUTPUT -j limit-434 + inet6/filter/OUTPUT -j limit-434 + inet/filter/limit-434 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-434 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4073,29 +5857,29 @@ Filter 297 {"flow-limit":{"log":"none","name":"A"},"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 298 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-291 - inet6/filter/FORWARD -j limit-291 - inet/filter/INPUT -j limit-291 - inet6/filter/INPUT -j limit-291 - inet/filter/OUTPUT -j limit-291 - inet6/filter/OUTPUT -j limit-291 - inet/filter/limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 299 {"flow-limit":{"log":"none","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-292 - inet6/filter/FORWARD -j limit-292 - inet/filter/INPUT -j limit-292 - inet6/filter/INPUT -j limit-292 - inet/filter/OUTPUT -j limit-292 - inet6/filter/OUTPUT -j limit-292 - inet/filter/limit-292 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +Filter 442 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-435 + inet6/filter/FORWARD -j limit-435 + inet/filter/INPUT -j limit-435 + inet6/filter/INPUT -j limit-435 + inet/filter/OUTPUT -j limit-435 + inet6/filter/OUTPUT -j limit-435 + inet/filter/limit-435 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-435 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 443 {"flow-limit":{"addr":"dest","log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-436 + inet6/filter/FORWARD -j limit-436 + inet/filter/INPUT -j limit-436 + inet6/filter/INPUT -j limit-436 + inet/filter/OUTPUT -j limit-436 + inet6/filter/OUTPUT -j limit-436 + inet/filter/limit-436 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-436 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4103,27 +5887,31 @@ Filter 299 {"flow-limit":{"log":"none","name":"A","updat inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 300 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-293 - inet6/filter/FORWARD -j limit-293 - inet/filter/INPUT -j limit-293 - inet6/filter/INPUT -j limit-293 - inet/filter/OUTPUT -j limit-293 - inet6/filter/OUTPUT -j limit-293 - inet/filter/limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 301 {"flow-limit":{"log":"none","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-294 - inet6/filter/FORWARD -j limit-294 - inet/filter/INPUT -j limit-294 - inet6/filter/INPUT -j limit-294 - inet/filter/OUTPUT -j limit-294 - inet6/filter/OUTPUT -j limit-294 - inet/filter/limit-294 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +Filter 444 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-437 + inet6/filter/FORWARD -j limit-437 + inet/filter/INPUT -j limit-437 + inet6/filter/INPUT -j limit-437 + inet/filter/OUTPUT -j limit-437 + inet6/filter/OUTPUT -j limit-437 + inet/filter/limit-437 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-437 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 445 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-438 + inet6/filter/FORWARD -j limit-438 + inet/filter/INPUT -j limit-438 + inet6/filter/INPUT -j limit-438 + inet/filter/OUTPUT -j limit-438 + inet6/filter/OUTPUT -j limit-438 + inet/filter/limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j logaccept-final-13 inet6/filter/FORWARD -j logaccept-final-13 inet/filter/INPUT -j logaccept-final-13 @@ -4135,29 +5923,31 @@ Filter 301 {"flow-limit":{"log":"none","name":"A","updat inet/filter/logaccept-final-13 -j ACCEPT inet6/filter/logaccept-final-13 -j ACCEPT -Filter 302 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-295 - inet6/filter/FORWARD -j limit-295 - inet/filter/INPUT -j limit-295 - inet6/filter/INPUT -j limit-295 - inet/filter/OUTPUT -j limit-295 - inet6/filter/OUTPUT -j limit-295 - inet/filter/limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-295 -m limit --limit 1/second -j LOG - inet6/filter/limit-295 -m limit --limit 1/second -j LOG - -Filter 303 {"flow-limit":{"log":"none","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-296 - inet6/filter/FORWARD -j limit-296 - inet/filter/INPUT -j limit-296 - inet6/filter/INPUT -j limit-296 - inet/filter/OUTPUT -j limit-296 - inet6/filter/OUTPUT -j limit-296 - inet/filter/limit-296 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +Filter 446 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-439 + inet6/filter/FORWARD -j limit-439 + inet/filter/INPUT -j limit-439 + inet6/filter/INPUT -j limit-439 + inet/filter/OUTPUT -j limit-439 + inet6/filter/OUTPUT -j limit-439 + inet/filter/limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 447 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-440 + inet6/filter/FORWARD -j limit-440 + inet/filter/INPUT -j limit-440 + inet6/filter/INPUT -j limit-440 + inet/filter/OUTPUT -j limit-440 + inet6/filter/OUTPUT -j limit-440 + inet/filter/limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4165,29 +5955,29 @@ Filter 303 {"flow-limit":{"log":"none","name":"A","updat inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 304 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-297 - inet6/filter/FORWARD -j limit-297 - inet/filter/INPUT -j limit-297 - inet6/filter/INPUT -j limit-297 - inet/filter/OUTPUT -j limit-297 - inet6/filter/OUTPUT -j limit-297 - inet/filter/limit-297 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 305 {"flow-limit":{"addr":"dest","log":"none","name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-298 - inet6/filter/FORWARD -j limit-298 - inet/filter/INPUT -j limit-298 - inet6/filter/INPUT -j limit-298 - inet/filter/OUTPUT -j limit-298 - inet6/filter/OUTPUT -j limit-298 - inet/filter/limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 448 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-441 + inet6/filter/FORWARD -j limit-441 + inet/filter/INPUT -j limit-441 + inet6/filter/INPUT -j limit-441 + inet/filter/OUTPUT -j limit-441 + inet6/filter/OUTPUT -j limit-441 + inet/filter/limit-441 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-441 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 449 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-442 + inet6/filter/FORWARD -j limit-442 + inet/filter/INPUT -j limit-442 + inet6/filter/INPUT -j limit-442 + inet/filter/OUTPUT -j limit-442 + inet6/filter/OUTPUT -j limit-442 + inet/filter/limit-442 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-442 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4195,31 +5985,27 @@ Filter 305 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 306 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-299 - inet6/filter/FORWARD -j limit-299 - inet/filter/INPUT -j limit-299 - inet6/filter/INPUT -j limit-299 - inet/filter/OUTPUT -j limit-299 - inet6/filter/OUTPUT -j limit-299 - inet/filter/limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 307 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-300 - inet6/filter/FORWARD -j limit-300 - inet/filter/INPUT -j limit-300 - inet6/filter/INPUT -j limit-300 - inet/filter/OUTPUT -j limit-300 - inet6/filter/OUTPUT -j limit-300 - inet/filter/limit-300 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-300 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 450 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-443 + inet6/filter/FORWARD -j limit-443 + inet/filter/INPUT -j limit-443 + inet6/filter/INPUT -j limit-443 + inet/filter/OUTPUT -j limit-443 + inet6/filter/OUTPUT -j limit-443 + inet/filter/limit-443 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-443 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 451 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-444 + inet6/filter/FORWARD -j limit-444 + inet/filter/INPUT -j limit-444 + inet6/filter/INPUT -j limit-444 + inet/filter/OUTPUT -j limit-444 + inet6/filter/OUTPUT -j limit-444 + inet/filter/limit-444 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-444 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j logaccept-final-14 inet6/filter/FORWARD -j logaccept-final-14 inet/filter/INPUT -j logaccept-final-14 @@ -4231,31 +6017,29 @@ Filter 307 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/logaccept-final-14 -j ACCEPT inet6/filter/logaccept-final-14 -j ACCEPT -Filter 308 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-301 - inet6/filter/FORWARD -j limit-301 - inet/filter/INPUT -j limit-301 - inet6/filter/INPUT -j limit-301 - inet/filter/OUTPUT -j limit-301 - inet6/filter/OUTPUT -j limit-301 - inet/filter/limit-301 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-301 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-301 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-301 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 309 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-302 - inet6/filter/FORWARD -j limit-302 - inet/filter/INPUT -j limit-302 - inet6/filter/INPUT -j limit-302 - inet/filter/OUTPUT -j limit-302 - inet6/filter/OUTPUT -j limit-302 - inet/filter/limit-302 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-302 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-302 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-302 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 452 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-445 + inet6/filter/FORWARD -j limit-445 + inet/filter/INPUT -j limit-445 + inet6/filter/INPUT -j limit-445 + inet/filter/OUTPUT -j limit-445 + inet6/filter/OUTPUT -j limit-445 + inet/filter/limit-445 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-445 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-445 -m limit --limit 1/second -j LOG + inet6/filter/limit-445 -m limit --limit 1/second -j LOG + +Filter 453 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-446 + inet6/filter/FORWARD -j limit-446 + inet/filter/INPUT -j limit-446 + inet6/filter/INPUT -j limit-446 + inet/filter/OUTPUT -j limit-446 + inet6/filter/OUTPUT -j limit-446 + inet/filter/limit-446 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-446 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4263,29 +6047,29 @@ Filter 309 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 310 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-303 - inet6/filter/FORWARD -j limit-303 - inet/filter/INPUT -j limit-303 - inet6/filter/INPUT -j limit-303 - inet/filter/OUTPUT -j limit-303 - inet6/filter/OUTPUT -j limit-303 - inet/filter/limit-303 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-303 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-303 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-303 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 311 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-304 - inet6/filter/FORWARD -j limit-304 - inet/filter/INPUT -j limit-304 - inet6/filter/INPUT -j limit-304 - inet/filter/OUTPUT -j limit-304 - inet6/filter/OUTPUT -j limit-304 - inet/filter/limit-304 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-304 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +Filter 454 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-447 + inet6/filter/FORWARD -j limit-447 + inet/filter/INPUT -j limit-447 + inet6/filter/INPUT -j limit-447 + inet/filter/OUTPUT -j limit-447 + inet6/filter/OUTPUT -j limit-447 + inet/filter/limit-447 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-447 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 455 {"flow-limit":{"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-448 + inet6/filter/FORWARD -j limit-448 + inet/filter/INPUT -j limit-448 + inet6/filter/INPUT -j limit-448 + inet/filter/OUTPUT -j limit-448 + inet6/filter/OUTPUT -j limit-448 + inet/filter/limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-448 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-448 -m recent --name user:C --rsource --mask fe00:: --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4293,27 +6077,31 @@ Filter 311 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 312 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-305 - inet6/filter/FORWARD -j limit-305 - inet/filter/INPUT -j limit-305 - inet6/filter/INPUT -j limit-305 - inet/filter/OUTPUT -j limit-305 - inet6/filter/OUTPUT -j limit-305 - inet/filter/limit-305 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-305 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 313 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-306 - inet6/filter/FORWARD -j limit-306 - inet/filter/INPUT -j limit-306 - inet6/filter/INPUT -j limit-306 - inet/filter/OUTPUT -j limit-306 - inet6/filter/OUTPUT -j limit-306 - inet/filter/limit-306 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-306 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +Filter 456 {"action":"pass","flow-limit":{"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-449 + inet6/filter/FORWARD -j limit-449 + inet/filter/INPUT -j limit-449 + inet6/filter/INPUT -j limit-449 + inet/filter/OUTPUT -j limit-449 + inet6/filter/OUTPUT -j limit-449 + inet/filter/limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-449 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-449 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 457 {"flow-limit":{"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-450 + inet6/filter/FORWARD -j limit-450 + inet/filter/INPUT -j limit-450 + inet6/filter/INPUT -j limit-450 + inet/filter/OUTPUT -j limit-450 + inet6/filter/OUTPUT -j limit-450 + inet/filter/limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-450 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-450 -m recent --name user:C --rsource --mask fe00:: --set inet/filter/FORWARD -j logaccept-final-15 inet6/filter/FORWARD -j logaccept-final-15 inet/filter/INPUT -j logaccept-final-15 @@ -4325,29 +6113,31 @@ Filter 313 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/logaccept-final-15 -j ACCEPT inet6/filter/logaccept-final-15 -j ACCEPT -Filter 314 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-307 - inet6/filter/FORWARD -j limit-307 - inet/filter/INPUT -j limit-307 - inet6/filter/INPUT -j limit-307 - inet/filter/OUTPUT -j limit-307 - inet6/filter/OUTPUT -j limit-307 - inet/filter/limit-307 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-307 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-307 -m limit --limit 1/second -j LOG - inet6/filter/limit-307 -m limit --limit 1/second -j LOG - -Filter 315 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-308 - inet6/filter/FORWARD -j limit-308 - inet/filter/INPUT -j limit-308 - inet6/filter/INPUT -j limit-308 - inet/filter/OUTPUT -j limit-308 - inet6/filter/OUTPUT -j limit-308 - inet/filter/limit-308 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-308 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +Filter 458 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-451 + inet6/filter/FORWARD -j limit-451 + inet/filter/INPUT -j limit-451 + inet6/filter/INPUT -j limit-451 + inet/filter/OUTPUT -j limit-451 + inet6/filter/OUTPUT -j limit-451 + inet/filter/limit-451 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-451 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-451 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-451 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 459 {"flow-limit":{"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-452 + inet6/filter/FORWARD -j limit-452 + inet/filter/INPUT -j limit-452 + inet6/filter/INPUT -j limit-452 + inet/filter/OUTPUT -j limit-452 + inet6/filter/OUTPUT -j limit-452 + inet/filter/limit-452 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-452 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-452 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-452 -m recent --name user:C --rsource --mask fe00:: --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4355,33 +6145,29 @@ Filter 315 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 316 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-309 - inet6/filter/FORWARD -j limit-309 - inet/filter/INPUT -j limit-309 - inet6/filter/INPUT -j limit-309 - inet/filter/OUTPUT -j limit-309 - inet6/filter/OUTPUT -j limit-309 - inet/filter/limit-309 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-309 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 317 {"flow-limit":{"interval":5}} -(filter-limit) - inet/filter/FORWARD -j limit-310 - inet6/filter/FORWARD -j limit-310 - inet/filter/INPUT -j limit-310 - inet6/filter/INPUT -j limit-310 - inet/filter/OUTPUT -j limit-310 - inet6/filter/OUTPUT -j limit-310 - inet/filter/limit-310 -m recent --name limit-310 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-103 - inet6/filter/limit-310 -m recent --name limit-310 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-103 - inet/filter/logdrop-103 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-103 -m limit --limit 1/second -j LOG - inet/filter/logdrop-103 -j DROP - inet6/filter/logdrop-103 -j DROP - inet/filter/limit-310 -m recent --name limit-310 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-310 -m recent --name limit-310 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 460 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-453 + inet6/filter/FORWARD -j limit-453 + inet/filter/INPUT -j limit-453 + inet6/filter/INPUT -j limit-453 + inet/filter/OUTPUT -j limit-453 + inet6/filter/OUTPUT -j limit-453 + inet/filter/limit-453 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-453 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-453 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-453 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 461 {"flow-limit":{"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-454 + inet6/filter/FORWARD -j limit-454 + inet/filter/INPUT -j limit-454 + inet6/filter/INPUT -j limit-454 + inet/filter/OUTPUT -j limit-454 + inet6/filter/OUTPUT -j limit-454 + inet/filter/limit-454 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-454 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4389,39 +6175,27 @@ Filter 317 {"flow-limit":{"interval":5}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 318 {"action":"pass","flow-limit":{"interval":5}} -(filter-limit) - inet/filter/FORWARD -j limit-311 - inet6/filter/FORWARD -j limit-311 - inet/filter/INPUT -j limit-311 - inet6/filter/INPUT -j limit-311 - inet/filter/OUTPUT -j limit-311 - inet6/filter/OUTPUT -j limit-311 - inet/filter/limit-311 -m recent --name limit-311 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-104 - inet6/filter/limit-311 -m recent --name limit-311 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-104 - inet/filter/logdrop-104 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-104 -m limit --limit 1/second -j LOG - inet/filter/logdrop-104 -j DROP - inet6/filter/logdrop-104 -j DROP - inet/filter/limit-311 -m recent --name limit-311 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-311 -m recent --name limit-311 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 319 {"flow-limit":{"interval":5},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-312 - inet6/filter/FORWARD -j limit-312 - inet/filter/INPUT -j limit-312 - inet6/filter/INPUT -j limit-312 - inet/filter/OUTPUT -j limit-312 - inet6/filter/OUTPUT -j limit-312 - inet/filter/limit-312 -m recent --name limit-312 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-105 - inet6/filter/limit-312 -m recent --name limit-312 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-105 - inet/filter/logdrop-105 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-105 -m limit --limit 1/second -j LOG - inet/filter/logdrop-105 -j DROP - inet6/filter/logdrop-105 -j DROP - inet/filter/limit-312 -m recent --name limit-312 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-312 -m recent --name limit-312 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 462 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-455 + inet6/filter/FORWARD -j limit-455 + inet/filter/INPUT -j limit-455 + inet6/filter/INPUT -j limit-455 + inet/filter/OUTPUT -j limit-455 + inet6/filter/OUTPUT -j limit-455 + inet/filter/limit-455 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-455 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 463 {"flow-limit":{"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-456 + inet6/filter/FORWARD -j limit-456 + inet/filter/INPUT -j limit-456 + inet6/filter/INPUT -j limit-456 + inet/filter/OUTPUT -j limit-456 + inet6/filter/OUTPUT -j limit-456 + inet/filter/limit-456 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-456 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j logaccept-final-16 inet6/filter/FORWARD -j logaccept-final-16 inet/filter/INPUT -j logaccept-final-16 @@ -4433,39 +6207,29 @@ Filter 319 {"flow-limit":{"interval":5},"log":true} inet/filter/logaccept-final-16 -j ACCEPT inet6/filter/logaccept-final-16 -j ACCEPT -Filter 320 {"action":"pass","flow-limit":{"interval":5},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-313 - inet6/filter/FORWARD -j limit-313 - inet/filter/INPUT -j limit-313 - inet6/filter/INPUT -j limit-313 - inet/filter/OUTPUT -j limit-313 - inet6/filter/OUTPUT -j limit-313 - inet/filter/limit-313 -m recent --name limit-313 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-106 - inet6/filter/limit-313 -m recent --name limit-313 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-106 - inet/filter/logdrop-106 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-106 -m limit --limit 1/second -j LOG - inet/filter/logdrop-106 -j DROP - inet6/filter/logdrop-106 -j DROP - inet/filter/limit-313 -m recent --name limit-313 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-313 -m recent --name limit-313 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 321 {"flow-limit":{"interval":5},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-314 - inet6/filter/FORWARD -j limit-314 - inet/filter/INPUT -j limit-314 - inet6/filter/INPUT -j limit-314 - inet/filter/OUTPUT -j limit-314 - inet6/filter/OUTPUT -j limit-314 - inet/filter/limit-314 -m recent --name limit-314 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-107 - inet6/filter/limit-314 -m recent --name limit-314 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-107 - inet/filter/logdrop-107 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-107 -m limit --limit 1/second -j LOG - inet/filter/logdrop-107 -j DROP - inet6/filter/logdrop-107 -j DROP - inet/filter/limit-314 -m recent --name limit-314 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-314 -m recent --name limit-314 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 464 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-457 + inet6/filter/FORWARD -j limit-457 + inet/filter/INPUT -j limit-457 + inet6/filter/INPUT -j limit-457 + inet/filter/OUTPUT -j limit-457 + inet6/filter/OUTPUT -j limit-457 + inet/filter/limit-457 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-457 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-457 -m limit --limit 1/second -j LOG + inet6/filter/limit-457 -m limit --limit 1/second -j LOG + +Filter 465 {"flow-limit":{"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-458 + inet6/filter/FORWARD -j limit-458 + inet/filter/INPUT -j limit-458 + inet6/filter/INPUT -j limit-458 + inet/filter/OUTPUT -j limit-458 + inet6/filter/OUTPUT -j limit-458 + inet/filter/limit-458 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-458 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4473,39 +6237,29 @@ Filter 321 {"flow-limit":{"interval":5},"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 322 {"action":"pass","flow-limit":{"interval":5},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-315 - inet6/filter/FORWARD -j limit-315 - inet/filter/INPUT -j limit-315 - inet6/filter/INPUT -j limit-315 - inet/filter/OUTPUT -j limit-315 - inet6/filter/OUTPUT -j limit-315 - inet/filter/limit-315 -m recent --name limit-315 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-108 - inet6/filter/limit-315 -m recent --name limit-315 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-108 - inet/filter/logdrop-108 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-108 -m limit --limit 1/second -j LOG - inet/filter/logdrop-108 -j DROP - inet6/filter/logdrop-108 -j DROP - inet/filter/limit-315 -m recent --name limit-315 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-315 -m recent --name limit-315 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 323 {"flow-limit":{"interval":5,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-316 - inet6/filter/FORWARD -j limit-316 - inet/filter/INPUT -j limit-316 - inet6/filter/INPUT -j limit-316 - inet/filter/OUTPUT -j limit-316 - inet6/filter/OUTPUT -j limit-316 - inet/filter/limit-316 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-109 - inet6/filter/limit-316 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-109 - inet/filter/logdrop-109 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-109 -m limit --limit 1/second -j LOG - inet/filter/logdrop-109 -j DROP - inet6/filter/logdrop-109 -j DROP - inet/filter/limit-316 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-316 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 466 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-459 + inet6/filter/FORWARD -j limit-459 + inet/filter/INPUT -j limit-459 + inet6/filter/INPUT -j limit-459 + inet/filter/OUTPUT -j limit-459 + inet6/filter/OUTPUT -j limit-459 + inet/filter/limit-459 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-459 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 467 {"flow-limit":{"addr":"dest","log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-460 + inet6/filter/FORWARD -j limit-460 + inet/filter/INPUT -j limit-460 + inet6/filter/INPUT -j limit-460 + inet/filter/OUTPUT -j limit-460 + inet6/filter/OUTPUT -j limit-460 + inet/filter/limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-460 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-460 -m recent --name user:C --rdest --mask fe00:: --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4513,39 +6267,31 @@ Filter 323 {"flow-limit":{"interval":5,"name":"A"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 324 {"action":"pass","flow-limit":{"interval":5,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-317 - inet6/filter/FORWARD -j limit-317 - inet/filter/INPUT -j limit-317 - inet6/filter/INPUT -j limit-317 - inet/filter/OUTPUT -j limit-317 - inet6/filter/OUTPUT -j limit-317 - inet/filter/limit-317 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-110 - inet6/filter/limit-317 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-110 - inet/filter/logdrop-110 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-110 -m limit --limit 1/second -j LOG - inet/filter/logdrop-110 -j DROP - inet6/filter/logdrop-110 -j DROP - inet/filter/limit-317 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-317 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 325 {"flow-limit":{"interval":5,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-318 - inet6/filter/FORWARD -j limit-318 - inet/filter/INPUT -j limit-318 - inet6/filter/INPUT -j limit-318 - inet/filter/OUTPUT -j limit-318 - inet6/filter/OUTPUT -j limit-318 - inet/filter/limit-318 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-111 - inet6/filter/limit-318 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-111 - inet/filter/logdrop-111 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-111 -m limit --limit 1/second -j LOG - inet/filter/logdrop-111 -j DROP - inet6/filter/logdrop-111 -j DROP - inet/filter/limit-318 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-318 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 468 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-461 + inet6/filter/FORWARD -j limit-461 + inet/filter/INPUT -j limit-461 + inet6/filter/INPUT -j limit-461 + inet/filter/OUTPUT -j limit-461 + inet6/filter/OUTPUT -j limit-461 + inet/filter/limit-461 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-461 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-461 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-461 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 469 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-462 + inet6/filter/FORWARD -j limit-462 + inet/filter/INPUT -j limit-462 + inet6/filter/INPUT -j limit-462 + inet/filter/OUTPUT -j limit-462 + inet6/filter/OUTPUT -j limit-462 + inet/filter/limit-462 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-462 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-462 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-462 -m recent --name user:C --rdest --mask fe00:: --set inet/filter/FORWARD -j logaccept-final-17 inet6/filter/FORWARD -j logaccept-final-17 inet/filter/INPUT -j logaccept-final-17 @@ -4557,39 +6303,31 @@ Filter 325 {"flow-limit":{"interval":5,"name":"A"},"log" inet/filter/logaccept-final-17 -j ACCEPT inet6/filter/logaccept-final-17 -j ACCEPT -Filter 326 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-319 - inet6/filter/FORWARD -j limit-319 - inet/filter/INPUT -j limit-319 - inet6/filter/INPUT -j limit-319 - inet/filter/OUTPUT -j limit-319 - inet6/filter/OUTPUT -j limit-319 - inet/filter/limit-319 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-112 - inet6/filter/limit-319 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-112 - inet/filter/logdrop-112 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-112 -m limit --limit 1/second -j LOG - inet/filter/logdrop-112 -j DROP - inet6/filter/logdrop-112 -j DROP - inet/filter/limit-319 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-319 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 327 {"flow-limit":{"interval":5,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-320 - inet6/filter/FORWARD -j limit-320 - inet/filter/INPUT -j limit-320 - inet6/filter/INPUT -j limit-320 - inet/filter/OUTPUT -j limit-320 - inet6/filter/OUTPUT -j limit-320 - inet/filter/limit-320 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-113 - inet6/filter/limit-320 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-113 - inet/filter/logdrop-113 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-113 -m limit --limit 1/second -j LOG - inet/filter/logdrop-113 -j DROP - inet6/filter/logdrop-113 -j DROP - inet/filter/limit-320 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-320 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 470 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-463 + inet6/filter/FORWARD -j limit-463 + inet/filter/INPUT -j limit-463 + inet6/filter/INPUT -j limit-463 + inet/filter/OUTPUT -j limit-463 + inet6/filter/OUTPUT -j limit-463 + inet/filter/limit-463 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-463 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-463 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 471 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-464 + inet6/filter/FORWARD -j limit-464 + inet/filter/INPUT -j limit-464 + inet6/filter/INPUT -j limit-464 + inet/filter/OUTPUT -j limit-464 + inet6/filter/OUTPUT -j limit-464 + inet/filter/limit-464 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-464 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-464 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-464 -m recent --name user:C --rdest --mask fe00:: --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4597,37 +6335,29 @@ Filter 327 {"flow-limit":{"interval":5,"name":"A"},"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 328 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-321 - inet6/filter/FORWARD -j limit-321 - inet/filter/INPUT -j limit-321 - inet6/filter/INPUT -j limit-321 - inet/filter/OUTPUT -j limit-321 - inet6/filter/OUTPUT -j limit-321 - inet/filter/limit-321 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-114 - inet6/filter/limit-321 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-114 - inet/filter/logdrop-114 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-114 -m limit --limit 1/second -j LOG - inet/filter/logdrop-114 -j DROP - inet6/filter/logdrop-114 -j DROP - inet/filter/limit-321 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-321 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 329 {"flow-limit":{"interval":5,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-322 - inet6/filter/FORWARD -j limit-322 - inet/filter/INPUT -j limit-322 - inet6/filter/INPUT -j limit-322 - inet/filter/OUTPUT -j limit-322 - inet6/filter/OUTPUT -j limit-322 - inet/filter/limit-322 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-115 - inet6/filter/limit-322 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-115 - inet/filter/logdrop-115 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-115 -m limit --limit 1/second -j LOG - inet/filter/logdrop-115 -j DROP - inet6/filter/logdrop-115 -j DROP +Filter 472 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-465 + inet6/filter/FORWARD -j limit-465 + inet/filter/INPUT -j limit-465 + inet6/filter/INPUT -j limit-465 + inet/filter/OUTPUT -j limit-465 + inet6/filter/OUTPUT -j limit-465 + inet/filter/limit-465 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-465 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-465 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-465 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 473 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-466 + inet6/filter/FORWARD -j limit-466 + inet/filter/INPUT -j limit-466 + inet6/filter/INPUT -j limit-466 + inet/filter/OUTPUT -j limit-466 + inet6/filter/OUTPUT -j limit-466 + inet/filter/limit-466 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-466 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4635,35 +6365,27 @@ Filter 329 {"flow-limit":{"interval":5,"name":"A","updat inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 330 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-323 - inet6/filter/FORWARD -j limit-323 - inet/filter/INPUT -j limit-323 - inet6/filter/INPUT -j limit-323 - inet/filter/OUTPUT -j limit-323 - inet6/filter/OUTPUT -j limit-323 - inet/filter/limit-323 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-116 - inet6/filter/limit-323 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-116 - inet/filter/logdrop-116 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-116 -m limit --limit 1/second -j LOG - inet/filter/logdrop-116 -j DROP - inet6/filter/logdrop-116 -j DROP - -Filter 331 {"flow-limit":{"interval":5,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-324 - inet6/filter/FORWARD -j limit-324 - inet/filter/INPUT -j limit-324 - inet6/filter/INPUT -j limit-324 - inet/filter/OUTPUT -j limit-324 - inet6/filter/OUTPUT -j limit-324 - inet/filter/limit-324 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-117 - inet6/filter/limit-324 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-117 - inet/filter/logdrop-117 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-117 -m limit --limit 1/second -j LOG - inet/filter/logdrop-117 -j DROP - inet6/filter/logdrop-117 -j DROP +Filter 474 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-467 + inet6/filter/FORWARD -j limit-467 + inet/filter/INPUT -j limit-467 + inet6/filter/INPUT -j limit-467 + inet/filter/OUTPUT -j limit-467 + inet6/filter/OUTPUT -j limit-467 + inet/filter/limit-467 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-467 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 475 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-468 + inet6/filter/FORWARD -j limit-468 + inet/filter/INPUT -j limit-468 + inet6/filter/INPUT -j limit-468 + inet/filter/OUTPUT -j limit-468 + inet6/filter/OUTPUT -j limit-468 + inet/filter/limit-468 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-468 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j logaccept-final-18 inet6/filter/FORWARD -j logaccept-final-18 inet/filter/INPUT -j logaccept-final-18 @@ -4675,37 +6397,29 @@ Filter 331 {"flow-limit":{"interval":5,"name":"A","updat inet/filter/logaccept-final-18 -j ACCEPT inet6/filter/logaccept-final-18 -j ACCEPT -Filter 332 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-325 - inet6/filter/FORWARD -j limit-325 - inet/filter/INPUT -j limit-325 - inet6/filter/INPUT -j limit-325 - inet/filter/OUTPUT -j limit-325 - inet6/filter/OUTPUT -j limit-325 - inet/filter/limit-325 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-118 - inet6/filter/limit-325 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-118 - inet/filter/logdrop-118 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-118 -m limit --limit 1/second -j LOG - inet/filter/logdrop-118 -j DROP - inet6/filter/logdrop-118 -j DROP - inet/filter/limit-325 -m limit --limit 1/second -j LOG - inet6/filter/limit-325 -m limit --limit 1/second -j LOG - -Filter 333 {"flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-326 - inet6/filter/FORWARD -j limit-326 - inet/filter/INPUT -j limit-326 - inet6/filter/INPUT -j limit-326 - inet/filter/OUTPUT -j limit-326 - inet6/filter/OUTPUT -j limit-326 - inet/filter/limit-326 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-119 - inet6/filter/limit-326 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-119 - inet/filter/logdrop-119 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-119 -m limit --limit 1/second -j LOG - inet/filter/logdrop-119 -j DROP - inet6/filter/logdrop-119 -j DROP +Filter 476 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-469 + inet6/filter/FORWARD -j limit-469 + inet/filter/INPUT -j limit-469 + inet6/filter/INPUT -j limit-469 + inet/filter/OUTPUT -j limit-469 + inet6/filter/OUTPUT -j limit-469 + inet/filter/limit-469 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-469 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-469 -m limit --limit 1/second -j LOG + inet6/filter/limit-469 -m limit --limit 1/second -j LOG + +Filter 477 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-470 + inet6/filter/FORWARD -j limit-470 + inet/filter/INPUT -j limit-470 + inet6/filter/INPUT -j limit-470 + inet/filter/OUTPUT -j limit-470 + inet6/filter/OUTPUT -j limit-470 + inet/filter/limit-470 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-470 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4713,37 +6427,29 @@ Filter 333 {"flow-limit":{"interval":5,"name":"A","updat inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 334 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-327 - inet6/filter/FORWARD -j limit-327 - inet/filter/INPUT -j limit-327 - inet6/filter/INPUT -j limit-327 - inet/filter/OUTPUT -j limit-327 - inet6/filter/OUTPUT -j limit-327 - inet/filter/limit-327 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-120 - inet6/filter/limit-327 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-120 - inet/filter/logdrop-120 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-120 -m limit --limit 1/second -j LOG - inet/filter/logdrop-120 -j DROP - inet6/filter/logdrop-120 -j DROP - -Filter 335 {"flow-limit":{"addr":"dest","interval":5,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-328 - inet6/filter/FORWARD -j limit-328 - inet/filter/INPUT -j limit-328 - inet6/filter/INPUT -j limit-328 - inet/filter/OUTPUT -j limit-328 - inet6/filter/OUTPUT -j limit-328 - inet/filter/limit-328 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-121 - inet6/filter/limit-328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-121 - inet/filter/logdrop-121 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-121 -m limit --limit 1/second -j LOG - inet/filter/logdrop-121 -j DROP - inet6/filter/logdrop-121 -j DROP - inet/filter/limit-328 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 478 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-471 + inet6/filter/FORWARD -j limit-471 + inet/filter/INPUT -j limit-471 + inet6/filter/INPUT -j limit-471 + inet/filter/OUTPUT -j limit-471 + inet6/filter/OUTPUT -j limit-471 + inet/filter/limit-471 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-471 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 479 {"flow-limit":{"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-472 + inet6/filter/FORWARD -j limit-472 + inet/filter/INPUT -j limit-472 + inet6/filter/INPUT -j limit-472 + inet/filter/OUTPUT -j limit-472 + inet6/filter/OUTPUT -j limit-472 + inet/filter/limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4751,39 +6457,31 @@ Filter 335 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 336 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-329 - inet6/filter/FORWARD -j limit-329 - inet/filter/INPUT -j limit-329 - inet6/filter/INPUT -j limit-329 - inet/filter/OUTPUT -j limit-329 - inet6/filter/OUTPUT -j limit-329 - inet/filter/limit-329 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-122 - inet6/filter/limit-329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-122 - inet/filter/logdrop-122 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-122 -m limit --limit 1/second -j LOG - inet/filter/logdrop-122 -j DROP - inet6/filter/logdrop-122 -j DROP - inet/filter/limit-329 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 337 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-330 - inet6/filter/FORWARD -j limit-330 - inet/filter/INPUT -j limit-330 - inet6/filter/INPUT -j limit-330 - inet/filter/OUTPUT -j limit-330 - inet6/filter/OUTPUT -j limit-330 - inet/filter/limit-330 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-123 - inet6/filter/limit-330 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-123 - inet/filter/logdrop-123 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-123 -m limit --limit 1/second -j LOG - inet/filter/logdrop-123 -j DROP - inet6/filter/logdrop-123 -j DROP - inet/filter/limit-330 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-330 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 480 {"action":"pass","flow-limit":{"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-473 + inet6/filter/FORWARD -j limit-473 + inet/filter/INPUT -j limit-473 + inet6/filter/INPUT -j limit-473 + inet/filter/OUTPUT -j limit-473 + inet6/filter/OUTPUT -j limit-473 + inet/filter/limit-473 -m recent --name limit-473 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-473 -m recent --name limit-473 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-473 -m recent --name limit-473 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-473 -m recent --name limit-473 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 481 {"flow-limit":{"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-474 + inet6/filter/FORWARD -j limit-474 + inet/filter/INPUT -j limit-474 + inet6/filter/INPUT -j limit-474 + inet/filter/OUTPUT -j limit-474 + inet6/filter/OUTPUT -j limit-474 + inet/filter/limit-474 -m recent --name limit-474 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-474 -m recent --name limit-474 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-474 -m recent --name limit-474 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-474 -m recent --name limit-474 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j logaccept-final-19 inet6/filter/FORWARD -j logaccept-final-19 inet/filter/INPUT -j logaccept-final-19 @@ -4795,39 +6493,31 @@ Filter 337 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/logaccept-final-19 -j ACCEPT inet6/filter/logaccept-final-19 -j ACCEPT -Filter 338 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-331 - inet6/filter/FORWARD -j limit-331 - inet/filter/INPUT -j limit-331 - inet6/filter/INPUT -j limit-331 - inet/filter/OUTPUT -j limit-331 - inet6/filter/OUTPUT -j limit-331 - inet/filter/limit-331 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-124 - inet6/filter/limit-331 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-124 - inet/filter/logdrop-124 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-124 -m limit --limit 1/second -j LOG - inet/filter/logdrop-124 -j DROP - inet6/filter/logdrop-124 -j DROP - inet/filter/limit-331 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-331 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 339 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-332 - inet6/filter/FORWARD -j limit-332 - inet/filter/INPUT -j limit-332 - inet6/filter/INPUT -j limit-332 - inet/filter/OUTPUT -j limit-332 - inet6/filter/OUTPUT -j limit-332 - inet/filter/limit-332 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-125 - inet6/filter/limit-332 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-125 - inet/filter/logdrop-125 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-125 -m limit --limit 1/second -j LOG - inet/filter/logdrop-125 -j DROP - inet6/filter/logdrop-125 -j DROP - inet/filter/limit-332 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-332 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 482 {"action":"pass","flow-limit":{"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-475 + inet6/filter/FORWARD -j limit-475 + inet/filter/INPUT -j limit-475 + inet6/filter/INPUT -j limit-475 + inet/filter/OUTPUT -j limit-475 + inet6/filter/OUTPUT -j limit-475 + inet/filter/limit-475 -m recent --name limit-475 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-475 -m recent --name limit-475 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-475 -m recent --name limit-475 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-475 -m recent --name limit-475 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 483 {"flow-limit":{"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-476 + inet6/filter/FORWARD -j limit-476 + inet/filter/INPUT -j limit-476 + inet6/filter/INPUT -j limit-476 + inet/filter/OUTPUT -j limit-476 + inet6/filter/OUTPUT -j limit-476 + inet/filter/limit-476 -m recent --name limit-476 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-476 -m recent --name limit-476 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-476 -m recent --name limit-476 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-476 -m recent --name limit-476 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4835,37 +6525,31 @@ Filter 339 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 340 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-333 - inet6/filter/FORWARD -j limit-333 - inet/filter/INPUT -j limit-333 - inet6/filter/INPUT -j limit-333 - inet/filter/OUTPUT -j limit-333 - inet6/filter/OUTPUT -j limit-333 - inet/filter/limit-333 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-126 - inet6/filter/limit-333 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-126 - inet/filter/logdrop-126 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-126 -m limit --limit 1/second -j LOG - inet/filter/logdrop-126 -j DROP - inet6/filter/logdrop-126 -j DROP - inet/filter/limit-333 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-333 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 341 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-334 - inet6/filter/FORWARD -j limit-334 - inet/filter/INPUT -j limit-334 - inet6/filter/INPUT -j limit-334 - inet/filter/OUTPUT -j limit-334 - inet6/filter/OUTPUT -j limit-334 - inet/filter/limit-334 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-127 - inet6/filter/limit-334 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-127 - inet/filter/logdrop-127 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-127 -m limit --limit 1/second -j LOG - inet/filter/logdrop-127 -j DROP - inet6/filter/logdrop-127 -j DROP +Filter 484 {"action":"pass","flow-limit":{"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-477 + inet6/filter/FORWARD -j limit-477 + inet/filter/INPUT -j limit-477 + inet6/filter/INPUT -j limit-477 + inet/filter/OUTPUT -j limit-477 + inet6/filter/OUTPUT -j limit-477 + inet/filter/limit-477 -m recent --name limit-477 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-477 -m recent --name limit-477 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-477 -m recent --name limit-477 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-477 -m recent --name limit-477 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 485 {"flow-limit":{"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-478 + inet6/filter/FORWARD -j limit-478 + inet/filter/INPUT -j limit-478 + inet6/filter/INPUT -j limit-478 + inet/filter/OUTPUT -j limit-478 + inet6/filter/OUTPUT -j limit-478 + inet/filter/limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4873,35 +6557,31 @@ Filter 341 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 342 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-335 - inet6/filter/FORWARD -j limit-335 - inet/filter/INPUT -j limit-335 - inet6/filter/INPUT -j limit-335 - inet/filter/OUTPUT -j limit-335 - inet6/filter/OUTPUT -j limit-335 - inet/filter/limit-335 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-128 - inet6/filter/limit-335 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-128 - inet/filter/logdrop-128 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-128 -m limit --limit 1/second -j LOG - inet/filter/logdrop-128 -j DROP - inet6/filter/logdrop-128 -j DROP - -Filter 343 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-336 - inet6/filter/FORWARD -j limit-336 - inet/filter/INPUT -j limit-336 - inet6/filter/INPUT -j limit-336 - inet/filter/OUTPUT -j limit-336 - inet6/filter/OUTPUT -j limit-336 - inet/filter/limit-336 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-129 - inet6/filter/limit-336 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-129 - inet/filter/logdrop-129 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-129 -m limit --limit 1/second -j LOG - inet/filter/logdrop-129 -j DROP - inet6/filter/logdrop-129 -j DROP +Filter 486 {"action":"pass","flow-limit":{"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-479 + inet6/filter/FORWARD -j limit-479 + inet/filter/INPUT -j limit-479 + inet6/filter/INPUT -j limit-479 + inet/filter/OUTPUT -j limit-479 + inet6/filter/OUTPUT -j limit-479 + inet/filter/limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 487 {"flow-limit":{"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-480 + inet6/filter/FORWARD -j limit-480 + inet/filter/INPUT -j limit-480 + inet6/filter/INPUT -j limit-480 + inet/filter/OUTPUT -j limit-480 + inet6/filter/OUTPUT -j limit-480 + inet/filter/limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j logaccept-final-20 inet6/filter/FORWARD -j logaccept-final-20 inet/filter/INPUT -j logaccept-final-20 @@ -4913,37 +6593,31 @@ Filter 343 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/logaccept-final-20 -j ACCEPT inet6/filter/logaccept-final-20 -j ACCEPT -Filter 344 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-337 - inet6/filter/FORWARD -j limit-337 - inet/filter/INPUT -j limit-337 - inet6/filter/INPUT -j limit-337 - inet/filter/OUTPUT -j limit-337 - inet6/filter/OUTPUT -j limit-337 - inet/filter/limit-337 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-130 - inet6/filter/limit-337 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-130 - inet/filter/logdrop-130 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-130 -m limit --limit 1/second -j LOG - inet/filter/logdrop-130 -j DROP - inet6/filter/logdrop-130 -j DROP - inet/filter/limit-337 -m limit --limit 1/second -j LOG - inet6/filter/limit-337 -m limit --limit 1/second -j LOG - -Filter 345 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-338 - inet6/filter/FORWARD -j limit-338 - inet/filter/INPUT -j limit-338 - inet6/filter/INPUT -j limit-338 - inet/filter/OUTPUT -j limit-338 - inet6/filter/OUTPUT -j limit-338 - inet/filter/limit-338 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-131 - inet6/filter/limit-338 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-131 - inet/filter/logdrop-131 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-131 -m limit --limit 1/second -j LOG - inet/filter/logdrop-131 -j DROP - inet6/filter/logdrop-131 -j DROP +Filter 488 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-481 + inet6/filter/FORWARD -j limit-481 + inet/filter/INPUT -j limit-481 + inet6/filter/INPUT -j limit-481 + inet/filter/OUTPUT -j limit-481 + inet6/filter/OUTPUT -j limit-481 + inet/filter/limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 489 {"flow-limit":{"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-482 + inet6/filter/FORWARD -j limit-482 + inet/filter/INPUT -j limit-482 + inet6/filter/INPUT -j limit-482 + inet/filter/OUTPUT -j limit-482 + inet6/filter/OUTPUT -j limit-482 + inet/filter/limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4951,33 +6625,29 @@ Filter 345 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 346 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-339 - inet6/filter/FORWARD -j limit-339 - inet/filter/INPUT -j limit-339 - inet6/filter/INPUT -j limit-339 - inet/filter/OUTPUT -j limit-339 - inet6/filter/OUTPUT -j limit-339 - inet/filter/limit-339 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-132 - inet6/filter/limit-339 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-132 - inet/filter/logdrop-132 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-132 -m limit --limit 1/second -j LOG - inet/filter/logdrop-132 -j DROP - inet6/filter/logdrop-132 -j DROP - -Filter 347 {"flow-limit":{"interval":5,"log":false}} -(filter-limit) - inet/filter/FORWARD -j limit-340 - inet6/filter/FORWARD -j limit-340 - inet/filter/INPUT -j limit-340 - inet6/filter/INPUT -j limit-340 - inet/filter/OUTPUT -j limit-340 - inet6/filter/OUTPUT -j limit-340 - inet/filter/limit-340 -m recent --name limit-340 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-340 -m recent --name limit-340 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-340 -m recent --name limit-340 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-340 -m recent --name limit-340 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 490 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-483 + inet6/filter/FORWARD -j limit-483 + inet/filter/INPUT -j limit-483 + inet6/filter/INPUT -j limit-483 + inet/filter/OUTPUT -j limit-483 + inet6/filter/OUTPUT -j limit-483 + inet/filter/limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 491 {"flow-limit":{"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-484 + inet6/filter/FORWARD -j limit-484 + inet/filter/INPUT -j limit-484 + inet6/filter/INPUT -j limit-484 + inet/filter/OUTPUT -j limit-484 + inet6/filter/OUTPUT -j limit-484 + inet/filter/limit-484 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-484 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4985,31 +6655,27 @@ Filter 347 {"flow-limit":{"interval":5,"log":false}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 348 {"action":"pass","flow-limit":{"interval":5,"log":false}} -(filter-limit) - inet/filter/FORWARD -j limit-341 - inet6/filter/FORWARD -j limit-341 - inet/filter/INPUT -j limit-341 - inet6/filter/INPUT -j limit-341 - inet/filter/OUTPUT -j limit-341 - inet6/filter/OUTPUT -j limit-341 - inet/filter/limit-341 -m recent --name limit-341 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-341 -m recent --name limit-341 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-341 -m recent --name limit-341 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-341 -m recent --name limit-341 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 349 {"flow-limit":{"interval":5,"log":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-342 - inet6/filter/FORWARD -j limit-342 - inet/filter/INPUT -j limit-342 - inet6/filter/INPUT -j limit-342 - inet/filter/OUTPUT -j limit-342 - inet6/filter/OUTPUT -j limit-342 - inet/filter/limit-342 -m recent --name limit-342 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-342 -m recent --name limit-342 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-342 -m recent --name limit-342 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-342 -m recent --name limit-342 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 492 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-485 + inet6/filter/FORWARD -j limit-485 + inet/filter/INPUT -j limit-485 + inet6/filter/INPUT -j limit-485 + inet/filter/OUTPUT -j limit-485 + inet6/filter/OUTPUT -j limit-485 + inet/filter/limit-485 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-485 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 493 {"flow-limit":{"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-486 + inet6/filter/FORWARD -j limit-486 + inet/filter/INPUT -j limit-486 + inet6/filter/INPUT -j limit-486 + inet/filter/OUTPUT -j limit-486 + inet6/filter/OUTPUT -j limit-486 + inet/filter/limit-486 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-486 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j logaccept-final-21 inet6/filter/FORWARD -j logaccept-final-21 inet/filter/INPUT -j logaccept-final-21 @@ -5021,31 +6687,29 @@ Filter 349 {"flow-limit":{"interval":5,"log":false},"log inet/filter/logaccept-final-21 -j ACCEPT inet6/filter/logaccept-final-21 -j ACCEPT -Filter 350 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-343 - inet6/filter/FORWARD -j limit-343 - inet/filter/INPUT -j limit-343 - inet6/filter/INPUT -j limit-343 - inet/filter/OUTPUT -j limit-343 - inet6/filter/OUTPUT -j limit-343 - inet/filter/limit-343 -m recent --name limit-343 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-343 -m recent --name limit-343 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-343 -m recent --name limit-343 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-343 -m recent --name limit-343 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 351 {"flow-limit":{"interval":5,"log":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-344 - inet6/filter/FORWARD -j limit-344 - inet/filter/INPUT -j limit-344 - inet6/filter/INPUT -j limit-344 - inet/filter/OUTPUT -j limit-344 - inet6/filter/OUTPUT -j limit-344 - inet/filter/limit-344 -m recent --name limit-344 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-344 -m recent --name limit-344 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-344 -m recent --name limit-344 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-344 -m recent --name limit-344 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 494 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-487 + inet6/filter/FORWARD -j limit-487 + inet/filter/INPUT -j limit-487 + inet6/filter/INPUT -j limit-487 + inet/filter/OUTPUT -j limit-487 + inet6/filter/OUTPUT -j limit-487 + inet/filter/limit-487 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-487 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-487 -m limit --limit 1/second -j LOG + inet6/filter/limit-487 -m limit --limit 1/second -j LOG + +Filter 495 {"flow-limit":{"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-488 + inet6/filter/FORWARD -j limit-488 + inet/filter/INPUT -j limit-488 + inet6/filter/INPUT -j limit-488 + inet/filter/OUTPUT -j limit-488 + inet6/filter/OUTPUT -j limit-488 + inet/filter/limit-488 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -5053,31 +6717,29 @@ Filter 351 {"flow-limit":{"interval":5,"log":false},"log inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 352 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-345 - inet6/filter/FORWARD -j limit-345 - inet/filter/INPUT -j limit-345 - inet6/filter/INPUT -j limit-345 - inet/filter/OUTPUT -j limit-345 - inet6/filter/OUTPUT -j limit-345 - inet/filter/limit-345 -m recent --name limit-345 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-345 -m recent --name limit-345 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-345 -m recent --name limit-345 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-345 -m recent --name limit-345 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 353 {"flow-limit":{"interval":5,"log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-346 - inet6/filter/FORWARD -j limit-346 - inet/filter/INPUT -j limit-346 - inet6/filter/INPUT -j limit-346 - inet/filter/OUTPUT -j limit-346 - inet6/filter/OUTPUT -j limit-346 - inet/filter/limit-346 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-346 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-346 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-346 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 496 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-489 + inet6/filter/FORWARD -j limit-489 + inet/filter/INPUT -j limit-489 + inet6/filter/INPUT -j limit-489 + inet/filter/OUTPUT -j limit-489 + inet6/filter/OUTPUT -j limit-489 + inet/filter/limit-489 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 497 {"flow-limit":{"addr":"dest","log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-490 + inet6/filter/FORWARD -j limit-490 + inet/filter/INPUT -j limit-490 + inet6/filter/INPUT -j limit-490 + inet/filter/OUTPUT -j limit-490 + inet6/filter/OUTPUT -j limit-490 + inet/filter/limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -5085,31 +6747,31 @@ Filter 353 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 354 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-347 - inet6/filter/FORWARD -j limit-347 - inet/filter/INPUT -j limit-347 - inet6/filter/INPUT -j limit-347 - inet/filter/OUTPUT -j limit-347 - inet6/filter/OUTPUT -j limit-347 - inet/filter/limit-347 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-347 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-347 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-347 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 355 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-348 - inet6/filter/FORWARD -j limit-348 - inet/filter/INPUT -j limit-348 - inet6/filter/INPUT -j limit-348 - inet/filter/OUTPUT -j limit-348 - inet6/filter/OUTPUT -j limit-348 - inet/filter/limit-348 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-348 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-348 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-348 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 498 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-491 + inet6/filter/FORWARD -j limit-491 + inet/filter/INPUT -j limit-491 + inet6/filter/INPUT -j limit-491 + inet/filter/OUTPUT -j limit-491 + inet6/filter/OUTPUT -j limit-491 + inet/filter/limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 499 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-492 + inet6/filter/FORWARD -j limit-492 + inet/filter/INPUT -j limit-492 + inet6/filter/INPUT -j limit-492 + inet/filter/OUTPUT -j limit-492 + inet6/filter/OUTPUT -j limit-492 + inet/filter/limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j logaccept-final-22 inet6/filter/FORWARD -j logaccept-final-22 inet/filter/INPUT -j logaccept-final-22 @@ -5121,31 +6783,31 @@ Filter 355 {"flow-limit":{"interval":5,"log":false,"name inet/filter/logaccept-final-22 -j ACCEPT inet6/filter/logaccept-final-22 -j ACCEPT -Filter 356 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-349 - inet6/filter/FORWARD -j limit-349 - inet/filter/INPUT -j limit-349 - inet6/filter/INPUT -j limit-349 - inet/filter/OUTPUT -j limit-349 - inet6/filter/OUTPUT -j limit-349 - inet/filter/limit-349 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-349 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-349 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-349 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 357 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-350 - inet6/filter/FORWARD -j limit-350 - inet/filter/INPUT -j limit-350 - inet6/filter/INPUT -j limit-350 - inet/filter/OUTPUT -j limit-350 - inet6/filter/OUTPUT -j limit-350 - inet/filter/limit-350 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-350 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-350 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-350 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 500 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-493 + inet6/filter/FORWARD -j limit-493 + inet/filter/INPUT -j limit-493 + inet6/filter/INPUT -j limit-493 + inet/filter/OUTPUT -j limit-493 + inet6/filter/OUTPUT -j limit-493 + inet/filter/limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 501 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-494 + inet6/filter/FORWARD -j limit-494 + inet/filter/INPUT -j limit-494 + inet6/filter/INPUT -j limit-494 + inet/filter/OUTPUT -j limit-494 + inet6/filter/OUTPUT -j limit-494 + inet/filter/limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -5153,29 +6815,29 @@ Filter 357 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 358 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-351 - inet6/filter/FORWARD -j limit-351 - inet/filter/INPUT -j limit-351 - inet6/filter/INPUT -j limit-351 - inet/filter/OUTPUT -j limit-351 - inet6/filter/OUTPUT -j limit-351 - inet/filter/limit-351 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-351 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-351 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-351 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 359 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-352 - inet6/filter/FORWARD -j limit-352 - inet/filter/INPUT -j limit-352 - inet6/filter/INPUT -j limit-352 - inet/filter/OUTPUT -j limit-352 - inet6/filter/OUTPUT -j limit-352 - inet/filter/limit-352 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-352 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +Filter 502 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-495 + inet6/filter/FORWARD -j limit-495 + inet/filter/INPUT -j limit-495 + inet6/filter/INPUT -j limit-495 + inet/filter/OUTPUT -j limit-495 + inet6/filter/OUTPUT -j limit-495 + inet/filter/limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 503 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-496 + inet6/filter/FORWARD -j limit-496 + inet/filter/INPUT -j limit-496 + inet6/filter/INPUT -j limit-496 + inet/filter/OUTPUT -j limit-496 + inet6/filter/OUTPUT -j limit-496 + inet/filter/limit-496 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -5183,27 +6845,27 @@ Filter 359 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 360 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-353 - inet6/filter/FORWARD -j limit-353 - inet/filter/INPUT -j limit-353 - inet6/filter/INPUT -j limit-353 - inet/filter/OUTPUT -j limit-353 - inet6/filter/OUTPUT -j limit-353 - inet/filter/limit-353 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-353 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 361 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-354 - inet6/filter/FORWARD -j limit-354 - inet/filter/INPUT -j limit-354 - inet6/filter/INPUT -j limit-354 - inet/filter/OUTPUT -j limit-354 - inet6/filter/OUTPUT -j limit-354 - inet/filter/limit-354 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-354 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +Filter 504 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-497 + inet6/filter/FORWARD -j limit-497 + inet/filter/INPUT -j limit-497 + inet6/filter/INPUT -j limit-497 + inet/filter/OUTPUT -j limit-497 + inet6/filter/OUTPUT -j limit-497 + inet/filter/limit-497 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 505 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-498 + inet6/filter/FORWARD -j limit-498 + inet/filter/INPUT -j limit-498 + inet6/filter/INPUT -j limit-498 + inet/filter/OUTPUT -j limit-498 + inet6/filter/OUTPUT -j limit-498 + inet/filter/limit-498 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j logaccept-final-23 inet6/filter/FORWARD -j logaccept-final-23 inet/filter/INPUT -j logaccept-final-23 @@ -5215,29 +6877,29 @@ Filter 361 {"flow-limit":{"interval":5,"log":false,"name inet/filter/logaccept-final-23 -j ACCEPT inet6/filter/logaccept-final-23 -j ACCEPT -Filter 362 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-355 - inet6/filter/FORWARD -j limit-355 - inet/filter/INPUT -j limit-355 - inet6/filter/INPUT -j limit-355 - inet/filter/OUTPUT -j limit-355 - inet6/filter/OUTPUT -j limit-355 - inet/filter/limit-355 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-355 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-355 -m limit --limit 1/second -j LOG - inet6/filter/limit-355 -m limit --limit 1/second -j LOG - -Filter 363 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-356 - inet6/filter/FORWARD -j limit-356 - inet/filter/INPUT -j limit-356 - inet6/filter/INPUT -j limit-356 - inet/filter/OUTPUT -j limit-356 - inet6/filter/OUTPUT -j limit-356 - inet/filter/limit-356 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +Filter 506 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-499 + inet6/filter/FORWARD -j limit-499 + inet/filter/INPUT -j limit-499 + inet6/filter/INPUT -j limit-499 + inet/filter/OUTPUT -j limit-499 + inet6/filter/OUTPUT -j limit-499 + inet/filter/limit-499 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-499 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-499 -m limit --limit 1/second -j LOG + inet6/filter/limit-499 -m limit --limit 1/second -j LOG + +Filter 507 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-500 + inet6/filter/FORWARD -j limit-500 + inet/filter/INPUT -j limit-500 + inet6/filter/INPUT -j limit-500 + inet/filter/OUTPUT -j limit-500 + inet6/filter/OUTPUT -j limit-500 + inet/filter/limit-500 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-500 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -5245,29 +6907,29 @@ Filter 363 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 364 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-357 - inet6/filter/FORWARD -j limit-357 - inet/filter/INPUT -j limit-357 - inet6/filter/INPUT -j limit-357 - inet/filter/OUTPUT -j limit-357 - inet6/filter/OUTPUT -j limit-357 - inet/filter/limit-357 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 365 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-358 - inet6/filter/FORWARD -j limit-358 - inet/filter/INPUT -j limit-358 - inet6/filter/INPUT -j limit-358 - inet/filter/OUTPUT -j limit-358 - inet6/filter/OUTPUT -j limit-358 - inet/filter/limit-358 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-358 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-358 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-358 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 508 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-501 + inet6/filter/FORWARD -j limit-501 + inet/filter/INPUT -j limit-501 + inet6/filter/INPUT -j limit-501 + inet/filter/OUTPUT -j limit-501 + inet6/filter/OUTPUT -j limit-501 + inet/filter/limit-501 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-501 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 509 {"flow-limit":{"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-502 + inet6/filter/FORWARD -j limit-502 + inet/filter/INPUT -j limit-502 + inet6/filter/INPUT -j limit-502 + inet/filter/OUTPUT -j limit-502 + inet6/filter/OUTPUT -j limit-502 + inet/filter/limit-502 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-502 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-502 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-502 -m recent --name user:C --rsource --mask fe00:: --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -5275,31 +6937,31 @@ Filter 365 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 366 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-359 - inet6/filter/FORWARD -j limit-359 - inet/filter/INPUT -j limit-359 - inet6/filter/INPUT -j limit-359 - inet/filter/OUTPUT -j limit-359 - inet6/filter/OUTPUT -j limit-359 - inet/filter/limit-359 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-359 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-359 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-359 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 367 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-360 - inet6/filter/FORWARD -j limit-360 - inet/filter/INPUT -j limit-360 - inet6/filter/INPUT -j limit-360 - inet/filter/OUTPUT -j limit-360 - inet6/filter/OUTPUT -j limit-360 - inet/filter/limit-360 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-360 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-360 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-360 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 510 {"action":"pass","flow-limit":{"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-503 + inet6/filter/FORWARD -j limit-503 + inet/filter/INPUT -j limit-503 + inet6/filter/INPUT -j limit-503 + inet/filter/OUTPUT -j limit-503 + inet6/filter/OUTPUT -j limit-503 + inet/filter/limit-503 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-503 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-503 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-503 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 511 {"flow-limit":{"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-504 + inet6/filter/FORWARD -j limit-504 + inet/filter/INPUT -j limit-504 + inet6/filter/INPUT -j limit-504 + inet/filter/OUTPUT -j limit-504 + inet6/filter/OUTPUT -j limit-504 + inet/filter/limit-504 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-504 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-504 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-504 -m recent --name user:C --rsource --mask fe00:: --set inet/filter/FORWARD -j logaccept-final-24 inet6/filter/FORWARD -j logaccept-final-24 inet/filter/INPUT -j logaccept-final-24 @@ -5311,31 +6973,31 @@ Filter 367 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/logaccept-final-24 -j ACCEPT inet6/filter/logaccept-final-24 -j ACCEPT -Filter 368 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-361 - inet6/filter/FORWARD -j limit-361 - inet/filter/INPUT -j limit-361 - inet6/filter/INPUT -j limit-361 - inet/filter/OUTPUT -j limit-361 - inet6/filter/OUTPUT -j limit-361 - inet/filter/limit-361 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-361 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-361 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-361 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 369 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-362 - inet6/filter/FORWARD -j limit-362 - inet/filter/INPUT -j limit-362 - inet6/filter/INPUT -j limit-362 - inet/filter/OUTPUT -j limit-362 - inet6/filter/OUTPUT -j limit-362 - inet/filter/limit-362 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-362 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-362 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-362 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 512 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-505 + inet6/filter/FORWARD -j limit-505 + inet/filter/INPUT -j limit-505 + inet6/filter/INPUT -j limit-505 + inet/filter/OUTPUT -j limit-505 + inet6/filter/OUTPUT -j limit-505 + inet/filter/limit-505 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-505 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-505 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-505 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 513 {"flow-limit":{"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-506 + inet6/filter/FORWARD -j limit-506 + inet/filter/INPUT -j limit-506 + inet6/filter/INPUT -j limit-506 + inet/filter/OUTPUT -j limit-506 + inet6/filter/OUTPUT -j limit-506 + inet/filter/limit-506 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-506 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-506 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-506 -m recent --name user:C --rsource --mask fe00:: --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -5343,29 +7005,29 @@ Filter 369 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 370 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-363 - inet6/filter/FORWARD -j limit-363 - inet/filter/INPUT -j limit-363 - inet6/filter/INPUT -j limit-363 - inet/filter/OUTPUT -j limit-363 - inet6/filter/OUTPUT -j limit-363 - inet/filter/limit-363 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-363 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-363 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-363 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 371 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-364 - inet6/filter/FORWARD -j limit-364 - inet/filter/INPUT -j limit-364 - inet6/filter/INPUT -j limit-364 - inet/filter/OUTPUT -j limit-364 - inet6/filter/OUTPUT -j limit-364 - inet/filter/limit-364 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-364 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +Filter 514 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-507 + inet6/filter/FORWARD -j limit-507 + inet/filter/INPUT -j limit-507 + inet6/filter/INPUT -j limit-507 + inet/filter/OUTPUT -j limit-507 + inet6/filter/OUTPUT -j limit-507 + inet/filter/limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-507 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-507 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 515 {"flow-limit":{"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-508 + inet6/filter/FORWARD -j limit-508 + inet/filter/INPUT -j limit-508 + inet6/filter/INPUT -j limit-508 + inet/filter/OUTPUT -j limit-508 + inet6/filter/OUTPUT -j limit-508 + inet/filter/limit-508 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-508 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -5373,27 +7035,27 @@ Filter 371 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 372 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-365 - inet6/filter/FORWARD -j limit-365 - inet/filter/INPUT -j limit-365 - inet6/filter/INPUT -j limit-365 - inet/filter/OUTPUT -j limit-365 - inet6/filter/OUTPUT -j limit-365 - inet/filter/limit-365 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-365 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 373 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-366 - inet6/filter/FORWARD -j limit-366 - inet/filter/INPUT -j limit-366 - inet6/filter/INPUT -j limit-366 - inet/filter/OUTPUT -j limit-366 - inet6/filter/OUTPUT -j limit-366 - inet/filter/limit-366 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-366 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +Filter 516 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-509 + inet6/filter/FORWARD -j limit-509 + inet/filter/INPUT -j limit-509 + inet6/filter/INPUT -j limit-509 + inet/filter/OUTPUT -j limit-509 + inet6/filter/OUTPUT -j limit-509 + inet/filter/limit-509 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-509 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 517 {"flow-limit":{"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-510 + inet6/filter/FORWARD -j limit-510 + inet/filter/INPUT -j limit-510 + inet6/filter/INPUT -j limit-510 + inet/filter/OUTPUT -j limit-510 + inet6/filter/OUTPUT -j limit-510 + inet/filter/limit-510 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-510 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j logaccept-final-25 inet6/filter/FORWARD -j logaccept-final-25 inet/filter/INPUT -j logaccept-final-25 @@ -5405,29 +7067,29 @@ Filter 373 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/logaccept-final-25 -j ACCEPT inet6/filter/logaccept-final-25 -j ACCEPT -Filter 374 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-367 - inet6/filter/FORWARD -j limit-367 - inet/filter/INPUT -j limit-367 - inet6/filter/INPUT -j limit-367 - inet/filter/OUTPUT -j limit-367 - inet6/filter/OUTPUT -j limit-367 - inet/filter/limit-367 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-367 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-367 -m limit --limit 1/second -j LOG - inet6/filter/limit-367 -m limit --limit 1/second -j LOG - -Filter 375 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-368 - inet6/filter/FORWARD -j limit-368 - inet/filter/INPUT -j limit-368 - inet6/filter/INPUT -j limit-368 - inet/filter/OUTPUT -j limit-368 - inet6/filter/OUTPUT -j limit-368 - inet/filter/limit-368 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +Filter 518 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-511 + inet6/filter/FORWARD -j limit-511 + inet/filter/INPUT -j limit-511 + inet6/filter/INPUT -j limit-511 + inet/filter/OUTPUT -j limit-511 + inet6/filter/OUTPUT -j limit-511 + inet/filter/limit-511 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-511 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-511 -m limit --limit 1/second -j LOG + inet6/filter/limit-511 -m limit --limit 1/second -j LOG + +Filter 519 {"flow-limit":{"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-512 + inet6/filter/FORWARD -j limit-512 + inet/filter/INPUT -j limit-512 + inet6/filter/INPUT -j limit-512 + inet/filter/OUTPUT -j limit-512 + inet6/filter/OUTPUT -j limit-512 + inet/filter/limit-512 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-512 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -5435,29 +7097,29 @@ Filter 375 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 376 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-369 - inet6/filter/FORWARD -j limit-369 - inet/filter/INPUT -j limit-369 - inet6/filter/INPUT -j limit-369 - inet/filter/OUTPUT -j limit-369 - inet6/filter/OUTPUT -j limit-369 - inet/filter/limit-369 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-369 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 377 {"flow-limit":{"interval":5,"log":"none"}} -(filter-limit) - inet/filter/FORWARD -j limit-370 - inet6/filter/FORWARD -j limit-370 - inet/filter/INPUT -j limit-370 - inet6/filter/INPUT -j limit-370 - inet/filter/OUTPUT -j limit-370 - inet6/filter/OUTPUT -j limit-370 - inet/filter/limit-370 -m recent --name limit-370 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-370 -m recent --name limit-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-370 -m recent --name limit-370 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-370 -m recent --name limit-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 520 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-513 + inet6/filter/FORWARD -j limit-513 + inet/filter/INPUT -j limit-513 + inet6/filter/INPUT -j limit-513 + inet/filter/OUTPUT -j limit-513 + inet6/filter/OUTPUT -j limit-513 + inet/filter/limit-513 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-513 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 521 {"flow-limit":{"addr":"dest","log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-514 + inet6/filter/FORWARD -j limit-514 + inet/filter/INPUT -j limit-514 + inet6/filter/INPUT -j limit-514 + inet/filter/OUTPUT -j limit-514 + inet6/filter/OUTPUT -j limit-514 + inet/filter/limit-514 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-514 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-514 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-514 -m recent --name user:C --rdest --mask fe00:: --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -5465,31 +7127,31 @@ Filter 377 {"flow-limit":{"interval":5,"log":"none"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 378 {"action":"pass","flow-limit":{"interval":5,"log":"none"}} -(filter-limit) - inet/filter/FORWARD -j limit-371 - inet6/filter/FORWARD -j limit-371 - inet/filter/INPUT -j limit-371 - inet6/filter/INPUT -j limit-371 - inet/filter/OUTPUT -j limit-371 - inet6/filter/OUTPUT -j limit-371 - inet/filter/limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 379 {"flow-limit":{"interval":5,"log":"none"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-372 - inet6/filter/FORWARD -j limit-372 - inet/filter/INPUT -j limit-372 - inet6/filter/INPUT -j limit-372 - inet/filter/OUTPUT -j limit-372 - inet6/filter/OUTPUT -j limit-372 - inet/filter/limit-372 -m recent --name limit-372 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-372 -m recent --name limit-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-372 -m recent --name limit-372 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-372 -m recent --name limit-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 522 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-515 + inet6/filter/FORWARD -j limit-515 + inet/filter/INPUT -j limit-515 + inet6/filter/INPUT -j limit-515 + inet/filter/OUTPUT -j limit-515 + inet6/filter/OUTPUT -j limit-515 + inet/filter/limit-515 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-515 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-515 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-515 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 523 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-516 + inet6/filter/FORWARD -j limit-516 + inet/filter/INPUT -j limit-516 + inet6/filter/INPUT -j limit-516 + inet/filter/OUTPUT -j limit-516 + inet6/filter/OUTPUT -j limit-516 + inet/filter/limit-516 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-516 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-516 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-516 -m recent --name user:C --rdest --mask fe00:: --set inet/filter/FORWARD -j logaccept-final-26 inet6/filter/FORWARD -j logaccept-final-26 inet/filter/INPUT -j logaccept-final-26 @@ -5501,31 +7163,31 @@ Filter 379 {"flow-limit":{"interval":5,"log":"none"},"lo inet/filter/logaccept-final-26 -j ACCEPT inet6/filter/logaccept-final-26 -j ACCEPT -Filter 380 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-373 - inet6/filter/FORWARD -j limit-373 - inet/filter/INPUT -j limit-373 - inet6/filter/INPUT -j limit-373 - inet/filter/OUTPUT -j limit-373 - inet6/filter/OUTPUT -j limit-373 - inet/filter/limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 381 {"flow-limit":{"interval":5,"log":"none"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-374 - inet6/filter/FORWARD -j limit-374 - inet/filter/INPUT -j limit-374 - inet6/filter/INPUT -j limit-374 - inet/filter/OUTPUT -j limit-374 - inet6/filter/OUTPUT -j limit-374 - inet/filter/limit-374 -m recent --name limit-374 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-374 -m recent --name limit-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-374 -m recent --name limit-374 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-374 -m recent --name limit-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 524 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-517 + inet6/filter/FORWARD -j limit-517 + inet/filter/INPUT -j limit-517 + inet6/filter/INPUT -j limit-517 + inet/filter/OUTPUT -j limit-517 + inet6/filter/OUTPUT -j limit-517 + inet/filter/limit-517 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-517 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-517 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-517 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 525 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-518 + inet6/filter/FORWARD -j limit-518 + inet/filter/INPUT -j limit-518 + inet6/filter/INPUT -j limit-518 + inet/filter/OUTPUT -j limit-518 + inet6/filter/OUTPUT -j limit-518 + inet/filter/limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-518 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-518 -m recent --name user:C --rdest --mask fe00:: --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -5533,31 +7195,29 @@ Filter 381 {"flow-limit":{"interval":5,"log":"none"},"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 382 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-375 - inet6/filter/FORWARD -j limit-375 - inet/filter/INPUT -j limit-375 - inet6/filter/INPUT -j limit-375 - inet/filter/OUTPUT -j limit-375 - inet6/filter/OUTPUT -j limit-375 - inet/filter/limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-375 -m recent --name limit-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-375 -m recent --name limit-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 383 {"flow-limit":{"interval":5,"log":"none","name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-376 - inet6/filter/FORWARD -j limit-376 - inet/filter/INPUT -j limit-376 - inet6/filter/INPUT -j limit-376 - inet/filter/OUTPUT -j limit-376 - inet6/filter/OUTPUT -j limit-376 - inet/filter/limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 526 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-519 + inet6/filter/FORWARD -j limit-519 + inet/filter/INPUT -j limit-519 + inet6/filter/INPUT -j limit-519 + inet/filter/OUTPUT -j limit-519 + inet6/filter/OUTPUT -j limit-519 + inet/filter/limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-519 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-519 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 527 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-520 + inet6/filter/FORWARD -j limit-520 + inet/filter/INPUT -j limit-520 + inet6/filter/INPUT -j limit-520 + inet/filter/OUTPUT -j limit-520 + inet6/filter/OUTPUT -j limit-520 + inet/filter/limit-520 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-520 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -5565,31 +7225,27 @@ Filter 383 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 384 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-377 - inet6/filter/FORWARD -j limit-377 - inet/filter/INPUT -j limit-377 - inet6/filter/INPUT -j limit-377 - inet/filter/OUTPUT -j limit-377 - inet6/filter/OUTPUT -j limit-377 - inet/filter/limit-377 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-377 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-377 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-377 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 385 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-378 - inet6/filter/FORWARD -j limit-378 - inet/filter/INPUT -j limit-378 - inet6/filter/INPUT -j limit-378 - inet/filter/OUTPUT -j limit-378 - inet6/filter/OUTPUT -j limit-378 - inet/filter/limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 528 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-521 + inet6/filter/FORWARD -j limit-521 + inet/filter/INPUT -j limit-521 + inet6/filter/INPUT -j limit-521 + inet/filter/OUTPUT -j limit-521 + inet6/filter/OUTPUT -j limit-521 + inet/filter/limit-521 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-521 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 529 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-522 + inet6/filter/FORWARD -j limit-522 + inet/filter/INPUT -j limit-522 + inet6/filter/INPUT -j limit-522 + inet/filter/OUTPUT -j limit-522 + inet6/filter/OUTPUT -j limit-522 + inet/filter/limit-522 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-522 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j logaccept-final-27 inet6/filter/FORWARD -j logaccept-final-27 inet/filter/INPUT -j logaccept-final-27 @@ -5601,31 +7257,29 @@ Filter 385 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/logaccept-final-27 -j ACCEPT inet6/filter/logaccept-final-27 -j ACCEPT -Filter 386 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-379 - inet6/filter/FORWARD -j limit-379 - inet/filter/INPUT -j limit-379 - inet6/filter/INPUT -j limit-379 - inet/filter/OUTPUT -j limit-379 - inet6/filter/OUTPUT -j limit-379 - inet/filter/limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 387 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-380 - inet6/filter/FORWARD -j limit-380 - inet/filter/INPUT -j limit-380 - inet6/filter/INPUT -j limit-380 - inet/filter/OUTPUT -j limit-380 - inet6/filter/OUTPUT -j limit-380 - inet/filter/limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 530 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-523 + inet6/filter/FORWARD -j limit-523 + inet/filter/INPUT -j limit-523 + inet6/filter/INPUT -j limit-523 + inet/filter/OUTPUT -j limit-523 + inet6/filter/OUTPUT -j limit-523 + inet/filter/limit-523 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-523 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-523 -m limit --limit 1/second -j LOG + inet6/filter/limit-523 -m limit --limit 1/second -j LOG + +Filter 531 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-524 + inet6/filter/FORWARD -j limit-524 + inet/filter/INPUT -j limit-524 + inet6/filter/INPUT -j limit-524 + inet/filter/OUTPUT -j limit-524 + inet6/filter/OUTPUT -j limit-524 + inet/filter/limit-524 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-524 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -5633,29 +7287,33 @@ Filter 387 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 388 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-381 - inet6/filter/FORWARD -j limit-381 - inet/filter/INPUT -j limit-381 - inet6/filter/INPUT -j limit-381 - inet/filter/OUTPUT -j limit-381 - inet6/filter/OUTPUT -j limit-381 - inet/filter/limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 389 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-382 - inet6/filter/FORWARD -j limit-382 - inet/filter/INPUT -j limit-382 - inet6/filter/INPUT -j limit-382 - inet/filter/OUTPUT -j limit-382 - inet6/filter/OUTPUT -j limit-382 - inet/filter/limit-382 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +Filter 532 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-525 + inet6/filter/FORWARD -j limit-525 + inet/filter/INPUT -j limit-525 + inet6/filter/INPUT -j limit-525 + inet/filter/OUTPUT -j limit-525 + inet6/filter/OUTPUT -j limit-525 + inet/filter/limit-525 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-525 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 533 {"flow-limit":{"interval":5}} +(filter-limit) + inet/filter/FORWARD -j limit-526 + inet6/filter/FORWARD -j limit-526 + inet/filter/INPUT -j limit-526 + inet6/filter/INPUT -j limit-526 + inet/filter/OUTPUT -j limit-526 + inet6/filter/OUTPUT -j limit-526 + inet/filter/limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-175 + inet6/filter/limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-175 + inet/filter/logdrop-175 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-175 -m limit --limit 1/second -j LOG + inet/filter/logdrop-175 -j DROP + inet6/filter/logdrop-175 -j DROP + inet/filter/limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -5663,27 +7321,39 @@ Filter 389 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 390 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-383 - inet6/filter/FORWARD -j limit-383 - inet/filter/INPUT -j limit-383 - inet6/filter/INPUT -j limit-383 - inet/filter/OUTPUT -j limit-383 - inet6/filter/OUTPUT -j limit-383 - inet/filter/limit-383 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 391 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} +Filter 534 {"action":"pass","flow-limit":{"interval":5}} (filter-limit) - inet/filter/FORWARD -j limit-384 - inet6/filter/FORWARD -j limit-384 - inet/filter/INPUT -j limit-384 - inet6/filter/INPUT -j limit-384 - inet/filter/OUTPUT -j limit-384 - inet6/filter/OUTPUT -j limit-384 - inet/filter/limit-384 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j limit-527 + inet6/filter/FORWARD -j limit-527 + inet/filter/INPUT -j limit-527 + inet6/filter/INPUT -j limit-527 + inet/filter/OUTPUT -j limit-527 + inet6/filter/OUTPUT -j limit-527 + inet/filter/limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-176 + inet6/filter/limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-176 + inet/filter/logdrop-176 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-176 -m limit --limit 1/second -j LOG + inet/filter/logdrop-176 -j DROP + inet6/filter/logdrop-176 -j DROP + inet/filter/limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 535 {"flow-limit":{"interval":5},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-528 + inet6/filter/FORWARD -j limit-528 + inet/filter/INPUT -j limit-528 + inet6/filter/INPUT -j limit-528 + inet/filter/OUTPUT -j limit-528 + inet6/filter/OUTPUT -j limit-528 + inet/filter/limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-177 + inet6/filter/limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-177 + inet/filter/logdrop-177 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-177 -m limit --limit 1/second -j LOG + inet/filter/logdrop-177 -j DROP + inet6/filter/logdrop-177 -j DROP + inet/filter/limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j logaccept-final-28 inet6/filter/FORWARD -j logaccept-final-28 inet/filter/INPUT -j logaccept-final-28 @@ -5695,29 +7365,39 @@ Filter 391 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/logaccept-final-28 -j ACCEPT inet6/filter/logaccept-final-28 -j ACCEPT -Filter 392 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-385 - inet6/filter/FORWARD -j limit-385 - inet/filter/INPUT -j limit-385 - inet6/filter/INPUT -j limit-385 - inet/filter/OUTPUT -j limit-385 - inet6/filter/OUTPUT -j limit-385 - inet/filter/limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-385 -m limit --limit 1/second -j LOG - inet6/filter/limit-385 -m limit --limit 1/second -j LOG - -Filter 393 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} +Filter 536 {"action":"pass","flow-limit":{"interval":5},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-386 - inet6/filter/FORWARD -j limit-386 - inet/filter/INPUT -j limit-386 - inet6/filter/INPUT -j limit-386 - inet/filter/OUTPUT -j limit-386 - inet6/filter/OUTPUT -j limit-386 - inet/filter/limit-386 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j limit-529 + inet6/filter/FORWARD -j limit-529 + inet/filter/INPUT -j limit-529 + inet6/filter/INPUT -j limit-529 + inet/filter/OUTPUT -j limit-529 + inet6/filter/OUTPUT -j limit-529 + inet/filter/limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-178 + inet6/filter/limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-178 + inet/filter/logdrop-178 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-178 -m limit --limit 1/second -j LOG + inet/filter/logdrop-178 -j DROP + inet6/filter/logdrop-178 -j DROP + inet/filter/limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 537 {"flow-limit":{"interval":5},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-530 + inet6/filter/FORWARD -j limit-530 + inet/filter/INPUT -j limit-530 + inet6/filter/INPUT -j limit-530 + inet/filter/OUTPUT -j limit-530 + inet6/filter/OUTPUT -j limit-530 + inet/filter/limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-179 + inet6/filter/limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-179 + inet/filter/logdrop-179 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-179 -m limit --limit 1/second -j LOG + inet/filter/logdrop-179 -j DROP + inet6/filter/logdrop-179 -j DROP + inet/filter/limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -5725,29 +7405,39 @@ Filter 393 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 394 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-387 - inet6/filter/FORWARD -j limit-387 - inet/filter/INPUT -j limit-387 - inet6/filter/INPUT -j limit-387 - inet/filter/OUTPUT -j limit-387 - inet6/filter/OUTPUT -j limit-387 - inet/filter/limit-387 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 395 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} +Filter 538 {"action":"pass","flow-limit":{"interval":5},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-388 - inet6/filter/FORWARD -j limit-388 - inet/filter/INPUT -j limit-388 - inet6/filter/INPUT -j limit-388 - inet/filter/OUTPUT -j limit-388 - inet6/filter/OUTPUT -j limit-388 - inet/filter/limit-388 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-388 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j limit-531 + inet6/filter/FORWARD -j limit-531 + inet/filter/INPUT -j limit-531 + inet6/filter/INPUT -j limit-531 + inet/filter/OUTPUT -j limit-531 + inet6/filter/OUTPUT -j limit-531 + inet/filter/limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-180 + inet6/filter/limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-180 + inet/filter/logdrop-180 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-180 -m limit --limit 1/second -j LOG + inet/filter/logdrop-180 -j DROP + inet6/filter/logdrop-180 -j DROP + inet/filter/limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 539 {"flow-limit":{"interval":5,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-532 + inet6/filter/FORWARD -j limit-532 + inet/filter/INPUT -j limit-532 + inet6/filter/INPUT -j limit-532 + inet/filter/OUTPUT -j limit-532 + inet6/filter/OUTPUT -j limit-532 + inet/filter/limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-181 + inet6/filter/limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-181 + inet/filter/logdrop-181 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-181 -m limit --limit 1/second -j LOG + inet/filter/logdrop-181 -j DROP + inet6/filter/logdrop-181 -j DROP + inet/filter/limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -5755,31 +7445,39 @@ Filter 395 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 396 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-389 - inet6/filter/FORWARD -j limit-389 - inet/filter/INPUT -j limit-389 - inet6/filter/INPUT -j limit-389 - inet/filter/OUTPUT -j limit-389 - inet6/filter/OUTPUT -j limit-389 - inet/filter/limit-389 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-389 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-389 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-389 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 397 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-390 - inet6/filter/FORWARD -j limit-390 - inet/filter/INPUT -j limit-390 - inet6/filter/INPUT -j limit-390 - inet/filter/OUTPUT -j limit-390 - inet6/filter/OUTPUT -j limit-390 - inet/filter/limit-390 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-390 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 540 {"action":"pass","flow-limit":{"interval":5,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-533 + inet6/filter/FORWARD -j limit-533 + inet/filter/INPUT -j limit-533 + inet6/filter/INPUT -j limit-533 + inet/filter/OUTPUT -j limit-533 + inet6/filter/OUTPUT -j limit-533 + inet/filter/limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-182 + inet6/filter/limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-182 + inet/filter/logdrop-182 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-182 -m limit --limit 1/second -j LOG + inet/filter/logdrop-182 -j DROP + inet6/filter/logdrop-182 -j DROP + inet/filter/limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 541 {"flow-limit":{"interval":5,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-534 + inet6/filter/FORWARD -j limit-534 + inet/filter/INPUT -j limit-534 + inet6/filter/INPUT -j limit-534 + inet/filter/OUTPUT -j limit-534 + inet6/filter/OUTPUT -j limit-534 + inet/filter/limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-183 + inet6/filter/limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-183 + inet/filter/logdrop-183 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-183 -m limit --limit 1/second -j LOG + inet/filter/logdrop-183 -j DROP + inet6/filter/logdrop-183 -j DROP + inet/filter/limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j logaccept-final-29 inet6/filter/FORWARD -j logaccept-final-29 inet/filter/INPUT -j logaccept-final-29 @@ -5791,31 +7489,39 @@ Filter 397 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/logaccept-final-29 -j ACCEPT inet6/filter/logaccept-final-29 -j ACCEPT -Filter 398 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-391 - inet6/filter/FORWARD -j limit-391 - inet/filter/INPUT -j limit-391 - inet6/filter/INPUT -j limit-391 - inet/filter/OUTPUT -j limit-391 - inet6/filter/OUTPUT -j limit-391 - inet/filter/limit-391 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-391 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 399 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} +Filter 542 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-392 - inet6/filter/FORWARD -j limit-392 - inet/filter/INPUT -j limit-392 - inet6/filter/INPUT -j limit-392 - inet/filter/OUTPUT -j limit-392 - inet6/filter/OUTPUT -j limit-392 - inet/filter/limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j limit-535 + inet6/filter/FORWARD -j limit-535 + inet/filter/INPUT -j limit-535 + inet6/filter/INPUT -j limit-535 + inet/filter/OUTPUT -j limit-535 + inet6/filter/OUTPUT -j limit-535 + inet/filter/limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-184 + inet6/filter/limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-184 + inet/filter/logdrop-184 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-184 -m limit --limit 1/second -j LOG + inet/filter/logdrop-184 -j DROP + inet6/filter/logdrop-184 -j DROP + inet/filter/limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 543 {"flow-limit":{"interval":5,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-536 + inet6/filter/FORWARD -j limit-536 + inet/filter/INPUT -j limit-536 + inet6/filter/INPUT -j limit-536 + inet/filter/OUTPUT -j limit-536 + inet6/filter/OUTPUT -j limit-536 + inet/filter/limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-185 + inet6/filter/limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-185 + inet/filter/logdrop-185 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-185 -m limit --limit 1/second -j LOG + inet/filter/logdrop-185 -j DROP + inet6/filter/logdrop-185 -j DROP + inet/filter/limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -5823,29 +7529,37 @@ Filter 399 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 400 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-393 - inet6/filter/FORWARD -j limit-393 - inet/filter/INPUT -j limit-393 - inet6/filter/INPUT -j limit-393 - inet/filter/OUTPUT -j limit-393 - inet6/filter/OUTPUT -j limit-393 - inet/filter/limit-393 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-393 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-393 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-393 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 401 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-394 - inet6/filter/FORWARD -j limit-394 - inet/filter/INPUT -j limit-394 - inet6/filter/INPUT -j limit-394 - inet/filter/OUTPUT -j limit-394 - inet6/filter/OUTPUT -j limit-394 - inet/filter/limit-394 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-394 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +Filter 544 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-537 + inet6/filter/FORWARD -j limit-537 + inet/filter/INPUT -j limit-537 + inet6/filter/INPUT -j limit-537 + inet/filter/OUTPUT -j limit-537 + inet6/filter/OUTPUT -j limit-537 + inet/filter/limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-186 + inet6/filter/limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-186 + inet/filter/logdrop-186 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-186 -m limit --limit 1/second -j LOG + inet/filter/logdrop-186 -j DROP + inet6/filter/logdrop-186 -j DROP + inet/filter/limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 545 {"flow-limit":{"interval":5,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-538 + inet6/filter/FORWARD -j limit-538 + inet/filter/INPUT -j limit-538 + inet6/filter/INPUT -j limit-538 + inet/filter/OUTPUT -j limit-538 + inet6/filter/OUTPUT -j limit-538 + inet/filter/limit-538 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-187 + inet6/filter/limit-538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-187 + inet/filter/logdrop-187 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-187 -m limit --limit 1/second -j LOG + inet/filter/logdrop-187 -j DROP + inet6/filter/logdrop-187 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -5853,27 +7567,35 @@ Filter 401 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 402 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} +Filter 546 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false}} (filter-limit) - inet/filter/FORWARD -j limit-395 - inet6/filter/FORWARD -j limit-395 - inet/filter/INPUT -j limit-395 - inet6/filter/INPUT -j limit-395 - inet/filter/OUTPUT -j limit-395 - inet6/filter/OUTPUT -j limit-395 - inet/filter/limit-395 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-395 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j limit-539 + inet6/filter/FORWARD -j limit-539 + inet/filter/INPUT -j limit-539 + inet6/filter/INPUT -j limit-539 + inet/filter/OUTPUT -j limit-539 + inet6/filter/OUTPUT -j limit-539 + inet/filter/limit-539 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-188 + inet6/filter/limit-539 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-188 + inet/filter/logdrop-188 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-188 -m limit --limit 1/second -j LOG + inet/filter/logdrop-188 -j DROP + inet6/filter/logdrop-188 -j DROP -Filter 403 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} +Filter 547 {"flow-limit":{"interval":5,"name":"A","update":false},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-396 - inet6/filter/FORWARD -j limit-396 - inet/filter/INPUT -j limit-396 - inet6/filter/INPUT -j limit-396 - inet/filter/OUTPUT -j limit-396 - inet6/filter/OUTPUT -j limit-396 - inet/filter/limit-396 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-396 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j limit-540 + inet6/filter/FORWARD -j limit-540 + inet/filter/INPUT -j limit-540 + inet6/filter/INPUT -j limit-540 + inet/filter/OUTPUT -j limit-540 + inet6/filter/OUTPUT -j limit-540 + inet/filter/limit-540 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-189 + inet6/filter/limit-540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-189 + inet/filter/logdrop-189 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-189 -m limit --limit 1/second -j LOG + inet/filter/logdrop-189 -j DROP + inet6/filter/logdrop-189 -j DROP inet/filter/FORWARD -j logaccept-final-30 inet6/filter/FORWARD -j logaccept-final-30 inet/filter/INPUT -j logaccept-final-30 @@ -5885,29 +7607,37 @@ Filter 403 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/logaccept-final-30 -j ACCEPT inet6/filter/logaccept-final-30 -j ACCEPT -Filter 404 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-397 - inet6/filter/FORWARD -j limit-397 - inet/filter/INPUT -j limit-397 - inet6/filter/INPUT -j limit-397 - inet/filter/OUTPUT -j limit-397 - inet6/filter/OUTPUT -j limit-397 - inet/filter/limit-397 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-397 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-397 -m limit --limit 1/second -j LOG - inet6/filter/limit-397 -m limit --limit 1/second -j LOG - -Filter 405 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} +Filter 548 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-398 - inet6/filter/FORWARD -j limit-398 - inet/filter/INPUT -j limit-398 - inet6/filter/INPUT -j limit-398 - inet/filter/OUTPUT -j limit-398 - inet6/filter/OUTPUT -j limit-398 - inet/filter/limit-398 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-398 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j limit-541 + inet6/filter/FORWARD -j limit-541 + inet/filter/INPUT -j limit-541 + inet6/filter/INPUT -j limit-541 + inet/filter/OUTPUT -j limit-541 + inet6/filter/OUTPUT -j limit-541 + inet/filter/limit-541 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-190 + inet6/filter/limit-541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-190 + inet/filter/logdrop-190 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-190 -m limit --limit 1/second -j LOG + inet/filter/logdrop-190 -j DROP + inet6/filter/logdrop-190 -j DROP + inet/filter/limit-541 -m limit --limit 1/second -j LOG + inet6/filter/limit-541 -m limit --limit 1/second -j LOG + +Filter 549 {"flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-542 + inet6/filter/FORWARD -j limit-542 + inet/filter/INPUT -j limit-542 + inet6/filter/INPUT -j limit-542 + inet/filter/OUTPUT -j limit-542 + inet6/filter/OUTPUT -j limit-542 + inet/filter/limit-542 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-191 + inet6/filter/limit-542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-191 + inet/filter/logdrop-191 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-191 -m limit --limit 1/second -j LOG + inet/filter/logdrop-191 -j DROP + inet6/filter/logdrop-191 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -5915,31 +7645,37 @@ Filter 405 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 406 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} +Filter 550 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-399 - inet6/filter/FORWARD -j limit-399 - inet/filter/INPUT -j limit-399 - inet6/filter/INPUT -j limit-399 - inet/filter/OUTPUT -j limit-399 - inet6/filter/OUTPUT -j limit-399 - inet/filter/limit-399 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-399 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j limit-543 + inet6/filter/FORWARD -j limit-543 + inet/filter/INPUT -j limit-543 + inet6/filter/INPUT -j limit-543 + inet/filter/OUTPUT -j limit-543 + inet6/filter/OUTPUT -j limit-543 + inet/filter/limit-543 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-192 + inet6/filter/limit-543 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-192 + inet/filter/logdrop-192 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-192 -m limit --limit 1/second -j LOG + inet/filter/logdrop-192 -j DROP + inet6/filter/logdrop-192 -j DROP -Filter 407 {"flow-limit":150} +Filter 551 {"flow-limit":{"addr":"dest","interval":5,"name":"A"}} (filter-limit) - inet/filter/FORWARD -j limit-400 - inet6/filter/FORWARD -j limit-400 - inet/filter/INPUT -j limit-400 - inet6/filter/INPUT -j limit-400 - inet/filter/OUTPUT -j limit-400 - inet6/filter/OUTPUT -j limit-400 - inet/filter/limit-400 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-400 -j RETURN - inet6/filter/limit-400 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-400 -j RETURN - inet/filter/limit-400 -m limit --limit 1/second -j LOG - inet6/filter/limit-400 -m limit --limit 1/second -j LOG - inet/filter/limit-400 -j DROP - inet6/filter/limit-400 -j DROP + inet/filter/FORWARD -j limit-544 + inet6/filter/FORWARD -j limit-544 + inet/filter/INPUT -j limit-544 + inet6/filter/INPUT -j limit-544 + inet/filter/OUTPUT -j limit-544 + inet6/filter/OUTPUT -j limit-544 + inet/filter/limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-193 + inet6/filter/limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-193 + inet/filter/logdrop-193 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-193 -m limit --limit 1/second -j LOG + inet/filter/logdrop-193 -j DROP + inet6/filter/logdrop-193 -j DROP + inet/filter/limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -5947,35 +7683,39 @@ Filter 407 {"flow-limit":150} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 408 {"action":"pass","flow-limit":150} -(filter-limit) - inet/filter/FORWARD -j limit-401 - inet6/filter/FORWARD -j limit-401 - inet/filter/INPUT -j limit-401 - inet6/filter/INPUT -j limit-401 - inet/filter/OUTPUT -j limit-401 - inet6/filter/OUTPUT -j limit-401 - inet/filter/limit-401 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-401 -j RETURN - inet6/filter/limit-401 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-401 -j RETURN - inet/filter/limit-401 -m limit --limit 1/second -j LOG - inet6/filter/limit-401 -m limit --limit 1/second -j LOG - inet/filter/limit-401 -j DROP - inet6/filter/limit-401 -j DROP - -Filter 409 {"flow-limit":150,"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-402 - inet6/filter/FORWARD -j limit-402 - inet/filter/INPUT -j limit-402 - inet6/filter/INPUT -j limit-402 - inet/filter/OUTPUT -j limit-402 - inet6/filter/OUTPUT -j limit-402 - inet/filter/limit-402 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-402 -j RETURN - inet6/filter/limit-402 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-402 -j RETURN - inet/filter/limit-402 -m limit --limit 1/second -j LOG - inet6/filter/limit-402 -m limit --limit 1/second -j LOG - inet/filter/limit-402 -j DROP - inet6/filter/limit-402 -j DROP +Filter 552 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-545 + inet6/filter/FORWARD -j limit-545 + inet/filter/INPUT -j limit-545 + inet6/filter/INPUT -j limit-545 + inet/filter/OUTPUT -j limit-545 + inet6/filter/OUTPUT -j limit-545 + inet/filter/limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-194 + inet6/filter/limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-194 + inet/filter/logdrop-194 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-194 -m limit --limit 1/second -j LOG + inet/filter/logdrop-194 -j DROP + inet6/filter/logdrop-194 -j DROP + inet/filter/limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 553 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-546 + inet6/filter/FORWARD -j limit-546 + inet/filter/INPUT -j limit-546 + inet6/filter/INPUT -j limit-546 + inet/filter/OUTPUT -j limit-546 + inet6/filter/OUTPUT -j limit-546 + inet/filter/limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-195 + inet6/filter/limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-195 + inet/filter/logdrop-195 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-195 -m limit --limit 1/second -j LOG + inet/filter/logdrop-195 -j DROP + inet6/filter/logdrop-195 -j DROP + inet/filter/limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j logaccept-final-31 inet6/filter/FORWARD -j logaccept-final-31 inet/filter/INPUT -j logaccept-final-31 @@ -5987,20 +7727,39 @@ Filter 409 {"flow-limit":150,"log":true} inet/filter/logaccept-final-31 -j ACCEPT inet6/filter/logaccept-final-31 -j ACCEPT -Filter 410 {"flow-limit":150,"log":"none"} +Filter 554 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-403 - inet6/filter/FORWARD -j limit-403 - inet/filter/INPUT -j limit-403 - inet6/filter/INPUT -j limit-403 - inet/filter/OUTPUT -j limit-403 - inet6/filter/OUTPUT -j limit-403 - inet/filter/limit-403 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-403 -j RETURN - inet6/filter/limit-403 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-403 -j RETURN - inet/filter/limit-403 -m limit --limit 1/second -j LOG - inet6/filter/limit-403 -m limit --limit 1/second -j LOG - inet/filter/limit-403 -j DROP - inet6/filter/limit-403 -j DROP + inet/filter/FORWARD -j limit-547 + inet6/filter/FORWARD -j limit-547 + inet/filter/INPUT -j limit-547 + inet6/filter/INPUT -j limit-547 + inet/filter/OUTPUT -j limit-547 + inet6/filter/OUTPUT -j limit-547 + inet/filter/limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-196 + inet6/filter/limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-196 + inet/filter/logdrop-196 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-196 -m limit --limit 1/second -j LOG + inet/filter/logdrop-196 -j DROP + inet6/filter/logdrop-196 -j DROP + inet/filter/limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 555 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-548 + inet6/filter/FORWARD -j limit-548 + inet/filter/INPUT -j limit-548 + inet6/filter/INPUT -j limit-548 + inet/filter/OUTPUT -j limit-548 + inet6/filter/OUTPUT -j limit-548 + inet/filter/limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-197 + inet6/filter/limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-197 + inet/filter/logdrop-197 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-197 -m limit --limit 1/second -j LOG + inet/filter/logdrop-197 -j DROP + inet6/filter/logdrop-197 -j DROP + inet/filter/limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -6008,20 +7767,37 @@ Filter 410 {"flow-limit":150,"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 411 {"flow-limit":{"count":150}} -(filter-limit) - inet/filter/FORWARD -j limit-404 - inet6/filter/FORWARD -j limit-404 - inet/filter/INPUT -j limit-404 - inet6/filter/INPUT -j limit-404 - inet/filter/OUTPUT -j limit-404 - inet6/filter/OUTPUT -j limit-404 - inet/filter/limit-404 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-404 -j RETURN - inet6/filter/limit-404 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-404 -j RETURN - inet/filter/limit-404 -m limit --limit 1/second -j LOG - inet6/filter/limit-404 -m limit --limit 1/second -j LOG - inet/filter/limit-404 -j DROP - inet6/filter/limit-404 -j DROP +Filter 556 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-549 + inet6/filter/FORWARD -j limit-549 + inet/filter/INPUT -j limit-549 + inet6/filter/INPUT -j limit-549 + inet/filter/OUTPUT -j limit-549 + inet6/filter/OUTPUT -j limit-549 + inet/filter/limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-198 + inet6/filter/limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-198 + inet/filter/logdrop-198 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-198 -m limit --limit 1/second -j LOG + inet/filter/logdrop-198 -j DROP + inet6/filter/logdrop-198 -j DROP + inet/filter/limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 557 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-550 + inet6/filter/FORWARD -j limit-550 + inet/filter/INPUT -j limit-550 + inet6/filter/INPUT -j limit-550 + inet/filter/OUTPUT -j limit-550 + inet6/filter/OUTPUT -j limit-550 + inet/filter/limit-550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-199 + inet6/filter/limit-550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-199 + inet/filter/logdrop-199 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-199 -m limit --limit 1/second -j LOG + inet/filter/logdrop-199 -j DROP + inet6/filter/logdrop-199 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -6029,35 +7805,35 @@ Filter 411 {"flow-limit":{"count":150}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 412 {"action":"pass","flow-limit":{"count":150}} +Filter 558 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} (filter-limit) - inet/filter/FORWARD -j limit-405 - inet6/filter/FORWARD -j limit-405 - inet/filter/INPUT -j limit-405 - inet6/filter/INPUT -j limit-405 - inet/filter/OUTPUT -j limit-405 - inet6/filter/OUTPUT -j limit-405 - inet/filter/limit-405 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-405 -j RETURN - inet6/filter/limit-405 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-405 -j RETURN - inet/filter/limit-405 -m limit --limit 1/second -j LOG - inet6/filter/limit-405 -m limit --limit 1/second -j LOG - inet/filter/limit-405 -j DROP - inet6/filter/limit-405 -j DROP + inet/filter/FORWARD -j limit-551 + inet6/filter/FORWARD -j limit-551 + inet/filter/INPUT -j limit-551 + inet6/filter/INPUT -j limit-551 + inet/filter/OUTPUT -j limit-551 + inet6/filter/OUTPUT -j limit-551 + inet/filter/limit-551 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-200 + inet6/filter/limit-551 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-200 + inet/filter/logdrop-200 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-200 -m limit --limit 1/second -j LOG + inet/filter/logdrop-200 -j DROP + inet6/filter/logdrop-200 -j DROP -Filter 413 {"flow-limit":{"count":150},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-406 - inet6/filter/FORWARD -j limit-406 - inet/filter/INPUT -j limit-406 - inet6/filter/INPUT -j limit-406 - inet/filter/OUTPUT -j limit-406 - inet6/filter/OUTPUT -j limit-406 - inet/filter/limit-406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-406 -j RETURN - inet6/filter/limit-406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-406 -j RETURN - inet/filter/limit-406 -m limit --limit 1/second -j LOG - inet6/filter/limit-406 -m limit --limit 1/second -j LOG - inet/filter/limit-406 -j DROP - inet6/filter/limit-406 -j DROP +Filter 559 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-552 + inet6/filter/FORWARD -j limit-552 + inet/filter/INPUT -j limit-552 + inet6/filter/INPUT -j limit-552 + inet/filter/OUTPUT -j limit-552 + inet6/filter/OUTPUT -j limit-552 + inet/filter/limit-552 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-201 + inet6/filter/limit-552 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-201 + inet/filter/logdrop-201 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-201 -m limit --limit 1/second -j LOG + inet/filter/logdrop-201 -j DROP + inet6/filter/logdrop-201 -j DROP inet/filter/FORWARD -j logaccept-final-32 inet6/filter/FORWARD -j logaccept-final-32 inet/filter/INPUT -j logaccept-final-32 @@ -6069,20 +7845,37 @@ Filter 413 {"flow-limit":{"count":150},"log":true} inet/filter/logaccept-final-32 -j ACCEPT inet6/filter/logaccept-final-32 -j ACCEPT -Filter 414 {"flow-limit":{"count":150},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-407 - inet6/filter/FORWARD -j limit-407 - inet/filter/INPUT -j limit-407 - inet6/filter/INPUT -j limit-407 - inet/filter/OUTPUT -j limit-407 - inet6/filter/OUTPUT -j limit-407 - inet/filter/limit-407 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-407 -j RETURN - inet6/filter/limit-407 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-407 -j RETURN - inet/filter/limit-407 -m limit --limit 1/second -j LOG - inet6/filter/limit-407 -m limit --limit 1/second -j LOG - inet/filter/limit-407 -j DROP - inet6/filter/limit-407 -j DROP +Filter 560 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-553 + inet6/filter/FORWARD -j limit-553 + inet/filter/INPUT -j limit-553 + inet6/filter/INPUT -j limit-553 + inet/filter/OUTPUT -j limit-553 + inet6/filter/OUTPUT -j limit-553 + inet/filter/limit-553 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-202 + inet6/filter/limit-553 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-202 + inet/filter/logdrop-202 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-202 -m limit --limit 1/second -j LOG + inet/filter/logdrop-202 -j DROP + inet6/filter/logdrop-202 -j DROP + inet/filter/limit-553 -m limit --limit 1/second -j LOG + inet6/filter/limit-553 -m limit --limit 1/second -j LOG + +Filter 561 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-554 + inet6/filter/FORWARD -j limit-554 + inet/filter/INPUT -j limit-554 + inet6/filter/INPUT -j limit-554 + inet/filter/OUTPUT -j limit-554 + inet6/filter/OUTPUT -j limit-554 + inet/filter/limit-554 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-203 + inet6/filter/limit-554 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-203 + inet/filter/logdrop-203 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-203 -m limit --limit 1/second -j LOG + inet/filter/logdrop-203 -j DROP + inet6/filter/logdrop-203 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -6090,18 +7883,37 @@ Filter 414 {"flow-limit":{"count":150},"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 415 {"flow-limit":{"count":150,"log":false}} -(filter-limit) - inet/filter/FORWARD -j limit-408 - inet6/filter/FORWARD -j limit-408 - inet/filter/INPUT -j limit-408 - inet6/filter/INPUT -j limit-408 - inet/filter/OUTPUT -j limit-408 - inet6/filter/OUTPUT -j limit-408 - inet/filter/limit-408 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-408 -j RETURN - inet6/filter/limit-408 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-408 -j RETURN - inet/filter/limit-408 -j DROP - inet6/filter/limit-408 -j DROP +Filter 562 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-555 + inet6/filter/FORWARD -j limit-555 + inet/filter/INPUT -j limit-555 + inet6/filter/INPUT -j limit-555 + inet/filter/OUTPUT -j limit-555 + inet6/filter/OUTPUT -j limit-555 + inet/filter/limit-555 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-204 + inet6/filter/limit-555 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-204 + inet/filter/logdrop-204 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-204 -m limit --limit 1/second -j LOG + inet/filter/logdrop-204 -j DROP + inet6/filter/logdrop-204 -j DROP + +Filter 563 {"flow-limit":{"interval":5,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-556 + inet6/filter/FORWARD -j limit-556 + inet/filter/INPUT -j limit-556 + inet6/filter/INPUT -j limit-556 + inet/filter/OUTPUT -j limit-556 + inet6/filter/OUTPUT -j limit-556 + inet/filter/limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-205 + inet6/filter/limit-556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-205 + inet/filter/logdrop-205 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-205 -m limit --limit 1/second -j LOG + inet/filter/logdrop-205 -j DROP + inet6/filter/logdrop-205 -j DROP + inet/filter/limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-556 -m recent --name user:C --rsource --mask fe00:: --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -6109,31 +7921,39 @@ Filter 415 {"flow-limit":{"count":150,"log":false}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 416 {"action":"pass","flow-limit":{"count":150,"log":false}} -(filter-limit) - inet/filter/FORWARD -j limit-409 - inet6/filter/FORWARD -j limit-409 - inet/filter/INPUT -j limit-409 - inet6/filter/INPUT -j limit-409 - inet/filter/OUTPUT -j limit-409 - inet6/filter/OUTPUT -j limit-409 - inet/filter/limit-409 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-409 -j RETURN - inet6/filter/limit-409 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-409 -j RETURN - inet/filter/limit-409 -j DROP - inet6/filter/limit-409 -j DROP - -Filter 417 {"flow-limit":{"count":150,"log":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-410 - inet6/filter/FORWARD -j limit-410 - inet/filter/INPUT -j limit-410 - inet6/filter/INPUT -j limit-410 - inet/filter/OUTPUT -j limit-410 - inet6/filter/OUTPUT -j limit-410 - inet/filter/limit-410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-410 -j RETURN - inet6/filter/limit-410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-410 -j RETURN - inet/filter/limit-410 -j DROP - inet6/filter/limit-410 -j DROP +Filter 564 {"action":"pass","flow-limit":{"interval":5,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-557 + inet6/filter/FORWARD -j limit-557 + inet/filter/INPUT -j limit-557 + inet6/filter/INPUT -j limit-557 + inet/filter/OUTPUT -j limit-557 + inet6/filter/OUTPUT -j limit-557 + inet/filter/limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-206 + inet6/filter/limit-557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-206 + inet/filter/logdrop-206 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-206 -m limit --limit 1/second -j LOG + inet/filter/logdrop-206 -j DROP + inet6/filter/logdrop-206 -j DROP + inet/filter/limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-557 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 565 {"flow-limit":{"interval":5,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-558 + inet6/filter/FORWARD -j limit-558 + inet/filter/INPUT -j limit-558 + inet6/filter/INPUT -j limit-558 + inet/filter/OUTPUT -j limit-558 + inet6/filter/OUTPUT -j limit-558 + inet/filter/limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-207 + inet6/filter/limit-558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-207 + inet/filter/logdrop-207 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-207 -m limit --limit 1/second -j LOG + inet/filter/logdrop-207 -j DROP + inet6/filter/logdrop-207 -j DROP + inet/filter/limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-558 -m recent --name user:C --rsource --mask fe00:: --set inet/filter/FORWARD -j logaccept-final-33 inet6/filter/FORWARD -j logaccept-final-33 inet/filter/INPUT -j logaccept-final-33 @@ -6145,18 +7965,39 @@ Filter 417 {"flow-limit":{"count":150,"log":false},"log" inet/filter/logaccept-final-33 -j ACCEPT inet6/filter/logaccept-final-33 -j ACCEPT -Filter 418 {"flow-limit":{"count":150,"log":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-411 - inet6/filter/FORWARD -j limit-411 - inet/filter/INPUT -j limit-411 - inet6/filter/INPUT -j limit-411 - inet/filter/OUTPUT -j limit-411 - inet6/filter/OUTPUT -j limit-411 - inet/filter/limit-411 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-411 -j RETURN - inet6/filter/limit-411 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-411 -j RETURN - inet/filter/limit-411 -j DROP - inet6/filter/limit-411 -j DROP +Filter 566 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-559 + inet6/filter/FORWARD -j limit-559 + inet/filter/INPUT -j limit-559 + inet6/filter/INPUT -j limit-559 + inet/filter/OUTPUT -j limit-559 + inet6/filter/OUTPUT -j limit-559 + inet/filter/limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-208 + inet6/filter/limit-559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-208 + inet/filter/logdrop-208 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-208 -m limit --limit 1/second -j LOG + inet/filter/logdrop-208 -j DROP + inet6/filter/logdrop-208 -j DROP + inet/filter/limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-559 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 567 {"flow-limit":{"interval":5,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-560 + inet6/filter/FORWARD -j limit-560 + inet/filter/INPUT -j limit-560 + inet6/filter/INPUT -j limit-560 + inet/filter/OUTPUT -j limit-560 + inet6/filter/OUTPUT -j limit-560 + inet/filter/limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-209 + inet6/filter/limit-560 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-209 + inet/filter/logdrop-209 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-209 -m limit --limit 1/second -j LOG + inet/filter/logdrop-209 -j DROP + inet6/filter/logdrop-209 -j DROP + inet/filter/limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-560 -m recent --name user:C --rsource --mask fe00:: --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -6164,18 +8005,37 @@ Filter 418 {"flow-limit":{"count":150,"log":false},"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 419 {"flow-limit":{"count":150,"log":"none"}} -(filter-limit) - inet/filter/FORWARD -j limit-412 - inet6/filter/FORWARD -j limit-412 - inet/filter/INPUT -j limit-412 - inet6/filter/INPUT -j limit-412 - inet/filter/OUTPUT -j limit-412 - inet6/filter/OUTPUT -j limit-412 - inet/filter/limit-412 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-412 -j RETURN - inet6/filter/limit-412 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-412 -j RETURN - inet/filter/limit-412 -j DROP - inet6/filter/limit-412 -j DROP +Filter 568 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-561 + inet6/filter/FORWARD -j limit-561 + inet/filter/INPUT -j limit-561 + inet6/filter/INPUT -j limit-561 + inet/filter/OUTPUT -j limit-561 + inet6/filter/OUTPUT -j limit-561 + inet/filter/limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-210 + inet6/filter/limit-561 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-210 + inet/filter/logdrop-210 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-210 -m limit --limit 1/second -j LOG + inet/filter/logdrop-210 -j DROP + inet6/filter/logdrop-210 -j DROP + inet/filter/limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-561 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 569 {"flow-limit":{"interval":5,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-562 + inet6/filter/FORWARD -j limit-562 + inet/filter/INPUT -j limit-562 + inet6/filter/INPUT -j limit-562 + inet/filter/OUTPUT -j limit-562 + inet6/filter/OUTPUT -j limit-562 + inet/filter/limit-562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-211 + inet6/filter/limit-562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-211 + inet/filter/logdrop-211 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-211 -m limit --limit 1/second -j LOG + inet/filter/logdrop-211 -j DROP + inet6/filter/logdrop-211 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -6183,31 +8043,35 @@ Filter 419 {"flow-limit":{"count":150,"log":"none"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 420 {"action":"pass","flow-limit":{"count":150,"log":"none"}} -(filter-limit) - inet/filter/FORWARD -j limit-413 - inet6/filter/FORWARD -j limit-413 - inet/filter/INPUT -j limit-413 - inet6/filter/INPUT -j limit-413 - inet/filter/OUTPUT -j limit-413 - inet6/filter/OUTPUT -j limit-413 - inet/filter/limit-413 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-413 -j RETURN - inet6/filter/limit-413 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-413 -j RETURN - inet/filter/limit-413 -j DROP - inet6/filter/limit-413 -j DROP - -Filter 421 {"flow-limit":{"count":150,"log":"none"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-414 - inet6/filter/FORWARD -j limit-414 - inet/filter/INPUT -j limit-414 - inet6/filter/INPUT -j limit-414 - inet/filter/OUTPUT -j limit-414 - inet6/filter/OUTPUT -j limit-414 - inet/filter/limit-414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-414 -j RETURN - inet6/filter/limit-414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-414 -j RETURN - inet/filter/limit-414 -j DROP - inet6/filter/limit-414 -j DROP +Filter 570 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-563 + inet6/filter/FORWARD -j limit-563 + inet/filter/INPUT -j limit-563 + inet6/filter/INPUT -j limit-563 + inet/filter/OUTPUT -j limit-563 + inet6/filter/OUTPUT -j limit-563 + inet/filter/limit-563 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-212 + inet6/filter/limit-563 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-212 + inet/filter/logdrop-212 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-212 -m limit --limit 1/second -j LOG + inet/filter/logdrop-212 -j DROP + inet6/filter/logdrop-212 -j DROP + +Filter 571 {"flow-limit":{"interval":5,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-564 + inet6/filter/FORWARD -j limit-564 + inet/filter/INPUT -j limit-564 + inet6/filter/INPUT -j limit-564 + inet/filter/OUTPUT -j limit-564 + inet6/filter/OUTPUT -j limit-564 + inet/filter/limit-564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-213 + inet6/filter/limit-564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-213 + inet/filter/logdrop-213 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-213 -m limit --limit 1/second -j LOG + inet/filter/logdrop-213 -j DROP + inet6/filter/logdrop-213 -j DROP inet/filter/FORWARD -j logaccept-final-34 inet6/filter/FORWARD -j logaccept-final-34 inet/filter/INPUT -j logaccept-final-34 @@ -6219,18 +8083,37 @@ Filter 421 {"flow-limit":{"count":150,"log":"none"},"log inet/filter/logaccept-final-34 -j ACCEPT inet6/filter/logaccept-final-34 -j ACCEPT -Filter 422 {"flow-limit":{"count":150,"log":"none"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-415 - inet6/filter/FORWARD -j limit-415 - inet/filter/INPUT -j limit-415 - inet6/filter/INPUT -j limit-415 - inet/filter/OUTPUT -j limit-415 - inet6/filter/OUTPUT -j limit-415 - inet/filter/limit-415 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-415 -j RETURN - inet6/filter/limit-415 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-415 -j RETURN - inet/filter/limit-415 -j DROP - inet6/filter/limit-415 -j DROP +Filter 572 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-565 + inet6/filter/FORWARD -j limit-565 + inet/filter/INPUT -j limit-565 + inet6/filter/INPUT -j limit-565 + inet/filter/OUTPUT -j limit-565 + inet6/filter/OUTPUT -j limit-565 + inet/filter/limit-565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-214 + inet6/filter/limit-565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-214 + inet/filter/logdrop-214 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-214 -m limit --limit 1/second -j LOG + inet/filter/logdrop-214 -j DROP + inet6/filter/logdrop-214 -j DROP + inet/filter/limit-565 -m limit --limit 1/second -j LOG + inet6/filter/limit-565 -m limit --limit 1/second -j LOG + +Filter 573 {"flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-566 + inet6/filter/FORWARD -j limit-566 + inet/filter/INPUT -j limit-566 + inet6/filter/INPUT -j limit-566 + inet/filter/OUTPUT -j limit-566 + inet6/filter/OUTPUT -j limit-566 + inet/filter/limit-566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-215 + inet6/filter/limit-566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-215 + inet/filter/logdrop-215 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-215 -m limit --limit 1/second -j LOG + inet/filter/logdrop-215 -j DROP + inet6/filter/logdrop-215 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -6238,20 +8121,37 @@ Filter 422 {"flow-limit":{"count":150,"log":"none"},"log inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 423 {"flow-limit":{"count":150,"interval":5}} -(filter-limit) - inet/filter/FORWARD -j limit-416 - inet6/filter/FORWARD -j limit-416 - inet/filter/INPUT -j limit-416 - inet6/filter/INPUT -j limit-416 - inet/filter/OUTPUT -j limit-416 - inet6/filter/OUTPUT -j limit-416 - inet/filter/limit-416 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-416 -j RETURN - inet6/filter/limit-416 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-416 -j RETURN - inet/filter/limit-416 -m limit --limit 1/second -j LOG - inet6/filter/limit-416 -m limit --limit 1/second -j LOG - inet/filter/limit-416 -j DROP - inet6/filter/limit-416 -j DROP +Filter 574 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-567 + inet6/filter/FORWARD -j limit-567 + inet/filter/INPUT -j limit-567 + inet6/filter/INPUT -j limit-567 + inet/filter/OUTPUT -j limit-567 + inet6/filter/OUTPUT -j limit-567 + inet/filter/limit-567 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-216 + inet6/filter/limit-567 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-216 + inet/filter/logdrop-216 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-216 -m limit --limit 1/second -j LOG + inet/filter/logdrop-216 -j DROP + inet6/filter/logdrop-216 -j DROP + +Filter 575 {"flow-limit":{"addr":"dest","interval":5,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-568 + inet6/filter/FORWARD -j limit-568 + inet/filter/INPUT -j limit-568 + inet6/filter/INPUT -j limit-568 + inet/filter/OUTPUT -j limit-568 + inet6/filter/OUTPUT -j limit-568 + inet/filter/limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-217 + inet6/filter/limit-568 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-217 + inet/filter/logdrop-217 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-217 -m limit --limit 1/second -j LOG + inet/filter/logdrop-217 -j DROP + inet6/filter/logdrop-217 -j DROP + inet/filter/limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-568 -m recent --name user:C --rdest --mask fe00:: --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -6259,35 +8159,39 @@ Filter 423 {"flow-limit":{"count":150,"interval":5}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 424 {"action":"pass","flow-limit":{"count":150,"interval":5}} -(filter-limit) - inet/filter/FORWARD -j limit-417 - inet6/filter/FORWARD -j limit-417 - inet/filter/INPUT -j limit-417 - inet6/filter/INPUT -j limit-417 - inet/filter/OUTPUT -j limit-417 - inet6/filter/OUTPUT -j limit-417 - inet/filter/limit-417 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-417 -j RETURN - inet6/filter/limit-417 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-417 -j RETURN - inet/filter/limit-417 -m limit --limit 1/second -j LOG - inet6/filter/limit-417 -m limit --limit 1/second -j LOG - inet/filter/limit-417 -j DROP - inet6/filter/limit-417 -j DROP - -Filter 425 {"flow-limit":{"count":150,"interval":5},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-418 - inet6/filter/FORWARD -j limit-418 - inet/filter/INPUT -j limit-418 - inet6/filter/INPUT -j limit-418 - inet/filter/OUTPUT -j limit-418 - inet6/filter/OUTPUT -j limit-418 - inet/filter/limit-418 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-418 -j RETURN - inet6/filter/limit-418 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-418 -j RETURN - inet/filter/limit-418 -m limit --limit 1/second -j LOG - inet6/filter/limit-418 -m limit --limit 1/second -j LOG - inet/filter/limit-418 -j DROP - inet6/filter/limit-418 -j DROP +Filter 576 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-569 + inet6/filter/FORWARD -j limit-569 + inet/filter/INPUT -j limit-569 + inet6/filter/INPUT -j limit-569 + inet/filter/OUTPUT -j limit-569 + inet6/filter/OUTPUT -j limit-569 + inet/filter/limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-218 + inet6/filter/limit-569 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-218 + inet/filter/logdrop-218 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-218 -m limit --limit 1/second -j LOG + inet/filter/logdrop-218 -j DROP + inet6/filter/logdrop-218 -j DROP + inet/filter/limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-569 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 577 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-570 + inet6/filter/FORWARD -j limit-570 + inet/filter/INPUT -j limit-570 + inet6/filter/INPUT -j limit-570 + inet/filter/OUTPUT -j limit-570 + inet6/filter/OUTPUT -j limit-570 + inet/filter/limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-219 + inet6/filter/limit-570 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-219 + inet/filter/logdrop-219 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-219 -m limit --limit 1/second -j LOG + inet/filter/logdrop-219 -j DROP + inet6/filter/logdrop-219 -j DROP + inet/filter/limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-570 -m recent --name user:C --rdest --mask fe00:: --set inet/filter/FORWARD -j logaccept-final-35 inet6/filter/FORWARD -j logaccept-final-35 inet/filter/INPUT -j logaccept-final-35 @@ -6299,20 +8203,39 @@ Filter 425 {"flow-limit":{"count":150,"interval":5},"log inet/filter/logaccept-final-35 -j ACCEPT inet6/filter/logaccept-final-35 -j ACCEPT -Filter 426 {"flow-limit":{"count":150,"interval":5},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-419 - inet6/filter/FORWARD -j limit-419 - inet/filter/INPUT -j limit-419 - inet6/filter/INPUT -j limit-419 - inet/filter/OUTPUT -j limit-419 - inet6/filter/OUTPUT -j limit-419 - inet/filter/limit-419 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-419 -j RETURN - inet6/filter/limit-419 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-419 -j RETURN - inet/filter/limit-419 -m limit --limit 1/second -j LOG - inet6/filter/limit-419 -m limit --limit 1/second -j LOG - inet/filter/limit-419 -j DROP - inet6/filter/limit-419 -j DROP +Filter 578 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-571 + inet6/filter/FORWARD -j limit-571 + inet/filter/INPUT -j limit-571 + inet6/filter/INPUT -j limit-571 + inet/filter/OUTPUT -j limit-571 + inet6/filter/OUTPUT -j limit-571 + inet/filter/limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-220 + inet6/filter/limit-571 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-220 + inet/filter/logdrop-220 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-220 -m limit --limit 1/second -j LOG + inet/filter/logdrop-220 -j DROP + inet6/filter/logdrop-220 -j DROP + inet/filter/limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-571 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 579 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-572 + inet6/filter/FORWARD -j limit-572 + inet/filter/INPUT -j limit-572 + inet6/filter/INPUT -j limit-572 + inet/filter/OUTPUT -j limit-572 + inet6/filter/OUTPUT -j limit-572 + inet/filter/limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-221 + inet6/filter/limit-572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-221 + inet/filter/logdrop-221 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-221 -m limit --limit 1/second -j LOG + inet/filter/logdrop-221 -j DROP + inet6/filter/logdrop-221 -j DROP + inet/filter/limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-572 -m recent --name user:C --rdest --mask fe00:: --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -6320,18 +8243,37 @@ Filter 426 {"flow-limit":{"count":150,"interval":5},"log inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 427 {"flow-limit":{"count":150,"interval":5,"log":false}} -(filter-limit) - inet/filter/FORWARD -j limit-420 - inet6/filter/FORWARD -j limit-420 - inet/filter/INPUT -j limit-420 - inet6/filter/INPUT -j limit-420 - inet/filter/OUTPUT -j limit-420 - inet6/filter/OUTPUT -j limit-420 - inet/filter/limit-420 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-420 -j RETURN - inet6/filter/limit-420 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-420 -j RETURN - inet/filter/limit-420 -j DROP - inet6/filter/limit-420 -j DROP +Filter 580 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-573 + inet6/filter/FORWARD -j limit-573 + inet/filter/INPUT -j limit-573 + inet6/filter/INPUT -j limit-573 + inet/filter/OUTPUT -j limit-573 + inet6/filter/OUTPUT -j limit-573 + inet/filter/limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-222 + inet6/filter/limit-573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-222 + inet/filter/logdrop-222 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-222 -m limit --limit 1/second -j LOG + inet/filter/logdrop-222 -j DROP + inet6/filter/logdrop-222 -j DROP + inet/filter/limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-573 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 581 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-574 + inet6/filter/FORWARD -j limit-574 + inet/filter/INPUT -j limit-574 + inet6/filter/INPUT -j limit-574 + inet/filter/OUTPUT -j limit-574 + inet6/filter/OUTPUT -j limit-574 + inet/filter/limit-574 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-223 + inet6/filter/limit-574 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-223 + inet/filter/logdrop-223 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-223 -m limit --limit 1/second -j LOG + inet/filter/logdrop-223 -j DROP + inet6/filter/logdrop-223 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -6339,31 +8281,35 @@ Filter 427 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 428 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false}} -(filter-limit) - inet/filter/FORWARD -j limit-421 - inet6/filter/FORWARD -j limit-421 - inet/filter/INPUT -j limit-421 - inet6/filter/INPUT -j limit-421 - inet/filter/OUTPUT -j limit-421 - inet6/filter/OUTPUT -j limit-421 - inet/filter/limit-421 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-421 -j RETURN - inet6/filter/limit-421 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-421 -j RETURN - inet/filter/limit-421 -j DROP - inet6/filter/limit-421 -j DROP - -Filter 429 {"flow-limit":{"count":150,"interval":5,"log":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-422 - inet6/filter/FORWARD -j limit-422 - inet/filter/INPUT -j limit-422 - inet6/filter/INPUT -j limit-422 - inet/filter/OUTPUT -j limit-422 - inet6/filter/OUTPUT -j limit-422 - inet/filter/limit-422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-422 -j RETURN - inet6/filter/limit-422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-422 -j RETURN - inet/filter/limit-422 -j DROP - inet6/filter/limit-422 -j DROP +Filter 582 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-575 + inet6/filter/FORWARD -j limit-575 + inet/filter/INPUT -j limit-575 + inet6/filter/INPUT -j limit-575 + inet/filter/OUTPUT -j limit-575 + inet6/filter/OUTPUT -j limit-575 + inet/filter/limit-575 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-224 + inet6/filter/limit-575 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-224 + inet/filter/logdrop-224 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-224 -m limit --limit 1/second -j LOG + inet/filter/logdrop-224 -j DROP + inet6/filter/logdrop-224 -j DROP + +Filter 583 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-576 + inet6/filter/FORWARD -j limit-576 + inet/filter/INPUT -j limit-576 + inet6/filter/INPUT -j limit-576 + inet/filter/OUTPUT -j limit-576 + inet6/filter/OUTPUT -j limit-576 + inet/filter/limit-576 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-225 + inet6/filter/limit-576 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-225 + inet/filter/logdrop-225 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-225 -m limit --limit 1/second -j LOG + inet/filter/logdrop-225 -j DROP + inet6/filter/logdrop-225 -j DROP inet/filter/FORWARD -j logaccept-final-36 inet6/filter/FORWARD -j logaccept-final-36 inet/filter/INPUT -j logaccept-final-36 @@ -6375,18 +8321,37 @@ Filter 429 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/logaccept-final-36 -j ACCEPT inet6/filter/logaccept-final-36 -j ACCEPT -Filter 430 {"flow-limit":{"count":150,"interval":5,"log":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-423 - inet6/filter/FORWARD -j limit-423 - inet/filter/INPUT -j limit-423 - inet6/filter/INPUT -j limit-423 - inet/filter/OUTPUT -j limit-423 - inet6/filter/OUTPUT -j limit-423 - inet/filter/limit-423 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-423 -j RETURN - inet6/filter/limit-423 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-423 -j RETURN - inet/filter/limit-423 -j DROP - inet6/filter/limit-423 -j DROP +Filter 584 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-577 + inet6/filter/FORWARD -j limit-577 + inet/filter/INPUT -j limit-577 + inet6/filter/INPUT -j limit-577 + inet/filter/OUTPUT -j limit-577 + inet6/filter/OUTPUT -j limit-577 + inet/filter/limit-577 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-226 + inet6/filter/limit-577 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-226 + inet/filter/logdrop-226 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-226 -m limit --limit 1/second -j LOG + inet/filter/logdrop-226 -j DROP + inet6/filter/logdrop-226 -j DROP + inet/filter/limit-577 -m limit --limit 1/second -j LOG + inet6/filter/limit-577 -m limit --limit 1/second -j LOG + +Filter 585 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-578 + inet6/filter/FORWARD -j limit-578 + inet/filter/INPUT -j limit-578 + inet6/filter/INPUT -j limit-578 + inet/filter/OUTPUT -j limit-578 + inet6/filter/OUTPUT -j limit-578 + inet/filter/limit-578 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-227 + inet6/filter/limit-578 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-227 + inet/filter/logdrop-227 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-227 -m limit --limit 1/second -j LOG + inet/filter/logdrop-227 -j DROP + inet6/filter/logdrop-227 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -6394,18 +8359,33 @@ Filter 430 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 431 {"flow-limit":{"count":150,"interval":5,"log":"none"}} -(filter-limit) - inet/filter/FORWARD -j limit-424 - inet6/filter/FORWARD -j limit-424 - inet/filter/INPUT -j limit-424 - inet6/filter/INPUT -j limit-424 - inet/filter/OUTPUT -j limit-424 - inet6/filter/OUTPUT -j limit-424 - inet/filter/limit-424 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-424 -j RETURN - inet6/filter/limit-424 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-424 -j RETURN - inet/filter/limit-424 -j DROP - inet6/filter/limit-424 -j DROP +Filter 586 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-579 + inet6/filter/FORWARD -j limit-579 + inet/filter/INPUT -j limit-579 + inet6/filter/INPUT -j limit-579 + inet/filter/OUTPUT -j limit-579 + inet6/filter/OUTPUT -j limit-579 + inet/filter/limit-579 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-228 + inet6/filter/limit-579 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-228 + inet/filter/logdrop-228 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-228 -m limit --limit 1/second -j LOG + inet/filter/logdrop-228 -j DROP + inet6/filter/logdrop-228 -j DROP + +Filter 587 {"flow-limit":{"interval":5,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-580 + inet6/filter/FORWARD -j limit-580 + inet/filter/INPUT -j limit-580 + inet6/filter/INPUT -j limit-580 + inet/filter/OUTPUT -j limit-580 + inet6/filter/OUTPUT -j limit-580 + inet/filter/limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -6413,31 +8393,31 @@ Filter 431 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 432 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"}} -(filter-limit) - inet/filter/FORWARD -j limit-425 - inet6/filter/FORWARD -j limit-425 - inet/filter/INPUT -j limit-425 - inet6/filter/INPUT -j limit-425 - inet/filter/OUTPUT -j limit-425 - inet6/filter/OUTPUT -j limit-425 - inet/filter/limit-425 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-425 -j RETURN - inet6/filter/limit-425 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-425 -j RETURN - inet/filter/limit-425 -j DROP - inet6/filter/limit-425 -j DROP - -Filter 433 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-426 - inet6/filter/FORWARD -j limit-426 - inet/filter/INPUT -j limit-426 - inet6/filter/INPUT -j limit-426 - inet/filter/OUTPUT -j limit-426 - inet6/filter/OUTPUT -j limit-426 - inet/filter/limit-426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-426 -j RETURN - inet6/filter/limit-426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-426 -j RETURN - inet/filter/limit-426 -j DROP - inet6/filter/limit-426 -j DROP +Filter 588 {"action":"pass","flow-limit":{"interval":5,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-581 + inet6/filter/FORWARD -j limit-581 + inet/filter/INPUT -j limit-581 + inet6/filter/INPUT -j limit-581 + inet/filter/OUTPUT -j limit-581 + inet6/filter/OUTPUT -j limit-581 + inet/filter/limit-581 -m recent --name limit-581 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-581 -m recent --name limit-581 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-581 -m recent --name limit-581 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-581 -m recent --name limit-581 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 589 {"flow-limit":{"interval":5,"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-582 + inet6/filter/FORWARD -j limit-582 + inet/filter/INPUT -j limit-582 + inet6/filter/INPUT -j limit-582 + inet/filter/OUTPUT -j limit-582 + inet6/filter/OUTPUT -j limit-582 + inet/filter/limit-582 -m recent --name limit-582 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-582 -m recent --name limit-582 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-582 -m recent --name limit-582 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-582 -m recent --name limit-582 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j logaccept-final-37 inet6/filter/FORWARD -j logaccept-final-37 inet/filter/INPUT -j logaccept-final-37 @@ -6449,18 +8429,131 @@ Filter 433 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/logaccept-final-37 -j ACCEPT inet6/filter/logaccept-final-37 -j ACCEPT -Filter 434 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":"none"} +Filter 590 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-583 + inet6/filter/FORWARD -j limit-583 + inet/filter/INPUT -j limit-583 + inet6/filter/INPUT -j limit-583 + inet/filter/OUTPUT -j limit-583 + inet6/filter/OUTPUT -j limit-583 + inet/filter/limit-583 -m recent --name limit-583 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-583 -m recent --name limit-583 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-583 -m recent --name limit-583 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-583 -m recent --name limit-583 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 591 {"flow-limit":{"interval":5,"log":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-584 + inet6/filter/FORWARD -j limit-584 + inet/filter/INPUT -j limit-584 + inet6/filter/INPUT -j limit-584 + inet/filter/OUTPUT -j limit-584 + inet6/filter/OUTPUT -j limit-584 + inet/filter/limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 592 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-427 - inet6/filter/FORWARD -j limit-427 - inet/filter/INPUT -j limit-427 - inet6/filter/INPUT -j limit-427 - inet/filter/OUTPUT -j limit-427 - inet6/filter/OUTPUT -j limit-427 - inet/filter/limit-427 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-427 -j RETURN - inet6/filter/limit-427 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-427 -j RETURN - inet/filter/limit-427 -j DROP - inet6/filter/limit-427 -j DROP + inet/filter/FORWARD -j limit-585 + inet6/filter/FORWARD -j limit-585 + inet/filter/INPUT -j limit-585 + inet6/filter/INPUT -j limit-585 + inet/filter/OUTPUT -j limit-585 + inet6/filter/OUTPUT -j limit-585 + inet/filter/limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 593 {"flow-limit":{"interval":5,"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-586 + inet6/filter/FORWARD -j limit-586 + inet/filter/INPUT -j limit-586 + inet6/filter/INPUT -j limit-586 + inet/filter/OUTPUT -j limit-586 + inet6/filter/OUTPUT -j limit-586 + inet/filter/limit-586 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-586 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 594 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-587 + inet6/filter/FORWARD -j limit-587 + inet/filter/INPUT -j limit-587 + inet6/filter/INPUT -j limit-587 + inet/filter/OUTPUT -j limit-587 + inet6/filter/OUTPUT -j limit-587 + inet/filter/limit-587 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-587 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 595 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-588 + inet6/filter/FORWARD -j limit-588 + inet/filter/INPUT -j limit-588 + inet6/filter/INPUT -j limit-588 + inet/filter/OUTPUT -j limit-588 + inet6/filter/OUTPUT -j limit-588 + inet/filter/limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-38 + inet6/filter/FORWARD -j logaccept-final-38 + inet/filter/INPUT -j logaccept-final-38 + inet6/filter/INPUT -j logaccept-final-38 + inet/filter/OUTPUT -j logaccept-final-38 + inet6/filter/OUTPUT -j logaccept-final-38 + inet/filter/logaccept-final-38 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-38 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-38 -j ACCEPT + inet6/filter/logaccept-final-38 -j ACCEPT + +Filter 596 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-589 + inet6/filter/FORWARD -j limit-589 + inet/filter/INPUT -j limit-589 + inet6/filter/INPUT -j limit-589 + inet/filter/OUTPUT -j limit-589 + inet6/filter/OUTPUT -j limit-589 + inet/filter/limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 597 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-590 + inet6/filter/FORWARD -j limit-590 + inet/filter/INPUT -j limit-590 + inet6/filter/INPUT -j limit-590 + inet/filter/OUTPUT -j limit-590 + inet6/filter/OUTPUT -j limit-590 + inet/filter/limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -6468,18 +8561,2093 @@ Filter 434 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 435 {"flow-limit":1,"in":"A","no-track":true,"out":"_fw"} +Filter 598 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-428 - inet6/filter/INPUT -i eth0 -j limit-428 - inet/filter/limit-428 -m recent --name limit-428 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-133 - inet6/filter/limit-428 -m recent --name limit-428 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-133 - inet/filter/logdrop-133 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-133 -m limit --limit 1/second -j LOG - inet/filter/logdrop-133 -j DROP - inet6/filter/logdrop-133 -j DROP - inet/filter/limit-428 -m recent --name limit-428 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-428 -m recent --name limit-428 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/FORWARD -j limit-591 + inet6/filter/FORWARD -j limit-591 + inet/filter/INPUT -j limit-591 + inet6/filter/INPUT -j limit-591 + inet/filter/OUTPUT -j limit-591 + inet6/filter/OUTPUT -j limit-591 + inet/filter/limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 599 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-592 + inet6/filter/FORWARD -j limit-592 + inet/filter/INPUT -j limit-592 + inet6/filter/INPUT -j limit-592 + inet/filter/OUTPUT -j limit-592 + inet6/filter/OUTPUT -j limit-592 + inet/filter/limit-592 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-592 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 600 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-593 + inet6/filter/FORWARD -j limit-593 + inet/filter/INPUT -j limit-593 + inet6/filter/INPUT -j limit-593 + inet/filter/OUTPUT -j limit-593 + inet6/filter/OUTPUT -j limit-593 + inet/filter/limit-593 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-593 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 601 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-594 + inet6/filter/FORWARD -j limit-594 + inet/filter/INPUT -j limit-594 + inet6/filter/INPUT -j limit-594 + inet/filter/OUTPUT -j limit-594 + inet6/filter/OUTPUT -j limit-594 + inet/filter/limit-594 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-594 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-39 + inet6/filter/FORWARD -j logaccept-final-39 + inet/filter/INPUT -j logaccept-final-39 + inet6/filter/INPUT -j logaccept-final-39 + inet/filter/OUTPUT -j logaccept-final-39 + inet6/filter/OUTPUT -j logaccept-final-39 + inet/filter/logaccept-final-39 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-39 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-39 -j ACCEPT + inet6/filter/logaccept-final-39 -j ACCEPT + +Filter 602 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-595 + inet6/filter/FORWARD -j limit-595 + inet/filter/INPUT -j limit-595 + inet6/filter/INPUT -j limit-595 + inet/filter/OUTPUT -j limit-595 + inet6/filter/OUTPUT -j limit-595 + inet/filter/limit-595 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-595 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-595 -m limit --limit 1/second -j LOG + inet6/filter/limit-595 -m limit --limit 1/second -j LOG + +Filter 603 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-596 + inet6/filter/FORWARD -j limit-596 + inet/filter/INPUT -j limit-596 + inet6/filter/INPUT -j limit-596 + inet/filter/OUTPUT -j limit-596 + inet6/filter/OUTPUT -j limit-596 + inet/filter/limit-596 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-596 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 604 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-597 + inet6/filter/FORWARD -j limit-597 + inet/filter/INPUT -j limit-597 + inet6/filter/INPUT -j limit-597 + inet/filter/OUTPUT -j limit-597 + inet6/filter/OUTPUT -j limit-597 + inet/filter/limit-597 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-597 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 605 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-598 + inet6/filter/FORWARD -j limit-598 + inet/filter/INPUT -j limit-598 + inet6/filter/INPUT -j limit-598 + inet/filter/OUTPUT -j limit-598 + inet6/filter/OUTPUT -j limit-598 + inet/filter/limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 606 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-599 + inet6/filter/FORWARD -j limit-599 + inet/filter/INPUT -j limit-599 + inet6/filter/INPUT -j limit-599 + inet/filter/OUTPUT -j limit-599 + inet6/filter/OUTPUT -j limit-599 + inet/filter/limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 607 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-600 + inet6/filter/FORWARD -j limit-600 + inet/filter/INPUT -j limit-600 + inet6/filter/INPUT -j limit-600 + inet/filter/OUTPUT -j limit-600 + inet6/filter/OUTPUT -j limit-600 + inet/filter/limit-600 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-600 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-40 + inet6/filter/FORWARD -j logaccept-final-40 + inet/filter/INPUT -j logaccept-final-40 + inet6/filter/INPUT -j logaccept-final-40 + inet/filter/OUTPUT -j logaccept-final-40 + inet6/filter/OUTPUT -j logaccept-final-40 + inet/filter/logaccept-final-40 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-40 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-40 -j ACCEPT + inet6/filter/logaccept-final-40 -j ACCEPT + +Filter 608 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-601 + inet6/filter/FORWARD -j limit-601 + inet/filter/INPUT -j limit-601 + inet6/filter/INPUT -j limit-601 + inet/filter/OUTPUT -j limit-601 + inet6/filter/OUTPUT -j limit-601 + inet/filter/limit-601 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-601 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 609 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-602 + inet6/filter/FORWARD -j limit-602 + inet/filter/INPUT -j limit-602 + inet6/filter/INPUT -j limit-602 + inet/filter/OUTPUT -j limit-602 + inet6/filter/OUTPUT -j limit-602 + inet/filter/limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 610 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-603 + inet6/filter/FORWARD -j limit-603 + inet/filter/INPUT -j limit-603 + inet6/filter/INPUT -j limit-603 + inet/filter/OUTPUT -j limit-603 + inet6/filter/OUTPUT -j limit-603 + inet/filter/limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 611 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-604 + inet6/filter/FORWARD -j limit-604 + inet/filter/INPUT -j limit-604 + inet6/filter/INPUT -j limit-604 + inet/filter/OUTPUT -j limit-604 + inet6/filter/OUTPUT -j limit-604 + inet/filter/limit-604 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 612 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-605 + inet6/filter/FORWARD -j limit-605 + inet/filter/INPUT -j limit-605 + inet6/filter/INPUT -j limit-605 + inet/filter/OUTPUT -j limit-605 + inet6/filter/OUTPUT -j limit-605 + inet/filter/limit-605 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-605 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 613 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-606 + inet6/filter/FORWARD -j limit-606 + inet/filter/INPUT -j limit-606 + inet6/filter/INPUT -j limit-606 + inet/filter/OUTPUT -j limit-606 + inet6/filter/OUTPUT -j limit-606 + inet/filter/limit-606 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-41 + inet6/filter/FORWARD -j logaccept-final-41 + inet/filter/INPUT -j logaccept-final-41 + inet6/filter/INPUT -j logaccept-final-41 + inet/filter/OUTPUT -j logaccept-final-41 + inet6/filter/OUTPUT -j logaccept-final-41 + inet/filter/logaccept-final-41 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-41 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-41 -j ACCEPT + inet6/filter/logaccept-final-41 -j ACCEPT + +Filter 614 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-607 + inet6/filter/FORWARD -j limit-607 + inet/filter/INPUT -j limit-607 + inet6/filter/INPUT -j limit-607 + inet/filter/OUTPUT -j limit-607 + inet6/filter/OUTPUT -j limit-607 + inet/filter/limit-607 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-607 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-607 -m limit --limit 1/second -j LOG + inet6/filter/limit-607 -m limit --limit 1/second -j LOG + +Filter 615 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-608 + inet6/filter/FORWARD -j limit-608 + inet/filter/INPUT -j limit-608 + inet6/filter/INPUT -j limit-608 + inet/filter/OUTPUT -j limit-608 + inet6/filter/OUTPUT -j limit-608 + inet/filter/limit-608 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-608 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 616 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-609 + inet6/filter/FORWARD -j limit-609 + inet/filter/INPUT -j limit-609 + inet6/filter/INPUT -j limit-609 + inet/filter/OUTPUT -j limit-609 + inet6/filter/OUTPUT -j limit-609 + inet/filter/limit-609 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-609 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 617 {"flow-limit":{"interval":5,"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-610 + inet6/filter/FORWARD -j limit-610 + inet/filter/INPUT -j limit-610 + inet6/filter/INPUT -j limit-610 + inet/filter/OUTPUT -j limit-610 + inet6/filter/OUTPUT -j limit-610 + inet/filter/limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-610 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-610 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 618 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-611 + inet6/filter/FORWARD -j limit-611 + inet/filter/INPUT -j limit-611 + inet6/filter/INPUT -j limit-611 + inet/filter/OUTPUT -j limit-611 + inet6/filter/OUTPUT -j limit-611 + inet/filter/limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-611 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-611 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 619 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-612 + inet6/filter/FORWARD -j limit-612 + inet/filter/INPUT -j limit-612 + inet6/filter/INPUT -j limit-612 + inet/filter/OUTPUT -j limit-612 + inet6/filter/OUTPUT -j limit-612 + inet/filter/limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-612 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-612 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-42 + inet6/filter/FORWARD -j logaccept-final-42 + inet/filter/INPUT -j logaccept-final-42 + inet6/filter/INPUT -j logaccept-final-42 + inet/filter/OUTPUT -j logaccept-final-42 + inet6/filter/OUTPUT -j logaccept-final-42 + inet/filter/logaccept-final-42 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-42 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-42 -j ACCEPT + inet6/filter/logaccept-final-42 -j ACCEPT + +Filter 620 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-613 + inet6/filter/FORWARD -j limit-613 + inet/filter/INPUT -j limit-613 + inet6/filter/INPUT -j limit-613 + inet/filter/OUTPUT -j limit-613 + inet6/filter/OUTPUT -j limit-613 + inet/filter/limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-613 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-613 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 621 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-614 + inet6/filter/FORWARD -j limit-614 + inet/filter/INPUT -j limit-614 + inet6/filter/INPUT -j limit-614 + inet/filter/OUTPUT -j limit-614 + inet6/filter/OUTPUT -j limit-614 + inet/filter/limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-614 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-614 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 622 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-615 + inet6/filter/FORWARD -j limit-615 + inet/filter/INPUT -j limit-615 + inet6/filter/INPUT -j limit-615 + inet/filter/OUTPUT -j limit-615 + inet6/filter/OUTPUT -j limit-615 + inet/filter/limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-615 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-615 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 623 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-616 + inet6/filter/FORWARD -j limit-616 + inet/filter/INPUT -j limit-616 + inet6/filter/INPUT -j limit-616 + inet/filter/OUTPUT -j limit-616 + inet6/filter/OUTPUT -j limit-616 + inet/filter/limit-616 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-616 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 624 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-617 + inet6/filter/FORWARD -j limit-617 + inet/filter/INPUT -j limit-617 + inet6/filter/INPUT -j limit-617 + inet/filter/OUTPUT -j limit-617 + inet6/filter/OUTPUT -j limit-617 + inet/filter/limit-617 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-617 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 625 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-618 + inet6/filter/FORWARD -j limit-618 + inet/filter/INPUT -j limit-618 + inet6/filter/INPUT -j limit-618 + inet/filter/OUTPUT -j limit-618 + inet6/filter/OUTPUT -j limit-618 + inet/filter/limit-618 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-618 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-43 + inet6/filter/FORWARD -j logaccept-final-43 + inet/filter/INPUT -j logaccept-final-43 + inet6/filter/INPUT -j logaccept-final-43 + inet/filter/OUTPUT -j logaccept-final-43 + inet6/filter/OUTPUT -j logaccept-final-43 + inet/filter/logaccept-final-43 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-43 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-43 -j ACCEPT + inet6/filter/logaccept-final-43 -j ACCEPT + +Filter 626 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-619 + inet6/filter/FORWARD -j limit-619 + inet/filter/INPUT -j limit-619 + inet6/filter/INPUT -j limit-619 + inet/filter/OUTPUT -j limit-619 + inet6/filter/OUTPUT -j limit-619 + inet/filter/limit-619 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-619 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-619 -m limit --limit 1/second -j LOG + inet6/filter/limit-619 -m limit --limit 1/second -j LOG + +Filter 627 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-620 + inet6/filter/FORWARD -j limit-620 + inet/filter/INPUT -j limit-620 + inet6/filter/INPUT -j limit-620 + inet/filter/OUTPUT -j limit-620 + inet6/filter/OUTPUT -j limit-620 + inet/filter/limit-620 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-620 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 628 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-621 + inet6/filter/FORWARD -j limit-621 + inet/filter/INPUT -j limit-621 + inet6/filter/INPUT -j limit-621 + inet/filter/OUTPUT -j limit-621 + inet6/filter/OUTPUT -j limit-621 + inet/filter/limit-621 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-621 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 629 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-622 + inet6/filter/FORWARD -j limit-622 + inet/filter/INPUT -j limit-622 + inet6/filter/INPUT -j limit-622 + inet/filter/OUTPUT -j limit-622 + inet6/filter/OUTPUT -j limit-622 + inet/filter/limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-622 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-622 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 630 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-623 + inet6/filter/FORWARD -j limit-623 + inet/filter/INPUT -j limit-623 + inet6/filter/INPUT -j limit-623 + inet/filter/OUTPUT -j limit-623 + inet6/filter/OUTPUT -j limit-623 + inet/filter/limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-623 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-623 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 631 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-624 + inet6/filter/FORWARD -j limit-624 + inet/filter/INPUT -j limit-624 + inet6/filter/INPUT -j limit-624 + inet/filter/OUTPUT -j limit-624 + inet6/filter/OUTPUT -j limit-624 + inet/filter/limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-624 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-624 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-44 + inet6/filter/FORWARD -j logaccept-final-44 + inet/filter/INPUT -j logaccept-final-44 + inet6/filter/INPUT -j logaccept-final-44 + inet/filter/OUTPUT -j logaccept-final-44 + inet6/filter/OUTPUT -j logaccept-final-44 + inet/filter/logaccept-final-44 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-44 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-44 -j ACCEPT + inet6/filter/logaccept-final-44 -j ACCEPT + +Filter 632 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-625 + inet6/filter/FORWARD -j limit-625 + inet/filter/INPUT -j limit-625 + inet6/filter/INPUT -j limit-625 + inet/filter/OUTPUT -j limit-625 + inet6/filter/OUTPUT -j limit-625 + inet/filter/limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-625 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-625 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 633 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-626 + inet6/filter/FORWARD -j limit-626 + inet/filter/INPUT -j limit-626 + inet6/filter/INPUT -j limit-626 + inet/filter/OUTPUT -j limit-626 + inet6/filter/OUTPUT -j limit-626 + inet/filter/limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-626 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-626 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 634 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-627 + inet6/filter/FORWARD -j limit-627 + inet/filter/INPUT -j limit-627 + inet6/filter/INPUT -j limit-627 + inet/filter/OUTPUT -j limit-627 + inet6/filter/OUTPUT -j limit-627 + inet/filter/limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-627 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-627 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 635 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-628 + inet6/filter/FORWARD -j limit-628 + inet/filter/INPUT -j limit-628 + inet6/filter/INPUT -j limit-628 + inet/filter/OUTPUT -j limit-628 + inet6/filter/OUTPUT -j limit-628 + inet/filter/limit-628 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-628 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 636 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-629 + inet6/filter/FORWARD -j limit-629 + inet/filter/INPUT -j limit-629 + inet6/filter/INPUT -j limit-629 + inet/filter/OUTPUT -j limit-629 + inet6/filter/OUTPUT -j limit-629 + inet/filter/limit-629 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-629 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 637 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-630 + inet6/filter/FORWARD -j limit-630 + inet/filter/INPUT -j limit-630 + inet6/filter/INPUT -j limit-630 + inet/filter/OUTPUT -j limit-630 + inet6/filter/OUTPUT -j limit-630 + inet/filter/limit-630 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-630 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-45 + inet6/filter/FORWARD -j logaccept-final-45 + inet/filter/INPUT -j logaccept-final-45 + inet6/filter/INPUT -j logaccept-final-45 + inet/filter/OUTPUT -j logaccept-final-45 + inet6/filter/OUTPUT -j logaccept-final-45 + inet/filter/logaccept-final-45 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-45 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-45 -j ACCEPT + inet6/filter/logaccept-final-45 -j ACCEPT + +Filter 638 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-631 + inet6/filter/FORWARD -j limit-631 + inet/filter/INPUT -j limit-631 + inet6/filter/INPUT -j limit-631 + inet/filter/OUTPUT -j limit-631 + inet6/filter/OUTPUT -j limit-631 + inet/filter/limit-631 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-631 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-631 -m limit --limit 1/second -j LOG + inet6/filter/limit-631 -m limit --limit 1/second -j LOG + +Filter 639 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-632 + inet6/filter/FORWARD -j limit-632 + inet/filter/INPUT -j limit-632 + inet6/filter/INPUT -j limit-632 + inet/filter/OUTPUT -j limit-632 + inet6/filter/OUTPUT -j limit-632 + inet/filter/limit-632 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-632 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 640 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-633 + inet6/filter/FORWARD -j limit-633 + inet/filter/INPUT -j limit-633 + inet6/filter/INPUT -j limit-633 + inet/filter/OUTPUT -j limit-633 + inet6/filter/OUTPUT -j limit-633 + inet/filter/limit-633 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-633 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 641 {"flow-limit":{"interval":5,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-634 + inet6/filter/FORWARD -j limit-634 + inet/filter/INPUT -j limit-634 + inet6/filter/INPUT -j limit-634 + inet/filter/OUTPUT -j limit-634 + inet6/filter/OUTPUT -j limit-634 + inet/filter/limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 642 {"action":"pass","flow-limit":{"interval":5,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-635 + inet6/filter/FORWARD -j limit-635 + inet/filter/INPUT -j limit-635 + inet6/filter/INPUT -j limit-635 + inet/filter/OUTPUT -j limit-635 + inet6/filter/OUTPUT -j limit-635 + inet/filter/limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 643 {"flow-limit":{"interval":5,"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-636 + inet6/filter/FORWARD -j limit-636 + inet/filter/INPUT -j limit-636 + inet6/filter/INPUT -j limit-636 + inet/filter/OUTPUT -j limit-636 + inet6/filter/OUTPUT -j limit-636 + inet/filter/limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-46 + inet6/filter/FORWARD -j logaccept-final-46 + inet/filter/INPUT -j logaccept-final-46 + inet6/filter/INPUT -j logaccept-final-46 + inet/filter/OUTPUT -j logaccept-final-46 + inet6/filter/OUTPUT -j logaccept-final-46 + inet/filter/logaccept-final-46 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-46 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-46 -j ACCEPT + inet6/filter/logaccept-final-46 -j ACCEPT + +Filter 644 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-637 + inet6/filter/FORWARD -j limit-637 + inet/filter/INPUT -j limit-637 + inet6/filter/INPUT -j limit-637 + inet/filter/OUTPUT -j limit-637 + inet6/filter/OUTPUT -j limit-637 + inet/filter/limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 645 {"flow-limit":{"interval":5,"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-638 + inet6/filter/FORWARD -j limit-638 + inet/filter/INPUT -j limit-638 + inet6/filter/INPUT -j limit-638 + inet/filter/OUTPUT -j limit-638 + inet6/filter/OUTPUT -j limit-638 + inet/filter/limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 646 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-639 + inet6/filter/FORWARD -j limit-639 + inet/filter/INPUT -j limit-639 + inet6/filter/INPUT -j limit-639 + inet/filter/OUTPUT -j limit-639 + inet6/filter/OUTPUT -j limit-639 + inet/filter/limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 647 {"flow-limit":{"interval":5,"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-640 + inet6/filter/FORWARD -j limit-640 + inet/filter/INPUT -j limit-640 + inet6/filter/INPUT -j limit-640 + inet/filter/OUTPUT -j limit-640 + inet6/filter/OUTPUT -j limit-640 + inet/filter/limit-640 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-640 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 648 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-641 + inet6/filter/FORWARD -j limit-641 + inet/filter/INPUT -j limit-641 + inet6/filter/INPUT -j limit-641 + inet/filter/OUTPUT -j limit-641 + inet6/filter/OUTPUT -j limit-641 + inet/filter/limit-641 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-641 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 649 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-642 + inet6/filter/FORWARD -j limit-642 + inet/filter/INPUT -j limit-642 + inet6/filter/INPUT -j limit-642 + inet/filter/OUTPUT -j limit-642 + inet6/filter/OUTPUT -j limit-642 + inet/filter/limit-642 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-642 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-47 + inet6/filter/FORWARD -j logaccept-final-47 + inet/filter/INPUT -j logaccept-final-47 + inet6/filter/INPUT -j logaccept-final-47 + inet/filter/OUTPUT -j logaccept-final-47 + inet6/filter/OUTPUT -j logaccept-final-47 + inet/filter/logaccept-final-47 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-47 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-47 -j ACCEPT + inet6/filter/logaccept-final-47 -j ACCEPT + +Filter 650 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-643 + inet6/filter/FORWARD -j limit-643 + inet/filter/INPUT -j limit-643 + inet6/filter/INPUT -j limit-643 + inet/filter/OUTPUT -j limit-643 + inet6/filter/OUTPUT -j limit-643 + inet/filter/limit-643 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-643 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 651 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-644 + inet6/filter/FORWARD -j limit-644 + inet/filter/INPUT -j limit-644 + inet6/filter/INPUT -j limit-644 + inet/filter/OUTPUT -j limit-644 + inet6/filter/OUTPUT -j limit-644 + inet/filter/limit-644 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-644 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 652 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-645 + inet6/filter/FORWARD -j limit-645 + inet/filter/INPUT -j limit-645 + inet6/filter/INPUT -j limit-645 + inet/filter/OUTPUT -j limit-645 + inet6/filter/OUTPUT -j limit-645 + inet/filter/limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 653 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-646 + inet6/filter/FORWARD -j limit-646 + inet/filter/INPUT -j limit-646 + inet6/filter/INPUT -j limit-646 + inet/filter/OUTPUT -j limit-646 + inet6/filter/OUTPUT -j limit-646 + inet/filter/limit-646 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-646 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 654 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-647 + inet6/filter/FORWARD -j limit-647 + inet/filter/INPUT -j limit-647 + inet6/filter/INPUT -j limit-647 + inet/filter/OUTPUT -j limit-647 + inet6/filter/OUTPUT -j limit-647 + inet/filter/limit-647 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-647 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 655 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-648 + inet6/filter/FORWARD -j limit-648 + inet/filter/INPUT -j limit-648 + inet6/filter/INPUT -j limit-648 + inet/filter/OUTPUT -j limit-648 + inet6/filter/OUTPUT -j limit-648 + inet/filter/limit-648 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-648 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-48 + inet6/filter/FORWARD -j logaccept-final-48 + inet/filter/INPUT -j logaccept-final-48 + inet6/filter/INPUT -j logaccept-final-48 + inet/filter/OUTPUT -j logaccept-final-48 + inet6/filter/OUTPUT -j logaccept-final-48 + inet/filter/logaccept-final-48 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-48 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-48 -j ACCEPT + inet6/filter/logaccept-final-48 -j ACCEPT + +Filter 656 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-649 + inet6/filter/FORWARD -j limit-649 + inet/filter/INPUT -j limit-649 + inet6/filter/INPUT -j limit-649 + inet/filter/OUTPUT -j limit-649 + inet6/filter/OUTPUT -j limit-649 + inet/filter/limit-649 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-649 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-649 -m limit --limit 1/second -j LOG + inet6/filter/limit-649 -m limit --limit 1/second -j LOG + +Filter 657 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-650 + inet6/filter/FORWARD -j limit-650 + inet/filter/INPUT -j limit-650 + inet6/filter/INPUT -j limit-650 + inet/filter/OUTPUT -j limit-650 + inet6/filter/OUTPUT -j limit-650 + inet/filter/limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 658 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-651 + inet6/filter/FORWARD -j limit-651 + inet/filter/INPUT -j limit-651 + inet6/filter/INPUT -j limit-651 + inet/filter/OUTPUT -j limit-651 + inet6/filter/OUTPUT -j limit-651 + inet/filter/limit-651 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 659 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-652 + inet6/filter/FORWARD -j limit-652 + inet/filter/INPUT -j limit-652 + inet6/filter/INPUT -j limit-652 + inet/filter/OUTPUT -j limit-652 + inet6/filter/OUTPUT -j limit-652 + inet/filter/limit-652 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-652 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 660 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-653 + inet6/filter/FORWARD -j limit-653 + inet/filter/INPUT -j limit-653 + inet6/filter/INPUT -j limit-653 + inet/filter/OUTPUT -j limit-653 + inet6/filter/OUTPUT -j limit-653 + inet/filter/limit-653 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-653 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 661 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-654 + inet6/filter/FORWARD -j limit-654 + inet/filter/INPUT -j limit-654 + inet6/filter/INPUT -j limit-654 + inet/filter/OUTPUT -j limit-654 + inet6/filter/OUTPUT -j limit-654 + inet/filter/limit-654 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-654 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-49 + inet6/filter/FORWARD -j logaccept-final-49 + inet/filter/INPUT -j logaccept-final-49 + inet6/filter/INPUT -j logaccept-final-49 + inet/filter/OUTPUT -j logaccept-final-49 + inet6/filter/OUTPUT -j logaccept-final-49 + inet/filter/logaccept-final-49 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-49 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-49 -j ACCEPT + inet6/filter/logaccept-final-49 -j ACCEPT + +Filter 662 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-655 + inet6/filter/FORWARD -j limit-655 + inet/filter/INPUT -j limit-655 + inet6/filter/INPUT -j limit-655 + inet/filter/OUTPUT -j limit-655 + inet6/filter/OUTPUT -j limit-655 + inet/filter/limit-655 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-655 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 663 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-656 + inet6/filter/FORWARD -j limit-656 + inet/filter/INPUT -j limit-656 + inet6/filter/INPUT -j limit-656 + inet/filter/OUTPUT -j limit-656 + inet6/filter/OUTPUT -j limit-656 + inet/filter/limit-656 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-656 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 664 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-657 + inet6/filter/FORWARD -j limit-657 + inet/filter/INPUT -j limit-657 + inet6/filter/INPUT -j limit-657 + inet/filter/OUTPUT -j limit-657 + inet6/filter/OUTPUT -j limit-657 + inet/filter/limit-657 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-657 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 665 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-658 + inet6/filter/FORWARD -j limit-658 + inet/filter/INPUT -j limit-658 + inet6/filter/INPUT -j limit-658 + inet/filter/OUTPUT -j limit-658 + inet6/filter/OUTPUT -j limit-658 + inet/filter/limit-658 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-658 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 666 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-659 + inet6/filter/FORWARD -j limit-659 + inet/filter/INPUT -j limit-659 + inet6/filter/INPUT -j limit-659 + inet/filter/OUTPUT -j limit-659 + inet6/filter/OUTPUT -j limit-659 + inet/filter/limit-659 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-659 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 667 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-660 + inet6/filter/FORWARD -j limit-660 + inet/filter/INPUT -j limit-660 + inet6/filter/INPUT -j limit-660 + inet/filter/OUTPUT -j limit-660 + inet6/filter/OUTPUT -j limit-660 + inet/filter/limit-660 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-660 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-50 + inet6/filter/FORWARD -j logaccept-final-50 + inet/filter/INPUT -j logaccept-final-50 + inet6/filter/INPUT -j logaccept-final-50 + inet/filter/OUTPUT -j logaccept-final-50 + inet6/filter/OUTPUT -j logaccept-final-50 + inet/filter/logaccept-final-50 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-50 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-50 -j ACCEPT + inet6/filter/logaccept-final-50 -j ACCEPT + +Filter 668 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-661 + inet6/filter/FORWARD -j limit-661 + inet/filter/INPUT -j limit-661 + inet6/filter/INPUT -j limit-661 + inet/filter/OUTPUT -j limit-661 + inet6/filter/OUTPUT -j limit-661 + inet/filter/limit-661 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-661 -m limit --limit 1/second -j LOG + inet6/filter/limit-661 -m limit --limit 1/second -j LOG + +Filter 669 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-662 + inet6/filter/FORWARD -j limit-662 + inet/filter/INPUT -j limit-662 + inet6/filter/INPUT -j limit-662 + inet/filter/OUTPUT -j limit-662 + inet6/filter/OUTPUT -j limit-662 + inet/filter/limit-662 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 670 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-663 + inet6/filter/FORWARD -j limit-663 + inet/filter/INPUT -j limit-663 + inet6/filter/INPUT -j limit-663 + inet/filter/OUTPUT -j limit-663 + inet6/filter/OUTPUT -j limit-663 + inet/filter/limit-663 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-663 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 671 {"flow-limit":{"interval":5,"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-664 + inet6/filter/FORWARD -j limit-664 + inet/filter/INPUT -j limit-664 + inet6/filter/INPUT -j limit-664 + inet/filter/OUTPUT -j limit-664 + inet6/filter/OUTPUT -j limit-664 + inet/filter/limit-664 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-664 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-664 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-664 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 672 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-665 + inet6/filter/FORWARD -j limit-665 + inet/filter/INPUT -j limit-665 + inet6/filter/INPUT -j limit-665 + inet/filter/OUTPUT -j limit-665 + inet6/filter/OUTPUT -j limit-665 + inet/filter/limit-665 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-665 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-665 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-665 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 673 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-666 + inet6/filter/FORWARD -j limit-666 + inet/filter/INPUT -j limit-666 + inet6/filter/INPUT -j limit-666 + inet/filter/OUTPUT -j limit-666 + inet6/filter/OUTPUT -j limit-666 + inet/filter/limit-666 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-666 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-666 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-666 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-51 + inet6/filter/FORWARD -j logaccept-final-51 + inet/filter/INPUT -j logaccept-final-51 + inet6/filter/INPUT -j logaccept-final-51 + inet/filter/OUTPUT -j logaccept-final-51 + inet6/filter/OUTPUT -j logaccept-final-51 + inet/filter/logaccept-final-51 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-51 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-51 -j ACCEPT + inet6/filter/logaccept-final-51 -j ACCEPT + +Filter 674 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-667 + inet6/filter/FORWARD -j limit-667 + inet/filter/INPUT -j limit-667 + inet6/filter/INPUT -j limit-667 + inet/filter/OUTPUT -j limit-667 + inet6/filter/OUTPUT -j limit-667 + inet/filter/limit-667 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-667 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-667 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-667 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 675 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-668 + inet6/filter/FORWARD -j limit-668 + inet/filter/INPUT -j limit-668 + inet6/filter/INPUT -j limit-668 + inet/filter/OUTPUT -j limit-668 + inet6/filter/OUTPUT -j limit-668 + inet/filter/limit-668 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-668 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-668 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-668 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 676 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-669 + inet6/filter/FORWARD -j limit-669 + inet/filter/INPUT -j limit-669 + inet6/filter/INPUT -j limit-669 + inet/filter/OUTPUT -j limit-669 + inet6/filter/OUTPUT -j limit-669 + inet/filter/limit-669 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-669 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-669 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-669 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 677 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-670 + inet6/filter/FORWARD -j limit-670 + inet/filter/INPUT -j limit-670 + inet6/filter/INPUT -j limit-670 + inet/filter/OUTPUT -j limit-670 + inet6/filter/OUTPUT -j limit-670 + inet/filter/limit-670 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-670 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 678 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-671 + inet6/filter/FORWARD -j limit-671 + inet/filter/INPUT -j limit-671 + inet6/filter/INPUT -j limit-671 + inet/filter/OUTPUT -j limit-671 + inet6/filter/OUTPUT -j limit-671 + inet/filter/limit-671 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-671 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 679 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-672 + inet6/filter/FORWARD -j limit-672 + inet/filter/INPUT -j limit-672 + inet6/filter/INPUT -j limit-672 + inet/filter/OUTPUT -j limit-672 + inet6/filter/OUTPUT -j limit-672 + inet/filter/limit-672 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-672 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-52 + inet6/filter/FORWARD -j logaccept-final-52 + inet/filter/INPUT -j logaccept-final-52 + inet6/filter/INPUT -j logaccept-final-52 + inet/filter/OUTPUT -j logaccept-final-52 + inet6/filter/OUTPUT -j logaccept-final-52 + inet/filter/logaccept-final-52 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-52 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-52 -j ACCEPT + inet6/filter/logaccept-final-52 -j ACCEPT + +Filter 680 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-673 + inet6/filter/FORWARD -j limit-673 + inet/filter/INPUT -j limit-673 + inet6/filter/INPUT -j limit-673 + inet/filter/OUTPUT -j limit-673 + inet6/filter/OUTPUT -j limit-673 + inet/filter/limit-673 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-673 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-673 -m limit --limit 1/second -j LOG + inet6/filter/limit-673 -m limit --limit 1/second -j LOG + +Filter 681 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-674 + inet6/filter/FORWARD -j limit-674 + inet/filter/INPUT -j limit-674 + inet6/filter/INPUT -j limit-674 + inet/filter/OUTPUT -j limit-674 + inet6/filter/OUTPUT -j limit-674 + inet/filter/limit-674 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-674 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 682 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-675 + inet6/filter/FORWARD -j limit-675 + inet/filter/INPUT -j limit-675 + inet6/filter/INPUT -j limit-675 + inet/filter/OUTPUT -j limit-675 + inet6/filter/OUTPUT -j limit-675 + inet/filter/limit-675 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-675 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 683 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-676 + inet6/filter/FORWARD -j limit-676 + inet/filter/INPUT -j limit-676 + inet6/filter/INPUT -j limit-676 + inet/filter/OUTPUT -j limit-676 + inet6/filter/OUTPUT -j limit-676 + inet/filter/limit-676 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-676 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-676 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-676 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 684 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-677 + inet6/filter/FORWARD -j limit-677 + inet/filter/INPUT -j limit-677 + inet6/filter/INPUT -j limit-677 + inet/filter/OUTPUT -j limit-677 + inet6/filter/OUTPUT -j limit-677 + inet/filter/limit-677 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-677 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-677 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-677 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 685 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-678 + inet6/filter/FORWARD -j limit-678 + inet/filter/INPUT -j limit-678 + inet6/filter/INPUT -j limit-678 + inet/filter/OUTPUT -j limit-678 + inet6/filter/OUTPUT -j limit-678 + inet/filter/limit-678 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-678 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-678 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-678 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-53 + inet6/filter/FORWARD -j logaccept-final-53 + inet/filter/INPUT -j logaccept-final-53 + inet6/filter/INPUT -j logaccept-final-53 + inet/filter/OUTPUT -j logaccept-final-53 + inet6/filter/OUTPUT -j logaccept-final-53 + inet/filter/logaccept-final-53 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-53 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-53 -j ACCEPT + inet6/filter/logaccept-final-53 -j ACCEPT + +Filter 686 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-679 + inet6/filter/FORWARD -j limit-679 + inet/filter/INPUT -j limit-679 + inet6/filter/INPUT -j limit-679 + inet/filter/OUTPUT -j limit-679 + inet6/filter/OUTPUT -j limit-679 + inet/filter/limit-679 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-679 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-679 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-679 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 687 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-680 + inet6/filter/FORWARD -j limit-680 + inet/filter/INPUT -j limit-680 + inet6/filter/INPUT -j limit-680 + inet/filter/OUTPUT -j limit-680 + inet6/filter/OUTPUT -j limit-680 + inet/filter/limit-680 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-680 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-680 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-680 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 688 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-681 + inet6/filter/FORWARD -j limit-681 + inet/filter/INPUT -j limit-681 + inet6/filter/INPUT -j limit-681 + inet/filter/OUTPUT -j limit-681 + inet6/filter/OUTPUT -j limit-681 + inet/filter/limit-681 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-681 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-681 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-681 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 689 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-682 + inet6/filter/FORWARD -j limit-682 + inet/filter/INPUT -j limit-682 + inet6/filter/INPUT -j limit-682 + inet/filter/OUTPUT -j limit-682 + inet6/filter/OUTPUT -j limit-682 + inet/filter/limit-682 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-682 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 690 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-683 + inet6/filter/FORWARD -j limit-683 + inet/filter/INPUT -j limit-683 + inet6/filter/INPUT -j limit-683 + inet/filter/OUTPUT -j limit-683 + inet6/filter/OUTPUT -j limit-683 + inet/filter/limit-683 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-683 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 691 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-684 + inet6/filter/FORWARD -j limit-684 + inet/filter/INPUT -j limit-684 + inet6/filter/INPUT -j limit-684 + inet/filter/OUTPUT -j limit-684 + inet6/filter/OUTPUT -j limit-684 + inet/filter/limit-684 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-684 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-54 + inet6/filter/FORWARD -j logaccept-final-54 + inet/filter/INPUT -j logaccept-final-54 + inet6/filter/INPUT -j logaccept-final-54 + inet/filter/OUTPUT -j logaccept-final-54 + inet6/filter/OUTPUT -j logaccept-final-54 + inet/filter/logaccept-final-54 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-54 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-54 -j ACCEPT + inet6/filter/logaccept-final-54 -j ACCEPT + +Filter 692 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-685 + inet6/filter/FORWARD -j limit-685 + inet/filter/INPUT -j limit-685 + inet6/filter/INPUT -j limit-685 + inet/filter/OUTPUT -j limit-685 + inet6/filter/OUTPUT -j limit-685 + inet/filter/limit-685 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-685 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-685 -m limit --limit 1/second -j LOG + inet6/filter/limit-685 -m limit --limit 1/second -j LOG + +Filter 693 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-686 + inet6/filter/FORWARD -j limit-686 + inet/filter/INPUT -j limit-686 + inet6/filter/INPUT -j limit-686 + inet/filter/OUTPUT -j limit-686 + inet6/filter/OUTPUT -j limit-686 + inet/filter/limit-686 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-686 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 694 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-687 + inet6/filter/FORWARD -j limit-687 + inet/filter/INPUT -j limit-687 + inet6/filter/INPUT -j limit-687 + inet/filter/OUTPUT -j limit-687 + inet6/filter/OUTPUT -j limit-687 + inet/filter/limit-687 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-687 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 695 {"flow-limit":150} +(filter-limit) + inet/filter/FORWARD -j limit-688 + inet6/filter/FORWARD -j limit-688 + inet/filter/INPUT -j limit-688 + inet6/filter/INPUT -j limit-688 + inet/filter/OUTPUT -j limit-688 + inet6/filter/OUTPUT -j limit-688 + inet/filter/limit-688 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-688 -j RETURN + inet6/filter/limit-688 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-688 -j RETURN + inet/filter/limit-688 -m limit --limit 1/second -j LOG + inet6/filter/limit-688 -m limit --limit 1/second -j LOG + inet/filter/limit-688 -j DROP + inet6/filter/limit-688 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 696 {"action":"pass","flow-limit":150} +(filter-limit) + inet/filter/FORWARD -j limit-689 + inet6/filter/FORWARD -j limit-689 + inet/filter/INPUT -j limit-689 + inet6/filter/INPUT -j limit-689 + inet/filter/OUTPUT -j limit-689 + inet6/filter/OUTPUT -j limit-689 + inet/filter/limit-689 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-689 -j RETURN + inet6/filter/limit-689 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-689 -j RETURN + inet/filter/limit-689 -m limit --limit 1/second -j LOG + inet6/filter/limit-689 -m limit --limit 1/second -j LOG + inet/filter/limit-689 -j DROP + inet6/filter/limit-689 -j DROP + +Filter 697 {"flow-limit":150,"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-690 + inet6/filter/FORWARD -j limit-690 + inet/filter/INPUT -j limit-690 + inet6/filter/INPUT -j limit-690 + inet/filter/OUTPUT -j limit-690 + inet6/filter/OUTPUT -j limit-690 + inet/filter/limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-690 -j RETURN + inet6/filter/limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-690 -j RETURN + inet/filter/limit-690 -m limit --limit 1/second -j LOG + inet6/filter/limit-690 -m limit --limit 1/second -j LOG + inet/filter/limit-690 -j DROP + inet6/filter/limit-690 -j DROP + inet/filter/FORWARD -j logaccept-final-55 + inet6/filter/FORWARD -j logaccept-final-55 + inet/filter/INPUT -j logaccept-final-55 + inet6/filter/INPUT -j logaccept-final-55 + inet/filter/OUTPUT -j logaccept-final-55 + inet6/filter/OUTPUT -j logaccept-final-55 + inet/filter/logaccept-final-55 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-55 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-55 -j ACCEPT + inet6/filter/logaccept-final-55 -j ACCEPT + +Filter 698 {"flow-limit":150,"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-691 + inet6/filter/FORWARD -j limit-691 + inet/filter/INPUT -j limit-691 + inet6/filter/INPUT -j limit-691 + inet/filter/OUTPUT -j limit-691 + inet6/filter/OUTPUT -j limit-691 + inet/filter/limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-691 -j RETURN + inet6/filter/limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-691 -j RETURN + inet/filter/limit-691 -m limit --limit 1/second -j LOG + inet6/filter/limit-691 -m limit --limit 1/second -j LOG + inet/filter/limit-691 -j DROP + inet6/filter/limit-691 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 699 {"flow-limit":{"count":150}} +(filter-limit) + inet/filter/FORWARD -j limit-692 + inet6/filter/FORWARD -j limit-692 + inet/filter/INPUT -j limit-692 + inet6/filter/INPUT -j limit-692 + inet/filter/OUTPUT -j limit-692 + inet6/filter/OUTPUT -j limit-692 + inet/filter/limit-692 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-692 -j RETURN + inet6/filter/limit-692 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-692 -j RETURN + inet/filter/limit-692 -m limit --limit 1/second -j LOG + inet6/filter/limit-692 -m limit --limit 1/second -j LOG + inet/filter/limit-692 -j DROP + inet6/filter/limit-692 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 700 {"action":"pass","flow-limit":{"count":150}} +(filter-limit) + inet/filter/FORWARD -j limit-693 + inet6/filter/FORWARD -j limit-693 + inet/filter/INPUT -j limit-693 + inet6/filter/INPUT -j limit-693 + inet/filter/OUTPUT -j limit-693 + inet6/filter/OUTPUT -j limit-693 + inet/filter/limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-693 -j RETURN + inet6/filter/limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-693 -j RETURN + inet/filter/limit-693 -m limit --limit 1/second -j LOG + inet6/filter/limit-693 -m limit --limit 1/second -j LOG + inet/filter/limit-693 -j DROP + inet6/filter/limit-693 -j DROP + +Filter 701 {"flow-limit":{"count":150},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-694 + inet6/filter/FORWARD -j limit-694 + inet/filter/INPUT -j limit-694 + inet6/filter/INPUT -j limit-694 + inet/filter/OUTPUT -j limit-694 + inet6/filter/OUTPUT -j limit-694 + inet/filter/limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-694 -j RETURN + inet6/filter/limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-694 -j RETURN + inet/filter/limit-694 -m limit --limit 1/second -j LOG + inet6/filter/limit-694 -m limit --limit 1/second -j LOG + inet/filter/limit-694 -j DROP + inet6/filter/limit-694 -j DROP + inet/filter/FORWARD -j logaccept-final-56 + inet6/filter/FORWARD -j logaccept-final-56 + inet/filter/INPUT -j logaccept-final-56 + inet6/filter/INPUT -j logaccept-final-56 + inet/filter/OUTPUT -j logaccept-final-56 + inet6/filter/OUTPUT -j logaccept-final-56 + inet/filter/logaccept-final-56 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-56 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-56 -j ACCEPT + inet6/filter/logaccept-final-56 -j ACCEPT + +Filter 702 {"flow-limit":{"count":150},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-695 + inet6/filter/FORWARD -j limit-695 + inet/filter/INPUT -j limit-695 + inet6/filter/INPUT -j limit-695 + inet/filter/OUTPUT -j limit-695 + inet6/filter/OUTPUT -j limit-695 + inet/filter/limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-695 -j RETURN + inet6/filter/limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-695 -j RETURN + inet/filter/limit-695 -m limit --limit 1/second -j LOG + inet6/filter/limit-695 -m limit --limit 1/second -j LOG + inet/filter/limit-695 -j DROP + inet6/filter/limit-695 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 703 {"flow-limit":{"count":150,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-696 + inet6/filter/FORWARD -j limit-696 + inet/filter/INPUT -j limit-696 + inet6/filter/INPUT -j limit-696 + inet/filter/OUTPUT -j limit-696 + inet6/filter/OUTPUT -j limit-696 + inet/filter/limit-696 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-696 -j RETURN + inet6/filter/limit-696 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-696 -j RETURN + inet/filter/limit-696 -j DROP + inet6/filter/limit-696 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 704 {"action":"pass","flow-limit":{"count":150,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-697 + inet6/filter/FORWARD -j limit-697 + inet/filter/INPUT -j limit-697 + inet6/filter/INPUT -j limit-697 + inet/filter/OUTPUT -j limit-697 + inet6/filter/OUTPUT -j limit-697 + inet/filter/limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-697 -j RETURN + inet6/filter/limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-697 -j RETURN + inet/filter/limit-697 -j DROP + inet6/filter/limit-697 -j DROP + +Filter 705 {"flow-limit":{"count":150,"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-698 + inet6/filter/FORWARD -j limit-698 + inet/filter/INPUT -j limit-698 + inet6/filter/INPUT -j limit-698 + inet/filter/OUTPUT -j limit-698 + inet6/filter/OUTPUT -j limit-698 + inet/filter/limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-698 -j RETURN + inet6/filter/limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-698 -j RETURN + inet/filter/limit-698 -j DROP + inet6/filter/limit-698 -j DROP + inet/filter/FORWARD -j logaccept-final-57 + inet6/filter/FORWARD -j logaccept-final-57 + inet/filter/INPUT -j logaccept-final-57 + inet6/filter/INPUT -j logaccept-final-57 + inet/filter/OUTPUT -j logaccept-final-57 + inet6/filter/OUTPUT -j logaccept-final-57 + inet/filter/logaccept-final-57 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-57 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-57 -j ACCEPT + inet6/filter/logaccept-final-57 -j ACCEPT + +Filter 706 {"flow-limit":{"count":150,"log":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-699 + inet6/filter/FORWARD -j limit-699 + inet/filter/INPUT -j limit-699 + inet6/filter/INPUT -j limit-699 + inet/filter/OUTPUT -j limit-699 + inet6/filter/OUTPUT -j limit-699 + inet/filter/limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-699 -j RETURN + inet6/filter/limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-699 -j RETURN + inet/filter/limit-699 -j DROP + inet6/filter/limit-699 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 707 {"flow-limit":{"count":150,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-700 + inet6/filter/FORWARD -j limit-700 + inet/filter/INPUT -j limit-700 + inet6/filter/INPUT -j limit-700 + inet/filter/OUTPUT -j limit-700 + inet6/filter/OUTPUT -j limit-700 + inet/filter/limit-700 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-700 -j RETURN + inet6/filter/limit-700 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-700 -j RETURN + inet/filter/limit-700 -j DROP + inet6/filter/limit-700 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 708 {"action":"pass","flow-limit":{"count":150,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-701 + inet6/filter/FORWARD -j limit-701 + inet/filter/INPUT -j limit-701 + inet6/filter/INPUT -j limit-701 + inet/filter/OUTPUT -j limit-701 + inet6/filter/OUTPUT -j limit-701 + inet/filter/limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-701 -j RETURN + inet6/filter/limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-701 -j RETURN + inet/filter/limit-701 -j DROP + inet6/filter/limit-701 -j DROP + +Filter 709 {"flow-limit":{"count":150,"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-702 + inet6/filter/FORWARD -j limit-702 + inet/filter/INPUT -j limit-702 + inet6/filter/INPUT -j limit-702 + inet/filter/OUTPUT -j limit-702 + inet6/filter/OUTPUT -j limit-702 + inet/filter/limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-702 -j RETURN + inet6/filter/limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-702 -j RETURN + inet/filter/limit-702 -j DROP + inet6/filter/limit-702 -j DROP + inet/filter/FORWARD -j logaccept-final-58 + inet6/filter/FORWARD -j logaccept-final-58 + inet/filter/INPUT -j logaccept-final-58 + inet6/filter/INPUT -j logaccept-final-58 + inet/filter/OUTPUT -j logaccept-final-58 + inet6/filter/OUTPUT -j logaccept-final-58 + inet/filter/logaccept-final-58 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-58 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-58 -j ACCEPT + inet6/filter/logaccept-final-58 -j ACCEPT + +Filter 710 {"flow-limit":{"count":150,"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-703 + inet6/filter/FORWARD -j limit-703 + inet/filter/INPUT -j limit-703 + inet6/filter/INPUT -j limit-703 + inet/filter/OUTPUT -j limit-703 + inet6/filter/OUTPUT -j limit-703 + inet/filter/limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-703 -j RETURN + inet6/filter/limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-703 -j RETURN + inet/filter/limit-703 -j DROP + inet6/filter/limit-703 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 711 {"flow-limit":{"count":150,"interval":5}} +(filter-limit) + inet/filter/FORWARD -j limit-704 + inet6/filter/FORWARD -j limit-704 + inet/filter/INPUT -j limit-704 + inet6/filter/INPUT -j limit-704 + inet/filter/OUTPUT -j limit-704 + inet6/filter/OUTPUT -j limit-704 + inet/filter/limit-704 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-704 -j RETURN + inet6/filter/limit-704 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-704 -j RETURN + inet/filter/limit-704 -m limit --limit 1/second -j LOG + inet6/filter/limit-704 -m limit --limit 1/second -j LOG + inet/filter/limit-704 -j DROP + inet6/filter/limit-704 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 712 {"action":"pass","flow-limit":{"count":150,"interval":5}} +(filter-limit) + inet/filter/FORWARD -j limit-705 + inet6/filter/FORWARD -j limit-705 + inet/filter/INPUT -j limit-705 + inet6/filter/INPUT -j limit-705 + inet/filter/OUTPUT -j limit-705 + inet6/filter/OUTPUT -j limit-705 + inet/filter/limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-705 -j RETURN + inet6/filter/limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-705 -j RETURN + inet/filter/limit-705 -m limit --limit 1/second -j LOG + inet6/filter/limit-705 -m limit --limit 1/second -j LOG + inet/filter/limit-705 -j DROP + inet6/filter/limit-705 -j DROP + +Filter 713 {"flow-limit":{"count":150,"interval":5},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-706 + inet6/filter/FORWARD -j limit-706 + inet/filter/INPUT -j limit-706 + inet6/filter/INPUT -j limit-706 + inet/filter/OUTPUT -j limit-706 + inet6/filter/OUTPUT -j limit-706 + inet/filter/limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-706 -j RETURN + inet6/filter/limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-706 -j RETURN + inet/filter/limit-706 -m limit --limit 1/second -j LOG + inet6/filter/limit-706 -m limit --limit 1/second -j LOG + inet/filter/limit-706 -j DROP + inet6/filter/limit-706 -j DROP + inet/filter/FORWARD -j logaccept-final-59 + inet6/filter/FORWARD -j logaccept-final-59 + inet/filter/INPUT -j logaccept-final-59 + inet6/filter/INPUT -j logaccept-final-59 + inet/filter/OUTPUT -j logaccept-final-59 + inet6/filter/OUTPUT -j logaccept-final-59 + inet/filter/logaccept-final-59 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-59 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-59 -j ACCEPT + inet6/filter/logaccept-final-59 -j ACCEPT + +Filter 714 {"flow-limit":{"count":150,"interval":5},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-707 + inet6/filter/FORWARD -j limit-707 + inet/filter/INPUT -j limit-707 + inet6/filter/INPUT -j limit-707 + inet/filter/OUTPUT -j limit-707 + inet6/filter/OUTPUT -j limit-707 + inet/filter/limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-707 -j RETURN + inet6/filter/limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-707 -j RETURN + inet/filter/limit-707 -m limit --limit 1/second -j LOG + inet6/filter/limit-707 -m limit --limit 1/second -j LOG + inet/filter/limit-707 -j DROP + inet6/filter/limit-707 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 715 {"flow-limit":{"count":150,"interval":5,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-708 + inet6/filter/FORWARD -j limit-708 + inet/filter/INPUT -j limit-708 + inet6/filter/INPUT -j limit-708 + inet/filter/OUTPUT -j limit-708 + inet6/filter/OUTPUT -j limit-708 + inet/filter/limit-708 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-708 -j RETURN + inet6/filter/limit-708 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-708 -j RETURN + inet/filter/limit-708 -j DROP + inet6/filter/limit-708 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 716 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-709 + inet6/filter/FORWARD -j limit-709 + inet/filter/INPUT -j limit-709 + inet6/filter/INPUT -j limit-709 + inet/filter/OUTPUT -j limit-709 + inet6/filter/OUTPUT -j limit-709 + inet/filter/limit-709 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-709 -j RETURN + inet6/filter/limit-709 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-709 -j RETURN + inet/filter/limit-709 -j DROP + inet6/filter/limit-709 -j DROP + +Filter 717 {"flow-limit":{"count":150,"interval":5,"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-710 + inet6/filter/FORWARD -j limit-710 + inet/filter/INPUT -j limit-710 + inet6/filter/INPUT -j limit-710 + inet/filter/OUTPUT -j limit-710 + inet6/filter/OUTPUT -j limit-710 + inet/filter/limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-710 -j RETURN + inet6/filter/limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-710 -j RETURN + inet/filter/limit-710 -j DROP + inet6/filter/limit-710 -j DROP + inet/filter/FORWARD -j logaccept-final-60 + inet6/filter/FORWARD -j logaccept-final-60 + inet/filter/INPUT -j logaccept-final-60 + inet6/filter/INPUT -j logaccept-final-60 + inet/filter/OUTPUT -j logaccept-final-60 + inet6/filter/OUTPUT -j logaccept-final-60 + inet/filter/logaccept-final-60 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-60 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-60 -j ACCEPT + inet6/filter/logaccept-final-60 -j ACCEPT + +Filter 718 {"flow-limit":{"count":150,"interval":5,"log":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-711 + inet6/filter/FORWARD -j limit-711 + inet/filter/INPUT -j limit-711 + inet6/filter/INPUT -j limit-711 + inet/filter/OUTPUT -j limit-711 + inet6/filter/OUTPUT -j limit-711 + inet/filter/limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-711 -j RETURN + inet6/filter/limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-711 -j RETURN + inet/filter/limit-711 -j DROP + inet6/filter/limit-711 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 719 {"flow-limit":{"count":150,"interval":5,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-712 + inet6/filter/FORWARD -j limit-712 + inet/filter/INPUT -j limit-712 + inet6/filter/INPUT -j limit-712 + inet/filter/OUTPUT -j limit-712 + inet6/filter/OUTPUT -j limit-712 + inet/filter/limit-712 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-712 -j RETURN + inet6/filter/limit-712 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-712 -j RETURN + inet/filter/limit-712 -j DROP + inet6/filter/limit-712 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 720 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-713 + inet6/filter/FORWARD -j limit-713 + inet/filter/INPUT -j limit-713 + inet6/filter/INPUT -j limit-713 + inet/filter/OUTPUT -j limit-713 + inet6/filter/OUTPUT -j limit-713 + inet/filter/limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-713 -j RETURN + inet6/filter/limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-713 -j RETURN + inet/filter/limit-713 -j DROP + inet6/filter/limit-713 -j DROP + +Filter 721 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-714 + inet6/filter/FORWARD -j limit-714 + inet/filter/INPUT -j limit-714 + inet6/filter/INPUT -j limit-714 + inet/filter/OUTPUT -j limit-714 + inet6/filter/OUTPUT -j limit-714 + inet/filter/limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-714 -j RETURN + inet6/filter/limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-714 -j RETURN + inet/filter/limit-714 -j DROP + inet6/filter/limit-714 -j DROP + inet/filter/FORWARD -j logaccept-final-61 + inet6/filter/FORWARD -j logaccept-final-61 + inet/filter/INPUT -j logaccept-final-61 + inet6/filter/INPUT -j logaccept-final-61 + inet/filter/OUTPUT -j logaccept-final-61 + inet6/filter/OUTPUT -j logaccept-final-61 + inet/filter/logaccept-final-61 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-61 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-61 -j ACCEPT + inet6/filter/logaccept-final-61 -j ACCEPT + +Filter 722 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-715 + inet6/filter/FORWARD -j limit-715 + inet/filter/INPUT -j limit-715 + inet6/filter/INPUT -j limit-715 + inet/filter/OUTPUT -j limit-715 + inet6/filter/OUTPUT -j limit-715 + inet/filter/limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-715 -j RETURN + inet6/filter/limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-715 -j RETURN + inet/filter/limit-715 -j DROP + inet6/filter/limit-715 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 723 {"flow-limit":1,"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-716 + inet6/filter/INPUT -i eth0 -j limit-716 + inet/filter/limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-229 + inet6/filter/limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-229 + inet/filter/logdrop-229 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-229 -m limit --limit 1/second -j LOG + inet/filter/logdrop-229 -j DROP + inet6/filter/logdrop-229 -j DROP + inet/filter/limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -6487,35 +10655,35 @@ Filter 435 {"flow-limit":1,"in":"A","no-track":true,"out inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 436 {"action":"pass","flow-limit":1,"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-429 - inet6/filter/INPUT -i eth0 -j limit-429 - inet/filter/limit-429 -m recent --name limit-429 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-134 - inet6/filter/limit-429 -m recent --name limit-429 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-134 - inet/filter/logdrop-134 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-134 -m limit --limit 1/second -j LOG - inet/filter/logdrop-134 -j DROP - inet6/filter/logdrop-134 -j DROP - inet/filter/limit-429 -m recent --name limit-429 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-429 -m recent --name limit-429 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 724 {"action":"pass","flow-limit":1,"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-717 + inet6/filter/INPUT -i eth0 -j limit-717 + inet/filter/limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-230 + inet6/filter/limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-230 + inet/filter/logdrop-230 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-230 -m limit --limit 1/second -j LOG + inet/filter/logdrop-230 -j DROP + inet6/filter/logdrop-230 -j DROP + inet/filter/limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 437 {"flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-430 - inet6/filter/INPUT -i eth0 -j limit-430 - inet/filter/limit-430 -m recent --name limit-430 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-135 - inet6/filter/limit-430 -m recent --name limit-430 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-135 - inet/filter/logdrop-135 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-135 -m limit --limit 1/second -j LOG - inet/filter/logdrop-135 -j DROP - inet6/filter/logdrop-135 -j DROP - inet/filter/limit-430 -m limit --limit 1/second -j LOG - inet6/filter/limit-430 -m limit --limit 1/second -j LOG - inet/filter/limit-430 -m recent --name limit-430 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-430 -m recent --name limit-430 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +Filter 725 {"flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-718 + inet6/filter/INPUT -i eth0 -j limit-718 + inet/filter/limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-231 + inet6/filter/limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-231 + inet/filter/logdrop-231 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-231 -m limit --limit 1/second -j LOG + inet/filter/logdrop-231 -j DROP + inet6/filter/logdrop-231 -j DROP + inet/filter/limit-718 -m limit --limit 1/second -j LOG + inet6/filter/limit-718 -m limit --limit 1/second -j LOG + inet/filter/limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -6523,33 +10691,337 @@ Filter 437 {"flow-limit":1,"in":"A","log":true,"no-track inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 438 {"action":"pass","flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-431 - inet6/filter/INPUT -i eth0 -j limit-431 - inet/filter/limit-431 -m recent --name limit-431 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-136 - inet6/filter/limit-431 -m recent --name limit-431 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-136 - inet/filter/logdrop-136 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-136 -m limit --limit 1/second -j LOG - inet/filter/logdrop-136 -j DROP - inet6/filter/logdrop-136 -j DROP - inet/filter/limit-431 -m recent --name limit-431 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-431 -m recent --name limit-431 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +Filter 726 {"action":"pass","flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-719 + inet6/filter/INPUT -i eth0 -j limit-719 + inet/filter/limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-232 + inet6/filter/limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-232 + inet/filter/logdrop-232 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-232 -m limit --limit 1/second -j LOG + inet/filter/logdrop-232 -j DROP + inet6/filter/logdrop-232 -j DROP + inet/filter/limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 727 {"flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-720 + inet6/filter/INPUT -i eth0 -j limit-720 + inet/filter/limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-233 + inet6/filter/limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-233 + inet/filter/logdrop-233 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-233 -m limit --limit 1/second -j LOG + inet/filter/logdrop-233 -j DROP + inet6/filter/logdrop-233 -j DROP + inet/filter/limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 728 {"action":"pass","flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-721 + inet6/filter/INPUT -i eth0 -j limit-721 + inet/filter/limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-234 + inet6/filter/limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-234 + inet/filter/logdrop-234 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-234 -m limit --limit 1/second -j LOG + inet/filter/logdrop-234 -j DROP + inet6/filter/logdrop-234 -j DROP + inet/filter/limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 729 {"flow-limit":{},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-722 + inet6/filter/INPUT -i eth0 -j limit-722 + inet/filter/limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-235 + inet6/filter/limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-235 + inet/filter/logdrop-235 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-235 -m limit --limit 1/second -j LOG + inet/filter/logdrop-235 -j DROP + inet6/filter/logdrop-235 -j DROP + inet/filter/limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 730 {"action":"pass","flow-limit":{},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-723 + inet6/filter/INPUT -i eth0 -j limit-723 + inet/filter/limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-236 + inet6/filter/limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-236 + inet/filter/logdrop-236 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-236 -m limit --limit 1/second -j LOG + inet/filter/logdrop-236 -j DROP + inet6/filter/logdrop-236 -j DROP + inet/filter/limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 439 {"flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 731 {"flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-724 + inet6/filter/INPUT -i eth0 -j limit-724 + inet/filter/limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-237 + inet6/filter/limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-237 + inet/filter/logdrop-237 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-237 -m limit --limit 1/second -j LOG + inet/filter/logdrop-237 -j DROP + inet6/filter/logdrop-237 -j DROP + inet/filter/limit-724 -m limit --limit 1/second -j LOG + inet6/filter/limit-724 -m limit --limit 1/second -j LOG + inet/filter/limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 732 {"action":"pass","flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-725 + inet6/filter/INPUT -i eth0 -j limit-725 + inet/filter/limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-238 + inet6/filter/limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-238 + inet/filter/logdrop-238 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-238 -m limit --limit 1/second -j LOG + inet/filter/logdrop-238 -j DROP + inet6/filter/logdrop-238 -j DROP + inet/filter/limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 733 {"flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-726 + inet6/filter/INPUT -i eth0 -j limit-726 + inet/filter/limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-239 + inet6/filter/limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-239 + inet/filter/logdrop-239 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-239 -m limit --limit 1/second -j LOG + inet/filter/logdrop-239 -j DROP + inet6/filter/logdrop-239 -j DROP + inet/filter/limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 734 {"action":"pass","flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-727 + inet6/filter/INPUT -i eth0 -j limit-727 + inet/filter/limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-240 + inet6/filter/limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-240 + inet/filter/logdrop-240 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-240 -m limit --limit 1/second -j LOG + inet/filter/logdrop-240 -j DROP + inet6/filter/logdrop-240 -j DROP + inet/filter/limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 735 {"flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-728 + inet6/filter/INPUT -i eth0 -j limit-728 + inet/filter/limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-241 + inet6/filter/limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-241 + inet/filter/logdrop-241 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-241 -m limit --limit 1/second -j LOG + inet/filter/logdrop-241 -j DROP + inet6/filter/logdrop-241 -j DROP + inet/filter/limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 736 {"action":"pass","flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-729 + inet6/filter/INPUT -i eth0 -j limit-729 + inet/filter/limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-242 + inet6/filter/limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-242 + inet/filter/logdrop-242 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-242 -m limit --limit 1/second -j LOG + inet/filter/logdrop-242 -j DROP + inet6/filter/logdrop-242 -j DROP + inet/filter/limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 737 {"flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-730 + inet6/filter/INPUT -i eth0 -j limit-730 + inet/filter/limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-243 + inet6/filter/limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-243 + inet/filter/logdrop-243 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-243 -m limit --limit 1/second -j LOG + inet/filter/logdrop-243 -j DROP + inet6/filter/logdrop-243 -j DROP + inet/filter/limit-730 -m limit --limit 1/second -j LOG + inet6/filter/limit-730 -m limit --limit 1/second -j LOG + inet/filter/limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 738 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-731 + inet6/filter/INPUT -i eth0 -j limit-731 + inet/filter/limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-244 + inet6/filter/limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-244 + inet/filter/logdrop-244 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-244 -m limit --limit 1/second -j LOG + inet/filter/logdrop-244 -j DROP + inet6/filter/logdrop-244 -j DROP + inet/filter/limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 739 {"flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-732 + inet6/filter/INPUT -i eth0 -j limit-732 + inet/filter/limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-245 + inet6/filter/limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-245 + inet/filter/logdrop-245 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-245 -m limit --limit 1/second -j LOG + inet/filter/logdrop-245 -j DROP + inet6/filter/logdrop-245 -j DROP + inet/filter/limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 740 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-733 + inet6/filter/INPUT -i eth0 -j limit-733 + inet/filter/limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-246 + inet6/filter/limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-246 + inet/filter/logdrop-246 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-246 -m limit --limit 1/second -j LOG + inet/filter/logdrop-246 -j DROP + inet6/filter/logdrop-246 -j DROP + inet/filter/limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 741 {"flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-734 + inet6/filter/INPUT -i eth0 -j limit-734 + inet/filter/limit-734 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-247 + inet6/filter/limit-734 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-247 + inet/filter/logdrop-247 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-247 -m limit --limit 1/second -j LOG + inet/filter/logdrop-247 -j DROP + inet6/filter/logdrop-247 -j DROP + inet/filter/limit-734 -j ACCEPT + inet6/filter/limit-734 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 742 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-432 - inet6/filter/INPUT -i eth0 -j limit-432 - inet/filter/limit-432 -m recent --name limit-432 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-137 - inet6/filter/limit-432 -m recent --name limit-432 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-137 - inet/filter/logdrop-137 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-137 -m limit --limit 1/second -j LOG - inet/filter/logdrop-137 -j DROP - inet6/filter/logdrop-137 -j DROP - inet/filter/limit-432 -m recent --name limit-432 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-432 -m recent --name limit-432 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-248 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-248 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 743 {"flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-736 + inet6/filter/INPUT -i eth0 -j limit-736 + inet/filter/limit-736 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-249 + inet6/filter/limit-736 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-249 + inet/filter/logdrop-249 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-249 -m limit --limit 1/second -j LOG + inet/filter/logdrop-249 -j DROP + inet6/filter/logdrop-249 -j DROP + inet/filter/limit-736 -m limit --limit 1/second -j LOG + inet6/filter/limit-736 -m limit --limit 1/second -j LOG + inet/filter/limit-736 -j ACCEPT + inet6/filter/limit-736 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 744 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-737 + inet6/filter/INPUT -i eth0 -j limit-737 + inet/filter/limit-737 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-250 + inet6/filter/limit-737 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-250 + inet/filter/logdrop-250 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-250 -m limit --limit 1/second -j LOG + inet/filter/logdrop-250 -j DROP + inet6/filter/logdrop-250 -j DROP + inet/filter/limit-737 -m limit --limit 1/second -j LOG + inet6/filter/limit-737 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 745 {"flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-738 + inet6/filter/INPUT -i eth0 -j limit-738 + inet/filter/limit-738 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-251 + inet6/filter/limit-738 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-251 + inet/filter/logdrop-251 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-251 -m limit --limit 1/second -j LOG + inet/filter/logdrop-251 -j DROP + inet6/filter/logdrop-251 -j DROP + inet/filter/limit-738 -j ACCEPT + inet6/filter/limit-738 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -6557,33 +11029,191 @@ Filter 439 {"flow-limit":1,"in":"A","log":"none","no-tra inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 440 {"action":"pass","flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 746 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-433 - inet6/filter/INPUT -i eth0 -j limit-433 - inet/filter/limit-433 -m recent --name limit-433 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-138 - inet6/filter/limit-433 -m recent --name limit-433 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-138 - inet/filter/logdrop-138 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-138 -m limit --limit 1/second -j LOG - inet/filter/logdrop-138 -j DROP - inet6/filter/logdrop-138 -j DROP - inet/filter/limit-433 -m recent --name limit-433 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-433 -m recent --name limit-433 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-252 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-252 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 747 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-740 + inet6/filter/INPUT -i eth0 -j limit-740 + inet/filter/limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-253 + inet6/filter/limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-253 + inet/filter/logdrop-253 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-253 -m limit --limit 1/second -j LOG + inet/filter/logdrop-253 -j DROP + inet6/filter/logdrop-253 -j DROP + inet/filter/limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 748 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-741 + inet6/filter/INPUT -i eth0 -j limit-741 + inet/filter/limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-254 + inet6/filter/limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-254 + inet/filter/logdrop-254 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-254 -m limit --limit 1/second -j LOG + inet/filter/logdrop-254 -j DROP + inet6/filter/logdrop-254 -j DROP + inet/filter/limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 749 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-742 + inet6/filter/INPUT -i eth0 -j limit-742 + inet/filter/limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-255 + inet6/filter/limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-255 + inet/filter/logdrop-255 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-255 -m limit --limit 1/second -j LOG + inet/filter/logdrop-255 -j DROP + inet6/filter/logdrop-255 -j DROP + inet/filter/limit-742 -m limit --limit 1/second -j LOG + inet6/filter/limit-742 -m limit --limit 1/second -j LOG + inet/filter/limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 750 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-743 + inet6/filter/INPUT -i eth0 -j limit-743 + inet/filter/limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-256 + inet6/filter/limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-256 + inet/filter/logdrop-256 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-256 -m limit --limit 1/second -j LOG + inet/filter/logdrop-256 -j DROP + inet6/filter/logdrop-256 -j DROP + inet/filter/limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 751 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-744 + inet6/filter/INPUT -i eth0 -j limit-744 + inet/filter/limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-257 + inet6/filter/limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-257 + inet/filter/logdrop-257 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-257 -m limit --limit 1/second -j LOG + inet/filter/logdrop-257 -j DROP + inet6/filter/logdrop-257 -j DROP + inet/filter/limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 752 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-745 + inet6/filter/INPUT -i eth0 -j limit-745 + inet/filter/limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-258 + inet6/filter/limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-258 + inet/filter/logdrop-258 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-258 -m limit --limit 1/second -j LOG + inet/filter/logdrop-258 -j DROP + inet6/filter/logdrop-258 -j DROP + inet/filter/limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 753 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-746 + inet6/filter/INPUT -i eth0 -j limit-746 + inet/filter/limit-746 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-259 + inet6/filter/limit-746 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-259 + inet/filter/logdrop-259 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-259 -m limit --limit 1/second -j LOG + inet/filter/logdrop-259 -j DROP + inet6/filter/logdrop-259 -j DROP + inet/filter/limit-746 -j ACCEPT + inet6/filter/limit-746 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 441 {"flow-limit":{},"in":"A","no-track":true,"out":"_fw"} +Filter 754 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-434 - inet6/filter/INPUT -i eth0 -j limit-434 - inet/filter/limit-434 -m recent --name limit-434 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 - inet6/filter/limit-434 -m recent --name limit-434 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 - inet/filter/logdrop-139 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-139 -m limit --limit 1/second -j LOG - inet/filter/logdrop-139 -j DROP - inet6/filter/logdrop-139 -j DROP - inet/filter/limit-434 -m recent --name limit-434 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-434 -m recent --name limit-434 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-260 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-260 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 755 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-748 + inet6/filter/INPUT -i eth0 -j limit-748 + inet/filter/limit-748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-261 + inet6/filter/limit-748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-261 + inet/filter/logdrop-261 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-261 -m limit --limit 1/second -j LOG + inet/filter/logdrop-261 -j DROP + inet6/filter/logdrop-261 -j DROP + inet/filter/limit-748 -m limit --limit 1/second -j LOG + inet6/filter/limit-748 -m limit --limit 1/second -j LOG + inet/filter/limit-748 -j ACCEPT + inet6/filter/limit-748 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 756 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-749 + inet6/filter/INPUT -i eth0 -j limit-749 + inet/filter/limit-749 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-262 + inet6/filter/limit-749 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-262 + inet/filter/logdrop-262 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-262 -m limit --limit 1/second -j LOG + inet/filter/logdrop-262 -j DROP + inet6/filter/logdrop-262 -j DROP + inet/filter/limit-749 -m limit --limit 1/second -j LOG + inet6/filter/limit-749 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 757 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-750 + inet6/filter/INPUT -i eth0 -j limit-750 + inet/filter/limit-750 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-263 + inet6/filter/limit-750 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-263 + inet/filter/logdrop-263 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-263 -m limit --limit 1/second -j LOG + inet/filter/logdrop-263 -j DROP + inet6/filter/logdrop-263 -j DROP + inet/filter/limit-750 -j ACCEPT + inet6/filter/limit-750 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -6591,35 +11221,191 @@ Filter 441 {"flow-limit":{},"in":"A","no-track":true,"ou inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 442 {"action":"pass","flow-limit":{},"in":"A","no-track":true,"out":"_fw"} +Filter 758 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-435 - inet6/filter/INPUT -i eth0 -j limit-435 - inet/filter/limit-435 -m recent --name limit-435 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-140 - inet6/filter/limit-435 -m recent --name limit-435 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-140 - inet/filter/logdrop-140 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-140 -m limit --limit 1/second -j LOG - inet/filter/logdrop-140 -j DROP - inet6/filter/logdrop-140 -j DROP - inet/filter/limit-435 -m recent --name limit-435 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-435 -m recent --name limit-435 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-264 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-264 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 759 {"flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-752 + inet6/filter/INPUT -i eth0 -j limit-752 + inet/filter/limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-265 + inet6/filter/limit-752 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-265 + inet/filter/logdrop-265 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-265 -m limit --limit 1/second -j LOG + inet/filter/logdrop-265 -j DROP + inet6/filter/logdrop-265 -j DROP + inet/filter/limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-752 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 760 {"action":"pass","flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-753 + inet6/filter/INPUT -i eth0 -j limit-753 + inet/filter/limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-266 + inet6/filter/limit-753 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-266 + inet/filter/logdrop-266 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-266 -m limit --limit 1/second -j LOG + inet/filter/logdrop-266 -j DROP + inet6/filter/logdrop-266 -j DROP + inet/filter/limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-753 -m recent --name user:C --rsource --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 761 {"flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-754 + inet6/filter/INPUT -i eth0 -j limit-754 + inet/filter/limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-267 + inet6/filter/limit-754 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-267 + inet/filter/logdrop-267 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-267 -m limit --limit 1/second -j LOG + inet/filter/logdrop-267 -j DROP + inet6/filter/logdrop-267 -j DROP + inet/filter/limit-754 -m limit --limit 1/second -j LOG + inet6/filter/limit-754 -m limit --limit 1/second -j LOG + inet/filter/limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-754 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 762 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-755 + inet6/filter/INPUT -i eth0 -j limit-755 + inet/filter/limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-268 + inet6/filter/limit-755 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-268 + inet/filter/logdrop-268 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-268 -m limit --limit 1/second -j LOG + inet/filter/logdrop-268 -j DROP + inet6/filter/logdrop-268 -j DROP + inet/filter/limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-755 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 763 {"flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-756 + inet6/filter/INPUT -i eth0 -j limit-756 + inet/filter/limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-269 + inet6/filter/limit-756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-269 + inet/filter/logdrop-269 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-269 -m limit --limit 1/second -j LOG + inet/filter/logdrop-269 -j DROP + inet6/filter/logdrop-269 -j DROP + inet/filter/limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-756 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 764 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-757 + inet6/filter/INPUT -i eth0 -j limit-757 + inet/filter/limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-270 + inet6/filter/limit-757 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-270 + inet/filter/logdrop-270 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-270 -m limit --limit 1/second -j LOG + inet/filter/logdrop-270 -j DROP + inet6/filter/logdrop-270 -j DROP + inet/filter/limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-757 -m recent --name user:C --rsource --mask fe00:: --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 443 {"flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 765 {"flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-758 + inet6/filter/INPUT -i eth0 -j limit-758 + inet/filter/limit-758 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-271 + inet6/filter/limit-758 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-271 + inet/filter/logdrop-271 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-271 -m limit --limit 1/second -j LOG + inet/filter/logdrop-271 -j DROP + inet6/filter/logdrop-271 -j DROP + inet/filter/limit-758 -j ACCEPT + inet6/filter/limit-758 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 766 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-436 - inet6/filter/INPUT -i eth0 -j limit-436 - inet/filter/limit-436 -m recent --name limit-436 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-141 - inet6/filter/limit-436 -m recent --name limit-436 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-141 - inet/filter/logdrop-141 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-141 -m limit --limit 1/second -j LOG - inet/filter/logdrop-141 -j DROP - inet6/filter/logdrop-141 -j DROP - inet/filter/limit-436 -m limit --limit 1/second -j LOG - inet6/filter/limit-436 -m limit --limit 1/second -j LOG - inet/filter/limit-436 -m recent --name limit-436 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-436 -m recent --name limit-436 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-272 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-272 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 767 {"flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-760 + inet6/filter/INPUT -i eth0 -j limit-760 + inet/filter/limit-760 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-273 + inet6/filter/limit-760 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-273 + inet/filter/logdrop-273 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-273 -m limit --limit 1/second -j LOG + inet/filter/logdrop-273 -j DROP + inet6/filter/logdrop-273 -j DROP + inet/filter/limit-760 -m limit --limit 1/second -j LOG + inet6/filter/limit-760 -m limit --limit 1/second -j LOG + inet/filter/limit-760 -j ACCEPT + inet6/filter/limit-760 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 768 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-761 + inet6/filter/INPUT -i eth0 -j limit-761 + inet/filter/limit-761 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-274 + inet6/filter/limit-761 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-274 + inet/filter/logdrop-274 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-274 -m limit --limit 1/second -j LOG + inet/filter/logdrop-274 -j DROP + inet6/filter/logdrop-274 -j DROP + inet/filter/limit-761 -m limit --limit 1/second -j LOG + inet6/filter/limit-761 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 769 {"flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-762 + inet6/filter/INPUT -i eth0 -j limit-762 + inet/filter/limit-762 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-275 + inet6/filter/limit-762 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-275 + inet/filter/logdrop-275 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-275 -m limit --limit 1/second -j LOG + inet/filter/logdrop-275 -j DROP + inet6/filter/logdrop-275 -j DROP + inet/filter/limit-762 -j ACCEPT + inet6/filter/limit-762 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -6627,33 +11413,191 @@ Filter 443 {"flow-limit":{},"in":"A","log":true,"no-trac inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 444 {"action":"pass","flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 770 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-437 - inet6/filter/INPUT -i eth0 -j limit-437 - inet/filter/limit-437 -m recent --name limit-437 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-142 - inet6/filter/limit-437 -m recent --name limit-437 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-142 - inet/filter/logdrop-142 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-142 -m limit --limit 1/second -j LOG - inet/filter/logdrop-142 -j DROP - inet6/filter/logdrop-142 -j DROP - inet/filter/limit-437 -m recent --name limit-437 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-437 -m recent --name limit-437 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-276 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-276 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 771 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-764 + inet6/filter/INPUT -i eth0 -j limit-764 + inet/filter/limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-277 + inet6/filter/limit-764 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-277 + inet/filter/logdrop-277 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-277 -m limit --limit 1/second -j LOG + inet/filter/logdrop-277 -j DROP + inet6/filter/logdrop-277 -j DROP + inet/filter/limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-764 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 772 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-765 + inet6/filter/INPUT -i eth0 -j limit-765 + inet/filter/limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-278 + inet6/filter/limit-765 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-278 + inet/filter/logdrop-278 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-278 -m limit --limit 1/second -j LOG + inet/filter/logdrop-278 -j DROP + inet6/filter/logdrop-278 -j DROP + inet/filter/limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-765 -m recent --name user:C --rdest --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 773 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-766 + inet6/filter/INPUT -i eth0 -j limit-766 + inet/filter/limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-279 + inet6/filter/limit-766 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-279 + inet/filter/logdrop-279 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-279 -m limit --limit 1/second -j LOG + inet/filter/logdrop-279 -j DROP + inet6/filter/logdrop-279 -j DROP + inet/filter/limit-766 -m limit --limit 1/second -j LOG + inet6/filter/limit-766 -m limit --limit 1/second -j LOG + inet/filter/limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-766 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 774 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-767 + inet6/filter/INPUT -i eth0 -j limit-767 + inet/filter/limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-280 + inet6/filter/limit-767 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-280 + inet/filter/logdrop-280 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-280 -m limit --limit 1/second -j LOG + inet/filter/logdrop-280 -j DROP + inet6/filter/logdrop-280 -j DROP + inet/filter/limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-767 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 775 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-768 + inet6/filter/INPUT -i eth0 -j limit-768 + inet/filter/limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-281 + inet6/filter/limit-768 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-281 + inet/filter/logdrop-281 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-281 -m limit --limit 1/second -j LOG + inet/filter/logdrop-281 -j DROP + inet6/filter/logdrop-281 -j DROP + inet/filter/limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-768 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 776 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-769 + inet6/filter/INPUT -i eth0 -j limit-769 + inet/filter/limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-282 + inet6/filter/limit-769 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-282 + inet/filter/logdrop-282 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-282 -m limit --limit 1/second -j LOG + inet/filter/logdrop-282 -j DROP + inet6/filter/logdrop-282 -j DROP + inet/filter/limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-769 -m recent --name user:C --rdest --mask fe00:: --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 445 {"flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 777 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-770 + inet6/filter/INPUT -i eth0 -j limit-770 + inet/filter/limit-770 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-283 + inet6/filter/limit-770 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-283 + inet/filter/logdrop-283 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-283 -m limit --limit 1/second -j LOG + inet/filter/logdrop-283 -j DROP + inet6/filter/logdrop-283 -j DROP + inet/filter/limit-770 -j ACCEPT + inet6/filter/limit-770 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 778 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-438 - inet6/filter/INPUT -i eth0 -j limit-438 - inet/filter/limit-438 -m recent --name limit-438 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-143 - inet6/filter/limit-438 -m recent --name limit-438 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-143 - inet/filter/logdrop-143 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-143 -m limit --limit 1/second -j LOG - inet/filter/logdrop-143 -j DROP - inet6/filter/logdrop-143 -j DROP - inet/filter/limit-438 -m recent --name limit-438 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-438 -m recent --name limit-438 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-284 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-284 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 779 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-772 + inet6/filter/INPUT -i eth0 -j limit-772 + inet/filter/limit-772 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-285 + inet6/filter/limit-772 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-285 + inet/filter/logdrop-285 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-285 -m limit --limit 1/second -j LOG + inet/filter/logdrop-285 -j DROP + inet6/filter/logdrop-285 -j DROP + inet/filter/limit-772 -m limit --limit 1/second -j LOG + inet6/filter/limit-772 -m limit --limit 1/second -j LOG + inet/filter/limit-772 -j ACCEPT + inet6/filter/limit-772 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 780 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-773 + inet6/filter/INPUT -i eth0 -j limit-773 + inet/filter/limit-773 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-286 + inet6/filter/limit-773 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-286 + inet/filter/logdrop-286 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-286 -m limit --limit 1/second -j LOG + inet/filter/logdrop-286 -j DROP + inet6/filter/logdrop-286 -j DROP + inet/filter/limit-773 -m limit --limit 1/second -j LOG + inet6/filter/limit-773 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 781 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-774 + inet6/filter/INPUT -i eth0 -j limit-774 + inet/filter/limit-774 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-287 + inet6/filter/limit-774 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-287 + inet/filter/logdrop-287 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-287 -m limit --limit 1/second -j LOG + inet/filter/logdrop-287 -j DROP + inet6/filter/logdrop-287 -j DROP + inet/filter/limit-774 -j ACCEPT + inet6/filter/limit-774 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -6661,33 +11605,21 @@ Filter 445 {"flow-limit":{},"in":"A","log":"none","no-tr inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 446 {"action":"pass","flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 782 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-439 - inet6/filter/INPUT -i eth0 -j limit-439 - inet/filter/limit-439 -m recent --name limit-439 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-144 - inet6/filter/limit-439 -m recent --name limit-439 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-144 - inet/filter/logdrop-144 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-144 -m limit --limit 1/second -j LOG - inet/filter/logdrop-144 -j DROP - inet6/filter/logdrop-144 -j DROP - inet/filter/limit-439 -m recent --name limit-439 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-439 -m recent --name limit-439 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-288 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-288 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 447 {"flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 783 {"flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-440 - inet6/filter/INPUT -i eth0 -j limit-440 - inet/filter/limit-440 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-145 - inet6/filter/limit-440 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-145 - inet/filter/logdrop-145 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-145 -m limit --limit 1/second -j LOG - inet/filter/logdrop-145 -j DROP - inet6/filter/logdrop-145 -j DROP - inet/filter/limit-440 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-440 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-776 + inet6/filter/INPUT -i eth0 -j limit-776 + inet/filter/limit-776 -m recent --name limit-776 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-776 -m recent --name limit-776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-776 -m recent --name limit-776 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-776 -m recent --name limit-776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -6695,35 +11627,27 @@ Filter 447 {"flow-limit":{"name":"A"},"in":"A","no-track inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 448 {"action":"pass","flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 784 {"action":"pass","flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-441 - inet6/filter/INPUT -i eth0 -j limit-441 - inet/filter/limit-441 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-146 - inet6/filter/limit-441 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-146 - inet/filter/logdrop-146 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-146 -m limit --limit 1/second -j LOG - inet/filter/logdrop-146 -j DROP - inet6/filter/logdrop-146 -j DROP - inet/filter/limit-441 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-441 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-777 + inet6/filter/INPUT -i eth0 -j limit-777 + inet/filter/limit-777 -m recent --name limit-777 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-777 -m recent --name limit-777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-777 -m recent --name limit-777 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-777 -m recent --name limit-777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 449 {"flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 785 {"flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-442 - inet6/filter/INPUT -i eth0 -j limit-442 - inet/filter/limit-442 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-147 - inet6/filter/limit-442 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-147 - inet/filter/logdrop-147 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-147 -m limit --limit 1/second -j LOG - inet/filter/logdrop-147 -j DROP - inet6/filter/logdrop-147 -j DROP - inet/filter/limit-442 -m limit --limit 1/second -j LOG - inet6/filter/limit-442 -m limit --limit 1/second -j LOG - inet/filter/limit-442 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-442 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-778 + inet6/filter/INPUT -i eth0 -j limit-778 + inet/filter/limit-778 -m recent --name limit-778 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-778 -m recent --name limit-778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-778 -m limit --limit 1/second -j LOG + inet6/filter/limit-778 -m limit --limit 1/second -j LOG + inet/filter/limit-778 -m recent --name limit-778 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-778 -m recent --name limit-778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -6731,33 +11655,25 @@ Filter 449 {"flow-limit":{"name":"A"},"in":"A","log":tru inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 450 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 786 {"action":"pass","flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-443 - inet6/filter/INPUT -i eth0 -j limit-443 - inet/filter/limit-443 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-148 - inet6/filter/limit-443 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-148 - inet/filter/logdrop-148 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-148 -m limit --limit 1/second -j LOG - inet/filter/logdrop-148 -j DROP - inet6/filter/logdrop-148 -j DROP - inet/filter/limit-443 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-443 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-779 + inet6/filter/INPUT -i eth0 -j limit-779 + inet/filter/limit-779 -m recent --name limit-779 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-779 -m recent --name limit-779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-779 -m recent --name limit-779 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-779 -m recent --name limit-779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 451 {"flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 787 {"flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-444 - inet6/filter/INPUT -i eth0 -j limit-444 - inet/filter/limit-444 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-149 - inet6/filter/limit-444 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-149 - inet/filter/logdrop-149 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-149 -m limit --limit 1/second -j LOG - inet/filter/logdrop-149 -j DROP - inet6/filter/logdrop-149 -j DROP - inet/filter/limit-444 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-444 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-780 + inet6/filter/INPUT -i eth0 -j limit-780 + inet/filter/limit-780 -m recent --name limit-780 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-780 -m recent --name limit-780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-780 -m recent --name limit-780 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-780 -m recent --name limit-780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -6765,33 +11681,25 @@ Filter 451 {"flow-limit":{"name":"A"},"in":"A","log":"no inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 452 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 788 {"action":"pass","flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-445 - inet6/filter/INPUT -i eth0 -j limit-445 - inet/filter/limit-445 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-150 - inet6/filter/limit-445 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-150 - inet/filter/logdrop-150 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-150 -m limit --limit 1/second -j LOG - inet/filter/logdrop-150 -j DROP - inet6/filter/logdrop-150 -j DROP - inet/filter/limit-445 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-445 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-781 + inet6/filter/INPUT -i eth0 -j limit-781 + inet/filter/limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 453 {"flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 789 {"flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-446 - inet6/filter/INPUT -i eth0 -j limit-446 - inet/filter/limit-446 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-151 - inet6/filter/limit-446 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-151 - inet/filter/logdrop-151 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-151 -m limit --limit 1/second -j LOG - inet/filter/logdrop-151 -j DROP - inet6/filter/logdrop-151 -j DROP - inet/filter/limit-446 -j ACCEPT - inet6/filter/limit-446 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-782 + inet6/filter/INPUT -i eth0 -j limit-782 + inet/filter/limit-782 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-782 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -6799,27 +11707,27 @@ Filter 453 {"flow-limit":{"name":"A","update":false},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 454 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 790 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-152 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-152 + inet/filter/INPUT -i eth0 -j limit-783 + inet6/filter/INPUT -i eth0 -j limit-783 + inet/filter/limit-783 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-783 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 455 {"flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 791 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-448 - inet6/filter/INPUT -i eth0 -j limit-448 - inet/filter/limit-448 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-153 - inet6/filter/limit-448 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-153 - inet/filter/logdrop-153 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-153 -m limit --limit 1/second -j LOG - inet/filter/logdrop-153 -j DROP - inet6/filter/logdrop-153 -j DROP - inet/filter/limit-448 -m limit --limit 1/second -j LOG - inet6/filter/limit-448 -m limit --limit 1/second -j LOG - inet/filter/limit-448 -j ACCEPT - inet6/filter/limit-448 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-784 + inet6/filter/INPUT -i eth0 -j limit-784 + inet/filter/limit-784 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-784 -m limit --limit 1/second -j LOG + inet6/filter/limit-784 -m limit --limit 1/second -j LOG + inet/filter/limit-784 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -6827,33 +11735,25 @@ Filter 455 {"flow-limit":{"name":"A","update":false},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 456 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 792 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-449 - inet6/filter/INPUT -i eth0 -j limit-449 - inet/filter/limit-449 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-154 - inet6/filter/limit-449 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-154 - inet/filter/logdrop-154 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-154 -m limit --limit 1/second -j LOG - inet/filter/logdrop-154 -j DROP - inet6/filter/logdrop-154 -j DROP - inet/filter/limit-449 -m limit --limit 1/second -j LOG - inet6/filter/limit-449 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-785 + inet6/filter/INPUT -i eth0 -j limit-785 + inet/filter/limit-785 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-785 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 457 {"flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 793 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-450 - inet6/filter/INPUT -i eth0 -j limit-450 - inet/filter/limit-450 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-155 - inet6/filter/limit-450 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-155 - inet/filter/logdrop-155 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-155 -m limit --limit 1/second -j LOG - inet/filter/logdrop-155 -j DROP - inet6/filter/logdrop-155 -j DROP - inet/filter/limit-450 -j ACCEPT - inet6/filter/limit-450 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-786 + inet6/filter/INPUT -i eth0 -j limit-786 + inet/filter/limit-786 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-786 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -6861,25 +11761,25 @@ Filter 457 {"flow-limit":{"name":"A","update":false},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 458 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 794 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-156 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-156 + inet/filter/INPUT -i eth0 -j limit-787 + inet6/filter/INPUT -i eth0 -j limit-787 + inet/filter/limit-787 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-787 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 459 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 795 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-452 - inet6/filter/INPUT -i eth0 -j limit-452 - inet/filter/limit-452 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-157 - inet6/filter/limit-452 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-157 - inet/filter/logdrop-157 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-157 -m limit --limit 1/second -j LOG - inet/filter/logdrop-157 -j DROP - inet6/filter/logdrop-157 -j DROP - inet/filter/limit-452 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-452 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-788 + inet6/filter/INPUT -i eth0 -j limit-788 + inet/filter/limit-788 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-788 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-788 -j ACCEPT + inet6/filter/limit-788 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -6887,35 +11787,23 @@ Filter 459 {"flow-limit":{"addr":"dest","name":"A"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 460 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 796 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-453 - inet6/filter/INPUT -i eth0 -j limit-453 - inet/filter/limit-453 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-158 - inet6/filter/limit-453 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-158 - inet/filter/logdrop-158 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-158 -m limit --limit 1/second -j LOG - inet/filter/logdrop-158 -j DROP - inet6/filter/logdrop-158 -j DROP - inet/filter/limit-453 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-453 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 461 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 797 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-454 - inet6/filter/INPUT -i eth0 -j limit-454 - inet/filter/limit-454 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-159 - inet6/filter/limit-454 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-159 - inet/filter/logdrop-159 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-159 -m limit --limit 1/second -j LOG - inet/filter/logdrop-159 -j DROP - inet6/filter/logdrop-159 -j DROP - inet/filter/limit-454 -m limit --limit 1/second -j LOG - inet6/filter/limit-454 -m limit --limit 1/second -j LOG - inet/filter/limit-454 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-454 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-790 + inet6/filter/INPUT -i eth0 -j limit-790 + inet/filter/limit-790 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-790 -m limit --limit 1/second -j LOG + inet6/filter/limit-790 -m limit --limit 1/second -j LOG + inet/filter/limit-790 -j ACCEPT + inet6/filter/limit-790 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -6923,33 +11811,25 @@ Filter 461 {"flow-limit":{"addr":"dest","name":"A"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 462 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 798 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-455 - inet6/filter/INPUT -i eth0 -j limit-455 - inet/filter/limit-455 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-160 - inet6/filter/limit-455 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-160 - inet/filter/logdrop-160 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-160 -m limit --limit 1/second -j LOG - inet/filter/logdrop-160 -j DROP - inet6/filter/logdrop-160 -j DROP - inet/filter/limit-455 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-455 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-791 + inet6/filter/INPUT -i eth0 -j limit-791 + inet/filter/limit-791 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-791 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-791 -m limit --limit 1/second -j LOG + inet6/filter/limit-791 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 463 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 799 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-456 - inet6/filter/INPUT -i eth0 -j limit-456 - inet/filter/limit-456 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-161 - inet6/filter/limit-456 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-161 - inet/filter/logdrop-161 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-161 -m limit --limit 1/second -j LOG - inet/filter/logdrop-161 -j DROP - inet6/filter/logdrop-161 -j DROP - inet/filter/limit-456 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-456 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-792 + inet6/filter/INPUT -i eth0 -j limit-792 + inet/filter/limit-792 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-792 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-792 -j ACCEPT + inet6/filter/limit-792 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -6957,33 +11837,21 @@ Filter 463 {"flow-limit":{"addr":"dest","name":"A"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 464 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 800 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-457 - inet6/filter/INPUT -i eth0 -j limit-457 - inet/filter/limit-457 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-162 - inet6/filter/limit-457 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-162 - inet/filter/logdrop-162 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-162 -m limit --limit 1/second -j LOG - inet/filter/logdrop-162 -j DROP - inet6/filter/logdrop-162 -j DROP - inet/filter/limit-457 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-457 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 465 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 801 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-458 - inet6/filter/INPUT -i eth0 -j limit-458 - inet/filter/limit-458 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-163 - inet6/filter/limit-458 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-163 - inet/filter/logdrop-163 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-163 -m limit --limit 1/second -j LOG - inet/filter/logdrop-163 -j DROP - inet6/filter/logdrop-163 -j DROP - inet/filter/limit-458 -j ACCEPT - inet6/filter/limit-458 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-794 + inet6/filter/INPUT -i eth0 -j limit-794 + inet/filter/limit-794 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-794 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -6991,27 +11859,27 @@ Filter 465 {"flow-limit":{"addr":"dest","name":"A","upda inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 466 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 802 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-164 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-164 + inet/filter/INPUT -i eth0 -j limit-795 + inet6/filter/INPUT -i eth0 -j limit-795 + inet/filter/limit-795 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-795 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 467 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 803 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-460 - inet6/filter/INPUT -i eth0 -j limit-460 - inet/filter/limit-460 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-165 - inet6/filter/limit-460 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-165 - inet/filter/logdrop-165 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-165 -m limit --limit 1/second -j LOG - inet/filter/logdrop-165 -j DROP - inet6/filter/logdrop-165 -j DROP - inet/filter/limit-460 -m limit --limit 1/second -j LOG - inet6/filter/limit-460 -m limit --limit 1/second -j LOG - inet/filter/limit-460 -j ACCEPT - inet6/filter/limit-460 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-796 + inet6/filter/INPUT -i eth0 -j limit-796 + inet/filter/limit-796 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-796 -m limit --limit 1/second -j LOG + inet6/filter/limit-796 -m limit --limit 1/second -j LOG + inet/filter/limit-796 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7019,33 +11887,25 @@ Filter 467 {"flow-limit":{"addr":"dest","name":"A","upda inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 468 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 804 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-461 - inet6/filter/INPUT -i eth0 -j limit-461 - inet/filter/limit-461 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-166 - inet6/filter/limit-461 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-166 - inet/filter/logdrop-166 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-166 -m limit --limit 1/second -j LOG - inet/filter/logdrop-166 -j DROP - inet6/filter/logdrop-166 -j DROP - inet/filter/limit-461 -m limit --limit 1/second -j LOG - inet6/filter/limit-461 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-797 + inet6/filter/INPUT -i eth0 -j limit-797 + inet/filter/limit-797 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-797 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 469 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 805 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-462 - inet6/filter/INPUT -i eth0 -j limit-462 - inet/filter/limit-462 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-167 - inet6/filter/limit-462 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-167 - inet/filter/logdrop-167 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-167 -m limit --limit 1/second -j LOG - inet/filter/logdrop-167 -j DROP - inet6/filter/logdrop-167 -j DROP - inet/filter/limit-462 -j ACCEPT - inet6/filter/limit-462 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-798 + inet6/filter/INPUT -i eth0 -j limit-798 + inet/filter/limit-798 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-798 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7053,21 +11913,25 @@ Filter 469 {"flow-limit":{"addr":"dest","name":"A","upda inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 470 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 806 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-168 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-168 + inet/filter/INPUT -i eth0 -j limit-799 + inet6/filter/INPUT -i eth0 -j limit-799 + inet/filter/limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 471 {"flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 807 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-464 - inet6/filter/INPUT -i eth0 -j limit-464 - inet/filter/limit-464 -m recent --name limit-464 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-464 -m recent --name limit-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-464 -m recent --name limit-464 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-464 -m recent --name limit-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-800 + inet6/filter/INPUT -i eth0 -j limit-800 + inet/filter/limit-800 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-800 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-800 -j ACCEPT + inet6/filter/limit-800 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7075,27 +11939,23 @@ Filter 471 {"flow-limit":{"log":false},"in":"A","no-trac inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 472 {"action":"pass","flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 808 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-465 - inet6/filter/INPUT -i eth0 -j limit-465 - inet/filter/limit-465 -m recent --name limit-465 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-465 -m recent --name limit-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-465 -m recent --name limit-465 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-465 -m recent --name limit-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 473 {"flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 809 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-466 - inet6/filter/INPUT -i eth0 -j limit-466 - inet/filter/limit-466 -m recent --name limit-466 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-466 -m recent --name limit-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-466 -m limit --limit 1/second -j LOG - inet6/filter/limit-466 -m limit --limit 1/second -j LOG - inet/filter/limit-466 -m recent --name limit-466 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-466 -m recent --name limit-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-802 + inet6/filter/INPUT -i eth0 -j limit-802 + inet/filter/limit-802 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-802 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-802 -m limit --limit 1/second -j LOG + inet6/filter/limit-802 -m limit --limit 1/second -j LOG + inet/filter/limit-802 -j ACCEPT + inet6/filter/limit-802 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7103,25 +11963,25 @@ Filter 473 {"flow-limit":{"log":false},"in":"A","log":tr inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 474 {"action":"pass","flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 810 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-467 - inet6/filter/INPUT -i eth0 -j limit-467 - inet/filter/limit-467 -m recent --name limit-467 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-467 -m recent --name limit-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-467 -m recent --name limit-467 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-467 -m recent --name limit-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-803 + inet6/filter/INPUT -i eth0 -j limit-803 + inet/filter/limit-803 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-803 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-803 -m limit --limit 1/second -j LOG + inet6/filter/limit-803 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 475 {"flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 811 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-468 - inet6/filter/INPUT -i eth0 -j limit-468 - inet/filter/limit-468 -m recent --name limit-468 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-468 -m recent --name limit-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-468 -m recent --name limit-468 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-468 -m recent --name limit-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-804 + inet6/filter/INPUT -i eth0 -j limit-804 + inet/filter/limit-804 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-804 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-804 -j ACCEPT + inet6/filter/limit-804 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7129,25 +11989,21 @@ Filter 475 {"flow-limit":{"log":false},"in":"A","log":"n inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 476 {"action":"pass","flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 812 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-469 - inet6/filter/INPUT -i eth0 -j limit-469 - inet/filter/limit-469 -m recent --name limit-469 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-469 -m recent --name limit-469 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-469 -m recent --name limit-469 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-469 -m recent --name limit-469 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 477 {"flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 813 {"flow-limit":{"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-470 - inet6/filter/INPUT -i eth0 -j limit-470 - inet/filter/limit-470 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-470 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-806 + inet6/filter/INPUT -i eth0 -j limit-806 + inet/filter/limit-806 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-806 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-806 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-806 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7155,27 +12011,27 @@ Filter 477 {"flow-limit":{"log":false,"name":"A"},"in":" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 478 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 814 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-471 - inet6/filter/INPUT -i eth0 -j limit-471 - inet/filter/limit-471 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-471 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-807 + inet6/filter/INPUT -i eth0 -j limit-807 + inet/filter/limit-807 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-807 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-807 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-807 -m recent --name user:C --rsource --mask fe00:: --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 479 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 815 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-472 - inet6/filter/INPUT -i eth0 -j limit-472 - inet/filter/limit-472 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-472 -m limit --limit 1/second -j LOG - inet6/filter/limit-472 -m limit --limit 1/second -j LOG - inet/filter/limit-472 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-808 + inet6/filter/INPUT -i eth0 -j limit-808 + inet/filter/limit-808 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-808 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-808 -m limit --limit 1/second -j LOG + inet6/filter/limit-808 -m limit --limit 1/second -j LOG + inet/filter/limit-808 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-808 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7183,25 +12039,25 @@ Filter 479 {"flow-limit":{"log":false,"name":"A"},"in":" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 480 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 816 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-473 - inet6/filter/INPUT -i eth0 -j limit-473 - inet/filter/limit-473 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-473 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-809 + inet6/filter/INPUT -i eth0 -j limit-809 + inet/filter/limit-809 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-809 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-809 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-809 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 481 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 817 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-474 - inet6/filter/INPUT -i eth0 -j limit-474 - inet/filter/limit-474 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-474 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-810 + inet6/filter/INPUT -i eth0 -j limit-810 + inet/filter/limit-810 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-810 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-810 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-810 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7209,25 +12065,25 @@ Filter 481 {"flow-limit":{"log":false,"name":"A"},"in":" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 482 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 818 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-475 - inet6/filter/INPUT -i eth0 -j limit-475 - inet/filter/limit-475 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-475 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-811 + inet6/filter/INPUT -i eth0 -j limit-811 + inet/filter/limit-811 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-811 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-811 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-811 -m recent --name user:C --rsource --mask fe00:: --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 483 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 819 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-476 - inet6/filter/INPUT -i eth0 -j limit-476 - inet/filter/limit-476 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-476 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-476 -j ACCEPT - inet6/filter/limit-476 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-812 + inet6/filter/INPUT -i eth0 -j limit-812 + inet/filter/limit-812 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-812 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-812 -j ACCEPT + inet6/filter/limit-812 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7235,23 +12091,23 @@ Filter 483 {"flow-limit":{"log":false,"name":"A","update inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 484 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 820 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 485 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 821 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-478 - inet6/filter/INPUT -i eth0 -j limit-478 - inet/filter/limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-478 -m limit --limit 1/second -j LOG - inet6/filter/limit-478 -m limit --limit 1/second -j LOG - inet/filter/limit-478 -j ACCEPT - inet6/filter/limit-478 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-814 + inet6/filter/INPUT -i eth0 -j limit-814 + inet/filter/limit-814 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-814 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-814 -m limit --limit 1/second -j LOG + inet6/filter/limit-814 -m limit --limit 1/second -j LOG + inet/filter/limit-814 -j ACCEPT + inet6/filter/limit-814 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7259,25 +12115,25 @@ Filter 485 {"flow-limit":{"log":false,"name":"A","update inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 486 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 822 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-479 - inet6/filter/INPUT -i eth0 -j limit-479 - inet/filter/limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-479 -m limit --limit 1/second -j LOG - inet6/filter/limit-479 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-815 + inet6/filter/INPUT -i eth0 -j limit-815 + inet/filter/limit-815 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-815 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-815 -m limit --limit 1/second -j LOG + inet6/filter/limit-815 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 487 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 823 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-480 - inet6/filter/INPUT -i eth0 -j limit-480 - inet/filter/limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-480 -j ACCEPT - inet6/filter/limit-480 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-816 + inet6/filter/INPUT -i eth0 -j limit-816 + inet/filter/limit-816 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-816 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-816 -j ACCEPT + inet6/filter/limit-816 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7285,21 +12141,21 @@ Filter 487 {"flow-limit":{"log":false,"name":"A","update inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 488 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 824 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 489 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 825 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-482 - inet6/filter/INPUT -i eth0 -j limit-482 - inet/filter/limit-482 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-482 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-482 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-482 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-818 + inet6/filter/INPUT -i eth0 -j limit-818 + inet/filter/limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-818 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-818 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7307,27 +12163,27 @@ Filter 489 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 490 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 826 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-483 - inet6/filter/INPUT -i eth0 -j limit-483 - inet/filter/limit-483 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-483 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-483 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-483 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-819 + inet6/filter/INPUT -i eth0 -j limit-819 + inet/filter/limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-819 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-819 -m recent --name user:C --rdest --mask fe00:: --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 491 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 827 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-484 - inet6/filter/INPUT -i eth0 -j limit-484 - inet/filter/limit-484 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-484 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-484 -m limit --limit 1/second -j LOG - inet6/filter/limit-484 -m limit --limit 1/second -j LOG - inet/filter/limit-484 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-484 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-820 + inet6/filter/INPUT -i eth0 -j limit-820 + inet/filter/limit-820 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-820 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-820 -m limit --limit 1/second -j LOG + inet6/filter/limit-820 -m limit --limit 1/second -j LOG + inet/filter/limit-820 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-820 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7335,25 +12191,25 @@ Filter 491 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 492 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 828 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-485 - inet6/filter/INPUT -i eth0 -j limit-485 - inet/filter/limit-485 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-485 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-485 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-485 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-821 + inet6/filter/INPUT -i eth0 -j limit-821 + inet/filter/limit-821 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-821 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-821 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-821 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 493 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 829 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-486 - inet6/filter/INPUT -i eth0 -j limit-486 - inet/filter/limit-486 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-486 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-486 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-486 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-822 + inet6/filter/INPUT -i eth0 -j limit-822 + inet/filter/limit-822 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-822 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-822 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-822 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7361,25 +12217,25 @@ Filter 493 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 494 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 830 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-487 - inet6/filter/INPUT -i eth0 -j limit-487 - inet/filter/limit-487 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-487 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-487 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-487 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-823 + inet6/filter/INPUT -i eth0 -j limit-823 + inet/filter/limit-823 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-823 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-823 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-823 -m recent --name user:C --rdest --mask fe00:: --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 495 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 831 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-488 - inet6/filter/INPUT -i eth0 -j limit-488 - inet/filter/limit-488 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-488 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-488 -j ACCEPT - inet6/filter/limit-488 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-824 + inet6/filter/INPUT -i eth0 -j limit-824 + inet/filter/limit-824 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-824 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-824 -j ACCEPT + inet6/filter/limit-824 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7387,23 +12243,23 @@ Filter 495 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 496 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 832 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 497 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 833 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-490 - inet6/filter/INPUT -i eth0 -j limit-490 - inet/filter/limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-490 -m limit --limit 1/second -j LOG - inet6/filter/limit-490 -m limit --limit 1/second -j LOG - inet/filter/limit-490 -j ACCEPT - inet6/filter/limit-490 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-826 + inet6/filter/INPUT -i eth0 -j limit-826 + inet/filter/limit-826 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-826 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-826 -m limit --limit 1/second -j LOG + inet6/filter/limit-826 -m limit --limit 1/second -j LOG + inet/filter/limit-826 -j ACCEPT + inet6/filter/limit-826 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7411,25 +12267,25 @@ Filter 497 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 498 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 834 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-491 - inet6/filter/INPUT -i eth0 -j limit-491 - inet/filter/limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-491 -m limit --limit 1/second -j LOG - inet6/filter/limit-491 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-827 + inet6/filter/INPUT -i eth0 -j limit-827 + inet/filter/limit-827 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-827 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-827 -m limit --limit 1/second -j LOG + inet6/filter/limit-827 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 499 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 835 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-492 - inet6/filter/INPUT -i eth0 -j limit-492 - inet/filter/limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-492 -j ACCEPT - inet6/filter/limit-492 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-828 + inet6/filter/INPUT -i eth0 -j limit-828 + inet/filter/limit-828 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-828 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-828 -j ACCEPT + inet6/filter/limit-828 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7437,21 +12293,21 @@ Filter 499 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 500 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 836 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 501 {"flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 837 {"flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-494 - inet6/filter/INPUT -i eth0 -j limit-494 - inet/filter/limit-494 -m recent --name limit-494 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-494 -m recent --name limit-494 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-494 -m recent --name limit-494 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-494 -m recent --name limit-494 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-830 + inet6/filter/INPUT -i eth0 -j limit-830 + inet/filter/limit-830 -m recent --name limit-830 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-830 -m recent --name limit-830 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-830 -m recent --name limit-830 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-830 -m recent --name limit-830 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7459,27 +12315,27 @@ Filter 501 {"flow-limit":{"log":"none"},"in":"A","no-tra inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 502 {"action":"pass","flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 838 {"action":"pass","flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-495 - inet6/filter/INPUT -i eth0 -j limit-495 - inet/filter/limit-495 -m recent --name limit-495 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-495 -m recent --name limit-495 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-495 -m recent --name limit-495 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-495 -m recent --name limit-495 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-831 + inet6/filter/INPUT -i eth0 -j limit-831 + inet/filter/limit-831 -m recent --name limit-831 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-831 -m recent --name limit-831 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-831 -m recent --name limit-831 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-831 -m recent --name limit-831 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 503 {"flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 839 {"flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-496 - inet6/filter/INPUT -i eth0 -j limit-496 - inet/filter/limit-496 -m recent --name limit-496 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-496 -m recent --name limit-496 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-496 -m limit --limit 1/second -j LOG - inet6/filter/limit-496 -m limit --limit 1/second -j LOG - inet/filter/limit-496 -m recent --name limit-496 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-496 -m recent --name limit-496 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-832 + inet6/filter/INPUT -i eth0 -j limit-832 + inet/filter/limit-832 -m recent --name limit-832 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-832 -m recent --name limit-832 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-832 -m limit --limit 1/second -j LOG + inet6/filter/limit-832 -m limit --limit 1/second -j LOG + inet/filter/limit-832 -m recent --name limit-832 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-832 -m recent --name limit-832 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7487,25 +12343,25 @@ Filter 503 {"flow-limit":{"log":"none"},"in":"A","log":t inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 504 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 840 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-497 - inet6/filter/INPUT -i eth0 -j limit-497 - inet/filter/limit-497 -m recent --name limit-497 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-497 -m recent --name limit-497 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-497 -m recent --name limit-497 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-497 -m recent --name limit-497 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-833 + inet6/filter/INPUT -i eth0 -j limit-833 + inet/filter/limit-833 -m recent --name limit-833 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-833 -m recent --name limit-833 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-833 -m recent --name limit-833 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-833 -m recent --name limit-833 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 505 {"flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 841 {"flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-498 - inet6/filter/INPUT -i eth0 -j limit-498 - inet/filter/limit-498 -m recent --name limit-498 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-498 -m recent --name limit-498 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-498 -m recent --name limit-498 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-498 -m recent --name limit-498 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-834 + inet6/filter/INPUT -i eth0 -j limit-834 + inet/filter/limit-834 -m recent --name limit-834 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-834 -m recent --name limit-834 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-834 -m recent --name limit-834 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-834 -m recent --name limit-834 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7513,25 +12369,25 @@ Filter 505 {"flow-limit":{"log":"none"},"in":"A","log":" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 506 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 842 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-499 - inet6/filter/INPUT -i eth0 -j limit-499 - inet/filter/limit-499 -m recent --name limit-499 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-499 -m recent --name limit-499 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-499 -m recent --name limit-499 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-499 -m recent --name limit-499 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-835 + inet6/filter/INPUT -i eth0 -j limit-835 + inet/filter/limit-835 -m recent --name limit-835 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-835 -m recent --name limit-835 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-835 -m recent --name limit-835 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-835 -m recent --name limit-835 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 507 {"flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 843 {"flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-500 - inet6/filter/INPUT -i eth0 -j limit-500 - inet/filter/limit-500 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-500 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-500 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-500 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-836 + inet6/filter/INPUT -i eth0 -j limit-836 + inet/filter/limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7539,27 +12395,27 @@ Filter 507 {"flow-limit":{"log":"none","name":"A"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 508 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 844 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-501 - inet6/filter/INPUT -i eth0 -j limit-501 - inet/filter/limit-501 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-501 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-501 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-501 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-837 + inet6/filter/INPUT -i eth0 -j limit-837 + inet/filter/limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 509 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 845 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-502 - inet6/filter/INPUT -i eth0 -j limit-502 - inet/filter/limit-502 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-502 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-502 -m limit --limit 1/second -j LOG - inet6/filter/limit-502 -m limit --limit 1/second -j LOG - inet/filter/limit-502 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-502 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-838 + inet6/filter/INPUT -i eth0 -j limit-838 + inet/filter/limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-838 -m limit --limit 1/second -j LOG + inet6/filter/limit-838 -m limit --limit 1/second -j LOG + inet/filter/limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7567,25 +12423,25 @@ Filter 509 {"flow-limit":{"log":"none","name":"A"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 510 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 846 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-503 - inet6/filter/INPUT -i eth0 -j limit-503 - inet/filter/limit-503 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-503 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-503 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-503 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-839 + inet6/filter/INPUT -i eth0 -j limit-839 + inet/filter/limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 511 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 847 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-504 - inet6/filter/INPUT -i eth0 -j limit-504 - inet/filter/limit-504 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-504 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-504 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-504 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-840 + inet6/filter/INPUT -i eth0 -j limit-840 + inet/filter/limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7593,25 +12449,25 @@ Filter 511 {"flow-limit":{"log":"none","name":"A"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 512 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 848 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-505 - inet6/filter/INPUT -i eth0 -j limit-505 - inet/filter/limit-505 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-505 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-505 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-505 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-841 + inet6/filter/INPUT -i eth0 -j limit-841 + inet/filter/limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 513 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 849 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-506 - inet6/filter/INPUT -i eth0 -j limit-506 - inet/filter/limit-506 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-506 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-506 -j ACCEPT - inet6/filter/limit-506 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-842 + inet6/filter/INPUT -i eth0 -j limit-842 + inet/filter/limit-842 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-842 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-842 -j ACCEPT + inet6/filter/limit-842 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7619,23 +12475,23 @@ Filter 513 {"flow-limit":{"log":"none","name":"A","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 514 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 850 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 515 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 851 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-508 - inet6/filter/INPUT -i eth0 -j limit-508 - inet/filter/limit-508 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-508 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-508 -m limit --limit 1/second -j LOG - inet6/filter/limit-508 -m limit --limit 1/second -j LOG - inet/filter/limit-508 -j ACCEPT - inet6/filter/limit-508 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-844 + inet6/filter/INPUT -i eth0 -j limit-844 + inet/filter/limit-844 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-844 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-844 -m limit --limit 1/second -j LOG + inet6/filter/limit-844 -m limit --limit 1/second -j LOG + inet/filter/limit-844 -j ACCEPT + inet6/filter/limit-844 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7643,25 +12499,25 @@ Filter 515 {"flow-limit":{"log":"none","name":"A","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 516 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 852 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-509 - inet6/filter/INPUT -i eth0 -j limit-509 - inet/filter/limit-509 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-509 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-509 -m limit --limit 1/second -j LOG - inet6/filter/limit-509 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-845 + inet6/filter/INPUT -i eth0 -j limit-845 + inet/filter/limit-845 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-845 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-845 -m limit --limit 1/second -j LOG + inet6/filter/limit-845 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 517 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 853 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-510 - inet6/filter/INPUT -i eth0 -j limit-510 - inet/filter/limit-510 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-510 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-510 -j ACCEPT - inet6/filter/limit-510 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-846 + inet6/filter/INPUT -i eth0 -j limit-846 + inet/filter/limit-846 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-846 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-846 -j ACCEPT + inet6/filter/limit-846 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7669,21 +12525,21 @@ Filter 517 {"flow-limit":{"log":"none","name":"A","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 518 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 854 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 519 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 855 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-512 - inet6/filter/INPUT -i eth0 -j limit-512 - inet/filter/limit-512 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-512 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-512 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-512 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-848 + inet6/filter/INPUT -i eth0 -j limit-848 + inet/filter/limit-848 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-848 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-848 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-848 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7691,27 +12547,27 @@ Filter 519 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 520 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 856 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-513 - inet6/filter/INPUT -i eth0 -j limit-513 - inet/filter/limit-513 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-513 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-513 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-513 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-849 + inet6/filter/INPUT -i eth0 -j limit-849 + inet/filter/limit-849 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-849 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-849 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-849 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 521 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 857 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-514 - inet6/filter/INPUT -i eth0 -j limit-514 - inet/filter/limit-514 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-514 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-514 -m limit --limit 1/second -j LOG - inet6/filter/limit-514 -m limit --limit 1/second -j LOG - inet/filter/limit-514 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-514 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-850 + inet6/filter/INPUT -i eth0 -j limit-850 + inet/filter/limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-850 -m limit --limit 1/second -j LOG + inet6/filter/limit-850 -m limit --limit 1/second -j LOG + inet/filter/limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7719,25 +12575,25 @@ Filter 521 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 522 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 858 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-515 - inet6/filter/INPUT -i eth0 -j limit-515 - inet/filter/limit-515 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-515 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-515 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-515 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-851 + inet6/filter/INPUT -i eth0 -j limit-851 + inet/filter/limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 523 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 859 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-516 - inet6/filter/INPUT -i eth0 -j limit-516 - inet/filter/limit-516 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-516 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-516 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-516 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-852 + inet6/filter/INPUT -i eth0 -j limit-852 + inet/filter/limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7745,25 +12601,25 @@ Filter 523 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 524 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 860 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-517 - inet6/filter/INPUT -i eth0 -j limit-517 - inet/filter/limit-517 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-517 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-517 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-517 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-853 + inet6/filter/INPUT -i eth0 -j limit-853 + inet/filter/limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 525 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 861 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-518 - inet6/filter/INPUT -i eth0 -j limit-518 - inet/filter/limit-518 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-518 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-518 -j ACCEPT - inet6/filter/limit-518 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-854 + inet6/filter/INPUT -i eth0 -j limit-854 + inet/filter/limit-854 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-854 -j ACCEPT + inet6/filter/limit-854 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7771,23 +12627,23 @@ Filter 525 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 526 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 862 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 527 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 863 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-520 - inet6/filter/INPUT -i eth0 -j limit-520 - inet/filter/limit-520 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-520 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-520 -m limit --limit 1/second -j LOG - inet6/filter/limit-520 -m limit --limit 1/second -j LOG - inet/filter/limit-520 -j ACCEPT - inet6/filter/limit-520 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-856 + inet6/filter/INPUT -i eth0 -j limit-856 + inet/filter/limit-856 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-856 -m limit --limit 1/second -j LOG + inet6/filter/limit-856 -m limit --limit 1/second -j LOG + inet/filter/limit-856 -j ACCEPT + inet6/filter/limit-856 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7795,25 +12651,25 @@ Filter 527 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 528 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 864 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-521 - inet6/filter/INPUT -i eth0 -j limit-521 - inet/filter/limit-521 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-521 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-521 -m limit --limit 1/second -j LOG - inet6/filter/limit-521 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-857 + inet6/filter/INPUT -i eth0 -j limit-857 + inet/filter/limit-857 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-857 -m limit --limit 1/second -j LOG + inet6/filter/limit-857 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 529 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 865 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-522 - inet6/filter/INPUT -i eth0 -j limit-522 - inet/filter/limit-522 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-522 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-522 -j ACCEPT - inet6/filter/limit-522 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-858 + inet6/filter/INPUT -i eth0 -j limit-858 + inet/filter/limit-858 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-858 -j ACCEPT + inet6/filter/limit-858 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7821,25 +12677,21 @@ Filter 529 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 530 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 866 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 531 {"flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw"} +Filter 867 {"flow-limit":{"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-524 - inet6/filter/INPUT -i eth0 -j limit-524 - inet/filter/limit-524 -m recent --name limit-524 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-169 - inet6/filter/limit-524 -m recent --name limit-524 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-169 - inet/filter/logdrop-169 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-169 -m limit --limit 1/second -j LOG - inet/filter/logdrop-169 -j DROP - inet6/filter/logdrop-169 -j DROP - inet/filter/limit-524 -m recent --name limit-524 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-524 -m recent --name limit-524 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-860 + inet6/filter/INPUT -i eth0 -j limit-860 + inet/filter/limit-860 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-860 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-860 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-860 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7847,35 +12699,27 @@ Filter 531 {"flow-limit":{"interval":5},"in":"A","no-tra inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 532 {"action":"pass","flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw"} +Filter 868 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-525 - inet6/filter/INPUT -i eth0 -j limit-525 - inet/filter/limit-525 -m recent --name limit-525 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-170 - inet6/filter/limit-525 -m recent --name limit-525 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-170 - inet/filter/logdrop-170 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-170 -m limit --limit 1/second -j LOG - inet/filter/logdrop-170 -j DROP - inet6/filter/logdrop-170 -j DROP - inet/filter/limit-525 -m recent --name limit-525 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-525 -m recent --name limit-525 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-861 + inet6/filter/INPUT -i eth0 -j limit-861 + inet/filter/limit-861 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-861 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-861 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-861 -m recent --name user:C --rsource --mask fe00:: --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 533 {"flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 869 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-526 - inet6/filter/INPUT -i eth0 -j limit-526 - inet/filter/limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-171 - inet6/filter/limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-171 - inet/filter/logdrop-171 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-171 -m limit --limit 1/second -j LOG - inet/filter/logdrop-171 -j DROP - inet6/filter/logdrop-171 -j DROP - inet/filter/limit-526 -m limit --limit 1/second -j LOG - inet6/filter/limit-526 -m limit --limit 1/second -j LOG - inet/filter/limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-862 + inet6/filter/INPUT -i eth0 -j limit-862 + inet/filter/limit-862 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-862 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-862 -m limit --limit 1/second -j LOG + inet6/filter/limit-862 -m limit --limit 1/second -j LOG + inet/filter/limit-862 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-862 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7883,33 +12727,25 @@ Filter 533 {"flow-limit":{"interval":5},"in":"A","log":t inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 534 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 870 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-527 - inet6/filter/INPUT -i eth0 -j limit-527 - inet/filter/limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-172 - inet6/filter/limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-172 - inet/filter/logdrop-172 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-172 -m limit --limit 1/second -j LOG - inet/filter/logdrop-172 -j DROP - inet6/filter/logdrop-172 -j DROP - inet/filter/limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-863 + inet6/filter/INPUT -i eth0 -j limit-863 + inet/filter/limit-863 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-863 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-863 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-863 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 535 {"flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 871 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-528 - inet6/filter/INPUT -i eth0 -j limit-528 - inet/filter/limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-173 - inet6/filter/limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-173 - inet/filter/logdrop-173 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-173 -m limit --limit 1/second -j LOG - inet/filter/logdrop-173 -j DROP - inet6/filter/logdrop-173 -j DROP - inet/filter/limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-864 + inet6/filter/INPUT -i eth0 -j limit-864 + inet/filter/limit-864 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-864 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-864 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-864 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7917,33 +12753,25 @@ Filter 535 {"flow-limit":{"interval":5},"in":"A","log":" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 536 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 872 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-529 - inet6/filter/INPUT -i eth0 -j limit-529 - inet/filter/limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-174 - inet6/filter/limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-174 - inet/filter/logdrop-174 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-174 -m limit --limit 1/second -j LOG - inet/filter/logdrop-174 -j DROP - inet6/filter/logdrop-174 -j DROP - inet/filter/limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-865 + inet6/filter/INPUT -i eth0 -j limit-865 + inet/filter/limit-865 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-865 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-865 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-865 -m recent --name user:C --rsource --mask fe00:: --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 537 {"flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 873 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-530 - inet6/filter/INPUT -i eth0 -j limit-530 - inet/filter/limit-530 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-175 - inet6/filter/limit-530 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-175 - inet/filter/logdrop-175 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-175 -m limit --limit 1/second -j LOG - inet/filter/logdrop-175 -j DROP - inet6/filter/logdrop-175 -j DROP - inet/filter/limit-530 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-530 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-866 + inet6/filter/INPUT -i eth0 -j limit-866 + inet/filter/limit-866 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-866 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-866 -j ACCEPT + inet6/filter/limit-866 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7951,35 +12779,23 @@ Filter 537 {"flow-limit":{"interval":5,"name":"A"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 538 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 874 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-531 - inet6/filter/INPUT -i eth0 -j limit-531 - inet/filter/limit-531 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-176 - inet6/filter/limit-531 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-176 - inet/filter/logdrop-176 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-176 -m limit --limit 1/second -j LOG - inet/filter/logdrop-176 -j DROP - inet6/filter/logdrop-176 -j DROP - inet/filter/limit-531 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-531 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 539 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 875 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-532 - inet6/filter/INPUT -i eth0 -j limit-532 - inet/filter/limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-177 - inet6/filter/limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-177 - inet/filter/logdrop-177 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-177 -m limit --limit 1/second -j LOG - inet/filter/logdrop-177 -j DROP - inet6/filter/logdrop-177 -j DROP - inet/filter/limit-532 -m limit --limit 1/second -j LOG - inet6/filter/limit-532 -m limit --limit 1/second -j LOG - inet/filter/limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-868 + inet6/filter/INPUT -i eth0 -j limit-868 + inet/filter/limit-868 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-868 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-868 -m limit --limit 1/second -j LOG + inet6/filter/limit-868 -m limit --limit 1/second -j LOG + inet/filter/limit-868 -j ACCEPT + inet6/filter/limit-868 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -7987,33 +12803,25 @@ Filter 539 {"flow-limit":{"interval":5,"name":"A"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 540 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 876 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-533 - inet6/filter/INPUT -i eth0 -j limit-533 - inet/filter/limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-178 - inet6/filter/limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-178 - inet/filter/logdrop-178 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-178 -m limit --limit 1/second -j LOG - inet/filter/logdrop-178 -j DROP - inet6/filter/logdrop-178 -j DROP - inet/filter/limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-869 + inet6/filter/INPUT -i eth0 -j limit-869 + inet/filter/limit-869 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-869 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-869 -m limit --limit 1/second -j LOG + inet6/filter/limit-869 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 541 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 877 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-534 - inet6/filter/INPUT -i eth0 -j limit-534 - inet/filter/limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-179 - inet6/filter/limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-179 - inet/filter/logdrop-179 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-179 -m limit --limit 1/second -j LOG - inet/filter/logdrop-179 -j DROP - inet6/filter/logdrop-179 -j DROP - inet/filter/limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-870 + inet6/filter/INPUT -i eth0 -j limit-870 + inet/filter/limit-870 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-870 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-870 -j ACCEPT + inet6/filter/limit-870 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8021,33 +12829,21 @@ Filter 541 {"flow-limit":{"interval":5,"name":"A"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 542 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 878 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-535 - inet6/filter/INPUT -i eth0 -j limit-535 - inet/filter/limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-180 - inet6/filter/limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-180 - inet/filter/logdrop-180 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-180 -m limit --limit 1/second -j LOG - inet/filter/logdrop-180 -j DROP - inet6/filter/logdrop-180 -j DROP - inet/filter/limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 543 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 879 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-536 - inet6/filter/INPUT -i eth0 -j limit-536 - inet/filter/limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-181 - inet6/filter/limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-181 - inet/filter/logdrop-181 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-181 -m limit --limit 1/second -j LOG - inet/filter/logdrop-181 -j DROP - inet6/filter/logdrop-181 -j DROP - inet/filter/limit-536 -j ACCEPT - inet6/filter/limit-536 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-872 + inet6/filter/INPUT -i eth0 -j limit-872 + inet/filter/limit-872 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-872 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-872 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-872 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8055,27 +12851,27 @@ Filter 543 {"flow-limit":{"interval":5,"name":"A","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 544 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 880 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-182 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-182 + inet/filter/INPUT -i eth0 -j limit-873 + inet6/filter/INPUT -i eth0 -j limit-873 + inet/filter/limit-873 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-873 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-873 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-873 -m recent --name user:C --rdest --mask fe00:: --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 545 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 881 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-538 - inet6/filter/INPUT -i eth0 -j limit-538 - inet/filter/limit-538 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-183 - inet6/filter/limit-538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-183 - inet/filter/logdrop-183 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-183 -m limit --limit 1/second -j LOG - inet/filter/logdrop-183 -j DROP - inet6/filter/logdrop-183 -j DROP - inet/filter/limit-538 -m limit --limit 1/second -j LOG - inet6/filter/limit-538 -m limit --limit 1/second -j LOG - inet/filter/limit-538 -j ACCEPT - inet6/filter/limit-538 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-874 + inet6/filter/INPUT -i eth0 -j limit-874 + inet/filter/limit-874 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-874 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-874 -m limit --limit 1/second -j LOG + inet6/filter/limit-874 -m limit --limit 1/second -j LOG + inet/filter/limit-874 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-874 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8083,33 +12879,25 @@ Filter 545 {"flow-limit":{"interval":5,"name":"A","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 546 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 882 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-539 - inet6/filter/INPUT -i eth0 -j limit-539 - inet/filter/limit-539 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-184 - inet6/filter/limit-539 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-184 - inet/filter/logdrop-184 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-184 -m limit --limit 1/second -j LOG - inet/filter/logdrop-184 -j DROP - inet6/filter/logdrop-184 -j DROP - inet/filter/limit-539 -m limit --limit 1/second -j LOG - inet6/filter/limit-539 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-875 + inet6/filter/INPUT -i eth0 -j limit-875 + inet/filter/limit-875 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-875 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-875 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-875 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 547 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 883 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-540 - inet6/filter/INPUT -i eth0 -j limit-540 - inet/filter/limit-540 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-185 - inet6/filter/limit-540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-185 - inet/filter/logdrop-185 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-185 -m limit --limit 1/second -j LOG - inet/filter/logdrop-185 -j DROP - inet6/filter/logdrop-185 -j DROP - inet/filter/limit-540 -j ACCEPT - inet6/filter/limit-540 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-876 + inet6/filter/INPUT -i eth0 -j limit-876 + inet/filter/limit-876 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-876 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-876 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-876 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8117,25 +12905,25 @@ Filter 547 {"flow-limit":{"interval":5,"name":"A","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 548 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 884 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-186 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-186 + inet/filter/INPUT -i eth0 -j limit-877 + inet6/filter/INPUT -i eth0 -j limit-877 + inet/filter/limit-877 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-877 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-877 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-877 -m recent --name user:C --rdest --mask fe00:: --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 549 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 885 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-542 - inet6/filter/INPUT -i eth0 -j limit-542 - inet/filter/limit-542 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-187 - inet6/filter/limit-542 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-187 - inet/filter/logdrop-187 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-187 -m limit --limit 1/second -j LOG - inet/filter/logdrop-187 -j DROP - inet6/filter/logdrop-187 -j DROP - inet/filter/limit-542 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-542 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-878 + inet6/filter/INPUT -i eth0 -j limit-878 + inet/filter/limit-878 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-878 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-878 -j ACCEPT + inet6/filter/limit-878 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8143,35 +12931,23 @@ Filter 549 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 550 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 886 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-543 - inet6/filter/INPUT -i eth0 -j limit-543 - inet/filter/limit-543 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-188 - inet6/filter/limit-543 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-188 - inet/filter/logdrop-188 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-188 -m limit --limit 1/second -j LOG - inet/filter/logdrop-188 -j DROP - inet6/filter/logdrop-188 -j DROP - inet/filter/limit-543 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-543 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 551 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 887 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-544 - inet6/filter/INPUT -i eth0 -j limit-544 - inet/filter/limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-189 - inet6/filter/limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-189 - inet/filter/logdrop-189 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-189 -m limit --limit 1/second -j LOG - inet/filter/logdrop-189 -j DROP - inet6/filter/logdrop-189 -j DROP - inet/filter/limit-544 -m limit --limit 1/second -j LOG - inet6/filter/limit-544 -m limit --limit 1/second -j LOG - inet/filter/limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-880 + inet6/filter/INPUT -i eth0 -j limit-880 + inet/filter/limit-880 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-880 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-880 -m limit --limit 1/second -j LOG + inet6/filter/limit-880 -m limit --limit 1/second -j LOG + inet/filter/limit-880 -j ACCEPT + inet6/filter/limit-880 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8179,33 +12955,25 @@ Filter 551 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 552 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 888 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-545 - inet6/filter/INPUT -i eth0 -j limit-545 - inet/filter/limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-190 - inet6/filter/limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-190 - inet/filter/logdrop-190 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-190 -m limit --limit 1/second -j LOG - inet/filter/logdrop-190 -j DROP - inet6/filter/logdrop-190 -j DROP - inet/filter/limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-881 + inet6/filter/INPUT -i eth0 -j limit-881 + inet/filter/limit-881 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-881 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-881 -m limit --limit 1/second -j LOG + inet6/filter/limit-881 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 553 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 889 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-546 - inet6/filter/INPUT -i eth0 -j limit-546 - inet/filter/limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-191 - inet6/filter/limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-191 - inet/filter/logdrop-191 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-191 -m limit --limit 1/second -j LOG - inet/filter/logdrop-191 -j DROP - inet6/filter/logdrop-191 -j DROP - inet/filter/limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-882 + inet6/filter/INPUT -i eth0 -j limit-882 + inet/filter/limit-882 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-882 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-882 -j ACCEPT + inet6/filter/limit-882 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8213,33 +12981,295 @@ Filter 553 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 554 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 890 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-547 - inet6/filter/INPUT -i eth0 -j limit-547 - inet/filter/limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-192 - inet6/filter/limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-192 - inet/filter/logdrop-192 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-192 -m limit --limit 1/second -j LOG - inet/filter/logdrop-192 -j DROP - inet6/filter/logdrop-192 -j DROP - inet/filter/limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 891 {"flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-884 + inet6/filter/INPUT -i eth0 -j limit-884 + inet/filter/limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-289 + inet6/filter/limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-289 + inet/filter/logdrop-289 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-289 -m limit --limit 1/second -j LOG + inet/filter/logdrop-289 -j DROP + inet6/filter/logdrop-289 -j DROP + inet/filter/limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 892 {"action":"pass","flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-885 + inet6/filter/INPUT -i eth0 -j limit-885 + inet/filter/limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-290 + inet6/filter/limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-290 + inet/filter/logdrop-290 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-290 -m limit --limit 1/second -j LOG + inet/filter/logdrop-290 -j DROP + inet6/filter/logdrop-290 -j DROP + inet/filter/limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 893 {"flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-886 + inet6/filter/INPUT -i eth0 -j limit-886 + inet/filter/limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-291 + inet6/filter/limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-291 + inet/filter/logdrop-291 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-291 -m limit --limit 1/second -j LOG + inet/filter/logdrop-291 -j DROP + inet6/filter/logdrop-291 -j DROP + inet/filter/limit-886 -m limit --limit 1/second -j LOG + inet6/filter/limit-886 -m limit --limit 1/second -j LOG + inet/filter/limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 894 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-887 + inet6/filter/INPUT -i eth0 -j limit-887 + inet/filter/limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-292 + inet6/filter/limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-292 + inet/filter/logdrop-292 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-292 -m limit --limit 1/second -j LOG + inet/filter/logdrop-292 -j DROP + inet6/filter/logdrop-292 -j DROP + inet/filter/limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 895 {"flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-888 + inet6/filter/INPUT -i eth0 -j limit-888 + inet/filter/limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-293 + inet6/filter/limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-293 + inet/filter/logdrop-293 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-293 -m limit --limit 1/second -j LOG + inet/filter/logdrop-293 -j DROP + inet6/filter/logdrop-293 -j DROP + inet/filter/limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 896 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-889 + inet6/filter/INPUT -i eth0 -j limit-889 + inet/filter/limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-294 + inet6/filter/limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-294 + inet/filter/logdrop-294 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-294 -m limit --limit 1/second -j LOG + inet/filter/logdrop-294 -j DROP + inet6/filter/logdrop-294 -j DROP + inet/filter/limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 897 {"flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-890 + inet6/filter/INPUT -i eth0 -j limit-890 + inet/filter/limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-295 + inet6/filter/limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-295 + inet/filter/logdrop-295 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-295 -m limit --limit 1/second -j LOG + inet/filter/logdrop-295 -j DROP + inet6/filter/logdrop-295 -j DROP + inet/filter/limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 898 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-891 + inet6/filter/INPUT -i eth0 -j limit-891 + inet/filter/limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-296 + inet6/filter/limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-296 + inet/filter/logdrop-296 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-296 -m limit --limit 1/second -j LOG + inet/filter/logdrop-296 -j DROP + inet6/filter/logdrop-296 -j DROP + inet/filter/limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 899 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-892 + inet6/filter/INPUT -i eth0 -j limit-892 + inet/filter/limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-297 + inet6/filter/limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-297 + inet/filter/logdrop-297 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-297 -m limit --limit 1/second -j LOG + inet/filter/logdrop-297 -j DROP + inet6/filter/logdrop-297 -j DROP + inet/filter/limit-892 -m limit --limit 1/second -j LOG + inet6/filter/limit-892 -m limit --limit 1/second -j LOG + inet/filter/limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 900 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-893 + inet6/filter/INPUT -i eth0 -j limit-893 + inet/filter/limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-298 + inet6/filter/limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-298 + inet/filter/logdrop-298 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-298 -m limit --limit 1/second -j LOG + inet/filter/logdrop-298 -j DROP + inet6/filter/logdrop-298 -j DROP + inet/filter/limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 901 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-894 + inet6/filter/INPUT -i eth0 -j limit-894 + inet/filter/limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-299 + inet6/filter/limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-299 + inet/filter/logdrop-299 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-299 -m limit --limit 1/second -j LOG + inet/filter/logdrop-299 -j DROP + inet6/filter/logdrop-299 -j DROP + inet/filter/limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 902 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-895 + inet6/filter/INPUT -i eth0 -j limit-895 + inet/filter/limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-300 + inet6/filter/limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-300 + inet/filter/logdrop-300 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-300 -m limit --limit 1/second -j LOG + inet/filter/logdrop-300 -j DROP + inet6/filter/logdrop-300 -j DROP + inet/filter/limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 903 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-896 + inet6/filter/INPUT -i eth0 -j limit-896 + inet/filter/limit-896 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-301 + inet6/filter/limit-896 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-301 + inet/filter/logdrop-301 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-301 -m limit --limit 1/second -j LOG + inet/filter/logdrop-301 -j DROP + inet6/filter/logdrop-301 -j DROP + inet/filter/limit-896 -j ACCEPT + inet6/filter/limit-896 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 555 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 904 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-548 - inet6/filter/INPUT -i eth0 -j limit-548 - inet/filter/limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-193 - inet6/filter/limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-193 - inet/filter/logdrop-193 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-193 -m limit --limit 1/second -j LOG - inet/filter/logdrop-193 -j DROP - inet6/filter/logdrop-193 -j DROP - inet/filter/limit-548 -j ACCEPT - inet6/filter/limit-548 -j ACCEPT + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-302 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-302 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 905 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-898 + inet6/filter/INPUT -i eth0 -j limit-898 + inet/filter/limit-898 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-303 + inet6/filter/limit-898 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-303 + inet/filter/logdrop-303 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-303 -m limit --limit 1/second -j LOG + inet/filter/logdrop-303 -j DROP + inet6/filter/logdrop-303 -j DROP + inet/filter/limit-898 -m limit --limit 1/second -j LOG + inet6/filter/limit-898 -m limit --limit 1/second -j LOG + inet/filter/limit-898 -j ACCEPT + inet6/filter/limit-898 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 906 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-899 + inet6/filter/INPUT -i eth0 -j limit-899 + inet/filter/limit-899 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-304 + inet6/filter/limit-899 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-304 + inet/filter/logdrop-304 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-304 -m limit --limit 1/second -j LOG + inet/filter/logdrop-304 -j DROP + inet6/filter/logdrop-304 -j DROP + inet/filter/limit-899 -m limit --limit 1/second -j LOG + inet6/filter/limit-899 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 907 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-900 + inet6/filter/INPUT -i eth0 -j limit-900 + inet/filter/limit-900 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-305 + inet6/filter/limit-900 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-305 + inet/filter/logdrop-305 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-305 -m limit --limit 1/second -j LOG + inet/filter/logdrop-305 -j DROP + inet6/filter/logdrop-305 -j DROP + inet/filter/limit-900 -j ACCEPT + inet6/filter/limit-900 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8247,27 +13277,191 @@ Filter 555 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 556 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 908 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-194 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-194 + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-306 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-306 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 909 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-902 + inet6/filter/INPUT -i eth0 -j limit-902 + inet/filter/limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-307 + inet6/filter/limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-307 + inet/filter/logdrop-307 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-307 -m limit --limit 1/second -j LOG + inet/filter/logdrop-307 -j DROP + inet6/filter/logdrop-307 -j DROP + inet/filter/limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 910 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-903 + inet6/filter/INPUT -i eth0 -j limit-903 + inet/filter/limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-308 + inet6/filter/limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-308 + inet/filter/logdrop-308 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-308 -m limit --limit 1/second -j LOG + inet/filter/logdrop-308 -j DROP + inet6/filter/logdrop-308 -j DROP + inet/filter/limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 911 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-904 + inet6/filter/INPUT -i eth0 -j limit-904 + inet/filter/limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-309 + inet6/filter/limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-309 + inet/filter/logdrop-309 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-309 -m limit --limit 1/second -j LOG + inet/filter/logdrop-309 -j DROP + inet6/filter/logdrop-309 -j DROP + inet/filter/limit-904 -m limit --limit 1/second -j LOG + inet6/filter/limit-904 -m limit --limit 1/second -j LOG + inet/filter/limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 912 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-905 + inet6/filter/INPUT -i eth0 -j limit-905 + inet/filter/limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-310 + inet6/filter/limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-310 + inet/filter/logdrop-310 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-310 -m limit --limit 1/second -j LOG + inet/filter/logdrop-310 -j DROP + inet6/filter/logdrop-310 -j DROP + inet/filter/limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 913 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-906 + inet6/filter/INPUT -i eth0 -j limit-906 + inet/filter/limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-311 + inet6/filter/limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-311 + inet/filter/logdrop-311 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-311 -m limit --limit 1/second -j LOG + inet/filter/logdrop-311 -j DROP + inet6/filter/logdrop-311 -j DROP + inet/filter/limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 914 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-907 + inet6/filter/INPUT -i eth0 -j limit-907 + inet/filter/limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-312 + inet6/filter/limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-312 + inet/filter/logdrop-312 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-312 -m limit --limit 1/second -j LOG + inet/filter/logdrop-312 -j DROP + inet6/filter/logdrop-312 -j DROP + inet/filter/limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 915 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-908 + inet6/filter/INPUT -i eth0 -j limit-908 + inet/filter/limit-908 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-313 + inet6/filter/limit-908 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-313 + inet/filter/logdrop-313 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-313 -m limit --limit 1/second -j LOG + inet/filter/logdrop-313 -j DROP + inet6/filter/logdrop-313 -j DROP + inet/filter/limit-908 -j ACCEPT + inet6/filter/limit-908 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 557 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 916 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-550 - inet6/filter/INPUT -i eth0 -j limit-550 - inet/filter/limit-550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-195 - inet6/filter/limit-550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-195 - inet/filter/logdrop-195 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-195 -m limit --limit 1/second -j LOG - inet/filter/logdrop-195 -j DROP - inet6/filter/logdrop-195 -j DROP - inet/filter/limit-550 -m limit --limit 1/second -j LOG - inet6/filter/limit-550 -m limit --limit 1/second -j LOG - inet/filter/limit-550 -j ACCEPT - inet6/filter/limit-550 -j ACCEPT + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-314 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-314 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 917 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-910 + inet6/filter/INPUT -i eth0 -j limit-910 + inet/filter/limit-910 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-315 + inet6/filter/limit-910 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-315 + inet/filter/logdrop-315 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-315 -m limit --limit 1/second -j LOG + inet/filter/logdrop-315 -j DROP + inet6/filter/logdrop-315 -j DROP + inet/filter/limit-910 -m limit --limit 1/second -j LOG + inet6/filter/limit-910 -m limit --limit 1/second -j LOG + inet/filter/limit-910 -j ACCEPT + inet6/filter/limit-910 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 918 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-911 + inet6/filter/INPUT -i eth0 -j limit-911 + inet/filter/limit-911 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-316 + inet6/filter/limit-911 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-316 + inet/filter/logdrop-316 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-316 -m limit --limit 1/second -j LOG + inet/filter/logdrop-316 -j DROP + inet6/filter/logdrop-316 -j DROP + inet/filter/limit-911 -m limit --limit 1/second -j LOG + inet6/filter/limit-911 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 919 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-912 + inet6/filter/INPUT -i eth0 -j limit-912 + inet/filter/limit-912 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-317 + inet6/filter/limit-912 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-317 + inet/filter/logdrop-317 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-317 -m limit --limit 1/second -j LOG + inet/filter/logdrop-317 -j DROP + inet6/filter/logdrop-317 -j DROP + inet/filter/limit-912 -j ACCEPT + inet6/filter/limit-912 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8275,33 +13469,383 @@ Filter 557 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 558 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 920 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-551 - inet6/filter/INPUT -i eth0 -j limit-551 - inet/filter/limit-551 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-196 - inet6/filter/limit-551 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-196 - inet/filter/logdrop-196 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-196 -m limit --limit 1/second -j LOG - inet/filter/logdrop-196 -j DROP - inet6/filter/logdrop-196 -j DROP - inet/filter/limit-551 -m limit --limit 1/second -j LOG - inet6/filter/limit-551 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-318 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-318 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 921 {"flow-limit":{"interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-914 + inet6/filter/INPUT -i eth0 -j limit-914 + inet/filter/limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-319 + inet6/filter/limit-914 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-319 + inet/filter/logdrop-319 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-319 -m limit --limit 1/second -j LOG + inet/filter/logdrop-319 -j DROP + inet6/filter/logdrop-319 -j DROP + inet/filter/limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-914 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 922 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-915 + inet6/filter/INPUT -i eth0 -j limit-915 + inet/filter/limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-320 + inet6/filter/limit-915 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-320 + inet/filter/logdrop-320 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-320 -m limit --limit 1/second -j LOG + inet/filter/logdrop-320 -j DROP + inet6/filter/logdrop-320 -j DROP + inet/filter/limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-915 -m recent --name user:C --rsource --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 923 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-916 + inet6/filter/INPUT -i eth0 -j limit-916 + inet/filter/limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-321 + inet6/filter/limit-916 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-321 + inet/filter/logdrop-321 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-321 -m limit --limit 1/second -j LOG + inet/filter/logdrop-321 -j DROP + inet6/filter/logdrop-321 -j DROP + inet/filter/limit-916 -m limit --limit 1/second -j LOG + inet6/filter/limit-916 -m limit --limit 1/second -j LOG + inet/filter/limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-916 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 924 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-917 + inet6/filter/INPUT -i eth0 -j limit-917 + inet/filter/limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-322 + inet6/filter/limit-917 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-322 + inet/filter/logdrop-322 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-322 -m limit --limit 1/second -j LOG + inet/filter/logdrop-322 -j DROP + inet6/filter/logdrop-322 -j DROP + inet/filter/limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-917 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 925 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-918 + inet6/filter/INPUT -i eth0 -j limit-918 + inet/filter/limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-323 + inet6/filter/limit-918 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-323 + inet/filter/logdrop-323 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-323 -m limit --limit 1/second -j LOG + inet/filter/logdrop-323 -j DROP + inet6/filter/logdrop-323 -j DROP + inet/filter/limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-918 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 926 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-919 + inet6/filter/INPUT -i eth0 -j limit-919 + inet/filter/limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-324 + inet6/filter/limit-919 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-324 + inet/filter/logdrop-324 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-324 -m limit --limit 1/second -j LOG + inet/filter/logdrop-324 -j DROP + inet6/filter/logdrop-324 -j DROP + inet/filter/limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-919 -m recent --name user:C --rsource --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 927 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-920 + inet6/filter/INPUT -i eth0 -j limit-920 + inet/filter/limit-920 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-325 + inet6/filter/limit-920 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-325 + inet/filter/logdrop-325 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-325 -m limit --limit 1/second -j LOG + inet/filter/logdrop-325 -j DROP + inet6/filter/logdrop-325 -j DROP + inet/filter/limit-920 -j ACCEPT + inet6/filter/limit-920 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 928 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-326 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-326 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 929 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-922 + inet6/filter/INPUT -i eth0 -j limit-922 + inet/filter/limit-922 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-327 + inet6/filter/limit-922 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-327 + inet/filter/logdrop-327 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-327 -m limit --limit 1/second -j LOG + inet/filter/logdrop-327 -j DROP + inet6/filter/logdrop-327 -j DROP + inet/filter/limit-922 -m limit --limit 1/second -j LOG + inet6/filter/limit-922 -m limit --limit 1/second -j LOG + inet/filter/limit-922 -j ACCEPT + inet6/filter/limit-922 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 930 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-923 + inet6/filter/INPUT -i eth0 -j limit-923 + inet/filter/limit-923 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-328 + inet6/filter/limit-923 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-328 + inet/filter/logdrop-328 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-328 -m limit --limit 1/second -j LOG + inet/filter/logdrop-328 -j DROP + inet6/filter/logdrop-328 -j DROP + inet/filter/limit-923 -m limit --limit 1/second -j LOG + inet6/filter/limit-923 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 559 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 931 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-924 + inet6/filter/INPUT -i eth0 -j limit-924 + inet/filter/limit-924 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-329 + inet6/filter/limit-924 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-329 + inet/filter/logdrop-329 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-329 -m limit --limit 1/second -j LOG + inet/filter/logdrop-329 -j DROP + inet6/filter/logdrop-329 -j DROP + inet/filter/limit-924 -j ACCEPT + inet6/filter/limit-924 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 932 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-552 - inet6/filter/INPUT -i eth0 -j limit-552 - inet/filter/limit-552 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-197 - inet6/filter/limit-552 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-197 - inet/filter/logdrop-197 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-197 -m limit --limit 1/second -j LOG - inet/filter/logdrop-197 -j DROP - inet6/filter/logdrop-197 -j DROP - inet/filter/limit-552 -j ACCEPT - inet6/filter/limit-552 -j ACCEPT + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-330 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-330 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 933 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-926 + inet6/filter/INPUT -i eth0 -j limit-926 + inet/filter/limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-331 + inet6/filter/limit-926 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-331 + inet/filter/logdrop-331 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-331 -m limit --limit 1/second -j LOG + inet/filter/logdrop-331 -j DROP + inet6/filter/logdrop-331 -j DROP + inet/filter/limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-926 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 934 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-927 + inet6/filter/INPUT -i eth0 -j limit-927 + inet/filter/limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-332 + inet6/filter/limit-927 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-332 + inet/filter/logdrop-332 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-332 -m limit --limit 1/second -j LOG + inet/filter/logdrop-332 -j DROP + inet6/filter/logdrop-332 -j DROP + inet/filter/limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-927 -m recent --name user:C --rdest --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 935 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-928 + inet6/filter/INPUT -i eth0 -j limit-928 + inet/filter/limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-333 + inet6/filter/limit-928 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-333 + inet/filter/logdrop-333 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-333 -m limit --limit 1/second -j LOG + inet/filter/logdrop-333 -j DROP + inet6/filter/logdrop-333 -j DROP + inet/filter/limit-928 -m limit --limit 1/second -j LOG + inet6/filter/limit-928 -m limit --limit 1/second -j LOG + inet/filter/limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-928 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 936 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-929 + inet6/filter/INPUT -i eth0 -j limit-929 + inet/filter/limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-334 + inet6/filter/limit-929 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-334 + inet/filter/logdrop-334 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-334 -m limit --limit 1/second -j LOG + inet/filter/logdrop-334 -j DROP + inet6/filter/logdrop-334 -j DROP + inet/filter/limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-929 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 937 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-930 + inet6/filter/INPUT -i eth0 -j limit-930 + inet/filter/limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-335 + inet6/filter/limit-930 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-335 + inet/filter/logdrop-335 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-335 -m limit --limit 1/second -j LOG + inet/filter/logdrop-335 -j DROP + inet6/filter/logdrop-335 -j DROP + inet/filter/limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-930 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 938 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-931 + inet6/filter/INPUT -i eth0 -j limit-931 + inet/filter/limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-336 + inet6/filter/limit-931 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-336 + inet/filter/logdrop-336 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-336 -m limit --limit 1/second -j LOG + inet/filter/logdrop-336 -j DROP + inet6/filter/logdrop-336 -j DROP + inet/filter/limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-931 -m recent --name user:C --rdest --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 939 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-932 + inet6/filter/INPUT -i eth0 -j limit-932 + inet/filter/limit-932 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-337 + inet6/filter/limit-932 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-337 + inet/filter/logdrop-337 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-337 -m limit --limit 1/second -j LOG + inet/filter/logdrop-337 -j DROP + inet6/filter/logdrop-337 -j DROP + inet/filter/limit-932 -j ACCEPT + inet6/filter/limit-932 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 940 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-338 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-338 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 941 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-934 + inet6/filter/INPUT -i eth0 -j limit-934 + inet/filter/limit-934 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-339 + inet6/filter/limit-934 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-339 + inet/filter/logdrop-339 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-339 -m limit --limit 1/second -j LOG + inet/filter/logdrop-339 -j DROP + inet6/filter/logdrop-339 -j DROP + inet/filter/limit-934 -m limit --limit 1/second -j LOG + inet6/filter/limit-934 -m limit --limit 1/second -j LOG + inet/filter/limit-934 -j ACCEPT + inet6/filter/limit-934 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 942 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-935 + inet6/filter/INPUT -i eth0 -j limit-935 + inet/filter/limit-935 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-340 + inet6/filter/limit-935 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-340 + inet/filter/logdrop-340 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-340 -m limit --limit 1/second -j LOG + inet/filter/logdrop-340 -j DROP + inet6/filter/logdrop-340 -j DROP + inet/filter/limit-935 -m limit --limit 1/second -j LOG + inet6/filter/limit-935 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 943 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-936 + inet6/filter/INPUT -i eth0 -j limit-936 + inet/filter/limit-936 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-341 + inet6/filter/limit-936 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-341 + inet/filter/logdrop-341 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-341 -m limit --limit 1/second -j LOG + inet/filter/logdrop-341 -j DROP + inet6/filter/logdrop-341 -j DROP + inet/filter/limit-936 -j ACCEPT + inet6/filter/limit-936 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8309,21 +13853,21 @@ Filter 559 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 560 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 944 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-198 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-198 + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-342 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-342 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 561 {"flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 945 {"flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-554 - inet6/filter/INPUT -i eth0 -j limit-554 - inet/filter/limit-554 -m recent --name limit-554 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-554 -m recent --name limit-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-554 -m recent --name limit-554 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-554 -m recent --name limit-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-938 + inet6/filter/INPUT -i eth0 -j limit-938 + inet/filter/limit-938 -m recent --name limit-938 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-938 -m recent --name limit-938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-938 -m recent --name limit-938 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-938 -m recent --name limit-938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8331,27 +13875,27 @@ Filter 561 {"flow-limit":{"interval":5,"log":false},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 562 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 946 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-555 - inet6/filter/INPUT -i eth0 -j limit-555 - inet/filter/limit-555 -m recent --name limit-555 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-555 -m recent --name limit-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-555 -m recent --name limit-555 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-555 -m recent --name limit-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-939 + inet6/filter/INPUT -i eth0 -j limit-939 + inet/filter/limit-939 -m recent --name limit-939 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-939 -m recent --name limit-939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-939 -m recent --name limit-939 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-939 -m recent --name limit-939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 563 {"flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 947 {"flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-556 - inet6/filter/INPUT -i eth0 -j limit-556 - inet/filter/limit-556 -m recent --name limit-556 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-556 -m recent --name limit-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-556 -m limit --limit 1/second -j LOG - inet6/filter/limit-556 -m limit --limit 1/second -j LOG - inet/filter/limit-556 -m recent --name limit-556 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-556 -m recent --name limit-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-940 + inet6/filter/INPUT -i eth0 -j limit-940 + inet/filter/limit-940 -m recent --name limit-940 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-940 -m recent --name limit-940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-940 -m limit --limit 1/second -j LOG + inet6/filter/limit-940 -m limit --limit 1/second -j LOG + inet/filter/limit-940 -m recent --name limit-940 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-940 -m recent --name limit-940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8359,25 +13903,25 @@ Filter 563 {"flow-limit":{"interval":5,"log":false},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 564 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 948 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-557 - inet6/filter/INPUT -i eth0 -j limit-557 - inet/filter/limit-557 -m recent --name limit-557 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-557 -m recent --name limit-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-557 -m recent --name limit-557 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-557 -m recent --name limit-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-941 + inet6/filter/INPUT -i eth0 -j limit-941 + inet/filter/limit-941 -m recent --name limit-941 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-941 -m recent --name limit-941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-941 -m recent --name limit-941 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-941 -m recent --name limit-941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 565 {"flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 949 {"flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-558 - inet6/filter/INPUT -i eth0 -j limit-558 - inet/filter/limit-558 -m recent --name limit-558 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-558 -m recent --name limit-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-558 -m recent --name limit-558 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-558 -m recent --name limit-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-942 + inet6/filter/INPUT -i eth0 -j limit-942 + inet/filter/limit-942 -m recent --name limit-942 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-942 -m recent --name limit-942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-942 -m recent --name limit-942 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-942 -m recent --name limit-942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8385,25 +13929,25 @@ Filter 565 {"flow-limit":{"interval":5,"log":false},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 566 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 950 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-559 - inet6/filter/INPUT -i eth0 -j limit-559 - inet/filter/limit-559 -m recent --name limit-559 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-559 -m recent --name limit-559 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-559 -m recent --name limit-559 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-559 -m recent --name limit-559 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-943 + inet6/filter/INPUT -i eth0 -j limit-943 + inet/filter/limit-943 -m recent --name limit-943 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-943 -m recent --name limit-943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-943 -m recent --name limit-943 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-943 -m recent --name limit-943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 567 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 951 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-560 - inet6/filter/INPUT -i eth0 -j limit-560 - inet/filter/limit-560 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-560 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-944 + inet6/filter/INPUT -i eth0 -j limit-944 + inet/filter/limit-944 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-944 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-944 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-944 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8411,27 +13955,27 @@ Filter 567 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 568 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 952 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-561 - inet6/filter/INPUT -i eth0 -j limit-561 - inet/filter/limit-561 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-561 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-945 + inet6/filter/INPUT -i eth0 -j limit-945 + inet/filter/limit-945 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-945 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-945 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-945 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 569 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 953 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-562 - inet6/filter/INPUT -i eth0 -j limit-562 - inet/filter/limit-562 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-562 -m limit --limit 1/second -j LOG - inet6/filter/limit-562 -m limit --limit 1/second -j LOG - inet/filter/limit-562 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-946 + inet6/filter/INPUT -i eth0 -j limit-946 + inet/filter/limit-946 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-946 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-946 -m limit --limit 1/second -j LOG + inet6/filter/limit-946 -m limit --limit 1/second -j LOG + inet/filter/limit-946 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-946 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8439,25 +13983,25 @@ Filter 569 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 570 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 954 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-563 - inet6/filter/INPUT -i eth0 -j limit-563 - inet/filter/limit-563 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-563 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-947 + inet6/filter/INPUT -i eth0 -j limit-947 + inet/filter/limit-947 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-947 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-947 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-947 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 571 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 955 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-564 - inet6/filter/INPUT -i eth0 -j limit-564 - inet/filter/limit-564 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-564 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-948 + inet6/filter/INPUT -i eth0 -j limit-948 + inet/filter/limit-948 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-948 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8465,25 +14009,25 @@ Filter 571 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 572 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 956 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-565 - inet6/filter/INPUT -i eth0 -j limit-565 - inet/filter/limit-565 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-565 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-949 + inet6/filter/INPUT -i eth0 -j limit-949 + inet/filter/limit-949 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-949 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 573 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 957 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-566 - inet6/filter/INPUT -i eth0 -j limit-566 - inet/filter/limit-566 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-566 -j ACCEPT - inet6/filter/limit-566 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-950 + inet6/filter/INPUT -i eth0 -j limit-950 + inet/filter/limit-950 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-950 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-950 -j ACCEPT + inet6/filter/limit-950 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8491,23 +14035,23 @@ Filter 573 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 574 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 958 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 575 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 959 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-568 - inet6/filter/INPUT -i eth0 -j limit-568 - inet/filter/limit-568 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-568 -m limit --limit 1/second -j LOG - inet6/filter/limit-568 -m limit --limit 1/second -j LOG - inet/filter/limit-568 -j ACCEPT - inet6/filter/limit-568 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-952 + inet6/filter/INPUT -i eth0 -j limit-952 + inet/filter/limit-952 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-952 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-952 -m limit --limit 1/second -j LOG + inet6/filter/limit-952 -m limit --limit 1/second -j LOG + inet/filter/limit-952 -j ACCEPT + inet6/filter/limit-952 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8515,25 +14059,25 @@ Filter 575 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 576 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 960 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-569 - inet6/filter/INPUT -i eth0 -j limit-569 - inet/filter/limit-569 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-569 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-569 -m limit --limit 1/second -j LOG - inet6/filter/limit-569 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-953 + inet6/filter/INPUT -i eth0 -j limit-953 + inet/filter/limit-953 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-953 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-953 -m limit --limit 1/second -j LOG + inet6/filter/limit-953 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 577 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 961 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-570 - inet6/filter/INPUT -i eth0 -j limit-570 - inet/filter/limit-570 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-570 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-570 -j ACCEPT - inet6/filter/limit-570 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-954 + inet6/filter/INPUT -i eth0 -j limit-954 + inet/filter/limit-954 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-954 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-954 -j ACCEPT + inet6/filter/limit-954 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8541,21 +14085,21 @@ Filter 577 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 578 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 962 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 579 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 963 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-572 - inet6/filter/INPUT -i eth0 -j limit-572 - inet/filter/limit-572 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-572 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-572 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-572 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-956 + inet6/filter/INPUT -i eth0 -j limit-956 + inet/filter/limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-956 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-956 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8563,27 +14107,27 @@ Filter 579 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 580 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 964 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-573 - inet6/filter/INPUT -i eth0 -j limit-573 - inet/filter/limit-573 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-573 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-573 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-573 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-957 + inet6/filter/INPUT -i eth0 -j limit-957 + inet/filter/limit-957 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-957 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-957 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-957 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 581 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 965 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-574 - inet6/filter/INPUT -i eth0 -j limit-574 - inet/filter/limit-574 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-574 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-574 -m limit --limit 1/second -j LOG - inet6/filter/limit-574 -m limit --limit 1/second -j LOG - inet/filter/limit-574 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-574 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-958 + inet6/filter/INPUT -i eth0 -j limit-958 + inet/filter/limit-958 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-958 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-958 -m limit --limit 1/second -j LOG + inet6/filter/limit-958 -m limit --limit 1/second -j LOG + inet/filter/limit-958 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-958 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8591,25 +14135,25 @@ Filter 581 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 582 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 966 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-575 - inet6/filter/INPUT -i eth0 -j limit-575 - inet/filter/limit-575 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-575 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-575 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-575 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-959 + inet6/filter/INPUT -i eth0 -j limit-959 + inet/filter/limit-959 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-959 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-959 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-959 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 583 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 967 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-576 - inet6/filter/INPUT -i eth0 -j limit-576 - inet/filter/limit-576 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-576 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-576 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-576 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-960 + inet6/filter/INPUT -i eth0 -j limit-960 + inet/filter/limit-960 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-960 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-960 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-960 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8617,25 +14161,25 @@ Filter 583 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 584 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 968 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-577 - inet6/filter/INPUT -i eth0 -j limit-577 - inet/filter/limit-577 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-577 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-577 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-577 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-961 + inet6/filter/INPUT -i eth0 -j limit-961 + inet/filter/limit-961 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-961 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-961 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-961 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 585 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 969 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-578 - inet6/filter/INPUT -i eth0 -j limit-578 - inet/filter/limit-578 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-578 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-578 -j ACCEPT - inet6/filter/limit-578 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-962 + inet6/filter/INPUT -i eth0 -j limit-962 + inet/filter/limit-962 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-962 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-962 -j ACCEPT + inet6/filter/limit-962 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8643,23 +14187,23 @@ Filter 585 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 586 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 970 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 587 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 971 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-580 - inet6/filter/INPUT -i eth0 -j limit-580 - inet/filter/limit-580 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-580 -m limit --limit 1/second -j LOG - inet6/filter/limit-580 -m limit --limit 1/second -j LOG - inet/filter/limit-580 -j ACCEPT - inet6/filter/limit-580 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-964 + inet6/filter/INPUT -i eth0 -j limit-964 + inet/filter/limit-964 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-964 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-964 -m limit --limit 1/second -j LOG + inet6/filter/limit-964 -m limit --limit 1/second -j LOG + inet/filter/limit-964 -j ACCEPT + inet6/filter/limit-964 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8667,25 +14211,25 @@ Filter 587 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 588 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 972 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-581 - inet6/filter/INPUT -i eth0 -j limit-581 - inet/filter/limit-581 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-581 -m limit --limit 1/second -j LOG - inet6/filter/limit-581 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-965 + inet6/filter/INPUT -i eth0 -j limit-965 + inet/filter/limit-965 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-965 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-965 -m limit --limit 1/second -j LOG + inet6/filter/limit-965 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 589 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 973 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-582 - inet6/filter/INPUT -i eth0 -j limit-582 - inet/filter/limit-582 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-582 -j ACCEPT - inet6/filter/limit-582 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-966 + inet6/filter/INPUT -i eth0 -j limit-966 + inet/filter/limit-966 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-966 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-966 -j ACCEPT + inet6/filter/limit-966 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8693,21 +14237,21 @@ Filter 589 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 590 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 974 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 591 {"flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 975 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-584 - inet6/filter/INPUT -i eth0 -j limit-584 - inet/filter/limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-968 + inet6/filter/INPUT -i eth0 -j limit-968 + inet/filter/limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-968 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-968 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8715,27 +14259,27 @@ Filter 591 {"flow-limit":{"interval":5,"log":"none"},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 592 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 976 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-585 - inet6/filter/INPUT -i eth0 -j limit-585 - inet/filter/limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-969 + inet6/filter/INPUT -i eth0 -j limit-969 + inet/filter/limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-969 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-969 -m recent --name user:C --rsource --mask fe00:: --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 593 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 977 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-586 - inet6/filter/INPUT -i eth0 -j limit-586 - inet/filter/limit-586 -m recent --name limit-586 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-586 -m recent --name limit-586 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-586 -m limit --limit 1/second -j LOG - inet6/filter/limit-586 -m limit --limit 1/second -j LOG - inet/filter/limit-586 -m recent --name limit-586 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-586 -m recent --name limit-586 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-970 + inet6/filter/INPUT -i eth0 -j limit-970 + inet/filter/limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-970 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-970 -m limit --limit 1/second -j LOG + inet6/filter/limit-970 -m limit --limit 1/second -j LOG + inet/filter/limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-970 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8743,25 +14287,25 @@ Filter 593 {"flow-limit":{"interval":5,"log":"none"},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 594 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 978 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-587 - inet6/filter/INPUT -i eth0 -j limit-587 - inet/filter/limit-587 -m recent --name limit-587 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-587 -m recent --name limit-587 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-587 -m recent --name limit-587 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-587 -m recent --name limit-587 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-971 + inet6/filter/INPUT -i eth0 -j limit-971 + inet/filter/limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-971 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-971 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 595 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 979 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-588 - inet6/filter/INPUT -i eth0 -j limit-588 - inet/filter/limit-588 -m recent --name limit-588 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-588 -m recent --name limit-588 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-588 -m recent --name limit-588 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-588 -m recent --name limit-588 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-972 + inet6/filter/INPUT -i eth0 -j limit-972 + inet/filter/limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-972 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-972 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8769,25 +14313,25 @@ Filter 595 {"flow-limit":{"interval":5,"log":"none"},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 596 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 980 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-589 - inet6/filter/INPUT -i eth0 -j limit-589 - inet/filter/limit-589 -m recent --name limit-589 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-589 -m recent --name limit-589 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-589 -m recent --name limit-589 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-589 -m recent --name limit-589 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-973 + inet6/filter/INPUT -i eth0 -j limit-973 + inet/filter/limit-973 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-973 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-973 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-973 -m recent --name user:C --rsource --mask fe00:: --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 597 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 981 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-590 - inet6/filter/INPUT -i eth0 -j limit-590 - inet/filter/limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-974 + inet6/filter/INPUT -i eth0 -j limit-974 + inet/filter/limit-974 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-974 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-974 -j ACCEPT + inet6/filter/limit-974 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8795,27 +14339,23 @@ Filter 597 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 598 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 982 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-591 - inet6/filter/INPUT -i eth0 -j limit-591 - inet/filter/limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 599 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 983 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-592 - inet6/filter/INPUT -i eth0 -j limit-592 - inet/filter/limit-592 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-592 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-592 -m limit --limit 1/second -j LOG - inet6/filter/limit-592 -m limit --limit 1/second -j LOG - inet/filter/limit-592 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-592 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-976 + inet6/filter/INPUT -i eth0 -j limit-976 + inet/filter/limit-976 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-976 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-976 -m limit --limit 1/second -j LOG + inet6/filter/limit-976 -m limit --limit 1/second -j LOG + inet/filter/limit-976 -j ACCEPT + inet6/filter/limit-976 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8823,25 +14363,25 @@ Filter 599 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 600 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 984 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-593 - inet6/filter/INPUT -i eth0 -j limit-593 - inet/filter/limit-593 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-593 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-593 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-593 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-977 + inet6/filter/INPUT -i eth0 -j limit-977 + inet/filter/limit-977 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-977 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-977 -m limit --limit 1/second -j LOG + inet6/filter/limit-977 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 601 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 985 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-594 - inet6/filter/INPUT -i eth0 -j limit-594 - inet/filter/limit-594 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-594 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-594 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-594 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-978 + inet6/filter/INPUT -i eth0 -j limit-978 + inet/filter/limit-978 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-978 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-978 -j ACCEPT + inet6/filter/limit-978 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8849,25 +14389,333 @@ Filter 601 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 602 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 986 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-595 - inet6/filter/INPUT -i eth0 -j limit-595 - inet/filter/limit-595 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-595 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-595 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-595 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 603 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 987 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-596 - inet6/filter/INPUT -i eth0 -j limit-596 - inet/filter/limit-596 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-596 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-596 -j ACCEPT - inet6/filter/limit-596 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-980 + inet6/filter/INPUT -i eth0 -j limit-980 + inet/filter/limit-980 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-980 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-980 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-980 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 988 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-981 + inet6/filter/INPUT -i eth0 -j limit-981 + inet/filter/limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-981 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-981 -m recent --name user:C --rdest --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 989 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-982 + inet6/filter/INPUT -i eth0 -j limit-982 + inet/filter/limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-982 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-982 -m limit --limit 1/second -j LOG + inet6/filter/limit-982 -m limit --limit 1/second -j LOG + inet/filter/limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-982 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 990 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-983 + inet6/filter/INPUT -i eth0 -j limit-983 + inet/filter/limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-983 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-983 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 991 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-984 + inet6/filter/INPUT -i eth0 -j limit-984 + inet/filter/limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-984 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-984 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 992 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-985 + inet6/filter/INPUT -i eth0 -j limit-985 + inet/filter/limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-985 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-985 -m recent --name user:C --rdest --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 993 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-986 + inet6/filter/INPUT -i eth0 -j limit-986 + inet/filter/limit-986 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-986 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-986 -j ACCEPT + inet6/filter/limit-986 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 994 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 995 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-988 + inet6/filter/INPUT -i eth0 -j limit-988 + inet/filter/limit-988 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-988 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-988 -m limit --limit 1/second -j LOG + inet6/filter/limit-988 -m limit --limit 1/second -j LOG + inet/filter/limit-988 -j ACCEPT + inet6/filter/limit-988 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 996 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-989 + inet6/filter/INPUT -i eth0 -j limit-989 + inet/filter/limit-989 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-989 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-989 -m limit --limit 1/second -j LOG + inet6/filter/limit-989 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 997 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-990 + inet6/filter/INPUT -i eth0 -j limit-990 + inet/filter/limit-990 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-990 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-990 -j ACCEPT + inet6/filter/limit-990 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 998 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 999 {"flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-992 + inet6/filter/INPUT -i eth0 -j limit-992 + inet/filter/limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1000 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-993 + inet6/filter/INPUT -i eth0 -j limit-993 + inet/filter/limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1001 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-994 + inet6/filter/INPUT -i eth0 -j limit-994 + inet/filter/limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-994 -m limit --limit 1/second -j LOG + inet6/filter/limit-994 -m limit --limit 1/second -j LOG + inet/filter/limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1002 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-995 + inet6/filter/INPUT -i eth0 -j limit-995 + inet/filter/limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1003 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-996 + inet6/filter/INPUT -i eth0 -j limit-996 + inet/filter/limit-996 -m recent --name limit-996 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-996 -m recent --name limit-996 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-996 -m recent --name limit-996 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-996 -m recent --name limit-996 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1004 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-997 + inet6/filter/INPUT -i eth0 -j limit-997 + inet/filter/limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1005 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-998 + inet6/filter/INPUT -i eth0 -j limit-998 + inet/filter/limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1006 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-999 + inet6/filter/INPUT -i eth0 -j limit-999 + inet/filter/limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1007 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1000 + inet6/filter/INPUT -i eth0 -j limit-1000 + inet/filter/limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1000 -m limit --limit 1/second -j LOG + inet6/filter/limit-1000 -m limit --limit 1/second -j LOG + inet/filter/limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1008 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1001 + inet6/filter/INPUT -i eth0 -j limit-1001 + inet/filter/limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1009 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1002 + inet6/filter/INPUT -i eth0 -j limit-1002 + inet/filter/limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1010 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1003 + inet6/filter/INPUT -i eth0 -j limit-1003 + inet/filter/limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1011 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1004 + inet6/filter/INPUT -i eth0 -j limit-1004 + inet/filter/limit-1004 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1004 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1004 -j ACCEPT + inet6/filter/limit-1004 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8875,23 +14723,23 @@ Filter 603 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 604 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1012 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 605 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1013 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-598 - inet6/filter/INPUT -i eth0 -j limit-598 - inet/filter/limit-598 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-598 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-598 -m limit --limit 1/second -j LOG - inet6/filter/limit-598 -m limit --limit 1/second -j LOG - inet/filter/limit-598 -j ACCEPT - inet6/filter/limit-598 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1006 + inet6/filter/INPUT -i eth0 -j limit-1006 + inet/filter/limit-1006 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1006 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1006 -m limit --limit 1/second -j LOG + inet6/filter/limit-1006 -m limit --limit 1/second -j LOG + inet/filter/limit-1006 -j ACCEPT + inet6/filter/limit-1006 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8899,25 +14747,25 @@ Filter 605 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 606 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1014 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-599 - inet6/filter/INPUT -i eth0 -j limit-599 - inet/filter/limit-599 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-599 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-599 -m limit --limit 1/second -j LOG - inet6/filter/limit-599 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-1007 + inet6/filter/INPUT -i eth0 -j limit-1007 + inet/filter/limit-1007 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1007 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1007 -m limit --limit 1/second -j LOG + inet6/filter/limit-1007 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 607 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1015 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-600 - inet6/filter/INPUT -i eth0 -j limit-600 - inet/filter/limit-600 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-600 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-600 -j ACCEPT - inet6/filter/limit-600 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1008 + inet6/filter/INPUT -i eth0 -j limit-1008 + inet/filter/limit-1008 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1008 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1008 -j ACCEPT + inet6/filter/limit-1008 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8925,21 +14773,21 @@ Filter 607 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 608 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1016 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 609 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1017 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-602 - inet6/filter/INPUT -i eth0 -j limit-602 - inet/filter/limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1010 + inet6/filter/INPUT -i eth0 -j limit-1010 + inet/filter/limit-1010 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1010 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8947,27 +14795,27 @@ Filter 609 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 610 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1018 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-603 - inet6/filter/INPUT -i eth0 -j limit-603 - inet/filter/limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-1011 + inet6/filter/INPUT -i eth0 -j limit-1011 + inet/filter/limit-1011 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1011 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 611 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1019 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-604 - inet6/filter/INPUT -i eth0 -j limit-604 - inet/filter/limit-604 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-604 -m limit --limit 1/second -j LOG - inet6/filter/limit-604 -m limit --limit 1/second -j LOG - inet/filter/limit-604 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1012 + inet6/filter/INPUT -i eth0 -j limit-1012 + inet/filter/limit-1012 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1012 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1012 -m limit --limit 1/second -j LOG + inet6/filter/limit-1012 -m limit --limit 1/second -j LOG + inet/filter/limit-1012 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1012 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -8975,25 +14823,25 @@ Filter 611 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 612 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1020 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-605 - inet6/filter/INPUT -i eth0 -j limit-605 - inet/filter/limit-605 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-605 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-605 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-605 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-1013 + inet6/filter/INPUT -i eth0 -j limit-1013 + inet/filter/limit-1013 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1013 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1013 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1013 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 613 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1021 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-606 - inet6/filter/INPUT -i eth0 -j limit-606 - inet/filter/limit-606 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-606 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1014 + inet6/filter/INPUT -i eth0 -j limit-1014 + inet/filter/limit-1014 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1014 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1014 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1014 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9001,25 +14849,25 @@ Filter 613 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 614 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1022 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-607 - inet6/filter/INPUT -i eth0 -j limit-607 - inet/filter/limit-607 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-607 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-607 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-607 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-1015 + inet6/filter/INPUT -i eth0 -j limit-1015 + inet/filter/limit-1015 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1015 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1015 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1015 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 615 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1023 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-608 - inet6/filter/INPUT -i eth0 -j limit-608 - inet/filter/limit-608 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-608 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-608 -j ACCEPT - inet6/filter/limit-608 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1016 + inet6/filter/INPUT -i eth0 -j limit-1016 + inet/filter/limit-1016 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1016 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1016 -j ACCEPT + inet6/filter/limit-1016 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9027,23 +14875,23 @@ Filter 615 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 616 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1024 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 617 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1025 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-610 - inet6/filter/INPUT -i eth0 -j limit-610 - inet/filter/limit-610 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-610 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-610 -m limit --limit 1/second -j LOG - inet6/filter/limit-610 -m limit --limit 1/second -j LOG - inet/filter/limit-610 -j ACCEPT - inet6/filter/limit-610 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1018 + inet6/filter/INPUT -i eth0 -j limit-1018 + inet/filter/limit-1018 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1018 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1018 -m limit --limit 1/second -j LOG + inet6/filter/limit-1018 -m limit --limit 1/second -j LOG + inet/filter/limit-1018 -j ACCEPT + inet6/filter/limit-1018 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9051,25 +14899,25 @@ Filter 617 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 618 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1026 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-611 - inet6/filter/INPUT -i eth0 -j limit-611 - inet/filter/limit-611 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-611 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-611 -m limit --limit 1/second -j LOG - inet6/filter/limit-611 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-1019 + inet6/filter/INPUT -i eth0 -j limit-1019 + inet/filter/limit-1019 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1019 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1019 -m limit --limit 1/second -j LOG + inet6/filter/limit-1019 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 619 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1027 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-612 - inet6/filter/INPUT -i eth0 -j limit-612 - inet/filter/limit-612 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-612 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-612 -j ACCEPT - inet6/filter/limit-612 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1020 + inet6/filter/INPUT -i eth0 -j limit-1020 + inet/filter/limit-1020 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1020 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1020 -j ACCEPT + inet6/filter/limit-1020 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9077,23 +14925,49 @@ Filter 619 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 620 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1028 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 621 {"flow-limit":150,"in":"A","no-track":true,"out":"_fw"} +Filter 1029 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1022 + inet6/filter/INPUT -i eth0 -j limit-1022 + inet/filter/limit-1022 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1022 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1022 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1022 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1030 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1023 + inet6/filter/INPUT -i eth0 -j limit-1023 + inet/filter/limit-1023 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1023 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1023 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1023 -m recent --name user:C --rsource --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1031 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-614 - inet6/filter/INPUT -i eth0 -j limit-614 - inet/filter/limit-614 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-614 -j ACCEPT - inet6/filter/limit-614 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-614 -j ACCEPT - inet/filter/limit-614 -m limit --limit 1/second -j LOG - inet6/filter/limit-614 -m limit --limit 1/second -j LOG - inet/filter/limit-614 -j DROP - inet6/filter/limit-614 -j DROP + inet/filter/INPUT -i eth0 -j limit-1024 + inet6/filter/INPUT -i eth0 -j limit-1024 + inet/filter/limit-1024 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1024 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1024 -m limit --limit 1/second -j LOG + inet6/filter/limit-1024 -m limit --limit 1/second -j LOG + inet/filter/limit-1024 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1024 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9101,33 +14975,311 @@ Filter 621 {"flow-limit":150,"in":"A","no-track":true,"o inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 622 {"action":"pass","flow-limit":150,"in":"A","no-track":true,"out":"_fw"} +Filter 1032 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-615 - inet6/filter/INPUT -i eth0 -j limit-615 - inet/filter/limit-615 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-615 -j RETURN - inet6/filter/limit-615 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-615 -j RETURN - inet/filter/limit-615 -m limit --limit 1/second -j LOG - inet6/filter/limit-615 -m limit --limit 1/second -j LOG - inet/filter/limit-615 -j DROP - inet6/filter/limit-615 -j DROP + inet/filter/INPUT -i eth0 -j limit-1025 + inet6/filter/INPUT -i eth0 -j limit-1025 + inet/filter/limit-1025 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1025 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1025 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1025 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 623 {"flow-limit":150,"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1033 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1026 + inet6/filter/INPUT -i eth0 -j limit-1026 + inet/filter/limit-1026 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1026 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1026 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1026 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1034 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1027 + inet6/filter/INPUT -i eth0 -j limit-1027 + inet/filter/limit-1027 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1027 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1027 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1027 -m recent --name user:C --rsource --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1035 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1028 + inet6/filter/INPUT -i eth0 -j limit-1028 + inet/filter/limit-1028 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1028 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1028 -j ACCEPT + inet6/filter/limit-1028 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1036 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1037 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1030 + inet6/filter/INPUT -i eth0 -j limit-1030 + inet/filter/limit-1030 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1030 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1030 -m limit --limit 1/second -j LOG + inet6/filter/limit-1030 -m limit --limit 1/second -j LOG + inet/filter/limit-1030 -j ACCEPT + inet6/filter/limit-1030 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1038 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1031 + inet6/filter/INPUT -i eth0 -j limit-1031 + inet/filter/limit-1031 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1031 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1031 -m limit --limit 1/second -j LOG + inet6/filter/limit-1031 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1039 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1032 + inet6/filter/INPUT -i eth0 -j limit-1032 + inet/filter/limit-1032 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1032 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1032 -j ACCEPT + inet6/filter/limit-1032 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1040 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1041 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1034 + inet6/filter/INPUT -i eth0 -j limit-1034 + inet/filter/limit-1034 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1034 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1034 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1034 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1042 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1035 + inet6/filter/INPUT -i eth0 -j limit-1035 + inet/filter/limit-1035 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1035 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1035 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-1035 -m recent --name user:C --rdest --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1043 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1036 + inet6/filter/INPUT -i eth0 -j limit-1036 + inet/filter/limit-1036 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1036 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1036 -m limit --limit 1/second -j LOG + inet6/filter/limit-1036 -m limit --limit 1/second -j LOG + inet/filter/limit-1036 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1036 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1044 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-616 - inet6/filter/INPUT -i eth0 -j limit-616 - inet/filter/limit-616 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-616 -j logaccept-7 - inet6/filter/limit-616 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-616 -j logaccept-7 + inet/filter/INPUT -i eth0 -j limit-1037 + inet6/filter/INPUT -i eth0 -j limit-1037 + inet/filter/limit-1037 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1037 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1037 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1037 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1045 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1038 + inet6/filter/INPUT -i eth0 -j limit-1038 + inet/filter/limit-1038 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1038 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1038 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1038 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1046 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1039 + inet6/filter/INPUT -i eth0 -j limit-1039 + inet/filter/limit-1039 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1039 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1039 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-1039 -m recent --name user:C --rdest --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1047 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1040 + inet6/filter/INPUT -i eth0 -j limit-1040 + inet/filter/limit-1040 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1040 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1040 -j ACCEPT + inet6/filter/limit-1040 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1048 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1049 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1042 + inet6/filter/INPUT -i eth0 -j limit-1042 + inet/filter/limit-1042 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1042 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1042 -m limit --limit 1/second -j LOG + inet6/filter/limit-1042 -m limit --limit 1/second -j LOG + inet/filter/limit-1042 -j ACCEPT + inet6/filter/limit-1042 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1050 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1043 + inet6/filter/INPUT -i eth0 -j limit-1043 + inet/filter/limit-1043 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1043 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1043 -m limit --limit 1/second -j LOG + inet6/filter/limit-1043 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1051 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1044 + inet6/filter/INPUT -i eth0 -j limit-1044 + inet/filter/limit-1044 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1044 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1044 -j ACCEPT + inet6/filter/limit-1044 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1052 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1053 {"flow-limit":150,"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1046 + inet6/filter/INPUT -i eth0 -j limit-1046 + inet/filter/limit-1046 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1046 -j ACCEPT + inet6/filter/limit-1046 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1046 -j ACCEPT + inet/filter/limit-1046 -m limit --limit 1/second -j LOG + inet6/filter/limit-1046 -m limit --limit 1/second -j LOG + inet/filter/limit-1046 -j DROP + inet6/filter/limit-1046 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 1054 {"action":"pass","flow-limit":150,"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1047 + inet6/filter/INPUT -i eth0 -j limit-1047 + inet/filter/limit-1047 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1047 -j RETURN + inet6/filter/limit-1047 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1047 -j RETURN + inet/filter/limit-1047 -m limit --limit 1/second -j LOG + inet6/filter/limit-1047 -m limit --limit 1/second -j LOG + inet/filter/limit-1047 -j DROP + inet6/filter/limit-1047 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 1055 {"flow-limit":150,"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-1048 + inet6/filter/INPUT -i eth0 -j limit-1048 + inet/filter/limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1048 -j logaccept-7 + inet6/filter/limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1048 -j logaccept-7 inet/filter/logaccept-7 -m limit --limit 1/second -j LOG inet6/filter/logaccept-7 -m limit --limit 1/second -j LOG inet/filter/logaccept-7 -j ACCEPT inet6/filter/logaccept-7 -j ACCEPT - inet/filter/limit-616 -m limit --limit 1/second -j LOG - inet6/filter/limit-616 -m limit --limit 1/second -j LOG - inet/filter/limit-616 -j DROP - inet6/filter/limit-616 -j DROP + inet/filter/limit-1048 -m limit --limit 1/second -j LOG + inet6/filter/limit-1048 -m limit --limit 1/second -j LOG + inet/filter/limit-1048 -j DROP + inet6/filter/limit-1048 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9135,16 +15287,16 @@ Filter 623 {"flow-limit":150,"in":"A","log":true,"no-tra inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 624 {"flow-limit":150,"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1056 {"flow-limit":150,"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-617 - inet6/filter/INPUT -i eth0 -j limit-617 - inet/filter/limit-617 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-617 -j ACCEPT - inet6/filter/limit-617 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-617 -j ACCEPT - inet/filter/limit-617 -m limit --limit 1/second -j LOG - inet6/filter/limit-617 -m limit --limit 1/second -j LOG - inet/filter/limit-617 -j DROP - inet6/filter/limit-617 -j DROP + inet/filter/INPUT -i eth0 -j limit-1049 + inet6/filter/INPUT -i eth0 -j limit-1049 + inet/filter/limit-1049 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1049 -j ACCEPT + inet6/filter/limit-1049 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1049 -j ACCEPT + inet/filter/limit-1049 -m limit --limit 1/second -j LOG + inet6/filter/limit-1049 -m limit --limit 1/second -j LOG + inet/filter/limit-1049 -j DROP + inet6/filter/limit-1049 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9152,16 +15304,16 @@ Filter 624 {"flow-limit":150,"in":"A","log":"none","no-t inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 625 {"flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw"} +Filter 1057 {"flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-618 - inet6/filter/INPUT -i eth0 -j limit-618 - inet/filter/limit-618 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-618 -j ACCEPT - inet6/filter/limit-618 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-618 -j ACCEPT - inet/filter/limit-618 -m limit --limit 1/second -j LOG - inet6/filter/limit-618 -m limit --limit 1/second -j LOG - inet/filter/limit-618 -j DROP - inet6/filter/limit-618 -j DROP + inet/filter/INPUT -i eth0 -j limit-1050 + inet6/filter/INPUT -i eth0 -j limit-1050 + inet/filter/limit-1050 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1050 -j ACCEPT + inet6/filter/limit-1050 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1050 -j ACCEPT + inet/filter/limit-1050 -m limit --limit 1/second -j LOG + inet6/filter/limit-1050 -m limit --limit 1/second -j LOG + inet/filter/limit-1050 -j DROP + inet6/filter/limit-1050 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9169,33 +15321,33 @@ Filter 625 {"flow-limit":{"count":150},"in":"A","no-trac inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 626 {"action":"pass","flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw"} +Filter 1058 {"action":"pass","flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-619 - inet6/filter/INPUT -i eth0 -j limit-619 - inet/filter/limit-619 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-619 -j RETURN - inet6/filter/limit-619 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-619 -j RETURN - inet/filter/limit-619 -m limit --limit 1/second -j LOG - inet6/filter/limit-619 -m limit --limit 1/second -j LOG - inet/filter/limit-619 -j DROP - inet6/filter/limit-619 -j DROP + inet/filter/INPUT -i eth0 -j limit-1051 + inet6/filter/INPUT -i eth0 -j limit-1051 + inet/filter/limit-1051 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1051 -j RETURN + inet6/filter/limit-1051 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1051 -j RETURN + inet/filter/limit-1051 -m limit --limit 1/second -j LOG + inet6/filter/limit-1051 -m limit --limit 1/second -j LOG + inet/filter/limit-1051 -j DROP + inet6/filter/limit-1051 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 627 {"flow-limit":{"count":150},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1059 {"flow-limit":{"count":150},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-620 - inet6/filter/INPUT -i eth0 -j limit-620 - inet/filter/limit-620 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-620 -j logaccept-8 - inet6/filter/limit-620 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-620 -j logaccept-8 + inet/filter/INPUT -i eth0 -j limit-1052 + inet6/filter/INPUT -i eth0 -j limit-1052 + inet/filter/limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1052 -j logaccept-8 + inet6/filter/limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1052 -j logaccept-8 inet/filter/logaccept-8 -m limit --limit 1/second -j LOG inet6/filter/logaccept-8 -m limit --limit 1/second -j LOG inet/filter/logaccept-8 -j ACCEPT inet6/filter/logaccept-8 -j ACCEPT - inet/filter/limit-620 -m limit --limit 1/second -j LOG - inet6/filter/limit-620 -m limit --limit 1/second -j LOG - inet/filter/limit-620 -j DROP - inet6/filter/limit-620 -j DROP + inet/filter/limit-1052 -m limit --limit 1/second -j LOG + inet6/filter/limit-1052 -m limit --limit 1/second -j LOG + inet/filter/limit-1052 -j DROP + inet6/filter/limit-1052 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9203,16 +15355,16 @@ Filter 627 {"flow-limit":{"count":150},"in":"A","log":tr inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 628 {"flow-limit":{"count":150},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1060 {"flow-limit":{"count":150},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-621 - inet6/filter/INPUT -i eth0 -j limit-621 - inet/filter/limit-621 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-621 -j ACCEPT - inet6/filter/limit-621 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-621 -j ACCEPT - inet/filter/limit-621 -m limit --limit 1/second -j LOG - inet6/filter/limit-621 -m limit --limit 1/second -j LOG - inet/filter/limit-621 -j DROP - inet6/filter/limit-621 -j DROP + inet/filter/INPUT -i eth0 -j limit-1053 + inet6/filter/INPUT -i eth0 -j limit-1053 + inet/filter/limit-1053 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1053 -j ACCEPT + inet6/filter/limit-1053 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1053 -j ACCEPT + inet/filter/limit-1053 -m limit --limit 1/second -j LOG + inet6/filter/limit-1053 -m limit --limit 1/second -j LOG + inet/filter/limit-1053 -j DROP + inet6/filter/limit-1053 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9220,14 +15372,14 @@ Filter 628 {"flow-limit":{"count":150},"in":"A","log":"n inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 629 {"flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1061 {"flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-622 - inet6/filter/INPUT -i eth0 -j limit-622 - inet/filter/limit-622 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-622 -j ACCEPT - inet6/filter/limit-622 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-622 -j ACCEPT - inet/filter/limit-622 -j DROP - inet6/filter/limit-622 -j DROP + inet/filter/INPUT -i eth0 -j limit-1054 + inet6/filter/INPUT -i eth0 -j limit-1054 + inet/filter/limit-1054 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1054 -j ACCEPT + inet6/filter/limit-1054 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1054 -j ACCEPT + inet/filter/limit-1054 -j DROP + inet6/filter/limit-1054 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9235,29 +15387,29 @@ Filter 629 {"flow-limit":{"count":150,"log":false},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 630 {"action":"pass","flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1062 {"action":"pass","flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-623 - inet6/filter/INPUT -i eth0 -j limit-623 - inet/filter/limit-623 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-623 -j RETURN - inet6/filter/limit-623 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-623 -j RETURN - inet/filter/limit-623 -j DROP - inet6/filter/limit-623 -j DROP + inet/filter/INPUT -i eth0 -j limit-1055 + inet6/filter/INPUT -i eth0 -j limit-1055 + inet/filter/limit-1055 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1055 -j RETURN + inet6/filter/limit-1055 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1055 -j RETURN + inet/filter/limit-1055 -j DROP + inet6/filter/limit-1055 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 631 {"flow-limit":{"count":150,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1063 {"flow-limit":{"count":150,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-624 - inet6/filter/INPUT -i eth0 -j limit-624 - inet/filter/limit-624 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-624 -j logaccept-9 - inet6/filter/limit-624 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-624 -j logaccept-9 + inet/filter/INPUT -i eth0 -j limit-1056 + inet6/filter/INPUT -i eth0 -j limit-1056 + inet/filter/limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1056 -j logaccept-9 + inet6/filter/limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1056 -j logaccept-9 inet/filter/logaccept-9 -m limit --limit 1/second -j LOG inet6/filter/logaccept-9 -m limit --limit 1/second -j LOG inet/filter/logaccept-9 -j ACCEPT inet6/filter/logaccept-9 -j ACCEPT - inet/filter/limit-624 -j DROP - inet6/filter/limit-624 -j DROP + inet/filter/limit-1056 -j DROP + inet6/filter/limit-1056 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9265,14 +15417,14 @@ Filter 631 {"flow-limit":{"count":150,"log":false},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 632 {"flow-limit":{"count":150,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1064 {"flow-limit":{"count":150,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-625 - inet6/filter/INPUT -i eth0 -j limit-625 - inet/filter/limit-625 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-625 -j ACCEPT - inet6/filter/limit-625 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-625 -j ACCEPT - inet/filter/limit-625 -j DROP - inet6/filter/limit-625 -j DROP + inet/filter/INPUT -i eth0 -j limit-1057 + inet6/filter/INPUT -i eth0 -j limit-1057 + inet/filter/limit-1057 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1057 -j ACCEPT + inet6/filter/limit-1057 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1057 -j ACCEPT + inet/filter/limit-1057 -j DROP + inet6/filter/limit-1057 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9280,14 +15432,14 @@ Filter 632 {"flow-limit":{"count":150,"log":false},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 633 {"flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 1065 {"flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-626 - inet6/filter/INPUT -i eth0 -j limit-626 - inet/filter/limit-626 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-626 -j ACCEPT - inet6/filter/limit-626 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-626 -j ACCEPT - inet/filter/limit-626 -j DROP - inet6/filter/limit-626 -j DROP + inet/filter/INPUT -i eth0 -j limit-1058 + inet6/filter/INPUT -i eth0 -j limit-1058 + inet/filter/limit-1058 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1058 -j ACCEPT + inet6/filter/limit-1058 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1058 -j ACCEPT + inet/filter/limit-1058 -j DROP + inet6/filter/limit-1058 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9295,29 +15447,29 @@ Filter 633 {"flow-limit":{"count":150,"log":"none"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 634 {"action":"pass","flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 1066 {"action":"pass","flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-627 - inet6/filter/INPUT -i eth0 -j limit-627 - inet/filter/limit-627 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-627 -j RETURN - inet6/filter/limit-627 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-627 -j RETURN - inet/filter/limit-627 -j DROP - inet6/filter/limit-627 -j DROP + inet/filter/INPUT -i eth0 -j limit-1059 + inet6/filter/INPUT -i eth0 -j limit-1059 + inet/filter/limit-1059 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1059 -j RETURN + inet6/filter/limit-1059 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1059 -j RETURN + inet/filter/limit-1059 -j DROP + inet6/filter/limit-1059 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 635 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1067 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-628 - inet6/filter/INPUT -i eth0 -j limit-628 - inet/filter/limit-628 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-628 -j logaccept-10 - inet6/filter/limit-628 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-628 -j logaccept-10 + inet/filter/INPUT -i eth0 -j limit-1060 + inet6/filter/INPUT -i eth0 -j limit-1060 + inet/filter/limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1060 -j logaccept-10 + inet6/filter/limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1060 -j logaccept-10 inet/filter/logaccept-10 -m limit --limit 1/second -j LOG inet6/filter/logaccept-10 -m limit --limit 1/second -j LOG inet/filter/logaccept-10 -j ACCEPT inet6/filter/logaccept-10 -j ACCEPT - inet/filter/limit-628 -j DROP - inet6/filter/limit-628 -j DROP + inet/filter/limit-1060 -j DROP + inet6/filter/limit-1060 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9325,14 +15477,14 @@ Filter 635 {"flow-limit":{"count":150,"log":"none"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 636 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1068 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-629 - inet6/filter/INPUT -i eth0 -j limit-629 - inet/filter/limit-629 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-629 -j ACCEPT - inet6/filter/limit-629 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-629 -j ACCEPT - inet/filter/limit-629 -j DROP - inet6/filter/limit-629 -j DROP + inet/filter/INPUT -i eth0 -j limit-1061 + inet6/filter/INPUT -i eth0 -j limit-1061 + inet/filter/limit-1061 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1061 -j ACCEPT + inet6/filter/limit-1061 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1061 -j ACCEPT + inet/filter/limit-1061 -j DROP + inet6/filter/limit-1061 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9340,16 +15492,16 @@ Filter 636 {"flow-limit":{"count":150,"log":"none"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 637 {"flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw"} +Filter 1069 {"flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-630 - inet6/filter/INPUT -i eth0 -j limit-630 - inet/filter/limit-630 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-630 -j ACCEPT - inet6/filter/limit-630 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-630 -j ACCEPT - inet/filter/limit-630 -m limit --limit 1/second -j LOG - inet6/filter/limit-630 -m limit --limit 1/second -j LOG - inet/filter/limit-630 -j DROP - inet6/filter/limit-630 -j DROP + inet/filter/INPUT -i eth0 -j limit-1062 + inet6/filter/INPUT -i eth0 -j limit-1062 + inet/filter/limit-1062 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1062 -j ACCEPT + inet6/filter/limit-1062 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1062 -j ACCEPT + inet/filter/limit-1062 -m limit --limit 1/second -j LOG + inet6/filter/limit-1062 -m limit --limit 1/second -j LOG + inet/filter/limit-1062 -j DROP + inet6/filter/limit-1062 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9357,33 +15509,33 @@ Filter 637 {"flow-limit":{"count":150,"interval":5},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 638 {"action":"pass","flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw"} +Filter 1070 {"action":"pass","flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-631 - inet6/filter/INPUT -i eth0 -j limit-631 - inet/filter/limit-631 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-631 -j RETURN - inet6/filter/limit-631 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-631 -j RETURN - inet/filter/limit-631 -m limit --limit 1/second -j LOG - inet6/filter/limit-631 -m limit --limit 1/second -j LOG - inet/filter/limit-631 -j DROP - inet6/filter/limit-631 -j DROP + inet/filter/INPUT -i eth0 -j limit-1063 + inet6/filter/INPUT -i eth0 -j limit-1063 + inet/filter/limit-1063 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1063 -j RETURN + inet6/filter/limit-1063 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1063 -j RETURN + inet/filter/limit-1063 -m limit --limit 1/second -j LOG + inet6/filter/limit-1063 -m limit --limit 1/second -j LOG + inet/filter/limit-1063 -j DROP + inet6/filter/limit-1063 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 639 {"flow-limit":{"count":150,"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1071 {"flow-limit":{"count":150,"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-632 - inet6/filter/INPUT -i eth0 -j limit-632 - inet/filter/limit-632 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-632 -j logaccept-11 - inet6/filter/limit-632 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-632 -j logaccept-11 + inet/filter/INPUT -i eth0 -j limit-1064 + inet6/filter/INPUT -i eth0 -j limit-1064 + inet/filter/limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1064 -j logaccept-11 + inet6/filter/limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1064 -j logaccept-11 inet/filter/logaccept-11 -m limit --limit 1/second -j LOG inet6/filter/logaccept-11 -m limit --limit 1/second -j LOG inet/filter/logaccept-11 -j ACCEPT inet6/filter/logaccept-11 -j ACCEPT - inet/filter/limit-632 -m limit --limit 1/second -j LOG - inet6/filter/limit-632 -m limit --limit 1/second -j LOG - inet/filter/limit-632 -j DROP - inet6/filter/limit-632 -j DROP + inet/filter/limit-1064 -m limit --limit 1/second -j LOG + inet6/filter/limit-1064 -m limit --limit 1/second -j LOG + inet/filter/limit-1064 -j DROP + inet6/filter/limit-1064 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9391,16 +15543,16 @@ Filter 639 {"flow-limit":{"count":150,"interval":5},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 640 {"flow-limit":{"count":150,"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1072 {"flow-limit":{"count":150,"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-633 - inet6/filter/INPUT -i eth0 -j limit-633 - inet/filter/limit-633 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-633 -j ACCEPT - inet6/filter/limit-633 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-633 -j ACCEPT - inet/filter/limit-633 -m limit --limit 1/second -j LOG - inet6/filter/limit-633 -m limit --limit 1/second -j LOG - inet/filter/limit-633 -j DROP - inet6/filter/limit-633 -j DROP + inet/filter/INPUT -i eth0 -j limit-1065 + inet6/filter/INPUT -i eth0 -j limit-1065 + inet/filter/limit-1065 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1065 -j ACCEPT + inet6/filter/limit-1065 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1065 -j ACCEPT + inet/filter/limit-1065 -m limit --limit 1/second -j LOG + inet6/filter/limit-1065 -m limit --limit 1/second -j LOG + inet/filter/limit-1065 -j DROP + inet6/filter/limit-1065 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9408,14 +15560,14 @@ Filter 640 {"flow-limit":{"count":150,"interval":5},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 641 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1073 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-634 - inet6/filter/INPUT -i eth0 -j limit-634 - inet/filter/limit-634 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-634 -j ACCEPT - inet6/filter/limit-634 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-634 -j ACCEPT - inet/filter/limit-634 -j DROP - inet6/filter/limit-634 -j DROP + inet/filter/INPUT -i eth0 -j limit-1066 + inet6/filter/INPUT -i eth0 -j limit-1066 + inet/filter/limit-1066 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1066 -j ACCEPT + inet6/filter/limit-1066 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1066 -j ACCEPT + inet/filter/limit-1066 -j DROP + inet6/filter/limit-1066 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9423,29 +15575,29 @@ Filter 641 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 642 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1074 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-635 - inet6/filter/INPUT -i eth0 -j limit-635 - inet/filter/limit-635 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-635 -j RETURN - inet6/filter/limit-635 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-635 -j RETURN - inet/filter/limit-635 -j DROP - inet6/filter/limit-635 -j DROP + inet/filter/INPUT -i eth0 -j limit-1067 + inet6/filter/INPUT -i eth0 -j limit-1067 + inet/filter/limit-1067 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1067 -j RETURN + inet6/filter/limit-1067 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1067 -j RETURN + inet/filter/limit-1067 -j DROP + inet6/filter/limit-1067 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 643 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1075 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-636 - inet6/filter/INPUT -i eth0 -j limit-636 - inet/filter/limit-636 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-636 -j logaccept-12 - inet6/filter/limit-636 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-636 -j logaccept-12 + inet/filter/INPUT -i eth0 -j limit-1068 + inet6/filter/INPUT -i eth0 -j limit-1068 + inet/filter/limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1068 -j logaccept-12 + inet6/filter/limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1068 -j logaccept-12 inet/filter/logaccept-12 -m limit --limit 1/second -j LOG inet6/filter/logaccept-12 -m limit --limit 1/second -j LOG inet/filter/logaccept-12 -j ACCEPT inet6/filter/logaccept-12 -j ACCEPT - inet/filter/limit-636 -j DROP - inet6/filter/limit-636 -j DROP + inet/filter/limit-1068 -j DROP + inet6/filter/limit-1068 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9453,14 +15605,14 @@ Filter 643 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 644 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1076 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-637 - inet6/filter/INPUT -i eth0 -j limit-637 - inet/filter/limit-637 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-637 -j ACCEPT - inet6/filter/limit-637 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-637 -j ACCEPT - inet/filter/limit-637 -j DROP - inet6/filter/limit-637 -j DROP + inet/filter/INPUT -i eth0 -j limit-1069 + inet6/filter/INPUT -i eth0 -j limit-1069 + inet/filter/limit-1069 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1069 -j ACCEPT + inet6/filter/limit-1069 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1069 -j ACCEPT + inet/filter/limit-1069 -j DROP + inet6/filter/limit-1069 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9468,14 +15620,14 @@ Filter 644 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 645 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 1077 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-638 - inet6/filter/INPUT -i eth0 -j limit-638 - inet/filter/limit-638 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-638 -j ACCEPT - inet6/filter/limit-638 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-638 -j ACCEPT - inet/filter/limit-638 -j DROP - inet6/filter/limit-638 -j DROP + inet/filter/INPUT -i eth0 -j limit-1070 + inet6/filter/INPUT -i eth0 -j limit-1070 + inet/filter/limit-1070 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1070 -j ACCEPT + inet6/filter/limit-1070 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1070 -j ACCEPT + inet/filter/limit-1070 -j DROP + inet6/filter/limit-1070 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9483,29 +15635,29 @@ Filter 645 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 646 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 1078 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-639 - inet6/filter/INPUT -i eth0 -j limit-639 - inet/filter/limit-639 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-639 -j RETURN - inet6/filter/limit-639 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-639 -j RETURN - inet/filter/limit-639 -j DROP - inet6/filter/limit-639 -j DROP + inet/filter/INPUT -i eth0 -j limit-1071 + inet6/filter/INPUT -i eth0 -j limit-1071 + inet/filter/limit-1071 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1071 -j RETURN + inet6/filter/limit-1071 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1071 -j RETURN + inet/filter/limit-1071 -j DROP + inet6/filter/limit-1071 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 647 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1079 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-640 - inet6/filter/INPUT -i eth0 -j limit-640 - inet/filter/limit-640 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-640 -j logaccept-13 - inet6/filter/limit-640 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-640 -j logaccept-13 + inet/filter/INPUT -i eth0 -j limit-1072 + inet6/filter/INPUT -i eth0 -j limit-1072 + inet/filter/limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1072 -j logaccept-13 + inet6/filter/limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1072 -j logaccept-13 inet/filter/logaccept-13 -m limit --limit 1/second -j LOG inet6/filter/logaccept-13 -m limit --limit 1/second -j LOG inet/filter/logaccept-13 -j ACCEPT inet6/filter/logaccept-13 -j ACCEPT - inet/filter/limit-640 -j DROP - inet6/filter/limit-640 -j DROP + inet/filter/limit-1072 -j DROP + inet6/filter/limit-1072 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9513,14 +15665,14 @@ Filter 647 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 648 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1080 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-641 - inet6/filter/INPUT -i eth0 -j limit-641 - inet/filter/limit-641 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-641 -j ACCEPT - inet6/filter/limit-641 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-641 -j ACCEPT - inet/filter/limit-641 -j DROP - inet6/filter/limit-641 -j DROP + inet/filter/INPUT -i eth0 -j limit-1073 + inet6/filter/INPUT -i eth0 -j limit-1073 + inet/filter/limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1073 -j ACCEPT + inet6/filter/limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1073 -j ACCEPT + inet/filter/limit-1073 -j DROP + inet6/filter/limit-1073 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -9528,7 +15680,7 @@ Filter 648 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 649 {"update-limit":"A"} +Filter 1081 {"update-limit":"A"} (filter-limit) inet/filter/FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set @@ -9537,7 +15689,34 @@ Filter 649 {"update-limit":"A"} inet/filter/OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 650 {"update-limit":{"addr":"src","measure":"conn","name":"A"}} +Filter 1082 {"update-limit":"B"} +(filter-limit) + inet/filter/FORWARD -m recent --name user:B --rsource --mask 255.255.255.255 --set + inet/filter/INPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set + inet6/filter/OUTPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1083 {"update-limit":"C"} +(filter-limit) + inet/filter/FORWARD -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/INPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/FORWARD -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/INPUT -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/OUTPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/OUTPUT -m recent --name user:C --rsource --mask fe00:: --set + +Filter 1084 {"update-limit":"D"} +(filter-limit) + inet/filter/FORWARD -m recent --name user:D --rsource --mask 255.255.252.0 --set + inet/filter/INPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set + inet6/filter/FORWARD -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set + inet6/filter/INPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set + inet/filter/OUTPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set + inet6/filter/OUTPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set + +Filter 1085 {"update-limit":{"addr":"src","measure":"conn","name":"A"}} (filter-limit) inet/filter/FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set @@ -9546,7 +15725,7 @@ Filter 650 {"update-limit":{"addr":"src","measure":"conn inet/filter/OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 651 {"update-limit":{"addr":"dest","measure":"conn","name":"A"}} +Filter 1086 {"update-limit":{"addr":"dest","measure":"conn","name":"A"}} (filter-limit) inet/filter/FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set @@ -9555,7 +15734,7 @@ Filter 651 {"update-limit":{"addr":"dest","measure":"con inet/filter/OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 652 {"update-limit":{"addr":"src","measure":"flow","name":"A"}} +Filter 1087 {"update-limit":{"addr":"src","measure":"flow","name":"A"}} (filter-limit) inet/filter/FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set @@ -9564,7 +15743,7 @@ Filter 652 {"update-limit":{"addr":"src","measure":"flow inet/filter/OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 653 {"update-limit":{"addr":"dest","measure":"flow","name":"A"}} +Filter 1088 {"update-limit":{"addr":"dest","measure":"flow","name":"A"}} (filter-limit) inet/filter/FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set @@ -9573,7 +15752,7 @@ Filter 653 {"update-limit":{"addr":"dest","measure":"flo inet/filter/OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 654 {} +Filter 1089 {} (log) inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT @@ -9582,20 +15761,20 @@ Filter 654 {} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 655 {"action":"drop"} +Filter 1090 {"action":"drop"} (log) - inet/filter/FORWARD -j logdrop-199 - inet6/filter/FORWARD -j logdrop-199 - inet/filter/INPUT -j logdrop-199 - inet6/filter/INPUT -j logdrop-199 - inet/filter/OUTPUT -j logdrop-199 - inet6/filter/OUTPUT -j logdrop-199 - inet/filter/logdrop-199 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-199 -m limit --limit 1/second -j LOG - inet/filter/logdrop-199 -j DROP - inet6/filter/logdrop-199 -j DROP - -Filter 656 {"action":"pass"} + inet/filter/FORWARD -j logdrop-343 + inet6/filter/FORWARD -j logdrop-343 + inet/filter/INPUT -j logdrop-343 + inet6/filter/INPUT -j logdrop-343 + inet/filter/OUTPUT -j logdrop-343 + inet6/filter/OUTPUT -j logdrop-343 + inet/filter/logdrop-343 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-343 -m limit --limit 1/second -j LOG + inet/filter/logdrop-343 -j DROP + inet6/filter/logdrop-343 -j DROP + +Filter 1091 {"action":"pass"} (log) inet/filter/FORWARD inet6/filter/FORWARD @@ -9604,7 +15783,7 @@ Filter 656 {"action":"pass"} inet/filter/OUTPUT inet6/filter/OUTPUT -Filter 657 {"log":false} +Filter 1092 {"log":false} (log) inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT @@ -9613,7 +15792,7 @@ Filter 657 {"log":false} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 658 {"action":"drop","log":false} +Filter 1093 {"action":"drop","log":false} (log) inet/filter/FORWARD -j DROP inet6/filter/FORWARD -j DROP @@ -9622,7 +15801,7 @@ Filter 658 {"action":"drop","log":false} inet/filter/OUTPUT -j DROP inet6/filter/OUTPUT -j DROP -Filter 659 {"action":"pass","log":false} +Filter 1094 {"action":"pass","log":false} (log) inet/filter/FORWARD inet6/filter/FORWARD @@ -9631,7 +15810,7 @@ Filter 659 {"action":"pass","log":false} inet/filter/OUTPUT inet6/filter/OUTPUT -Filter 660 {"log":true} +Filter 1095 {"log":true} (log) inet/filter/FORWARD -j logaccept-14 inet6/filter/FORWARD -j logaccept-14 @@ -9644,20 +15823,20 @@ Filter 660 {"log":true} inet/filter/logaccept-14 -j ACCEPT inet6/filter/logaccept-14 -j ACCEPT -Filter 661 {"action":"drop","log":true} +Filter 1096 {"action":"drop","log":true} (log) - inet/filter/FORWARD -j logdrop-200 - inet6/filter/FORWARD -j logdrop-200 - inet/filter/INPUT -j logdrop-200 - inet6/filter/INPUT -j logdrop-200 - inet/filter/OUTPUT -j logdrop-200 - inet6/filter/OUTPUT -j logdrop-200 - inet/filter/logdrop-200 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-200 -m limit --limit 1/second -j LOG - inet/filter/logdrop-200 -j DROP - inet6/filter/logdrop-200 -j DROP - -Filter 662 {"action":"pass","log":true} + inet/filter/FORWARD -j logdrop-344 + inet6/filter/FORWARD -j logdrop-344 + inet/filter/INPUT -j logdrop-344 + inet6/filter/INPUT -j logdrop-344 + inet/filter/OUTPUT -j logdrop-344 + inet6/filter/OUTPUT -j logdrop-344 + inet/filter/logdrop-344 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-344 -m limit --limit 1/second -j LOG + inet/filter/logdrop-344 -j DROP + inet6/filter/logdrop-344 -j DROP + +Filter 1097 {"action":"pass","log":true} (log) inet/filter/FORWARD -j logpass-0 inet6/filter/FORWARD -j logpass-0 @@ -9668,7 +15847,7 @@ Filter 662 {"action":"pass","log":true} inet/filter/logpass-0 -m limit --limit 1/second -j LOG inet6/filter/logpass-0 -m limit --limit 1/second -j LOG -Filter 663 {"log":"none"} +Filter 1098 {"log":"none"} (log) inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT @@ -9677,7 +15856,7 @@ Filter 663 {"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 664 {"action":"drop","log":"none"} +Filter 1099 {"action":"drop","log":"none"} (log) inet/filter/FORWARD -j DROP inet6/filter/FORWARD -j DROP @@ -9686,7 +15865,7 @@ Filter 664 {"action":"drop","log":"none"} inet/filter/OUTPUT -j DROP inet6/filter/OUTPUT -j DROP -Filter 665 {"action":"pass","log":"none"} +Filter 1100 {"action":"pass","log":"none"} (log) inet/filter/FORWARD inet6/filter/FORWARD @@ -9695,7 +15874,7 @@ Filter 665 {"action":"pass","log":"none"} inet/filter/OUTPUT inet6/filter/OUTPUT -Filter 666 {"in":"_fw","no-track":true,"service":"http"} +Filter 1101 {"in":"_fw","no-track":true,"service":"http"} (no-track) inet/filter/OUTPUT -p tcp --dport 80 -j ACCEPT inet6/filter/OUTPUT -p tcp --dport 80 -j ACCEPT @@ -9706,7 +15885,7 @@ Filter 666 {"in":"_fw","no-track":true,"service":"http"} inet/filter/INPUT -p tcp --sport 80 -j ACCEPT inet6/filter/INPUT -p tcp --sport 80 -j ACCEPT -Filter 667 {"dest":"172.17.0.0\/16","no-track":true,"service":"radius","src":"172.16.0.0\/16"} +Filter 1102 {"dest":"172.17.0.0\/16","no-track":true,"service":"radius","src":"172.16.0.0\/16"} (no-track) inet/filter/FORWARD -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT inet/filter/INPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT @@ -9729,7 +15908,7 @@ Filter 667 {"dest":"172.17.0.0\/16","no-track":true,"ser inet/filter/OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT inet/filter/OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT -Filter 668 {"dest":"172.18.0.0\/16","no-track":true,"service":"ssh"} +Filter 1103 {"dest":"172.18.0.0\/16","no-track":true,"service":"ssh"} (no-track) inet/filter/FORWARD -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT inet/filter/INPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT @@ -9742,7 +15921,7 @@ Filter 668 {"dest":"172.18.0.0\/16","no-track":true,"ser inet/filter/INPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT inet/filter/OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT -Filter 669 {"no-track":true,"out":"_fw","service":"ipsec"} +Filter 1104 {"no-track":true,"out":"_fw","service":"ipsec"} (no-track) inet/filter/INPUT -p esp -j ACCEPT inet6/filter/INPUT -p esp -j ACCEPT @@ -9761,7 +15940,7 @@ Filter 669 {"no-track":true,"out":"_fw","service":"ipsec inet/filter/OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT inet6/filter/OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT -Filter 670 {"in":["_fw","A"]} +Filter 1105 {"in":["_fw","A"]} (zone) inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT @@ -9770,12 +15949,12 @@ Filter 670 {"in":["_fw","A"]} inet/filter/INPUT -i eth0 -j ACCEPT inet6/filter/INPUT -i eth0 -j ACCEPT -Filter 671 {"in":"B","out":"C"} +Filter 1106 {"in":"B","out":"C"} (zone) inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT -Filter 672 {"out":["_fw","B"]} +Filter 1107 {"out":["_fw","B"]} (zone) inet/filter/INPUT -j ACCEPT inet6/filter/INPUT -j ACCEPT @@ -9784,7 +15963,7 @@ Filter 672 {"out":["_fw","B"]} inet6/filter/FORWARD -o eth1 -d fc00::/7 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j ACCEPT -Filter 673 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} +Filter 1108 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} (zone) inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT @@ -9860,6 +16039,16 @@ Ipset awall-masquerade {"family":"inet","type":"hash:net"} (masquerade) +Limit B true +(limit) + +Limit C 7 +(limit) + +Limit D {"inet":22,"inet6":58} +(limit) + + Log _default {"limit":1} (defaults) @@ -10123,13 +16312,78 @@ hash:net family inet :limit-1 - [0:0] :limit-10 - [0:0] :limit-100 - [0:0] -:limit-101 - [0:0] +:limit-1000 - [0:0] +:limit-1001 - [0:0] +:limit-1002 - [0:0] +:limit-1003 - [0:0] +:limit-1004 - [0:0] +:limit-1006 - [0:0] +:limit-1007 - [0:0] +:limit-1008 - [0:0] +:limit-1010 - [0:0] +:limit-1011 - [0:0] +:limit-1012 - [0:0] +:limit-1013 - [0:0] +:limit-1014 - [0:0] +:limit-1015 - [0:0] +:limit-1016 - [0:0] +:limit-1018 - [0:0] +:limit-1019 - [0:0] :limit-102 - [0:0] +:limit-1020 - [0:0] +:limit-1022 - [0:0] +:limit-1023 - [0:0] +:limit-1024 - [0:0] +:limit-1025 - [0:0] +:limit-1026 - [0:0] +:limit-1027 - [0:0] +:limit-1028 - [0:0] :limit-103 - [0:0] +:limit-1030 - [0:0] +:limit-1031 - [0:0] +:limit-1032 - [0:0] +:limit-1034 - [0:0] +:limit-1035 - [0:0] +:limit-1036 - [0:0] +:limit-1037 - [0:0] +:limit-1038 - [0:0] +:limit-1039 - [0:0] :limit-104 - [0:0] +:limit-1040 - [0:0] +:limit-1042 - [0:0] +:limit-1043 - [0:0] +:limit-1044 - [0:0] +:limit-1046 - [0:0] +:limit-1047 - [0:0] +:limit-1048 - [0:0] +:limit-1049 - [0:0] :limit-105 - [0:0] +:limit-1050 - [0:0] +:limit-1051 - [0:0] +:limit-1052 - [0:0] +:limit-1053 - [0:0] +:limit-1054 - [0:0] +:limit-1055 - [0:0] +:limit-1056 - [0:0] +:limit-1057 - [0:0] +:limit-1058 - [0:0] +:limit-1059 - [0:0] :limit-106 - [0:0] +:limit-1060 - [0:0] +:limit-1061 - [0:0] +:limit-1062 - [0:0] +:limit-1063 - [0:0] +:limit-1064 - [0:0] +:limit-1065 - [0:0] +:limit-1066 - [0:0] +:limit-1067 - [0:0] +:limit-1068 - [0:0] +:limit-1069 - [0:0] :limit-107 - [0:0] +:limit-1070 - [0:0] +:limit-1071 - [0:0] +:limit-1072 - [0:0] +:limit-1073 - [0:0] :limit-108 - [0:0] :limit-11 - [0:0] :limit-110 - [0:0] @@ -10143,16 +16397,16 @@ hash:net family inet :limit-119 - [0:0] :limit-12 - [0:0] :limit-120 - [0:0] +:limit-121 - [0:0] :limit-122 - [0:0] :limit-123 - [0:0] :limit-124 - [0:0] +:limit-125 - [0:0] :limit-126 - [0:0] -:limit-127 - [0:0] :limit-128 - [0:0] :limit-129 - [0:0] :limit-13 - [0:0] :limit-130 - [0:0] -:limit-131 - [0:0] :limit-132 - [0:0] :limit-133 - [0:0] :limit-134 - [0:0] @@ -10183,16 +16437,16 @@ hash:net family inet :limit-160 - [0:0] :limit-161 - [0:0] :limit-162 - [0:0] -:limit-163 - [0:0] :limit-164 - [0:0] :limit-165 - [0:0] :limit-166 - [0:0] -:limit-167 - [0:0] :limit-168 - [0:0] +:limit-169 - [0:0] :limit-17 - [0:0] :limit-170 - [0:0] :limit-171 - [0:0] :limit-172 - [0:0] +:limit-173 - [0:0] :limit-174 - [0:0] :limit-175 - [0:0] :limit-176 - [0:0] @@ -10211,11 +16465,9 @@ hash:net family inet :limit-190 - [0:0] :limit-191 - [0:0] :limit-192 - [0:0] -:limit-193 - [0:0] :limit-194 - [0:0] :limit-195 - [0:0] :limit-196 - [0:0] -:limit-197 - [0:0] :limit-198 - [0:0] :limit-199 - [0:0] :limit-2 - [0:0] @@ -10225,11 +16477,9 @@ hash:net family inet :limit-202 - [0:0] :limit-203 - [0:0] :limit-204 - [0:0] -:limit-205 - [0:0] :limit-206 - [0:0] :limit-207 - [0:0] :limit-208 - [0:0] -:limit-209 - [0:0] :limit-21 - [0:0] :limit-210 - [0:0] :limit-211 - [0:0] @@ -10238,12 +16488,10 @@ hash:net family inet :limit-214 - [0:0] :limit-215 - [0:0] :limit-216 - [0:0] -:limit-217 - [0:0] :limit-218 - [0:0] :limit-219 - [0:0] :limit-22 - [0:0] :limit-220 - [0:0] -:limit-221 - [0:0] :limit-222 - [0:0] :limit-223 - [0:0] :limit-224 - [0:0] @@ -10257,11 +16505,9 @@ hash:net family inet :limit-232 - [0:0] :limit-233 - [0:0] :limit-234 - [0:0] -:limit-235 - [0:0] :limit-236 - [0:0] :limit-237 - [0:0] :limit-238 - [0:0] -:limit-239 - [0:0] :limit-24 - [0:0] :limit-240 - [0:0] :limit-241 - [0:0] @@ -10270,12 +16516,10 @@ hash:net family inet :limit-244 - [0:0] :limit-245 - [0:0] :limit-246 - [0:0] -:limit-247 - [0:0] :limit-248 - [0:0] :limit-249 - [0:0] :limit-25 - [0:0] :limit-250 - [0:0] -:limit-251 - [0:0] :limit-252 - [0:0] :limit-253 - [0:0] :limit-254 - [0:0] @@ -10283,12 +16527,10 @@ hash:net family inet :limit-256 - [0:0] :limit-257 - [0:0] :limit-258 - [0:0] -:limit-259 - [0:0] :limit-26 - [0:0] :limit-260 - [0:0] :limit-261 - [0:0] :limit-262 - [0:0] -:limit-263 - [0:0] :limit-264 - [0:0] :limit-265 - [0:0] :limit-266 - [0:0] @@ -10297,11 +16539,9 @@ hash:net family inet :limit-269 - [0:0] :limit-27 - [0:0] :limit-270 - [0:0] -:limit-271 - [0:0] :limit-272 - [0:0] :limit-273 - [0:0] :limit-274 - [0:0] -:limit-275 - [0:0] :limit-276 - [0:0] :limit-277 - [0:0] :limit-278 - [0:0] @@ -10316,12 +16556,10 @@ hash:net family inet :limit-286 - [0:0] :limit-287 - [0:0] :limit-288 - [0:0] -:limit-289 - [0:0] :limit-29 - [0:0] :limit-290 - [0:0] :limit-291 - [0:0] :limit-292 - [0:0] -:limit-293 - [0:0] :limit-294 - [0:0] :limit-295 - [0:0] :limit-296 - [0:0] @@ -10331,11 +16569,9 @@ hash:net family inet :limit-3 - [0:0] :limit-30 - [0:0] :limit-300 - [0:0] -:limit-301 - [0:0] :limit-302 - [0:0] :limit-303 - [0:0] :limit-304 - [0:0] -:limit-305 - [0:0] :limit-306 - [0:0] :limit-307 - [0:0] :limit-308 - [0:0] @@ -10343,11 +16579,9 @@ hash:net family inet :limit-310 - [0:0] :limit-311 - [0:0] :limit-312 - [0:0] -:limit-313 - [0:0] :limit-314 - [0:0] :limit-315 - [0:0] :limit-316 - [0:0] -:limit-317 - [0:0] :limit-318 - [0:0] :limit-319 - [0:0] :limit-32 - [0:0] @@ -10356,11 +16590,9 @@ hash:net family inet :limit-322 - [0:0] :limit-323 - [0:0] :limit-324 - [0:0] -:limit-325 - [0:0] :limit-326 - [0:0] :limit-327 - [0:0] :limit-328 - [0:0] -:limit-329 - [0:0] :limit-33 - [0:0] :limit-330 - [0:0] :limit-331 - [0:0] @@ -10471,7 +16703,6 @@ hash:net family inet :limit-427 - [0:0] :limit-428 - [0:0] :limit-429 - [0:0] -:limit-43 - [0:0] :limit-430 - [0:0] :limit-431 - [0:0] :limit-432 - [0:0] @@ -10490,10 +16721,12 @@ hash:net family inet :limit-444 - [0:0] :limit-445 - [0:0] :limit-446 - [0:0] +:limit-447 - [0:0] :limit-448 - [0:0] :limit-449 - [0:0] :limit-45 - [0:0] :limit-450 - [0:0] +:limit-451 - [0:0] :limit-452 - [0:0] :limit-453 - [0:0] :limit-454 - [0:0] @@ -10501,17 +16734,18 @@ hash:net family inet :limit-456 - [0:0] :limit-457 - [0:0] :limit-458 - [0:0] +:limit-459 - [0:0] :limit-46 - [0:0] :limit-460 - [0:0] :limit-461 - [0:0] :limit-462 - [0:0] +:limit-463 - [0:0] :limit-464 - [0:0] :limit-465 - [0:0] :limit-466 - [0:0] :limit-467 - [0:0] :limit-468 - [0:0] :limit-469 - [0:0] -:limit-47 - [0:0] :limit-470 - [0:0] :limit-471 - [0:0] :limit-472 - [0:0] @@ -10519,10 +16753,12 @@ hash:net family inet :limit-474 - [0:0] :limit-475 - [0:0] :limit-476 - [0:0] +:limit-477 - [0:0] :limit-478 - [0:0] :limit-479 - [0:0] :limit-48 - [0:0] :limit-480 - [0:0] +:limit-481 - [0:0] :limit-482 - [0:0] :limit-483 - [0:0] :limit-484 - [0:0] @@ -10530,9 +16766,12 @@ hash:net family inet :limit-486 - [0:0] :limit-487 - [0:0] :limit-488 - [0:0] +:limit-489 - [0:0] +:limit-49 - [0:0] :limit-490 - [0:0] :limit-491 - [0:0] :limit-492 - [0:0] +:limit-493 - [0:0] :limit-494 - [0:0] :limit-495 - [0:0] :limit-496 - [0:0] @@ -10548,10 +16787,12 @@ hash:net family inet :limit-504 - [0:0] :limit-505 - [0:0] :limit-506 - [0:0] +:limit-507 - [0:0] :limit-508 - [0:0] :limit-509 - [0:0] :limit-51 - [0:0] :limit-510 - [0:0] +:limit-511 - [0:0] :limit-512 - [0:0] :limit-513 - [0:0] :limit-514 - [0:0] @@ -10559,16 +16800,19 @@ hash:net family inet :limit-516 - [0:0] :limit-517 - [0:0] :limit-518 - [0:0] +:limit-519 - [0:0] :limit-52 - [0:0] :limit-520 - [0:0] :limit-521 - [0:0] :limit-522 - [0:0] +:limit-523 - [0:0] :limit-524 - [0:0] :limit-525 - [0:0] :limit-526 - [0:0] :limit-527 - [0:0] :limit-528 - [0:0] :limit-529 - [0:0] +:limit-53 - [0:0] :limit-530 - [0:0] :limit-531 - [0:0] :limit-532 - [0:0] @@ -10576,10 +16820,12 @@ hash:net family inet :limit-534 - [0:0] :limit-535 - [0:0] :limit-536 - [0:0] +:limit-537 - [0:0] :limit-538 - [0:0] :limit-539 - [0:0] :limit-54 - [0:0] :limit-540 - [0:0] +:limit-541 - [0:0] :limit-542 - [0:0] :limit-543 - [0:0] :limit-544 - [0:0] @@ -10587,10 +16833,11 @@ hash:net family inet :limit-546 - [0:0] :limit-547 - [0:0] :limit-548 - [0:0] -:limit-55 - [0:0] +:limit-549 - [0:0] :limit-550 - [0:0] :limit-551 - [0:0] :limit-552 - [0:0] +:limit-553 - [0:0] :limit-554 - [0:0] :limit-555 - [0:0] :limit-556 - [0:0] @@ -10605,10 +16852,12 @@ hash:net family inet :limit-564 - [0:0] :limit-565 - [0:0] :limit-566 - [0:0] +:limit-567 - [0:0] :limit-568 - [0:0] :limit-569 - [0:0] :limit-57 - [0:0] :limit-570 - [0:0] +:limit-571 - [0:0] :limit-572 - [0:0] :limit-573 - [0:0] :limit-574 - [0:0] @@ -10616,17 +16865,18 @@ hash:net family inet :limit-576 - [0:0] :limit-577 - [0:0] :limit-578 - [0:0] +:limit-579 - [0:0] :limit-58 - [0:0] :limit-580 - [0:0] :limit-581 - [0:0] :limit-582 - [0:0] +:limit-583 - [0:0] :limit-584 - [0:0] :limit-585 - [0:0] :limit-586 - [0:0] :limit-587 - [0:0] :limit-588 - [0:0] :limit-589 - [0:0] -:limit-59 - [0:0] :limit-590 - [0:0] :limit-591 - [0:0] :limit-592 - [0:0] @@ -10634,11 +16884,13 @@ hash:net family inet :limit-594 - [0:0] :limit-595 - [0:0] :limit-596 - [0:0] +:limit-597 - [0:0] :limit-598 - [0:0] :limit-599 - [0:0] :limit-6 - [0:0] :limit-60 - [0:0] :limit-600 - [0:0] +:limit-601 - [0:0] :limit-602 - [0:0] :limit-603 - [0:0] :limit-604 - [0:0] @@ -10646,9 +16898,12 @@ hash:net family inet :limit-606 - [0:0] :limit-607 - [0:0] :limit-608 - [0:0] +:limit-609 - [0:0] +:limit-61 - [0:0] :limit-610 - [0:0] :limit-611 - [0:0] :limit-612 - [0:0] +:limit-613 - [0:0] :limit-614 - [0:0] :limit-615 - [0:0] :limit-616 - [0:0] @@ -10680,39 +16935,357 @@ hash:net family inet :limit-64 - [0:0] :limit-640 - [0:0] :limit-641 - [0:0] +:limit-642 - [0:0] +:limit-643 - [0:0] +:limit-644 - [0:0] +:limit-645 - [0:0] +:limit-646 - [0:0] +:limit-647 - [0:0] +:limit-648 - [0:0] +:limit-649 - [0:0] +:limit-65 - [0:0] +:limit-650 - [0:0] +:limit-651 - [0:0] +:limit-652 - [0:0] +:limit-653 - [0:0] +:limit-654 - [0:0] +:limit-655 - [0:0] +:limit-656 - [0:0] +:limit-657 - [0:0] +:limit-658 - [0:0] +:limit-659 - [0:0] :limit-66 - [0:0] +:limit-660 - [0:0] +:limit-661 - [0:0] +:limit-662 - [0:0] +:limit-663 - [0:0] +:limit-664 - [0:0] +:limit-665 - [0:0] +:limit-666 - [0:0] +:limit-667 - [0:0] +:limit-668 - [0:0] +:limit-669 - [0:0] :limit-67 - [0:0] +:limit-670 - [0:0] +:limit-671 - [0:0] +:limit-672 - [0:0] +:limit-673 - [0:0] +:limit-674 - [0:0] +:limit-675 - [0:0] +:limit-676 - [0:0] +:limit-677 - [0:0] +:limit-678 - [0:0] +:limit-679 - [0:0] :limit-68 - [0:0] +:limit-680 - [0:0] +:limit-681 - [0:0] +:limit-682 - [0:0] +:limit-683 - [0:0] +:limit-684 - [0:0] +:limit-685 - [0:0] +:limit-686 - [0:0] +:limit-687 - [0:0] +:limit-688 - [0:0] +:limit-689 - [0:0] :limit-69 - [0:0] +:limit-690 - [0:0] +:limit-691 - [0:0] +:limit-692 - [0:0] +:limit-693 - [0:0] +:limit-694 - [0:0] +:limit-695 - [0:0] +:limit-696 - [0:0] +:limit-697 - [0:0] +:limit-698 - [0:0] +:limit-699 - [0:0] :limit-7 - [0:0] :limit-70 - [0:0] +:limit-700 - [0:0] +:limit-701 - [0:0] +:limit-702 - [0:0] +:limit-703 - [0:0] +:limit-704 - [0:0] +:limit-705 - [0:0] +:limit-706 - [0:0] +:limit-707 - [0:0] +:limit-708 - [0:0] +:limit-709 - [0:0] :limit-71 - [0:0] +:limit-710 - [0:0] +:limit-711 - [0:0] +:limit-712 - [0:0] +:limit-713 - [0:0] +:limit-714 - [0:0] +:limit-715 - [0:0] +:limit-716 - [0:0] +:limit-717 - [0:0] +:limit-718 - [0:0] +:limit-719 - [0:0] :limit-72 - [0:0] -:limit-73 - [0:0] +:limit-720 - [0:0] +:limit-721 - [0:0] +:limit-722 - [0:0] +:limit-723 - [0:0] +:limit-724 - [0:0] +:limit-725 - [0:0] +:limit-726 - [0:0] +:limit-727 - [0:0] +:limit-728 - [0:0] +:limit-729 - [0:0] +:limit-730 - [0:0] +:limit-731 - [0:0] +:limit-732 - [0:0] +:limit-733 - [0:0] +:limit-734 - [0:0] +:limit-736 - [0:0] +:limit-737 - [0:0] +:limit-738 - [0:0] :limit-74 - [0:0] +:limit-740 - [0:0] +:limit-741 - [0:0] +:limit-742 - [0:0] +:limit-743 - [0:0] +:limit-744 - [0:0] +:limit-745 - [0:0] +:limit-746 - [0:0] +:limit-748 - [0:0] +:limit-749 - [0:0] :limit-75 - [0:0] +:limit-750 - [0:0] +:limit-752 - [0:0] +:limit-753 - [0:0] +:limit-754 - [0:0] +:limit-755 - [0:0] +:limit-756 - [0:0] +:limit-757 - [0:0] +:limit-758 - [0:0] :limit-76 - [0:0] -:limit-77 - [0:0] +:limit-760 - [0:0] +:limit-761 - [0:0] +:limit-762 - [0:0] +:limit-764 - [0:0] +:limit-765 - [0:0] +:limit-766 - [0:0] +:limit-767 - [0:0] +:limit-768 - [0:0] +:limit-769 - [0:0] +:limit-770 - [0:0] +:limit-772 - [0:0] +:limit-773 - [0:0] +:limit-774 - [0:0] +:limit-776 - [0:0] +:limit-777 - [0:0] +:limit-778 - [0:0] +:limit-779 - [0:0] :limit-78 - [0:0] +:limit-780 - [0:0] +:limit-781 - [0:0] +:limit-782 - [0:0] +:limit-783 - [0:0] +:limit-784 - [0:0] +:limit-785 - [0:0] +:limit-786 - [0:0] +:limit-787 - [0:0] +:limit-788 - [0:0] +:limit-79 - [0:0] +:limit-790 - [0:0] +:limit-791 - [0:0] +:limit-792 - [0:0] +:limit-794 - [0:0] +:limit-795 - [0:0] +:limit-796 - [0:0] +:limit-797 - [0:0] +:limit-798 - [0:0] +:limit-799 - [0:0] :limit-8 - [0:0] :limit-80 - [0:0] +:limit-800 - [0:0] +:limit-802 - [0:0] +:limit-803 - [0:0] +:limit-804 - [0:0] +:limit-806 - [0:0] +:limit-807 - [0:0] +:limit-808 - [0:0] +:limit-809 - [0:0] :limit-81 - [0:0] +:limit-810 - [0:0] +:limit-811 - [0:0] +:limit-812 - [0:0] +:limit-814 - [0:0] +:limit-815 - [0:0] +:limit-816 - [0:0] +:limit-818 - [0:0] +:limit-819 - [0:0] :limit-82 - [0:0] +:limit-820 - [0:0] +:limit-821 - [0:0] +:limit-822 - [0:0] +:limit-823 - [0:0] +:limit-824 - [0:0] +:limit-826 - [0:0] +:limit-827 - [0:0] +:limit-828 - [0:0] +:limit-83 - [0:0] +:limit-830 - [0:0] +:limit-831 - [0:0] +:limit-832 - [0:0] +:limit-833 - [0:0] +:limit-834 - [0:0] +:limit-835 - [0:0] +:limit-836 - [0:0] +:limit-837 - [0:0] +:limit-838 - [0:0] +:limit-839 - [0:0] :limit-84 - [0:0] -:limit-85 - [0:0] +:limit-840 - [0:0] +:limit-841 - [0:0] +:limit-842 - [0:0] +:limit-844 - [0:0] +:limit-845 - [0:0] +:limit-846 - [0:0] +:limit-848 - [0:0] +:limit-849 - [0:0] +:limit-850 - [0:0] +:limit-851 - [0:0] +:limit-852 - [0:0] +:limit-853 - [0:0] +:limit-854 - [0:0] +:limit-856 - [0:0] +:limit-857 - [0:0] +:limit-858 - [0:0] :limit-86 - [0:0] +:limit-860 - [0:0] +:limit-861 - [0:0] +:limit-862 - [0:0] +:limit-863 - [0:0] +:limit-864 - [0:0] +:limit-865 - [0:0] +:limit-866 - [0:0] +:limit-868 - [0:0] +:limit-869 - [0:0] :limit-87 - [0:0] +:limit-870 - [0:0] +:limit-872 - [0:0] +:limit-873 - [0:0] +:limit-874 - [0:0] +:limit-875 - [0:0] +:limit-876 - [0:0] +:limit-877 - [0:0] +:limit-878 - [0:0] :limit-88 - [0:0] -:limit-89 - [0:0] +:limit-880 - [0:0] +:limit-881 - [0:0] +:limit-882 - [0:0] +:limit-884 - [0:0] +:limit-885 - [0:0] +:limit-886 - [0:0] +:limit-887 - [0:0] +:limit-888 - [0:0] +:limit-889 - [0:0] +:limit-890 - [0:0] +:limit-891 - [0:0] +:limit-892 - [0:0] +:limit-893 - [0:0] +:limit-894 - [0:0] +:limit-895 - [0:0] +:limit-896 - [0:0] +:limit-898 - [0:0] +:limit-899 - [0:0] :limit-9 - [0:0] :limit-90 - [0:0] +:limit-900 - [0:0] +:limit-902 - [0:0] +:limit-903 - [0:0] +:limit-904 - [0:0] +:limit-905 - [0:0] +:limit-906 - [0:0] +:limit-907 - [0:0] +:limit-908 - [0:0] +:limit-91 - [0:0] +:limit-910 - [0:0] +:limit-911 - [0:0] +:limit-912 - [0:0] +:limit-914 - [0:0] +:limit-915 - [0:0] +:limit-916 - [0:0] +:limit-917 - [0:0] +:limit-918 - [0:0] +:limit-919 - [0:0] :limit-92 - [0:0] +:limit-920 - [0:0] +:limit-922 - [0:0] +:limit-923 - [0:0] +:limit-924 - [0:0] +:limit-926 - [0:0] +:limit-927 - [0:0] +:limit-928 - [0:0] +:limit-929 - [0:0] :limit-93 - [0:0] +:limit-930 - [0:0] +:limit-931 - [0:0] +:limit-932 - [0:0] +:limit-934 - [0:0] +:limit-935 - [0:0] +:limit-936 - [0:0] +:limit-938 - [0:0] +:limit-939 - [0:0] :limit-94 - [0:0] +:limit-940 - [0:0] +:limit-941 - [0:0] +:limit-942 - [0:0] +:limit-943 - [0:0] +:limit-944 - [0:0] +:limit-945 - [0:0] +:limit-946 - [0:0] +:limit-947 - [0:0] +:limit-948 - [0:0] +:limit-949 - [0:0] +:limit-95 - [0:0] +:limit-950 - [0:0] +:limit-952 - [0:0] +:limit-953 - [0:0] +:limit-954 - [0:0] +:limit-956 - [0:0] +:limit-957 - [0:0] +:limit-958 - [0:0] +:limit-959 - [0:0] :limit-96 - [0:0] -:limit-97 - [0:0] +:limit-960 - [0:0] +:limit-961 - [0:0] +:limit-962 - [0:0] +:limit-964 - [0:0] +:limit-965 - [0:0] +:limit-966 - [0:0] +:limit-968 - [0:0] +:limit-969 - [0:0] +:limit-970 - [0:0] +:limit-971 - [0:0] +:limit-972 - [0:0] +:limit-973 - [0:0] +:limit-974 - [0:0] +:limit-976 - [0:0] +:limit-977 - [0:0] +:limit-978 - [0:0] :limit-98 - [0:0] +:limit-980 - [0:0] +:limit-981 - [0:0] +:limit-982 - [0:0] +:limit-983 - [0:0] +:limit-984 - [0:0] +:limit-985 - [0:0] +:limit-986 - [0:0] +:limit-988 - [0:0] +:limit-989 - [0:0] :limit-99 - [0:0] +:limit-990 - [0:0] +:limit-992 - [0:0] +:limit-993 - [0:0] +:limit-994 - [0:0] +:limit-995 - [0:0] +:limit-996 - [0:0] +:limit-997 - [0:0] +:limit-998 - [0:0] +:limit-999 - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] :logaccept-10 - [0:0] @@ -10760,9 +17333,33 @@ hash:net family inet :logaccept-final-35 - [0:0] :logaccept-final-36 - [0:0] :logaccept-final-37 - [0:0] +:logaccept-final-38 - [0:0] +:logaccept-final-39 - [0:0] :logaccept-final-4 - [0:0] +:logaccept-final-40 - [0:0] +:logaccept-final-41 - [0:0] +:logaccept-final-42 - [0:0] +:logaccept-final-43 - [0:0] +:logaccept-final-44 - [0:0] +:logaccept-final-45 - [0:0] +:logaccept-final-46 - [0:0] +:logaccept-final-47 - [0:0] +:logaccept-final-48 - [0:0] +:logaccept-final-49 - [0:0] :logaccept-final-5 - [0:0] +:logaccept-final-50 - [0:0] +:logaccept-final-51 - [0:0] +:logaccept-final-52 - [0:0] +:logaccept-final-53 - [0:0] +:logaccept-final-54 - [0:0] +:logaccept-final-55 - [0:0] +:logaccept-final-56 - [0:0] +:logaccept-final-57 - [0:0] +:logaccept-final-58 - [0:0] +:logaccept-final-59 - [0:0] :logaccept-final-6 - [0:0] +:logaccept-final-60 - [0:0] +:logaccept-final-61 - [0:0] :logaccept-final-7 - [0:0] :logaccept-final-8 - [0:0] :logaccept-final-9 - [0:0] @@ -10771,7 +17368,6 @@ hash:net family inet :logdrop-10 - [0:0] :logdrop-100 - [0:0] :logdrop-101 - [0:0] -:logdrop-102 - [0:0] :logdrop-103 - [0:0] :logdrop-104 - [0:0] :logdrop-105 - [0:0] @@ -10780,11 +17376,9 @@ hash:net family inet :logdrop-108 - [0:0] :logdrop-109 - [0:0] :logdrop-11 - [0:0] -:logdrop-110 - [0:0] :logdrop-111 - [0:0] :logdrop-112 - [0:0] :logdrop-113 - [0:0] -:logdrop-114 - [0:0] :logdrop-115 - [0:0] :logdrop-116 - [0:0] :logdrop-117 - [0:0] @@ -10826,9 +17420,11 @@ hash:net family inet :logdrop-15 - [0:0] :logdrop-150 - [0:0] :logdrop-151 - [0:0] +:logdrop-152 - [0:0] :logdrop-153 - [0:0] :logdrop-154 - [0:0] :logdrop-155 - [0:0] +:logdrop-156 - [0:0] :logdrop-157 - [0:0] :logdrop-158 - [0:0] :logdrop-159 - [0:0] @@ -10837,9 +17433,11 @@ hash:net family inet :logdrop-161 - [0:0] :logdrop-162 - [0:0] :logdrop-163 - [0:0] +:logdrop-164 - [0:0] :logdrop-165 - [0:0] :logdrop-166 - [0:0] :logdrop-167 - [0:0] +:logdrop-168 - [0:0] :logdrop-169 - [0:0] :logdrop-17 - [0:0] :logdrop-170 - [0:0] @@ -10855,9 +17453,11 @@ hash:net family inet :logdrop-18 - [0:0] :logdrop-180 - [0:0] :logdrop-181 - [0:0] +:logdrop-182 - [0:0] :logdrop-183 - [0:0] :logdrop-184 - [0:0] :logdrop-185 - [0:0] +:logdrop-186 - [0:0] :logdrop-187 - [0:0] :logdrop-188 - [0:0] :logdrop-189 - [0:0] @@ -10866,25 +17466,155 @@ hash:net family inet :logdrop-191 - [0:0] :logdrop-192 - [0:0] :logdrop-193 - [0:0] +:logdrop-194 - [0:0] :logdrop-195 - [0:0] :logdrop-196 - [0:0] :logdrop-197 - [0:0] +:logdrop-198 - [0:0] :logdrop-199 - [0:0] :logdrop-2 - [0:0] :logdrop-200 - [0:0] +:logdrop-201 - [0:0] +:logdrop-202 - [0:0] +:logdrop-203 - [0:0] +:logdrop-204 - [0:0] +:logdrop-205 - [0:0] +:logdrop-206 - [0:0] +:logdrop-207 - [0:0] +:logdrop-208 - [0:0] +:logdrop-209 - [0:0] :logdrop-21 - [0:0] +:logdrop-210 - [0:0] +:logdrop-211 - [0:0] +:logdrop-212 - [0:0] +:logdrop-213 - [0:0] +:logdrop-214 - [0:0] +:logdrop-215 - [0:0] +:logdrop-216 - [0:0] +:logdrop-217 - [0:0] +:logdrop-218 - [0:0] +:logdrop-219 - [0:0] :logdrop-22 - [0:0] +:logdrop-220 - [0:0] +:logdrop-221 - [0:0] +:logdrop-222 - [0:0] +:logdrop-223 - [0:0] +:logdrop-224 - [0:0] +:logdrop-225 - [0:0] +:logdrop-226 - [0:0] +:logdrop-227 - [0:0] +:logdrop-228 - [0:0] +:logdrop-229 - [0:0] :logdrop-23 - [0:0] +:logdrop-230 - [0:0] +:logdrop-231 - [0:0] +:logdrop-232 - [0:0] +:logdrop-233 - [0:0] +:logdrop-234 - [0:0] +:logdrop-235 - [0:0] +:logdrop-236 - [0:0] +:logdrop-237 - [0:0] +:logdrop-238 - [0:0] +:logdrop-239 - [0:0] +:logdrop-240 - [0:0] +:logdrop-241 - [0:0] +:logdrop-242 - [0:0] +:logdrop-243 - [0:0] +:logdrop-244 - [0:0] +:logdrop-245 - [0:0] +:logdrop-246 - [0:0] +:logdrop-247 - [0:0] +:logdrop-249 - [0:0] :logdrop-25 - [0:0] +:logdrop-250 - [0:0] +:logdrop-251 - [0:0] +:logdrop-253 - [0:0] +:logdrop-254 - [0:0] +:logdrop-255 - [0:0] +:logdrop-256 - [0:0] +:logdrop-257 - [0:0] +:logdrop-258 - [0:0] +:logdrop-259 - [0:0] :logdrop-26 - [0:0] +:logdrop-261 - [0:0] +:logdrop-262 - [0:0] +:logdrop-263 - [0:0] +:logdrop-265 - [0:0] +:logdrop-266 - [0:0] +:logdrop-267 - [0:0] +:logdrop-268 - [0:0] +:logdrop-269 - [0:0] :logdrop-27 - [0:0] +:logdrop-270 - [0:0] +:logdrop-271 - [0:0] +:logdrop-273 - [0:0] +:logdrop-274 - [0:0] +:logdrop-275 - [0:0] +:logdrop-277 - [0:0] +:logdrop-278 - [0:0] +:logdrop-279 - [0:0] :logdrop-28 - [0:0] +:logdrop-280 - [0:0] +:logdrop-281 - [0:0] +:logdrop-282 - [0:0] +:logdrop-283 - [0:0] +:logdrop-285 - [0:0] +:logdrop-286 - [0:0] +:logdrop-287 - [0:0] +:logdrop-289 - [0:0] :logdrop-29 - [0:0] +:logdrop-290 - [0:0] +:logdrop-291 - [0:0] +:logdrop-292 - [0:0] +:logdrop-293 - [0:0] +:logdrop-294 - [0:0] +:logdrop-295 - [0:0] +:logdrop-296 - [0:0] +:logdrop-297 - [0:0] +:logdrop-298 - [0:0] +:logdrop-299 - [0:0] :logdrop-3 - [0:0] :logdrop-30 - [0:0] +:logdrop-300 - [0:0] +:logdrop-301 - [0:0] +:logdrop-303 - [0:0] +:logdrop-304 - [0:0] +:logdrop-305 - [0:0] +:logdrop-307 - [0:0] +:logdrop-308 - [0:0] +:logdrop-309 - [0:0] :logdrop-31 - [0:0] +:logdrop-310 - [0:0] +:logdrop-311 - [0:0] +:logdrop-312 - [0:0] +:logdrop-313 - [0:0] +:logdrop-315 - [0:0] +:logdrop-316 - [0:0] +:logdrop-317 - [0:0] +:logdrop-319 - [0:0] +:logdrop-320 - [0:0] +:logdrop-321 - [0:0] +:logdrop-322 - [0:0] +:logdrop-323 - [0:0] +:logdrop-324 - [0:0] +:logdrop-325 - [0:0] +:logdrop-327 - [0:0] +:logdrop-328 - [0:0] +:logdrop-329 - [0:0] :logdrop-33 - [0:0] +:logdrop-331 - [0:0] +:logdrop-332 - [0:0] +:logdrop-333 - [0:0] +:logdrop-334 - [0:0] +:logdrop-335 - [0:0] +:logdrop-336 - [0:0] +:logdrop-337 - [0:0] +:logdrop-339 - [0:0] :logdrop-34 - [0:0] +:logdrop-340 - [0:0] +:logdrop-341 - [0:0] +:logdrop-343 - [0:0] +:logdrop-344 - [0:0] :logdrop-35 - [0:0] :logdrop-37 - [0:0] :logdrop-38 - [0:0] @@ -10894,27 +17624,27 @@ hash:net family inet :logdrop-41 - [0:0] :logdrop-42 - [0:0] :logdrop-43 - [0:0] -:logdrop-44 - [0:0] :logdrop-45 - [0:0] :logdrop-46 - [0:0] :logdrop-47 - [0:0] -:logdrop-48 - [0:0] :logdrop-49 - [0:0] :logdrop-5 - [0:0] +:logdrop-50 - [0:0] :logdrop-51 - [0:0] :logdrop-52 - [0:0] :logdrop-53 - [0:0] +:logdrop-54 - [0:0] :logdrop-55 - [0:0] -:logdrop-56 - [0:0] :logdrop-57 - [0:0] :logdrop-58 - [0:0] :logdrop-59 - [0:0] :logdrop-6 - [0:0] -:logdrop-60 - [0:0] :logdrop-61 - [0:0] +:logdrop-62 - [0:0] :logdrop-63 - [0:0] :logdrop-64 - [0:0] :logdrop-65 - [0:0] +:logdrop-66 - [0:0] :logdrop-67 - [0:0] :logdrop-68 - [0:0] :logdrop-69 - [0:0] @@ -10923,11 +17653,9 @@ hash:net family inet :logdrop-71 - [0:0] :logdrop-72 - [0:0] :logdrop-73 - [0:0] -:logdrop-74 - [0:0] :logdrop-75 - [0:0] :logdrop-76 - [0:0] :logdrop-77 - [0:0] -:logdrop-78 - [0:0] :logdrop-79 - [0:0] :logdrop-8 - [0:0] :logdrop-80 - [0:0] @@ -10936,12 +17664,10 @@ hash:net family inet :logdrop-83 - [0:0] :logdrop-84 - [0:0] :logdrop-85 - [0:0] -:logdrop-86 - [0:0] :logdrop-87 - [0:0] :logdrop-88 - [0:0] :logdrop-89 - [0:0] :logdrop-9 - [0:0] -:logdrop-90 - [0:0] :logdrop-91 - [0:0] :logdrop-92 - [0:0] :logdrop-93 - [0:0] @@ -10949,7 +17675,6 @@ hash:net family inet :logdrop-95 - [0:0] :logdrop-96 - [0:0] :logdrop-97 - [0:0] -:logdrop-98 - [0:0] :logdrop-99 - [0:0] :logpass-0 - [0:0] :logreject-0 - [0:0] @@ -10957,6 +17682,294 @@ hash:net family inet :tarpit - [0:0] -A FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set -A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A FORWARD -j limit-715 +-A FORWARD -j limit-714 +-A FORWARD -j limit-713 +-A FORWARD -j limit-712 +-A FORWARD -j limit-711 +-A FORWARD -j limit-710 +-A FORWARD -j limit-709 +-A FORWARD -j limit-708 +-A FORWARD -j limit-707 +-A FORWARD -j limit-706 +-A FORWARD -j limit-705 +-A FORWARD -j limit-704 +-A FORWARD -j limit-703 +-A FORWARD -j limit-702 +-A FORWARD -j limit-701 +-A FORWARD -j limit-700 +-A FORWARD -j limit-699 +-A FORWARD -j limit-698 +-A FORWARD -j limit-697 +-A FORWARD -j limit-696 +-A FORWARD -j limit-695 +-A FORWARD -j limit-694 +-A FORWARD -j limit-693 +-A FORWARD -j limit-692 +-A FORWARD -j limit-691 +-A FORWARD -j limit-690 +-A FORWARD -j limit-689 +-A FORWARD -j limit-688 +-A FORWARD -j limit-687 +-A FORWARD -j limit-686 +-A FORWARD -j limit-685 +-A FORWARD -j limit-684 +-A FORWARD -j limit-683 +-A FORWARD -j limit-682 +-A FORWARD -j limit-681 +-A FORWARD -j limit-680 +-A FORWARD -j limit-679 +-A FORWARD -j limit-678 +-A FORWARD -j limit-677 +-A FORWARD -j limit-676 +-A FORWARD -j limit-675 +-A FORWARD -j limit-674 +-A FORWARD -j limit-673 +-A FORWARD -j limit-672 +-A FORWARD -j limit-671 +-A FORWARD -j limit-670 +-A FORWARD -j limit-669 +-A FORWARD -j limit-668 +-A FORWARD -j limit-667 +-A FORWARD -j limit-666 +-A FORWARD -j limit-665 +-A FORWARD -j limit-664 +-A FORWARD -j limit-663 +-A FORWARD -j limit-662 +-A FORWARD -j limit-661 +-A FORWARD -j limit-660 +-A FORWARD -j limit-659 +-A FORWARD -j limit-658 +-A FORWARD -j limit-657 +-A FORWARD -j limit-656 +-A FORWARD -j limit-655 +-A FORWARD -j limit-654 +-A FORWARD -j limit-653 +-A FORWARD -j limit-652 +-A FORWARD -j limit-651 +-A FORWARD -j limit-650 +-A FORWARD -j limit-649 +-A FORWARD -j limit-648 +-A FORWARD -j limit-647 +-A FORWARD -j limit-646 +-A FORWARD -j limit-645 +-A FORWARD -j limit-644 +-A FORWARD -j limit-643 +-A FORWARD -j limit-642 +-A FORWARD -j limit-641 +-A FORWARD -j limit-640 +-A FORWARD -j limit-639 +-A FORWARD -j limit-638 +-A FORWARD -j limit-637 +-A FORWARD -j limit-636 +-A FORWARD -j limit-635 +-A FORWARD -j limit-634 +-A FORWARD -j limit-633 +-A FORWARD -j limit-632 +-A FORWARD -j limit-631 +-A FORWARD -j limit-630 +-A FORWARD -j limit-629 +-A FORWARD -j limit-628 +-A FORWARD -j limit-627 +-A FORWARD -j limit-626 +-A FORWARD -j limit-625 +-A FORWARD -j limit-624 +-A FORWARD -j limit-623 +-A FORWARD -j limit-622 +-A FORWARD -j limit-621 +-A FORWARD -j limit-620 +-A FORWARD -j limit-619 +-A FORWARD -j limit-618 +-A FORWARD -j limit-617 +-A FORWARD -j limit-616 +-A FORWARD -j limit-615 +-A FORWARD -j limit-614 +-A FORWARD -j limit-613 +-A FORWARD -j limit-612 +-A FORWARD -j limit-611 +-A FORWARD -j limit-610 +-A FORWARD -j limit-609 +-A FORWARD -j limit-608 +-A FORWARD -j limit-607 +-A FORWARD -j limit-606 +-A FORWARD -j limit-605 +-A FORWARD -j limit-604 +-A FORWARD -j limit-603 +-A FORWARD -j limit-602 +-A FORWARD -j limit-601 +-A FORWARD -j limit-600 +-A FORWARD -j limit-599 +-A FORWARD -j limit-598 +-A FORWARD -j limit-597 +-A FORWARD -j limit-596 +-A FORWARD -j limit-595 +-A FORWARD -j limit-594 +-A FORWARD -j limit-593 +-A FORWARD -j limit-592 +-A FORWARD -j limit-591 +-A FORWARD -j limit-590 +-A FORWARD -j limit-589 +-A FORWARD -j limit-588 +-A FORWARD -j limit-587 +-A FORWARD -j limit-586 +-A FORWARD -j limit-585 +-A FORWARD -j limit-584 +-A FORWARD -j limit-583 +-A FORWARD -j limit-582 +-A FORWARD -j limit-581 +-A FORWARD -j limit-580 +-A FORWARD -j limit-579 +-A FORWARD -j limit-578 +-A FORWARD -j limit-577 +-A FORWARD -j limit-576 +-A FORWARD -j limit-575 +-A FORWARD -j limit-574 +-A FORWARD -j limit-573 +-A FORWARD -j limit-572 +-A FORWARD -j limit-571 +-A FORWARD -j limit-570 +-A FORWARD -j limit-569 +-A FORWARD -j limit-568 +-A FORWARD -j limit-567 +-A FORWARD -j limit-566 +-A FORWARD -j limit-565 +-A FORWARD -j limit-564 +-A FORWARD -j limit-563 +-A FORWARD -j limit-562 +-A FORWARD -j limit-561 +-A FORWARD -j limit-560 +-A FORWARD -j limit-559 +-A FORWARD -j limit-558 +-A FORWARD -j limit-557 +-A FORWARD -j limit-556 +-A FORWARD -j limit-555 +-A FORWARD -j limit-554 +-A FORWARD -j limit-553 +-A FORWARD -j limit-552 +-A FORWARD -j limit-551 +-A FORWARD -j limit-550 +-A FORWARD -j limit-549 +-A FORWARD -j limit-548 +-A FORWARD -j limit-547 +-A FORWARD -j limit-546 +-A FORWARD -j limit-545 +-A FORWARD -j limit-544 +-A FORWARD -j limit-543 +-A FORWARD -j limit-542 +-A FORWARD -j limit-541 +-A FORWARD -j limit-540 +-A FORWARD -j limit-539 +-A FORWARD -j limit-538 +-A FORWARD -j limit-537 +-A FORWARD -j limit-536 +-A FORWARD -j limit-535 +-A FORWARD -j limit-534 +-A FORWARD -j limit-533 +-A FORWARD -j limit-532 +-A FORWARD -j limit-531 +-A FORWARD -j limit-530 +-A FORWARD -j limit-529 +-A FORWARD -j limit-528 +-A FORWARD -j limit-527 +-A FORWARD -j limit-526 +-A FORWARD -j limit-525 +-A FORWARD -j limit-524 +-A FORWARD -j limit-523 +-A FORWARD -j limit-522 +-A FORWARD -j limit-521 +-A FORWARD -j limit-520 +-A FORWARD -j limit-519 +-A FORWARD -j limit-518 +-A FORWARD -j limit-517 +-A FORWARD -j limit-516 +-A FORWARD -j limit-515 +-A FORWARD -j limit-514 +-A FORWARD -j limit-513 +-A FORWARD -j limit-512 +-A FORWARD -j limit-511 +-A FORWARD -j limit-510 +-A FORWARD -j limit-509 +-A FORWARD -j limit-508 +-A FORWARD -j limit-507 +-A FORWARD -j limit-506 +-A FORWARD -j limit-505 +-A FORWARD -j limit-504 +-A FORWARD -j limit-503 +-A FORWARD -j limit-502 +-A FORWARD -j limit-501 +-A FORWARD -j limit-500 +-A FORWARD -j limit-499 +-A FORWARD -j limit-498 +-A FORWARD -j limit-497 +-A FORWARD -j limit-496 +-A FORWARD -j limit-495 +-A FORWARD -j limit-494 +-A FORWARD -j limit-493 +-A FORWARD -j limit-492 +-A FORWARD -j limit-491 +-A FORWARD -j limit-490 +-A FORWARD -j limit-489 +-A FORWARD -j limit-488 +-A FORWARD -j limit-487 +-A FORWARD -j limit-486 +-A FORWARD -j limit-485 +-A FORWARD -j limit-484 +-A FORWARD -j limit-483 +-A FORWARD -j limit-482 +-A FORWARD -j limit-481 +-A FORWARD -j limit-480 +-A FORWARD -j limit-479 +-A FORWARD -j limit-478 +-A FORWARD -j limit-477 +-A FORWARD -j limit-476 +-A FORWARD -j limit-475 +-A FORWARD -j limit-474 +-A FORWARD -j limit-473 +-A FORWARD -j limit-472 +-A FORWARD -j limit-471 +-A FORWARD -j limit-470 +-A FORWARD -j limit-469 +-A FORWARD -j limit-468 +-A FORWARD -j limit-467 +-A FORWARD -j limit-466 +-A FORWARD -j limit-465 +-A FORWARD -j limit-464 +-A FORWARD -j limit-463 +-A FORWARD -j limit-462 +-A FORWARD -j limit-461 +-A FORWARD -j limit-460 +-A FORWARD -j limit-459 +-A FORWARD -j limit-458 +-A FORWARD -j limit-457 +-A FORWARD -j limit-456 +-A FORWARD -j limit-455 +-A FORWARD -j limit-454 +-A FORWARD -j limit-453 +-A FORWARD -j limit-452 +-A FORWARD -j limit-451 +-A FORWARD -j limit-450 +-A FORWARD -j limit-449 +-A FORWARD -j limit-448 +-A FORWARD -j limit-447 +-A FORWARD -j limit-446 +-A FORWARD -j limit-445 +-A FORWARD -j limit-444 +-A FORWARD -j limit-443 +-A FORWARD -j limit-442 +-A FORWARD -j limit-441 +-A FORWARD -j limit-440 +-A FORWARD -j limit-439 +-A FORWARD -j limit-438 +-A FORWARD -j limit-437 +-A FORWARD -j limit-436 +-A FORWARD -j limit-435 +-A FORWARD -j limit-434 +-A FORWARD -j limit-433 +-A FORWARD -j limit-432 +-A FORWARD -j limit-431 +-A FORWARD -j limit-430 +-A FORWARD -j limit-429 +-A FORWARD -j limit-428 -A FORWARD -j limit-427 -A FORWARD -j limit-426 -A FORWARD -j limit-425 @@ -11027,150 +18040,6 @@ hash:net family inet -A FORWARD -j limit-360 -A FORWARD -j limit-359 -A FORWARD -j limit-358 --A FORWARD -j limit-357 --A FORWARD -j limit-356 --A FORWARD -j limit-355 --A FORWARD -j limit-354 --A FORWARD -j limit-353 --A FORWARD -j limit-352 --A FORWARD -j limit-351 --A FORWARD -j limit-350 --A FORWARD -j limit-349 --A FORWARD -j limit-348 --A FORWARD -j limit-347 --A FORWARD -j limit-346 --A FORWARD -j limit-345 --A FORWARD -j limit-344 --A FORWARD -j limit-343 --A FORWARD -j limit-342 --A FORWARD -j limit-341 --A FORWARD -j limit-340 --A FORWARD -j limit-339 --A FORWARD -j limit-338 --A FORWARD -j limit-337 --A FORWARD -j limit-336 --A FORWARD -j limit-335 --A FORWARD -j limit-334 --A FORWARD -j limit-333 --A FORWARD -j limit-332 --A FORWARD -j limit-331 --A FORWARD -j limit-330 --A FORWARD -j limit-329 --A FORWARD -j limit-328 --A FORWARD -j limit-327 --A FORWARD -j limit-326 --A FORWARD -j limit-325 --A FORWARD -j limit-324 --A FORWARD -j limit-323 --A FORWARD -j limit-322 --A FORWARD -j limit-321 --A FORWARD -j limit-320 --A FORWARD -j limit-319 --A FORWARD -j limit-318 --A FORWARD -j limit-317 --A FORWARD -j limit-316 --A FORWARD -j limit-315 --A FORWARD -j limit-314 --A FORWARD -j limit-313 --A FORWARD -j limit-312 --A FORWARD -j limit-311 --A FORWARD -j limit-310 --A FORWARD -j limit-309 --A FORWARD -j limit-308 --A FORWARD -j limit-307 --A FORWARD -j limit-306 --A FORWARD -j limit-305 --A FORWARD -j limit-304 --A FORWARD -j limit-303 --A FORWARD -j limit-302 --A FORWARD -j limit-301 --A FORWARD -j limit-300 --A FORWARD -j limit-299 --A FORWARD -j limit-298 --A FORWARD -j limit-297 --A FORWARD -j limit-296 --A FORWARD -j limit-295 --A FORWARD -j limit-294 --A FORWARD -j limit-293 --A FORWARD -j limit-292 --A FORWARD -j limit-291 --A FORWARD -j limit-290 --A FORWARD -j limit-289 --A FORWARD -j limit-288 --A FORWARD -j limit-287 --A FORWARD -j limit-286 --A FORWARD -j limit-285 --A FORWARD -j limit-284 --A FORWARD -j limit-283 --A FORWARD -j limit-282 --A FORWARD -j limit-281 --A FORWARD -j limit-280 --A FORWARD -j limit-279 --A FORWARD -j limit-278 --A FORWARD -j limit-277 --A FORWARD -j limit-276 --A FORWARD -j limit-275 --A FORWARD -j limit-274 --A FORWARD -j limit-273 --A FORWARD -j limit-272 --A FORWARD -j limit-271 --A FORWARD -j limit-270 --A FORWARD -j limit-269 --A FORWARD -j limit-268 --A FORWARD -j limit-267 --A FORWARD -j limit-266 --A FORWARD -j limit-265 --A FORWARD -j limit-264 --A FORWARD -j limit-263 --A FORWARD -j limit-262 --A FORWARD -j limit-261 --A FORWARD -j limit-260 --A FORWARD -j limit-259 --A FORWARD -j limit-258 --A FORWARD -j limit-257 --A FORWARD -j limit-256 --A FORWARD -j limit-255 --A FORWARD -j limit-254 --A FORWARD -j limit-253 --A FORWARD -j limit-252 --A FORWARD -j limit-251 --A FORWARD -j limit-250 --A FORWARD -j limit-249 --A FORWARD -j limit-248 --A FORWARD -j limit-247 --A FORWARD -j limit-246 --A FORWARD -j limit-245 --A FORWARD -j limit-244 --A FORWARD -j limit-243 --A FORWARD -j limit-242 --A FORWARD -j limit-241 --A FORWARD -j limit-240 --A FORWARD -j limit-239 --A FORWARD -j limit-238 --A FORWARD -j limit-237 --A FORWARD -j limit-236 --A FORWARD -j limit-235 --A FORWARD -j limit-234 --A FORWARD -j limit-233 --A FORWARD -j limit-232 --A FORWARD -j limit-231 --A FORWARD -j limit-230 --A FORWARD -j limit-229 --A FORWARD -j limit-228 --A FORWARD -j limit-227 --A FORWARD -j limit-226 --A FORWARD -j limit-225 --A FORWARD -j limit-224 --A FORWARD -j limit-223 --A FORWARD -j limit-222 --A FORWARD -j limit-221 --A FORWARD -j limit-220 --A FORWARD -j limit-219 --A FORWARD -j limit-218 --A FORWARD -j limit-217 --A FORWARD -j limit-216 --A FORWARD -j limit-215 --A FORWARD -j limit-214 -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -j ACCEPT -A FORWARD -j ACCEPT @@ -11221,29 +18090,29 @@ hash:net family inet -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-40 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-41 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-42 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-43 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-44 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-45 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-46 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-47 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-48 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-48 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-49 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-50 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-51 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-52 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-53 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-54 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-55 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-56 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-57 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-58 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-59 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-60 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-60 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-61 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-62 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-63 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-64 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-65 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-66 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-67 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-68 @@ -11251,35 +18120,35 @@ hash:net family inet -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-70 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-71 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-72 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-73 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-74 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-75 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-76 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-77 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-78 -A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-78 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-79 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-80 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-81 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-82 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-83 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-84 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-85 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-86 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-87 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-88 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-89 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-90 -A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-90 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-91 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-92 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-93 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-94 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-95 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-96 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-97 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-98 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-99 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-100 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-101 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-102 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-103 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-104 @@ -11287,11 +18156,11 @@ hash:net family inet -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-106 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-107 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-108 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-50 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-110 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-111 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-112 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-54 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-114 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-115 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-116 @@ -11299,17 +18168,17 @@ hash:net family inet -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-118 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-119 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-120 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-62 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-121 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-122 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-123 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-124 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-66 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-125 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-126 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-127 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-128 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-129 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-130 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-131 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-132 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-133 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-134 @@ -11317,11 +18186,11 @@ hash:net family inet -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-136 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-137 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-138 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-140 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-141 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-142 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-144 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-145 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-146 @@ -11329,11 +18198,11 @@ hash:net family inet -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-148 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-149 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-150 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-152 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-153 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-154 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-156 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-157 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-158 @@ -11341,17 +18210,17 @@ hash:net family inet -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-160 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-161 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-162 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-163 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-164 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-165 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-166 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-167 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-168 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-169 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-170 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-171 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-172 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-173 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-174 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-175 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-176 @@ -11359,11 +18228,11 @@ hash:net family inet -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-178 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-179 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-180 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-74 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-182 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-183 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-184 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-78 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-186 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-187 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-188 @@ -11371,11 +18240,11 @@ hash:net family inet -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-190 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-191 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-192 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-193 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-86 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-194 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-195 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-196 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-197 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-90 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-198 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-199 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-200 @@ -11383,15 +18252,159 @@ hash:net family inet -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-202 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-203 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-204 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-205 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-98 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-206 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-207 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-208 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-209 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-102 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-210 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-211 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-212 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-213 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-214 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-215 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-216 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-110 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-218 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-219 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-220 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-114 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-222 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-223 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-224 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-225 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-226 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-227 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-228 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-229 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-230 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-231 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-232 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-233 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-234 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-236 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-237 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-238 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-240 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-241 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-242 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-243 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-244 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-245 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-246 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-248 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-249 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-250 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-252 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-253 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-254 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-255 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-256 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-257 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-258 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-260 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-261 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-262 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-264 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-265 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-266 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-267 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-268 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-269 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-270 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-272 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-273 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-274 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-276 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-277 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-278 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-279 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-280 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-281 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-282 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-283 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-284 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-285 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-286 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-287 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-288 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-290 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-291 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-292 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-294 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-295 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-296 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-297 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-298 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-299 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-300 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-302 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-303 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-304 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-306 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-307 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-308 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-309 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-310 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-311 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-312 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-314 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-315 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-316 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-318 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-319 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-320 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-321 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-322 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-323 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-324 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-326 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-327 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-328 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-330 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-331 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-332 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-333 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-334 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-335 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-336 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-337 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-338 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-339 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-340 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-341 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-342 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-343 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-344 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-345 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-346 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-347 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-348 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-349 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-350 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-351 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-352 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-353 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-354 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-355 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-356 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-357 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-0 -A FORWARD -j ACCEPT @@ -11506,17 +18519,92 @@ hash:net family inet -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-37 -A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-38 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-39 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-40 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-41 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-42 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-43 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-44 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-45 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-46 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-47 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-48 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-49 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-50 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-51 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-52 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-53 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-54 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-55 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-56 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-57 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-58 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-59 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-60 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-61 +-A FORWARD -j ACCEPT -A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A FORWARD -m recent --name user:B --rsource --mask 255.255.255.255 --set +-A FORWARD -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A FORWARD -m recent --name user:D --rsource --mask 255.255.252.0 --set -A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set -A FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set -A FORWARD -j ACCEPT --A FORWARD -j logdrop-199 +-A FORWARD -j logdrop-343 -A FORWARD -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD -A FORWARD -j logaccept-14 --A FORWARD -j logdrop-200 +-A FORWARD -j logdrop-344 -A FORWARD -j logpass-0 -A FORWARD -j ACCEPT -A FORWARD -j DROP @@ -11579,6 +18667,294 @@ hash:net family inet -A FORWARD -p icmp -j icmp-routing -A INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set -A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A INPUT -j limit-715 +-A INPUT -j limit-714 +-A INPUT -j limit-713 +-A INPUT -j limit-712 +-A INPUT -j limit-711 +-A INPUT -j limit-710 +-A INPUT -j limit-709 +-A INPUT -j limit-708 +-A INPUT -j limit-707 +-A INPUT -j limit-706 +-A INPUT -j limit-705 +-A INPUT -j limit-704 +-A INPUT -j limit-703 +-A INPUT -j limit-702 +-A INPUT -j limit-701 +-A INPUT -j limit-700 +-A INPUT -j limit-699 +-A INPUT -j limit-698 +-A INPUT -j limit-697 +-A INPUT -j limit-696 +-A INPUT -j limit-695 +-A INPUT -j limit-694 +-A INPUT -j limit-693 +-A INPUT -j limit-692 +-A INPUT -j limit-691 +-A INPUT -j limit-690 +-A INPUT -j limit-689 +-A INPUT -j limit-688 +-A INPUT -j limit-687 +-A INPUT -j limit-686 +-A INPUT -j limit-685 +-A INPUT -j limit-684 +-A INPUT -j limit-683 +-A INPUT -j limit-682 +-A INPUT -j limit-681 +-A INPUT -j limit-680 +-A INPUT -j limit-679 +-A INPUT -j limit-678 +-A INPUT -j limit-677 +-A INPUT -j limit-676 +-A INPUT -j limit-675 +-A INPUT -j limit-674 +-A INPUT -j limit-673 +-A INPUT -j limit-672 +-A INPUT -j limit-671 +-A INPUT -j limit-670 +-A INPUT -j limit-669 +-A INPUT -j limit-668 +-A INPUT -j limit-667 +-A INPUT -j limit-666 +-A INPUT -j limit-665 +-A INPUT -j limit-664 +-A INPUT -j limit-663 +-A INPUT -j limit-662 +-A INPUT -j limit-661 +-A INPUT -j limit-660 +-A INPUT -j limit-659 +-A INPUT -j limit-658 +-A INPUT -j limit-657 +-A INPUT -j limit-656 +-A INPUT -j limit-655 +-A INPUT -j limit-654 +-A INPUT -j limit-653 +-A INPUT -j limit-652 +-A INPUT -j limit-651 +-A INPUT -j limit-650 +-A INPUT -j limit-649 +-A INPUT -j limit-648 +-A INPUT -j limit-647 +-A INPUT -j limit-646 +-A INPUT -j limit-645 +-A INPUT -j limit-644 +-A INPUT -j limit-643 +-A INPUT -j limit-642 +-A INPUT -j limit-641 +-A INPUT -j limit-640 +-A INPUT -j limit-639 +-A INPUT -j limit-638 +-A INPUT -j limit-637 +-A INPUT -j limit-636 +-A INPUT -j limit-635 +-A INPUT -j limit-634 +-A INPUT -j limit-633 +-A INPUT -j limit-632 +-A INPUT -j limit-631 +-A INPUT -j limit-630 +-A INPUT -j limit-629 +-A INPUT -j limit-628 +-A INPUT -j limit-627 +-A INPUT -j limit-626 +-A INPUT -j limit-625 +-A INPUT -j limit-624 +-A INPUT -j limit-623 +-A INPUT -j limit-622 +-A INPUT -j limit-621 +-A INPUT -j limit-620 +-A INPUT -j limit-619 +-A INPUT -j limit-618 +-A INPUT -j limit-617 +-A INPUT -j limit-616 +-A INPUT -j limit-615 +-A INPUT -j limit-614 +-A INPUT -j limit-613 +-A INPUT -j limit-612 +-A INPUT -j limit-611 +-A INPUT -j limit-610 +-A INPUT -j limit-609 +-A INPUT -j limit-608 +-A INPUT -j limit-607 +-A INPUT -j limit-606 +-A INPUT -j limit-605 +-A INPUT -j limit-604 +-A INPUT -j limit-603 +-A INPUT -j limit-602 +-A INPUT -j limit-601 +-A INPUT -j limit-600 +-A INPUT -j limit-599 +-A INPUT -j limit-598 +-A INPUT -j limit-597 +-A INPUT -j limit-596 +-A INPUT -j limit-595 +-A INPUT -j limit-594 +-A INPUT -j limit-593 +-A INPUT -j limit-592 +-A INPUT -j limit-591 +-A INPUT -j limit-590 +-A INPUT -j limit-589 +-A INPUT -j limit-588 +-A INPUT -j limit-587 +-A INPUT -j limit-586 +-A INPUT -j limit-585 +-A INPUT -j limit-584 +-A INPUT -j limit-583 +-A INPUT -j limit-582 +-A INPUT -j limit-581 +-A INPUT -j limit-580 +-A INPUT -j limit-579 +-A INPUT -j limit-578 +-A INPUT -j limit-577 +-A INPUT -j limit-576 +-A INPUT -j limit-575 +-A INPUT -j limit-574 +-A INPUT -j limit-573 +-A INPUT -j limit-572 +-A INPUT -j limit-571 +-A INPUT -j limit-570 +-A INPUT -j limit-569 +-A INPUT -j limit-568 +-A INPUT -j limit-567 +-A INPUT -j limit-566 +-A INPUT -j limit-565 +-A INPUT -j limit-564 +-A INPUT -j limit-563 +-A INPUT -j limit-562 +-A INPUT -j limit-561 +-A INPUT -j limit-560 +-A INPUT -j limit-559 +-A INPUT -j limit-558 +-A INPUT -j limit-557 +-A INPUT -j limit-556 +-A INPUT -j limit-555 +-A INPUT -j limit-554 +-A INPUT -j limit-553 +-A INPUT -j limit-552 +-A INPUT -j limit-551 +-A INPUT -j limit-550 +-A INPUT -j limit-549 +-A INPUT -j limit-548 +-A INPUT -j limit-547 +-A INPUT -j limit-546 +-A INPUT -j limit-545 +-A INPUT -j limit-544 +-A INPUT -j limit-543 +-A INPUT -j limit-542 +-A INPUT -j limit-541 +-A INPUT -j limit-540 +-A INPUT -j limit-539 +-A INPUT -j limit-538 +-A INPUT -j limit-537 +-A INPUT -j limit-536 +-A INPUT -j limit-535 +-A INPUT -j limit-534 +-A INPUT -j limit-533 +-A INPUT -j limit-532 +-A INPUT -j limit-531 +-A INPUT -j limit-530 +-A INPUT -j limit-529 +-A INPUT -j limit-528 +-A INPUT -j limit-527 +-A INPUT -j limit-526 +-A INPUT -j limit-525 +-A INPUT -j limit-524 +-A INPUT -j limit-523 +-A INPUT -j limit-522 +-A INPUT -j limit-521 +-A INPUT -j limit-520 +-A INPUT -j limit-519 +-A INPUT -j limit-518 +-A INPUT -j limit-517 +-A INPUT -j limit-516 +-A INPUT -j limit-515 +-A INPUT -j limit-514 +-A INPUT -j limit-513 +-A INPUT -j limit-512 +-A INPUT -j limit-511 +-A INPUT -j limit-510 +-A INPUT -j limit-509 +-A INPUT -j limit-508 +-A INPUT -j limit-507 +-A INPUT -j limit-506 +-A INPUT -j limit-505 +-A INPUT -j limit-504 +-A INPUT -j limit-503 +-A INPUT -j limit-502 +-A INPUT -j limit-501 +-A INPUT -j limit-500 +-A INPUT -j limit-499 +-A INPUT -j limit-498 +-A INPUT -j limit-497 +-A INPUT -j limit-496 +-A INPUT -j limit-495 +-A INPUT -j limit-494 +-A INPUT -j limit-493 +-A INPUT -j limit-492 +-A INPUT -j limit-491 +-A INPUT -j limit-490 +-A INPUT -j limit-489 +-A INPUT -j limit-488 +-A INPUT -j limit-487 +-A INPUT -j limit-486 +-A INPUT -j limit-485 +-A INPUT -j limit-484 +-A INPUT -j limit-483 +-A INPUT -j limit-482 +-A INPUT -j limit-481 +-A INPUT -j limit-480 +-A INPUT -j limit-479 +-A INPUT -j limit-478 +-A INPUT -j limit-477 +-A INPUT -j limit-476 +-A INPUT -j limit-475 +-A INPUT -j limit-474 +-A INPUT -j limit-473 +-A INPUT -j limit-472 +-A INPUT -j limit-471 +-A INPUT -j limit-470 +-A INPUT -j limit-469 +-A INPUT -j limit-468 +-A INPUT -j limit-467 +-A INPUT -j limit-466 +-A INPUT -j limit-465 +-A INPUT -j limit-464 +-A INPUT -j limit-463 +-A INPUT -j limit-462 +-A INPUT -j limit-461 +-A INPUT -j limit-460 +-A INPUT -j limit-459 +-A INPUT -j limit-458 +-A INPUT -j limit-457 +-A INPUT -j limit-456 +-A INPUT -j limit-455 +-A INPUT -j limit-454 +-A INPUT -j limit-453 +-A INPUT -j limit-452 +-A INPUT -j limit-451 +-A INPUT -j limit-450 +-A INPUT -j limit-449 +-A INPUT -j limit-448 +-A INPUT -j limit-447 +-A INPUT -j limit-446 +-A INPUT -j limit-445 +-A INPUT -j limit-444 +-A INPUT -j limit-443 +-A INPUT -j limit-442 +-A INPUT -j limit-441 +-A INPUT -j limit-440 +-A INPUT -j limit-439 +-A INPUT -j limit-438 +-A INPUT -j limit-437 +-A INPUT -j limit-436 +-A INPUT -j limit-435 +-A INPUT -j limit-434 +-A INPUT -j limit-433 +-A INPUT -j limit-432 +-A INPUT -j limit-431 +-A INPUT -j limit-430 +-A INPUT -j limit-429 +-A INPUT -j limit-428 -A INPUT -j limit-427 -A INPUT -j limit-426 -A INPUT -j limit-425 @@ -11649,150 +19025,6 @@ hash:net family inet -A INPUT -j limit-360 -A INPUT -j limit-359 -A INPUT -j limit-358 --A INPUT -j limit-357 --A INPUT -j limit-356 --A INPUT -j limit-355 --A INPUT -j limit-354 --A INPUT -j limit-353 --A INPUT -j limit-352 --A INPUT -j limit-351 --A INPUT -j limit-350 --A INPUT -j limit-349 --A INPUT -j limit-348 --A INPUT -j limit-347 --A INPUT -j limit-346 --A INPUT -j limit-345 --A INPUT -j limit-344 --A INPUT -j limit-343 --A INPUT -j limit-342 --A INPUT -j limit-341 --A INPUT -j limit-340 --A INPUT -j limit-339 --A INPUT -j limit-338 --A INPUT -j limit-337 --A INPUT -j limit-336 --A INPUT -j limit-335 --A INPUT -j limit-334 --A INPUT -j limit-333 --A INPUT -j limit-332 --A INPUT -j limit-331 --A INPUT -j limit-330 --A INPUT -j limit-329 --A INPUT -j limit-328 --A INPUT -j limit-327 --A INPUT -j limit-326 --A INPUT -j limit-325 --A INPUT -j limit-324 --A INPUT -j limit-323 --A INPUT -j limit-322 --A INPUT -j limit-321 --A INPUT -j limit-320 --A INPUT -j limit-319 --A INPUT -j limit-318 --A INPUT -j limit-317 --A INPUT -j limit-316 --A INPUT -j limit-315 --A INPUT -j limit-314 --A INPUT -j limit-313 --A INPUT -j limit-312 --A INPUT -j limit-311 --A INPUT -j limit-310 --A INPUT -j limit-309 --A INPUT -j limit-308 --A INPUT -j limit-307 --A INPUT -j limit-306 --A INPUT -j limit-305 --A INPUT -j limit-304 --A INPUT -j limit-303 --A INPUT -j limit-302 --A INPUT -j limit-301 --A INPUT -j limit-300 --A INPUT -j limit-299 --A INPUT -j limit-298 --A INPUT -j limit-297 --A INPUT -j limit-296 --A INPUT -j limit-295 --A INPUT -j limit-294 --A INPUT -j limit-293 --A INPUT -j limit-292 --A INPUT -j limit-291 --A INPUT -j limit-290 --A INPUT -j limit-289 --A INPUT -j limit-288 --A INPUT -j limit-287 --A INPUT -j limit-286 --A INPUT -j limit-285 --A INPUT -j limit-284 --A INPUT -j limit-283 --A INPUT -j limit-282 --A INPUT -j limit-281 --A INPUT -j limit-280 --A INPUT -j limit-279 --A INPUT -j limit-278 --A INPUT -j limit-277 --A INPUT -j limit-276 --A INPUT -j limit-275 --A INPUT -j limit-274 --A INPUT -j limit-273 --A INPUT -j limit-272 --A INPUT -j limit-271 --A INPUT -j limit-270 --A INPUT -j limit-269 --A INPUT -j limit-268 --A INPUT -j limit-267 --A INPUT -j limit-266 --A INPUT -j limit-265 --A INPUT -j limit-264 --A INPUT -j limit-263 --A INPUT -j limit-262 --A INPUT -j limit-261 --A INPUT -j limit-260 --A INPUT -j limit-259 --A INPUT -j limit-258 --A INPUT -j limit-257 --A INPUT -j limit-256 --A INPUT -j limit-255 --A INPUT -j limit-254 --A INPUT -j limit-253 --A INPUT -j limit-252 --A INPUT -j limit-251 --A INPUT -j limit-250 --A INPUT -j limit-249 --A INPUT -j limit-248 --A INPUT -j limit-247 --A INPUT -j limit-246 --A INPUT -j limit-245 --A INPUT -j limit-244 --A INPUT -j limit-243 --A INPUT -j limit-242 --A INPUT -j limit-241 --A INPUT -j limit-240 --A INPUT -j limit-239 --A INPUT -j limit-238 --A INPUT -j limit-237 --A INPUT -j limit-236 --A INPUT -j limit-235 --A INPUT -j limit-234 --A INPUT -j limit-233 --A INPUT -j limit-232 --A INPUT -j limit-231 --A INPUT -j limit-230 --A INPUT -j limit-229 --A INPUT -j limit-228 --A INPUT -j limit-227 --A INPUT -j limit-226 --A INPUT -j limit-225 --A INPUT -j limit-224 --A INPUT -j limit-223 --A INPUT -j limit-222 --A INPUT -j limit-221 --A INPUT -j limit-220 --A INPUT -j limit-219 --A INPUT -j limit-218 --A INPUT -j limit-217 --A INPUT -j limit-216 --A INPUT -j limit-215 --A INPUT -j limit-214 -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -j ACCEPT @@ -11915,231 +19147,450 @@ hash:net family inet -A INPUT -j ACCEPT -A INPUT -j logaccept-final-37 -A INPUT -j ACCEPT --A INPUT -i eth0 -j limit-428 --A INPUT -i eth0 -j limit-429 --A INPUT -i eth0 -j limit-430 --A INPUT -i eth0 -j limit-431 --A INPUT -i eth0 -j limit-432 --A INPUT -i eth0 -j limit-433 --A INPUT -i eth0 -j limit-434 --A INPUT -i eth0 -j limit-435 --A INPUT -i eth0 -j limit-436 --A INPUT -i eth0 -j limit-437 --A INPUT -i eth0 -j limit-438 --A INPUT -i eth0 -j limit-439 --A INPUT -i eth0 -j limit-440 --A INPUT -i eth0 -j limit-441 --A INPUT -i eth0 -j limit-442 --A INPUT -i eth0 -j limit-443 --A INPUT -i eth0 -j limit-444 --A INPUT -i eth0 -j limit-445 --A INPUT -i eth0 -j limit-446 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-152 --A INPUT -i eth0 -j limit-448 --A INPUT -i eth0 -j limit-449 --A INPUT -i eth0 -j limit-450 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-156 --A INPUT -i eth0 -j limit-452 --A INPUT -i eth0 -j limit-453 --A INPUT -i eth0 -j limit-454 --A INPUT -i eth0 -j limit-455 --A INPUT -i eth0 -j limit-456 --A INPUT -i eth0 -j limit-457 --A INPUT -i eth0 -j limit-458 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-164 --A INPUT -i eth0 -j limit-460 --A INPUT -i eth0 -j limit-461 --A INPUT -i eth0 -j limit-462 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-168 --A INPUT -i eth0 -j limit-464 --A INPUT -i eth0 -j limit-465 --A INPUT -i eth0 -j limit-466 --A INPUT -i eth0 -j limit-467 --A INPUT -i eth0 -j limit-468 --A INPUT -i eth0 -j limit-469 --A INPUT -i eth0 -j limit-470 --A INPUT -i eth0 -j limit-471 --A INPUT -i eth0 -j limit-472 --A INPUT -i eth0 -j limit-473 --A INPUT -i eth0 -j limit-474 --A INPUT -i eth0 -j limit-475 --A INPUT -i eth0 -j limit-476 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-38 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-39 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-40 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-41 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-42 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-43 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-44 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-45 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-46 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-47 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-48 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-49 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-50 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-51 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-52 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-53 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-54 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-55 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-56 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-57 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-58 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-59 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-60 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-61 +-A INPUT -j ACCEPT +-A INPUT -i eth0 -j limit-716 +-A INPUT -i eth0 -j limit-717 +-A INPUT -i eth0 -j limit-718 +-A INPUT -i eth0 -j limit-719 +-A INPUT -i eth0 -j limit-720 +-A INPUT -i eth0 -j limit-721 +-A INPUT -i eth0 -j limit-722 +-A INPUT -i eth0 -j limit-723 +-A INPUT -i eth0 -j limit-724 +-A INPUT -i eth0 -j limit-725 +-A INPUT -i eth0 -j limit-726 +-A INPUT -i eth0 -j limit-727 +-A INPUT -i eth0 -j limit-728 +-A INPUT -i eth0 -j limit-729 +-A INPUT -i eth0 -j limit-730 +-A INPUT -i eth0 -j limit-731 +-A INPUT -i eth0 -j limit-732 +-A INPUT -i eth0 -j limit-733 +-A INPUT -i eth0 -j limit-734 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-248 +-A INPUT -i eth0 -j limit-736 +-A INPUT -i eth0 -j limit-737 +-A INPUT -i eth0 -j limit-738 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-252 +-A INPUT -i eth0 -j limit-740 +-A INPUT -i eth0 -j limit-741 +-A INPUT -i eth0 -j limit-742 +-A INPUT -i eth0 -j limit-743 +-A INPUT -i eth0 -j limit-744 +-A INPUT -i eth0 -j limit-745 +-A INPUT -i eth0 -j limit-746 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-260 +-A INPUT -i eth0 -j limit-748 +-A INPUT -i eth0 -j limit-749 +-A INPUT -i eth0 -j limit-750 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-264 +-A INPUT -i eth0 -j limit-752 +-A INPUT -i eth0 -j limit-753 +-A INPUT -i eth0 -j limit-754 +-A INPUT -i eth0 -j limit-755 +-A INPUT -i eth0 -j limit-756 +-A INPUT -i eth0 -j limit-757 +-A INPUT -i eth0 -j limit-758 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-272 +-A INPUT -i eth0 -j limit-760 +-A INPUT -i eth0 -j limit-761 +-A INPUT -i eth0 -j limit-762 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-276 +-A INPUT -i eth0 -j limit-764 +-A INPUT -i eth0 -j limit-765 +-A INPUT -i eth0 -j limit-766 +-A INPUT -i eth0 -j limit-767 +-A INPUT -i eth0 -j limit-768 +-A INPUT -i eth0 -j limit-769 +-A INPUT -i eth0 -j limit-770 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-284 +-A INPUT -i eth0 -j limit-772 +-A INPUT -i eth0 -j limit-773 +-A INPUT -i eth0 -j limit-774 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-288 +-A INPUT -i eth0 -j limit-776 +-A INPUT -i eth0 -j limit-777 +-A INPUT -i eth0 -j limit-778 +-A INPUT -i eth0 -j limit-779 +-A INPUT -i eth0 -j limit-780 +-A INPUT -i eth0 -j limit-781 +-A INPUT -i eth0 -j limit-782 +-A INPUT -i eth0 -j limit-783 +-A INPUT -i eth0 -j limit-784 +-A INPUT -i eth0 -j limit-785 +-A INPUT -i eth0 -j limit-786 +-A INPUT -i eth0 -j limit-787 +-A INPUT -i eth0 -j limit-788 -A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-478 --A INPUT -i eth0 -j limit-479 --A INPUT -i eth0 -j limit-480 +-A INPUT -i eth0 -j limit-790 +-A INPUT -i eth0 -j limit-791 +-A INPUT -i eth0 -j limit-792 -A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-482 --A INPUT -i eth0 -j limit-483 --A INPUT -i eth0 -j limit-484 --A INPUT -i eth0 -j limit-485 --A INPUT -i eth0 -j limit-486 --A INPUT -i eth0 -j limit-487 --A INPUT -i eth0 -j limit-488 +-A INPUT -i eth0 -j limit-794 +-A INPUT -i eth0 -j limit-795 +-A INPUT -i eth0 -j limit-796 +-A INPUT -i eth0 -j limit-797 +-A INPUT -i eth0 -j limit-798 +-A INPUT -i eth0 -j limit-799 +-A INPUT -i eth0 -j limit-800 -A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-490 --A INPUT -i eth0 -j limit-491 --A INPUT -i eth0 -j limit-492 +-A INPUT -i eth0 -j limit-802 +-A INPUT -i eth0 -j limit-803 +-A INPUT -i eth0 -j limit-804 -A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-494 --A INPUT -i eth0 -j limit-495 --A INPUT -i eth0 -j limit-496 --A INPUT -i eth0 -j limit-497 --A INPUT -i eth0 -j limit-498 --A INPUT -i eth0 -j limit-499 --A INPUT -i eth0 -j limit-500 --A INPUT -i eth0 -j limit-501 --A INPUT -i eth0 -j limit-502 --A INPUT -i eth0 -j limit-503 --A INPUT -i eth0 -j limit-504 --A INPUT -i eth0 -j limit-505 --A INPUT -i eth0 -j limit-506 +-A INPUT -i eth0 -j limit-806 +-A INPUT -i eth0 -j limit-807 +-A INPUT -i eth0 -j limit-808 +-A INPUT -i eth0 -j limit-809 +-A INPUT -i eth0 -j limit-810 +-A INPUT -i eth0 -j limit-811 +-A INPUT -i eth0 -j limit-812 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-814 +-A INPUT -i eth0 -j limit-815 +-A INPUT -i eth0 -j limit-816 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-818 +-A INPUT -i eth0 -j limit-819 +-A INPUT -i eth0 -j limit-820 +-A INPUT -i eth0 -j limit-821 +-A INPUT -i eth0 -j limit-822 +-A INPUT -i eth0 -j limit-823 +-A INPUT -i eth0 -j limit-824 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-826 +-A INPUT -i eth0 -j limit-827 +-A INPUT -i eth0 -j limit-828 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-830 +-A INPUT -i eth0 -j limit-831 +-A INPUT -i eth0 -j limit-832 +-A INPUT -i eth0 -j limit-833 +-A INPUT -i eth0 -j limit-834 +-A INPUT -i eth0 -j limit-835 +-A INPUT -i eth0 -j limit-836 +-A INPUT -i eth0 -j limit-837 +-A INPUT -i eth0 -j limit-838 +-A INPUT -i eth0 -j limit-839 +-A INPUT -i eth0 -j limit-840 +-A INPUT -i eth0 -j limit-841 +-A INPUT -i eth0 -j limit-842 -A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-508 --A INPUT -i eth0 -j limit-509 --A INPUT -i eth0 -j limit-510 +-A INPUT -i eth0 -j limit-844 +-A INPUT -i eth0 -j limit-845 +-A INPUT -i eth0 -j limit-846 -A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-512 --A INPUT -i eth0 -j limit-513 --A INPUT -i eth0 -j limit-514 --A INPUT -i eth0 -j limit-515 --A INPUT -i eth0 -j limit-516 --A INPUT -i eth0 -j limit-517 --A INPUT -i eth0 -j limit-518 +-A INPUT -i eth0 -j limit-848 +-A INPUT -i eth0 -j limit-849 +-A INPUT -i eth0 -j limit-850 +-A INPUT -i eth0 -j limit-851 +-A INPUT -i eth0 -j limit-852 +-A INPUT -i eth0 -j limit-853 +-A INPUT -i eth0 -j limit-854 -A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-520 --A INPUT -i eth0 -j limit-521 --A INPUT -i eth0 -j limit-522 +-A INPUT -i eth0 -j limit-856 +-A INPUT -i eth0 -j limit-857 +-A INPUT -i eth0 -j limit-858 -A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-524 --A INPUT -i eth0 -j limit-525 --A INPUT -i eth0 -j limit-526 --A INPUT -i eth0 -j limit-527 --A INPUT -i eth0 -j limit-528 --A INPUT -i eth0 -j limit-529 --A INPUT -i eth0 -j limit-530 --A INPUT -i eth0 -j limit-531 --A INPUT -i eth0 -j limit-532 --A INPUT -i eth0 -j limit-533 --A INPUT -i eth0 -j limit-534 --A INPUT -i eth0 -j limit-535 --A INPUT -i eth0 -j limit-536 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-182 --A INPUT -i eth0 -j limit-538 --A INPUT -i eth0 -j limit-539 --A INPUT -i eth0 -j limit-540 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-186 --A INPUT -i eth0 -j limit-542 --A INPUT -i eth0 -j limit-543 --A INPUT -i eth0 -j limit-544 --A INPUT -i eth0 -j limit-545 --A INPUT -i eth0 -j limit-546 --A INPUT -i eth0 -j limit-547 --A INPUT -i eth0 -j limit-548 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-194 --A INPUT -i eth0 -j limit-550 --A INPUT -i eth0 -j limit-551 --A INPUT -i eth0 -j limit-552 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-198 --A INPUT -i eth0 -j limit-554 --A INPUT -i eth0 -j limit-555 --A INPUT -i eth0 -j limit-556 --A INPUT -i eth0 -j limit-557 --A INPUT -i eth0 -j limit-558 --A INPUT -i eth0 -j limit-559 --A INPUT -i eth0 -j limit-560 --A INPUT -i eth0 -j limit-561 --A INPUT -i eth0 -j limit-562 --A INPUT -i eth0 -j limit-563 --A INPUT -i eth0 -j limit-564 --A INPUT -i eth0 -j limit-565 --A INPUT -i eth0 -j limit-566 +-A INPUT -i eth0 -j limit-860 +-A INPUT -i eth0 -j limit-861 +-A INPUT -i eth0 -j limit-862 +-A INPUT -i eth0 -j limit-863 +-A INPUT -i eth0 -j limit-864 +-A INPUT -i eth0 -j limit-865 +-A INPUT -i eth0 -j limit-866 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-868 +-A INPUT -i eth0 -j limit-869 +-A INPUT -i eth0 -j limit-870 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-872 +-A INPUT -i eth0 -j limit-873 +-A INPUT -i eth0 -j limit-874 +-A INPUT -i eth0 -j limit-875 +-A INPUT -i eth0 -j limit-876 +-A INPUT -i eth0 -j limit-877 +-A INPUT -i eth0 -j limit-878 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-880 +-A INPUT -i eth0 -j limit-881 +-A INPUT -i eth0 -j limit-882 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-884 +-A INPUT -i eth0 -j limit-885 +-A INPUT -i eth0 -j limit-886 +-A INPUT -i eth0 -j limit-887 +-A INPUT -i eth0 -j limit-888 +-A INPUT -i eth0 -j limit-889 +-A INPUT -i eth0 -j limit-890 +-A INPUT -i eth0 -j limit-891 +-A INPUT -i eth0 -j limit-892 +-A INPUT -i eth0 -j limit-893 +-A INPUT -i eth0 -j limit-894 +-A INPUT -i eth0 -j limit-895 +-A INPUT -i eth0 -j limit-896 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-302 +-A INPUT -i eth0 -j limit-898 +-A INPUT -i eth0 -j limit-899 +-A INPUT -i eth0 -j limit-900 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-306 +-A INPUT -i eth0 -j limit-902 +-A INPUT -i eth0 -j limit-903 +-A INPUT -i eth0 -j limit-904 +-A INPUT -i eth0 -j limit-905 +-A INPUT -i eth0 -j limit-906 +-A INPUT -i eth0 -j limit-907 +-A INPUT -i eth0 -j limit-908 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-314 +-A INPUT -i eth0 -j limit-910 +-A INPUT -i eth0 -j limit-911 +-A INPUT -i eth0 -j limit-912 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-318 +-A INPUT -i eth0 -j limit-914 +-A INPUT -i eth0 -j limit-915 +-A INPUT -i eth0 -j limit-916 +-A INPUT -i eth0 -j limit-917 +-A INPUT -i eth0 -j limit-918 +-A INPUT -i eth0 -j limit-919 +-A INPUT -i eth0 -j limit-920 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-326 +-A INPUT -i eth0 -j limit-922 +-A INPUT -i eth0 -j limit-923 +-A INPUT -i eth0 -j limit-924 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-330 +-A INPUT -i eth0 -j limit-926 +-A INPUT -i eth0 -j limit-927 +-A INPUT -i eth0 -j limit-928 +-A INPUT -i eth0 -j limit-929 +-A INPUT -i eth0 -j limit-930 +-A INPUT -i eth0 -j limit-931 +-A INPUT -i eth0 -j limit-932 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-338 +-A INPUT -i eth0 -j limit-934 +-A INPUT -i eth0 -j limit-935 +-A INPUT -i eth0 -j limit-936 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-342 +-A INPUT -i eth0 -j limit-938 +-A INPUT -i eth0 -j limit-939 +-A INPUT -i eth0 -j limit-940 +-A INPUT -i eth0 -j limit-941 +-A INPUT -i eth0 -j limit-942 +-A INPUT -i eth0 -j limit-943 +-A INPUT -i eth0 -j limit-944 +-A INPUT -i eth0 -j limit-945 +-A INPUT -i eth0 -j limit-946 +-A INPUT -i eth0 -j limit-947 +-A INPUT -i eth0 -j limit-948 +-A INPUT -i eth0 -j limit-949 +-A INPUT -i eth0 -j limit-950 -A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-568 --A INPUT -i eth0 -j limit-569 --A INPUT -i eth0 -j limit-570 +-A INPUT -i eth0 -j limit-952 +-A INPUT -i eth0 -j limit-953 +-A INPUT -i eth0 -j limit-954 -A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-572 --A INPUT -i eth0 -j limit-573 --A INPUT -i eth0 -j limit-574 --A INPUT -i eth0 -j limit-575 --A INPUT -i eth0 -j limit-576 --A INPUT -i eth0 -j limit-577 --A INPUT -i eth0 -j limit-578 +-A INPUT -i eth0 -j limit-956 +-A INPUT -i eth0 -j limit-957 +-A INPUT -i eth0 -j limit-958 +-A INPUT -i eth0 -j limit-959 +-A INPUT -i eth0 -j limit-960 +-A INPUT -i eth0 -j limit-961 +-A INPUT -i eth0 -j limit-962 -A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-580 --A INPUT -i eth0 -j limit-581 --A INPUT -i eth0 -j limit-582 +-A INPUT -i eth0 -j limit-964 +-A INPUT -i eth0 -j limit-965 +-A INPUT -i eth0 -j limit-966 -A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-584 --A INPUT -i eth0 -j limit-585 --A INPUT -i eth0 -j limit-586 --A INPUT -i eth0 -j limit-587 --A INPUT -i eth0 -j limit-588 --A INPUT -i eth0 -j limit-589 --A INPUT -i eth0 -j limit-590 --A INPUT -i eth0 -j limit-591 --A INPUT -i eth0 -j limit-592 --A INPUT -i eth0 -j limit-593 --A INPUT -i eth0 -j limit-594 --A INPUT -i eth0 -j limit-595 --A INPUT -i eth0 -j limit-596 +-A INPUT -i eth0 -j limit-968 +-A INPUT -i eth0 -j limit-969 +-A INPUT -i eth0 -j limit-970 +-A INPUT -i eth0 -j limit-971 +-A INPUT -i eth0 -j limit-972 +-A INPUT -i eth0 -j limit-973 +-A INPUT -i eth0 -j limit-974 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-976 +-A INPUT -i eth0 -j limit-977 +-A INPUT -i eth0 -j limit-978 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-980 +-A INPUT -i eth0 -j limit-981 +-A INPUT -i eth0 -j limit-982 +-A INPUT -i eth0 -j limit-983 +-A INPUT -i eth0 -j limit-984 +-A INPUT -i eth0 -j limit-985 +-A INPUT -i eth0 -j limit-986 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-988 +-A INPUT -i eth0 -j limit-989 +-A INPUT -i eth0 -j limit-990 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-992 +-A INPUT -i eth0 -j limit-993 +-A INPUT -i eth0 -j limit-994 +-A INPUT -i eth0 -j limit-995 +-A INPUT -i eth0 -j limit-996 +-A INPUT -i eth0 -j limit-997 +-A INPUT -i eth0 -j limit-998 +-A INPUT -i eth0 -j limit-999 +-A INPUT -i eth0 -j limit-1000 +-A INPUT -i eth0 -j limit-1001 +-A INPUT -i eth0 -j limit-1002 +-A INPUT -i eth0 -j limit-1003 +-A INPUT -i eth0 -j limit-1004 -A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-598 --A INPUT -i eth0 -j limit-599 --A INPUT -i eth0 -j limit-600 +-A INPUT -i eth0 -j limit-1006 +-A INPUT -i eth0 -j limit-1007 +-A INPUT -i eth0 -j limit-1008 -A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-602 --A INPUT -i eth0 -j limit-603 --A INPUT -i eth0 -j limit-604 --A INPUT -i eth0 -j limit-605 --A INPUT -i eth0 -j limit-606 --A INPUT -i eth0 -j limit-607 --A INPUT -i eth0 -j limit-608 +-A INPUT -i eth0 -j limit-1010 +-A INPUT -i eth0 -j limit-1011 +-A INPUT -i eth0 -j limit-1012 +-A INPUT -i eth0 -j limit-1013 +-A INPUT -i eth0 -j limit-1014 +-A INPUT -i eth0 -j limit-1015 +-A INPUT -i eth0 -j limit-1016 -A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-610 --A INPUT -i eth0 -j limit-611 --A INPUT -i eth0 -j limit-612 +-A INPUT -i eth0 -j limit-1018 +-A INPUT -i eth0 -j limit-1019 +-A INPUT -i eth0 -j limit-1020 -A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-614 --A INPUT -i eth0 -j limit-615 --A INPUT -i eth0 -j limit-616 --A INPUT -i eth0 -j limit-617 --A INPUT -i eth0 -j limit-618 --A INPUT -i eth0 -j limit-619 --A INPUT -i eth0 -j limit-620 --A INPUT -i eth0 -j limit-621 --A INPUT -i eth0 -j limit-622 --A INPUT -i eth0 -j limit-623 --A INPUT -i eth0 -j limit-624 --A INPUT -i eth0 -j limit-625 --A INPUT -i eth0 -j limit-626 --A INPUT -i eth0 -j limit-627 --A INPUT -i eth0 -j limit-628 --A INPUT -i eth0 -j limit-629 --A INPUT -i eth0 -j limit-630 --A INPUT -i eth0 -j limit-631 --A INPUT -i eth0 -j limit-632 --A INPUT -i eth0 -j limit-633 --A INPUT -i eth0 -j limit-634 --A INPUT -i eth0 -j limit-635 --A INPUT -i eth0 -j limit-636 --A INPUT -i eth0 -j limit-637 --A INPUT -i eth0 -j limit-638 --A INPUT -i eth0 -j limit-639 --A INPUT -i eth0 -j limit-640 --A INPUT -i eth0 -j limit-641 +-A INPUT -i eth0 -j limit-1022 +-A INPUT -i eth0 -j limit-1023 +-A INPUT -i eth0 -j limit-1024 +-A INPUT -i eth0 -j limit-1025 +-A INPUT -i eth0 -j limit-1026 +-A INPUT -i eth0 -j limit-1027 +-A INPUT -i eth0 -j limit-1028 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1030 +-A INPUT -i eth0 -j limit-1031 +-A INPUT -i eth0 -j limit-1032 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1034 +-A INPUT -i eth0 -j limit-1035 +-A INPUT -i eth0 -j limit-1036 +-A INPUT -i eth0 -j limit-1037 +-A INPUT -i eth0 -j limit-1038 +-A INPUT -i eth0 -j limit-1039 +-A INPUT -i eth0 -j limit-1040 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1042 +-A INPUT -i eth0 -j limit-1043 +-A INPUT -i eth0 -j limit-1044 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1046 +-A INPUT -i eth0 -j limit-1047 +-A INPUT -i eth0 -j limit-1048 +-A INPUT -i eth0 -j limit-1049 +-A INPUT -i eth0 -j limit-1050 +-A INPUT -i eth0 -j limit-1051 +-A INPUT -i eth0 -j limit-1052 +-A INPUT -i eth0 -j limit-1053 +-A INPUT -i eth0 -j limit-1054 +-A INPUT -i eth0 -j limit-1055 +-A INPUT -i eth0 -j limit-1056 +-A INPUT -i eth0 -j limit-1057 +-A INPUT -i eth0 -j limit-1058 +-A INPUT -i eth0 -j limit-1059 +-A INPUT -i eth0 -j limit-1060 +-A INPUT -i eth0 -j limit-1061 +-A INPUT -i eth0 -j limit-1062 +-A INPUT -i eth0 -j limit-1063 +-A INPUT -i eth0 -j limit-1064 +-A INPUT -i eth0 -j limit-1065 +-A INPUT -i eth0 -j limit-1066 +-A INPUT -i eth0 -j limit-1067 +-A INPUT -i eth0 -j limit-1068 +-A INPUT -i eth0 -j limit-1069 +-A INPUT -i eth0 -j limit-1070 +-A INPUT -i eth0 -j limit-1071 +-A INPUT -i eth0 -j limit-1072 +-A INPUT -i eth0 -j limit-1073 -A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A INPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set +-A INPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A INPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set -A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set -A INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set -A INPUT -j ACCEPT --A INPUT -j logdrop-199 +-A INPUT -j logdrop-343 -A INPUT -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT -A INPUT -j logaccept-14 --A INPUT -j logdrop-200 +-A INPUT -j logdrop-344 -A INPUT -j logpass-0 -A INPUT -j ACCEPT -A INPUT -j DROP @@ -12158,6 +19609,294 @@ hash:net family inet -A INPUT -p icmp -j icmp-routing -A OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set -A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A OUTPUT -j limit-715 +-A OUTPUT -j limit-714 +-A OUTPUT -j limit-713 +-A OUTPUT -j limit-712 +-A OUTPUT -j limit-711 +-A OUTPUT -j limit-710 +-A OUTPUT -j limit-709 +-A OUTPUT -j limit-708 +-A OUTPUT -j limit-707 +-A OUTPUT -j limit-706 +-A OUTPUT -j limit-705 +-A OUTPUT -j limit-704 +-A OUTPUT -j limit-703 +-A OUTPUT -j limit-702 +-A OUTPUT -j limit-701 +-A OUTPUT -j limit-700 +-A OUTPUT -j limit-699 +-A OUTPUT -j limit-698 +-A OUTPUT -j limit-697 +-A OUTPUT -j limit-696 +-A OUTPUT -j limit-695 +-A OUTPUT -j limit-694 +-A OUTPUT -j limit-693 +-A OUTPUT -j limit-692 +-A OUTPUT -j limit-691 +-A OUTPUT -j limit-690 +-A OUTPUT -j limit-689 +-A OUTPUT -j limit-688 +-A OUTPUT -j limit-687 +-A OUTPUT -j limit-686 +-A OUTPUT -j limit-685 +-A OUTPUT -j limit-684 +-A OUTPUT -j limit-683 +-A OUTPUT -j limit-682 +-A OUTPUT -j limit-681 +-A OUTPUT -j limit-680 +-A OUTPUT -j limit-679 +-A OUTPUT -j limit-678 +-A OUTPUT -j limit-677 +-A OUTPUT -j limit-676 +-A OUTPUT -j limit-675 +-A OUTPUT -j limit-674 +-A OUTPUT -j limit-673 +-A OUTPUT -j limit-672 +-A OUTPUT -j limit-671 +-A OUTPUT -j limit-670 +-A OUTPUT -j limit-669 +-A OUTPUT -j limit-668 +-A OUTPUT -j limit-667 +-A OUTPUT -j limit-666 +-A OUTPUT -j limit-665 +-A OUTPUT -j limit-664 +-A OUTPUT -j limit-663 +-A OUTPUT -j limit-662 +-A OUTPUT -j limit-661 +-A OUTPUT -j limit-660 +-A OUTPUT -j limit-659 +-A OUTPUT -j limit-658 +-A OUTPUT -j limit-657 +-A OUTPUT -j limit-656 +-A OUTPUT -j limit-655 +-A OUTPUT -j limit-654 +-A OUTPUT -j limit-653 +-A OUTPUT -j limit-652 +-A OUTPUT -j limit-651 +-A OUTPUT -j limit-650 +-A OUTPUT -j limit-649 +-A OUTPUT -j limit-648 +-A OUTPUT -j limit-647 +-A OUTPUT -j limit-646 +-A OUTPUT -j limit-645 +-A OUTPUT -j limit-644 +-A OUTPUT -j limit-643 +-A OUTPUT -j limit-642 +-A OUTPUT -j limit-641 +-A OUTPUT -j limit-640 +-A OUTPUT -j limit-639 +-A OUTPUT -j limit-638 +-A OUTPUT -j limit-637 +-A OUTPUT -j limit-636 +-A OUTPUT -j limit-635 +-A OUTPUT -j limit-634 +-A OUTPUT -j limit-633 +-A OUTPUT -j limit-632 +-A OUTPUT -j limit-631 +-A OUTPUT -j limit-630 +-A OUTPUT -j limit-629 +-A OUTPUT -j limit-628 +-A OUTPUT -j limit-627 +-A OUTPUT -j limit-626 +-A OUTPUT -j limit-625 +-A OUTPUT -j limit-624 +-A OUTPUT -j limit-623 +-A OUTPUT -j limit-622 +-A OUTPUT -j limit-621 +-A OUTPUT -j limit-620 +-A OUTPUT -j limit-619 +-A OUTPUT -j limit-618 +-A OUTPUT -j limit-617 +-A OUTPUT -j limit-616 +-A OUTPUT -j limit-615 +-A OUTPUT -j limit-614 +-A OUTPUT -j limit-613 +-A OUTPUT -j limit-612 +-A OUTPUT -j limit-611 +-A OUTPUT -j limit-610 +-A OUTPUT -j limit-609 +-A OUTPUT -j limit-608 +-A OUTPUT -j limit-607 +-A OUTPUT -j limit-606 +-A OUTPUT -j limit-605 +-A OUTPUT -j limit-604 +-A OUTPUT -j limit-603 +-A OUTPUT -j limit-602 +-A OUTPUT -j limit-601 +-A OUTPUT -j limit-600 +-A OUTPUT -j limit-599 +-A OUTPUT -j limit-598 +-A OUTPUT -j limit-597 +-A OUTPUT -j limit-596 +-A OUTPUT -j limit-595 +-A OUTPUT -j limit-594 +-A OUTPUT -j limit-593 +-A OUTPUT -j limit-592 +-A OUTPUT -j limit-591 +-A OUTPUT -j limit-590 +-A OUTPUT -j limit-589 +-A OUTPUT -j limit-588 +-A OUTPUT -j limit-587 +-A OUTPUT -j limit-586 +-A OUTPUT -j limit-585 +-A OUTPUT -j limit-584 +-A OUTPUT -j limit-583 +-A OUTPUT -j limit-582 +-A OUTPUT -j limit-581 +-A OUTPUT -j limit-580 +-A OUTPUT -j limit-579 +-A OUTPUT -j limit-578 +-A OUTPUT -j limit-577 +-A OUTPUT -j limit-576 +-A OUTPUT -j limit-575 +-A OUTPUT -j limit-574 +-A OUTPUT -j limit-573 +-A OUTPUT -j limit-572 +-A OUTPUT -j limit-571 +-A OUTPUT -j limit-570 +-A OUTPUT -j limit-569 +-A OUTPUT -j limit-568 +-A OUTPUT -j limit-567 +-A OUTPUT -j limit-566 +-A OUTPUT -j limit-565 +-A OUTPUT -j limit-564 +-A OUTPUT -j limit-563 +-A OUTPUT -j limit-562 +-A OUTPUT -j limit-561 +-A OUTPUT -j limit-560 +-A OUTPUT -j limit-559 +-A OUTPUT -j limit-558 +-A OUTPUT -j limit-557 +-A OUTPUT -j limit-556 +-A OUTPUT -j limit-555 +-A OUTPUT -j limit-554 +-A OUTPUT -j limit-553 +-A OUTPUT -j limit-552 +-A OUTPUT -j limit-551 +-A OUTPUT -j limit-550 +-A OUTPUT -j limit-549 +-A OUTPUT -j limit-548 +-A OUTPUT -j limit-547 +-A OUTPUT -j limit-546 +-A OUTPUT -j limit-545 +-A OUTPUT -j limit-544 +-A OUTPUT -j limit-543 +-A OUTPUT -j limit-542 +-A OUTPUT -j limit-541 +-A OUTPUT -j limit-540 +-A OUTPUT -j limit-539 +-A OUTPUT -j limit-538 +-A OUTPUT -j limit-537 +-A OUTPUT -j limit-536 +-A OUTPUT -j limit-535 +-A OUTPUT -j limit-534 +-A OUTPUT -j limit-533 +-A OUTPUT -j limit-532 +-A OUTPUT -j limit-531 +-A OUTPUT -j limit-530 +-A OUTPUT -j limit-529 +-A OUTPUT -j limit-528 +-A OUTPUT -j limit-527 +-A OUTPUT -j limit-526 +-A OUTPUT -j limit-525 +-A OUTPUT -j limit-524 +-A OUTPUT -j limit-523 +-A OUTPUT -j limit-522 +-A OUTPUT -j limit-521 +-A OUTPUT -j limit-520 +-A OUTPUT -j limit-519 +-A OUTPUT -j limit-518 +-A OUTPUT -j limit-517 +-A OUTPUT -j limit-516 +-A OUTPUT -j limit-515 +-A OUTPUT -j limit-514 +-A OUTPUT -j limit-513 +-A OUTPUT -j limit-512 +-A OUTPUT -j limit-511 +-A OUTPUT -j limit-510 +-A OUTPUT -j limit-509 +-A OUTPUT -j limit-508 +-A OUTPUT -j limit-507 +-A OUTPUT -j limit-506 +-A OUTPUT -j limit-505 +-A OUTPUT -j limit-504 +-A OUTPUT -j limit-503 +-A OUTPUT -j limit-502 +-A OUTPUT -j limit-501 +-A OUTPUT -j limit-500 +-A OUTPUT -j limit-499 +-A OUTPUT -j limit-498 +-A OUTPUT -j limit-497 +-A OUTPUT -j limit-496 +-A OUTPUT -j limit-495 +-A OUTPUT -j limit-494 +-A OUTPUT -j limit-493 +-A OUTPUT -j limit-492 +-A OUTPUT -j limit-491 +-A OUTPUT -j limit-490 +-A OUTPUT -j limit-489 +-A OUTPUT -j limit-488 +-A OUTPUT -j limit-487 +-A OUTPUT -j limit-486 +-A OUTPUT -j limit-485 +-A OUTPUT -j limit-484 +-A OUTPUT -j limit-483 +-A OUTPUT -j limit-482 +-A OUTPUT -j limit-481 +-A OUTPUT -j limit-480 +-A OUTPUT -j limit-479 +-A OUTPUT -j limit-478 +-A OUTPUT -j limit-477 +-A OUTPUT -j limit-476 +-A OUTPUT -j limit-475 +-A OUTPUT -j limit-474 +-A OUTPUT -j limit-473 +-A OUTPUT -j limit-472 +-A OUTPUT -j limit-471 +-A OUTPUT -j limit-470 +-A OUTPUT -j limit-469 +-A OUTPUT -j limit-468 +-A OUTPUT -j limit-467 +-A OUTPUT -j limit-466 +-A OUTPUT -j limit-465 +-A OUTPUT -j limit-464 +-A OUTPUT -j limit-463 +-A OUTPUT -j limit-462 +-A OUTPUT -j limit-461 +-A OUTPUT -j limit-460 +-A OUTPUT -j limit-459 +-A OUTPUT -j limit-458 +-A OUTPUT -j limit-457 +-A OUTPUT -j limit-456 +-A OUTPUT -j limit-455 +-A OUTPUT -j limit-454 +-A OUTPUT -j limit-453 +-A OUTPUT -j limit-452 +-A OUTPUT -j limit-451 +-A OUTPUT -j limit-450 +-A OUTPUT -j limit-449 +-A OUTPUT -j limit-448 +-A OUTPUT -j limit-447 +-A OUTPUT -j limit-446 +-A OUTPUT -j limit-445 +-A OUTPUT -j limit-444 +-A OUTPUT -j limit-443 +-A OUTPUT -j limit-442 +-A OUTPUT -j limit-441 +-A OUTPUT -j limit-440 +-A OUTPUT -j limit-439 +-A OUTPUT -j limit-438 +-A OUTPUT -j limit-437 +-A OUTPUT -j limit-436 +-A OUTPUT -j limit-435 +-A OUTPUT -j limit-434 +-A OUTPUT -j limit-433 +-A OUTPUT -j limit-432 +-A OUTPUT -j limit-431 +-A OUTPUT -j limit-430 +-A OUTPUT -j limit-429 +-A OUTPUT -j limit-428 -A OUTPUT -j limit-427 -A OUTPUT -j limit-426 -A OUTPUT -j limit-425 @@ -12228,150 +19967,6 @@ hash:net family inet -A OUTPUT -j limit-360 -A OUTPUT -j limit-359 -A OUTPUT -j limit-358 --A OUTPUT -j limit-357 --A OUTPUT -j limit-356 --A OUTPUT -j limit-355 --A OUTPUT -j limit-354 --A OUTPUT -j limit-353 --A OUTPUT -j limit-352 --A OUTPUT -j limit-351 --A OUTPUT -j limit-350 --A OUTPUT -j limit-349 --A OUTPUT -j limit-348 --A OUTPUT -j limit-347 --A OUTPUT -j limit-346 --A OUTPUT -j limit-345 --A OUTPUT -j limit-344 --A OUTPUT -j limit-343 --A OUTPUT -j limit-342 --A OUTPUT -j limit-341 --A OUTPUT -j limit-340 --A OUTPUT -j limit-339 --A OUTPUT -j limit-338 --A OUTPUT -j limit-337 --A OUTPUT -j limit-336 --A OUTPUT -j limit-335 --A OUTPUT -j limit-334 --A OUTPUT -j limit-333 --A OUTPUT -j limit-332 --A OUTPUT -j limit-331 --A OUTPUT -j limit-330 --A OUTPUT -j limit-329 --A OUTPUT -j limit-328 --A OUTPUT -j limit-327 --A OUTPUT -j limit-326 --A OUTPUT -j limit-325 --A OUTPUT -j limit-324 --A OUTPUT -j limit-323 --A OUTPUT -j limit-322 --A OUTPUT -j limit-321 --A OUTPUT -j limit-320 --A OUTPUT -j limit-319 --A OUTPUT -j limit-318 --A OUTPUT -j limit-317 --A OUTPUT -j limit-316 --A OUTPUT -j limit-315 --A OUTPUT -j limit-314 --A OUTPUT -j limit-313 --A OUTPUT -j limit-312 --A OUTPUT -j limit-311 --A OUTPUT -j limit-310 --A OUTPUT -j limit-309 --A OUTPUT -j limit-308 --A OUTPUT -j limit-307 --A OUTPUT -j limit-306 --A OUTPUT -j limit-305 --A OUTPUT -j limit-304 --A OUTPUT -j limit-303 --A OUTPUT -j limit-302 --A OUTPUT -j limit-301 --A OUTPUT -j limit-300 --A OUTPUT -j limit-299 --A OUTPUT -j limit-298 --A OUTPUT -j limit-297 --A OUTPUT -j limit-296 --A OUTPUT -j limit-295 --A OUTPUT -j limit-294 --A OUTPUT -j limit-293 --A OUTPUT -j limit-292 --A OUTPUT -j limit-291 --A OUTPUT -j limit-290 --A OUTPUT -j limit-289 --A OUTPUT -j limit-288 --A OUTPUT -j limit-287 --A OUTPUT -j limit-286 --A OUTPUT -j limit-285 --A OUTPUT -j limit-284 --A OUTPUT -j limit-283 --A OUTPUT -j limit-282 --A OUTPUT -j limit-281 --A OUTPUT -j limit-280 --A OUTPUT -j limit-279 --A OUTPUT -j limit-278 --A OUTPUT -j limit-277 --A OUTPUT -j limit-276 --A OUTPUT -j limit-275 --A OUTPUT -j limit-274 --A OUTPUT -j limit-273 --A OUTPUT -j limit-272 --A OUTPUT -j limit-271 --A OUTPUT -j limit-270 --A OUTPUT -j limit-269 --A OUTPUT -j limit-268 --A OUTPUT -j limit-267 --A OUTPUT -j limit-266 --A OUTPUT -j limit-265 --A OUTPUT -j limit-264 --A OUTPUT -j limit-263 --A OUTPUT -j limit-262 --A OUTPUT -j limit-261 --A OUTPUT -j limit-260 --A OUTPUT -j limit-259 --A OUTPUT -j limit-258 --A OUTPUT -j limit-257 --A OUTPUT -j limit-256 --A OUTPUT -j limit-255 --A OUTPUT -j limit-254 --A OUTPUT -j limit-253 --A OUTPUT -j limit-252 --A OUTPUT -j limit-251 --A OUTPUT -j limit-250 --A OUTPUT -j limit-249 --A OUTPUT -j limit-248 --A OUTPUT -j limit-247 --A OUTPUT -j limit-246 --A OUTPUT -j limit-245 --A OUTPUT -j limit-244 --A OUTPUT -j limit-243 --A OUTPUT -j limit-242 --A OUTPUT -j limit-241 --A OUTPUT -j limit-240 --A OUTPUT -j limit-239 --A OUTPUT -j limit-238 --A OUTPUT -j limit-237 --A OUTPUT -j limit-236 --A OUTPUT -j limit-235 --A OUTPUT -j limit-234 --A OUTPUT -j limit-233 --A OUTPUT -j limit-232 --A OUTPUT -j limit-231 --A OUTPUT -j limit-230 --A OUTPUT -j limit-229 --A OUTPUT -j limit-228 --A OUTPUT -j limit-227 --A OUTPUT -j limit-226 --A OUTPUT -j limit-225 --A OUTPUT -j limit-224 --A OUTPUT -j limit-223 --A OUTPUT -j limit-222 --A OUTPUT -j limit-221 --A OUTPUT -j limit-220 --A OUTPUT -j limit-219 --A OUTPUT -j limit-218 --A OUTPUT -j limit-217 --A OUTPUT -j limit-216 --A OUTPUT -j limit-215 --A OUTPUT -j limit-214 -A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A OUTPUT -o lo -j ACCEPT -A OUTPUT -j ACCEPT @@ -12423,29 +20018,29 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-40 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-41 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-42 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-43 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-44 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-45 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-46 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-47 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-48 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-48 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-49 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-50 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-51 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-52 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-53 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-54 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-55 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-56 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-57 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-58 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-59 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-60 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-60 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-61 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-62 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-63 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-64 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-65 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-66 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-67 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-68 @@ -12453,35 +20048,35 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-70 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-71 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-72 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-73 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-74 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-75 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-76 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-77 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-78 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-78 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-79 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-80 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-81 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-82 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-83 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-84 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-85 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-86 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-87 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-88 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-89 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-90 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-90 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-91 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-92 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-93 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-94 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-95 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-96 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-97 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-98 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-99 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-100 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-101 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-102 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-103 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-104 @@ -12489,11 +20084,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-106 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-107 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-108 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-50 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-110 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-111 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-112 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-54 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-114 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-115 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-116 @@ -12501,17 +20096,17 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-118 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-119 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-120 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-62 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-121 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-122 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-123 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-124 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-66 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-125 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-126 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-127 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-128 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-129 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-130 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-131 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-132 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-133 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-134 @@ -12519,11 +20114,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-136 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-137 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-138 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-140 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-141 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-142 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-144 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-145 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-146 @@ -12531,11 +20126,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-148 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-149 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-150 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-152 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-153 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-154 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-156 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-157 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-158 @@ -12543,17 +20138,17 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-160 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-161 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-162 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-163 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-164 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-165 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-166 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-167 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-168 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-169 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-170 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-171 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-172 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-173 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-174 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-175 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-176 @@ -12561,11 +20156,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-178 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-179 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-180 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-74 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-182 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-183 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-184 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-78 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-186 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-187 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-188 @@ -12573,11 +20168,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-190 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-191 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-192 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-193 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-86 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-194 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-195 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-196 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-197 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-90 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-198 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-199 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-200 @@ -12585,15 +20180,159 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-202 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-203 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-204 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-205 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-98 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-206 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-207 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-208 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-209 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-102 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-210 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-211 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-212 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-213 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-214 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-215 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-216 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-110 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-218 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-219 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-220 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-114 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-222 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-223 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-224 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-225 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-226 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-227 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-228 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-229 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-230 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-231 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-232 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-233 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-234 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-236 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-237 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-238 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-240 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-241 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-242 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-243 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-244 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-245 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-246 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-248 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-249 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-250 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-252 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-253 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-254 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-255 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-256 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-257 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-258 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-260 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-261 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-262 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-264 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-265 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-266 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-267 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-268 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-269 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-270 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-272 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-273 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-274 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-276 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-277 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-278 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-279 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-280 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-281 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-282 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-283 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-284 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-285 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-286 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-287 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-288 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-290 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-291 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-292 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-294 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-295 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-296 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-297 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-298 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-299 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-300 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-302 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-303 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-304 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-306 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-307 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-308 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-309 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-310 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-311 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-312 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-314 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-315 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-316 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-318 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-319 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-320 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-321 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-322 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-323 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-324 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-326 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-327 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-328 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-330 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-331 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-332 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-333 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-334 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-335 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-336 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-337 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-338 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-339 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-340 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-341 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-342 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-343 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-344 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-345 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-346 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-347 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-348 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-349 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-350 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-351 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-352 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-353 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-354 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-355 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-356 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-357 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-0 -A OUTPUT -j ACCEPT @@ -12708,6 +20447,150 @@ hash:net family inet -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-37 -A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-38 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-39 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-40 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-41 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-42 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-43 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-44 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-45 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-46 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-47 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-48 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-49 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-50 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-51 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-52 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-53 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-54 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-55 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-56 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-57 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-58 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-59 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-60 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-61 +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT @@ -12823,16 +20706,19 @@ hash:net family inet -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A OUTPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set +-A OUTPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A OUTPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set -A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set -A OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set -A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-199 +-A OUTPUT -j logdrop-343 -A OUTPUT -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT -A OUTPUT -j logaccept-14 --A OUTPUT -j logdrop-200 +-A OUTPUT -j logdrop-344 -A OUTPUT -j logpass-0 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP @@ -12858,1226 +20744,1982 @@ hash:net family inet -A limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --set -A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-11 -A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-100 -m recent --name limit-100 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-41 --A limit-100 -m recent --name limit-100 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-101 -m recent --name limit-101 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-42 --A limit-101 -m recent --name limit-101 --rsource --mask 255.255.255.255 --set --A limit-102 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-43 --A limit-102 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-103 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-44 --A limit-103 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-104 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-45 +-A limit-100 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-100 -j ACCEPT +-A limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1000 -m limit --limit 1/second -j LOG +-A limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1004 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1004 -j ACCEPT +-A limit-1006 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1006 -m limit --limit 1/second -j LOG +-A limit-1006 -j ACCEPT +-A limit-1007 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1007 -m limit --limit 1/second -j LOG +-A limit-1008 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1008 -j ACCEPT +-A limit-1010 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1010 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1011 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1011 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1012 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1012 -m limit --limit 1/second -j LOG +-A limit-1012 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1013 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1013 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1014 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1014 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1015 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1015 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1016 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1016 -j ACCEPT +-A limit-1018 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1018 -m limit --limit 1/second -j LOG +-A limit-1018 -j ACCEPT +-A limit-1019 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1019 -m limit --limit 1/second -j LOG +-A limit-102 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-102 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1020 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1020 -j ACCEPT +-A limit-1022 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1022 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1023 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1023 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1024 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1024 -m limit --limit 1/second -j LOG +-A limit-1024 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1025 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1025 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1026 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1026 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1027 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1027 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1028 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1028 -j ACCEPT +-A limit-103 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-103 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1030 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1030 -m limit --limit 1/second -j LOG +-A limit-1030 -j ACCEPT +-A limit-1031 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1031 -m limit --limit 1/second -j LOG +-A limit-1032 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1032 -j ACCEPT +-A limit-1034 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1034 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1035 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1035 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1036 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1036 -m limit --limit 1/second -j LOG +-A limit-1036 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1037 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1037 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1038 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1038 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1039 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1039 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-104 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-104 -m limit --limit 1/second -j LOG --A limit-104 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-105 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-46 --A limit-105 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-106 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-47 --A limit-106 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-107 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-48 --A limit-107 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-108 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-49 +-A limit-104 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1040 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1040 -j ACCEPT +-A limit-1042 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1042 -m limit --limit 1/second -j LOG +-A limit-1042 -j ACCEPT +-A limit-1043 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1043 -m limit --limit 1/second -j LOG +-A limit-1044 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1044 -j ACCEPT +-A limit-1046 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1046 -j ACCEPT +-A limit-1046 -m limit --limit 1/second -j LOG +-A limit-1046 -j DROP +-A limit-1047 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1047 -j RETURN +-A limit-1047 -m limit --limit 1/second -j LOG +-A limit-1047 -j DROP +-A limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1048 -j logaccept-7 +-A limit-1048 -m limit --limit 1/second -j LOG +-A limit-1048 -j DROP +-A limit-1049 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1049 -j ACCEPT +-A limit-1049 -m limit --limit 1/second -j LOG +-A limit-1049 -j DROP +-A limit-105 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-105 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1050 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1050 -j ACCEPT +-A limit-1050 -m limit --limit 1/second -j LOG +-A limit-1050 -j DROP +-A limit-1051 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1051 -j RETURN +-A limit-1051 -m limit --limit 1/second -j LOG +-A limit-1051 -j DROP +-A limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1052 -j logaccept-8 +-A limit-1052 -m limit --limit 1/second -j LOG +-A limit-1052 -j DROP +-A limit-1053 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1053 -j ACCEPT +-A limit-1053 -m limit --limit 1/second -j LOG +-A limit-1053 -j DROP +-A limit-1054 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1054 -j ACCEPT +-A limit-1054 -j DROP +-A limit-1055 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1055 -j RETURN +-A limit-1055 -j DROP +-A limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1056 -j logaccept-9 +-A limit-1056 -j DROP +-A limit-1057 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1057 -j ACCEPT +-A limit-1057 -j DROP +-A limit-1058 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1058 -j ACCEPT +-A limit-1058 -j DROP +-A limit-1059 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1059 -j RETURN +-A limit-1059 -j DROP +-A limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1060 -j logaccept-10 +-A limit-1060 -j DROP +-A limit-1061 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1061 -j ACCEPT +-A limit-1061 -j DROP +-A limit-1062 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1062 -j ACCEPT +-A limit-1062 -m limit --limit 1/second -j LOG +-A limit-1062 -j DROP +-A limit-1063 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1063 -j RETURN +-A limit-1063 -m limit --limit 1/second -j LOG +-A limit-1063 -j DROP +-A limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1064 -j logaccept-11 +-A limit-1064 -m limit --limit 1/second -j LOG +-A limit-1064 -j DROP +-A limit-1065 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1065 -j ACCEPT +-A limit-1065 -m limit --limit 1/second -j LOG +-A limit-1065 -j DROP +-A limit-1066 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1066 -j ACCEPT +-A limit-1066 -j DROP +-A limit-1067 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1067 -j RETURN +-A limit-1067 -j DROP +-A limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1068 -j logaccept-12 +-A limit-1068 -j DROP +-A limit-1069 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1069 -j ACCEPT +-A limit-1069 -j DROP +-A limit-107 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-107 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1070 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1070 -j ACCEPT +-A limit-1070 -j DROP +-A limit-1071 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1071 -j RETURN +-A limit-1071 -j DROP +-A limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1072 -j logaccept-13 +-A limit-1072 -j DROP +-A limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1073 -j ACCEPT +-A limit-1073 -j DROP +-A limit-108 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-108 -j ACCEPT -A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-12 -A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --set --A limit-110 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-51 +-A limit-110 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-110 -m limit --limit 1/second -j LOG -A limit-110 -j ACCEPT --A limit-111 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-52 +-A limit-111 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-111 -m limit --limit 1/second -j LOG --A limit-112 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-53 +-A limit-112 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-112 -j ACCEPT --A limit-114 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-55 --A limit-114 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-115 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-56 --A limit-115 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-116 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-57 +-A limit-114 -m recent --name limit-114 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-114 -m recent --name limit-114 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-115 -m recent --name limit-115 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-115 -m recent --name limit-115 --rsource --mask 255.255.255.255 --set +-A limit-116 -m recent --name limit-116 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-116 -m limit --limit 1/second -j LOG --A limit-116 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-117 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-58 --A limit-117 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-118 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-59 --A limit-118 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-119 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-60 --A limit-119 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-116 -m recent --name limit-116 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-117 -m recent --name limit-117 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-117 -m recent --name limit-117 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-118 -m recent --name limit-118 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-118 -m recent --name limit-118 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-119 -m recent --name limit-119 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-119 -m recent --name limit-119 --rsource --mask 255.255.255.255 --set -A limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-13 -A limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-120 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-61 --A limit-120 -j ACCEPT --A limit-122 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-63 +-A limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-122 -m limit --limit 1/second -j LOG --A limit-122 -j ACCEPT --A limit-123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-64 --A limit-123 -m limit --limit 1/second -j LOG --A limit-124 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-65 --A limit-124 -j ACCEPT --A limit-126 -m recent --name limit-126 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-126 -m recent --name limit-126 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-127 -m recent --name limit-127 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-127 -m recent --name limit-127 --rsource --mask 255.255.255.255 --set --A limit-128 -m recent --name limit-128 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-126 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-126 -j ACCEPT +-A limit-128 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-128 -m limit --limit 1/second -j LOG --A limit-128 -m recent --name limit-128 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-129 -m recent --name limit-129 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-129 -m recent --name limit-129 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-128 -j ACCEPT +-A limit-129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-129 -m limit --limit 1/second -j LOG -A limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-14 -A limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-130 -m recent --name limit-130 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-130 -m recent --name limit-130 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-131 -m recent --name limit-131 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-131 -m recent --name limit-131 --rsource --mask 255.255.255.255 --set --A limit-132 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-132 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-133 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-133 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-134 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-130 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-130 -j ACCEPT +-A limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-134 -m limit --limit 1/second -j LOG --A limit-134 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-135 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-135 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-136 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-136 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-137 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-137 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-138 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-138 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-138 -j ACCEPT -A limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-15 -A limit-14 -m limit --limit 1/second -j LOG -A limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-140 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-140 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-140 -m limit --limit 1/second -j LOG -A limit-140 -j ACCEPT --A limit-141 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-141 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-141 -m limit --limit 1/second -j LOG --A limit-142 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-142 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-142 -j ACCEPT --A limit-144 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-144 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-145 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-145 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-146 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-144 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-144 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-145 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-145 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-146 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-146 -m limit --limit 1/second -j LOG --A limit-146 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-147 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-147 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-148 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-148 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-149 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-149 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-146 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-147 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-147 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-148 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-148 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-16 -A limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-150 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-150 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-150 -j ACCEPT --A limit-152 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-152 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-152 -m limit --limit 1/second -j LOG -A limit-152 -j ACCEPT --A limit-153 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-153 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-153 -m limit --limit 1/second -j LOG --A limit-154 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-154 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-154 -j ACCEPT --A limit-156 -m recent --name limit-156 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-156 -m recent --name limit-156 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-157 -m recent --name limit-157 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-157 -m recent --name limit-157 --rsource --mask 255.255.255.255 --set --A limit-158 -m recent --name limit-158 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-156 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-156 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-157 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-157 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-158 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-158 -m limit --limit 1/second -j LOG --A limit-158 -m recent --name limit-158 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-159 -m recent --name limit-159 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-159 -m recent --name limit-159 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-158 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-17 -A limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-160 -m recent --name limit-160 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-160 -m recent --name limit-160 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-161 -m recent --name limit-161 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-161 -m recent --name limit-161 --rsource --mask 255.255.255.255 --set --A limit-162 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-162 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-163 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-163 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-164 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-161 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-161 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-162 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-162 -j ACCEPT +-A limit-164 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-164 -m limit --limit 1/second -j LOG --A limit-164 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-165 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-165 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-166 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-166 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-167 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-167 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-168 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-168 -j ACCEPT +-A limit-164 -j ACCEPT +-A limit-165 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-165 -m limit --limit 1/second -j LOG +-A limit-166 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-166 -j ACCEPT +-A limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-61 +-A limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-62 +-A limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --set -A limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-18 -A limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-170 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-63 -A limit-170 -m limit --limit 1/second -j LOG --A limit-170 -j ACCEPT --A limit-171 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-171 -m limit --limit 1/second -j LOG --A limit-172 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-172 -j ACCEPT --A limit-174 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-174 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-175 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-175 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-176 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-64 +-A limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-65 +-A limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-66 +-A limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --set +-A limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-67 +-A limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-68 +-A limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-69 -A limit-176 -m limit --limit 1/second -j LOG --A limit-176 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-177 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-177 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-178 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-178 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-179 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-179 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-70 +-A limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-71 +-A limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-72 +-A limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-18 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-19 -A limit-18 -j ACCEPT --A limit-180 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-180 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-73 -A limit-180 -j ACCEPT --A limit-182 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-182 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-75 -A limit-182 -m limit --limit 1/second -j LOG -A limit-182 -j ACCEPT --A limit-183 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-183 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-76 -A limit-183 -m limit --limit 1/second -j LOG --A limit-184 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-184 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-77 -A limit-184 -j ACCEPT --A limit-186 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-186 -j ACCEPT --A limit-186 -m limit --limit 1/second -j LOG --A limit-186 -j DROP --A limit-187 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-187 -j RETURN --A limit-187 -m limit --limit 1/second -j LOG --A limit-187 -j DROP --A limit-188 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-188 -j logaccept-0 +-A limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-79 +-A limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-80 +-A limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-81 -A limit-188 -m limit --limit 1/second -j LOG --A limit-188 -j DROP --A limit-189 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-189 -j ACCEPT --A limit-189 -m limit --limit 1/second -j LOG --A limit-189 -j DROP --A limit-190 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-190 -j ACCEPT --A limit-190 -m limit --limit 1/second -j LOG --A limit-190 -j DROP --A limit-191 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-191 -j RETURN --A limit-191 -m limit --limit 1/second -j LOG --A limit-191 -j DROP --A limit-192 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-192 -j logaccept-1 --A limit-192 -m limit --limit 1/second -j LOG --A limit-192 -j DROP --A limit-193 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-193 -j ACCEPT --A limit-193 -m limit --limit 1/second -j LOG --A limit-193 -j DROP --A limit-194 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-194 -j ACCEPT --A limit-194 -j DROP --A limit-195 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-195 -j RETURN --A limit-195 -j DROP --A limit-196 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-196 -j logaccept-2 --A limit-196 -j DROP --A limit-197 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-197 -j ACCEPT --A limit-197 -j DROP --A limit-198 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-198 -j ACCEPT --A limit-198 -j DROP --A limit-199 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-199 -j RETURN --A limit-199 -j DROP +-A limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-82 +-A limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-83 +-A limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-84 +-A limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-192 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-85 +-A limit-192 -j ACCEPT +-A limit-194 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-87 +-A limit-194 -m limit --limit 1/second -j LOG +-A limit-194 -j ACCEPT +-A limit-195 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-88 +-A limit-195 -m limit --limit 1/second -j LOG +-A limit-196 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-89 +-A limit-196 -j ACCEPT +-A limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-91 +-A limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-92 +-A limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-3 -A limit-2 -m limit --limit 1/second -j LOG -A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-20 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-21 -A limit-20 -m limit --limit 1/second -j LOG -A limit-20 -j ACCEPT --A limit-200 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-200 -j logaccept-3 --A limit-200 -j DROP --A limit-201 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-201 -j ACCEPT --A limit-201 -j DROP --A limit-202 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-202 -j ACCEPT --A limit-202 -m limit --limit 1/second -j LOG --A limit-202 -j DROP --A limit-203 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-203 -j RETURN --A limit-203 -m limit --limit 1/second -j LOG --A limit-203 -j DROP --A limit-204 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-204 -j logaccept-4 --A limit-204 -m limit --limit 1/second -j LOG --A limit-204 -j DROP --A limit-205 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-205 -j ACCEPT --A limit-205 -m limit --limit 1/second -j LOG --A limit-205 -j DROP --A limit-206 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-206 -j ACCEPT --A limit-206 -j DROP --A limit-207 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-207 -j RETURN --A limit-207 -j DROP --A limit-208 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-208 -j logaccept-5 --A limit-208 -j DROP --A limit-209 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-209 -j ACCEPT --A limit-209 -j DROP +-A limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-93 +-A limit-200 -m limit --limit 1/second -j LOG +-A limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-94 +-A limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-95 +-A limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-96 +-A limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-204 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-97 +-A limit-204 -j ACCEPT +-A limit-206 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-99 +-A limit-206 -m limit --limit 1/second -j LOG +-A limit-206 -j ACCEPT +-A limit-207 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-100 +-A limit-207 -m limit --limit 1/second -j LOG +-A limit-208 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-101 +-A limit-208 -j ACCEPT -A limit-21 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-22 -A limit-21 -m limit --limit 1/second -j LOG --A limit-210 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-210 -j ACCEPT --A limit-210 -j DROP --A limit-211 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-211 -j RETURN --A limit-211 -j DROP --A limit-212 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-212 -j logaccept-6 --A limit-212 -j DROP --A limit-213 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-213 -j ACCEPT --A limit-213 -j DROP --A limit-214 -m recent --name limit-214 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-67 --A limit-214 -m recent --name limit-214 --rsource --mask 255.255.255.255 --set --A limit-215 -m recent --name limit-215 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-68 --A limit-215 -m recent --name limit-215 --rsource --mask 255.255.255.255 --set --A limit-216 -m recent --name limit-216 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-69 --A limit-216 -m recent --name limit-216 --rsource --mask 255.255.255.255 --set --A limit-217 -m recent --name limit-217 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-70 --A limit-217 -m recent --name limit-217 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-218 -m recent --name limit-218 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-71 --A limit-218 -m recent --name limit-218 --rsource --mask 255.255.255.255 --set --A limit-219 -m recent --name limit-219 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-72 --A limit-219 -m recent --name limit-219 --rsource --mask 255.255.255.255 --set +-A limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-103 +-A limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-104 +-A limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-105 +-A limit-212 -m limit --limit 1/second -j LOG +-A limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-106 +-A limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-107 +-A limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-108 +-A limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-216 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-109 +-A limit-216 -j ACCEPT +-A limit-218 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-111 +-A limit-218 -m limit --limit 1/second -j LOG +-A limit-218 -j ACCEPT +-A limit-219 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-112 +-A limit-219 -m limit --limit 1/second -j LOG -A limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-23 -A limit-22 -j ACCEPT --A limit-220 -m recent --name limit-220 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-73 --A limit-220 -m recent --name limit-220 --rsource --mask 255.255.255.255 --set --A limit-221 -m recent --name limit-221 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-74 --A limit-221 -m recent --name limit-221 --rsource --mask 255.255.255.255 --set --A limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-75 --A limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --set --A limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-76 --A limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-77 --A limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --set --A limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-78 --A limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --set --A limit-226 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-79 --A limit-226 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-227 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-80 --A limit-227 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-81 --A limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-82 --A limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-83 --A limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-84 --A limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-85 --A limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-86 --A limit-234 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-87 --A limit-235 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-88 --A limit-235 -m limit --limit 1/second -j LOG --A limit-236 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-89 --A limit-237 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-90 --A limit-238 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-91 --A limit-238 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-239 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-92 --A limit-239 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-220 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-113 +-A limit-220 -j ACCEPT +-A limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --set +-A limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-224 -m limit --limit 1/second -j LOG +-A limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --set +-A limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-230 -m limit --limit 1/second -j LOG +-A limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-234 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-234 -j ACCEPT +-A limit-236 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-236 -m limit --limit 1/second -j LOG +-A limit-236 -j ACCEPT +-A limit-237 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-237 -m limit --limit 1/second -j LOG +-A limit-238 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-238 -j ACCEPT -A limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-25 -A limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-93 --A limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-94 --A limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-95 --A limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-96 --A limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-97 --A limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-98 --A limit-246 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-99 --A limit-247 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-100 --A limit-247 -m limit --limit 1/second -j LOG --A limit-248 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-101 --A limit-249 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-102 +-A limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-242 -m limit --limit 1/second -j LOG +-A limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-246 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-246 -j ACCEPT +-A limit-248 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-248 -m limit --limit 1/second -j LOG +-A limit-248 -j ACCEPT +-A limit-249 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-249 -m limit --limit 1/second -j LOG -A limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-26 -A limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-250 -m recent --name limit-250 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-250 -m recent --name limit-250 --rsource --mask 255.255.255.255 --set --A limit-251 -m recent --name limit-251 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-251 -m recent --name limit-251 --rsource --mask 255.255.255.255 --set --A limit-252 -m recent --name limit-252 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-252 -m recent --name limit-252 --rsource --mask 255.255.255.255 --set --A limit-253 -m recent --name limit-253 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-253 -m recent --name limit-253 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-254 -m recent --name limit-254 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-254 -m recent --name limit-254 --rsource --mask 255.255.255.255 --set --A limit-255 -m recent --name limit-255 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-255 -m recent --name limit-255 --rsource --mask 255.255.255.255 --set --A limit-256 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-256 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-257 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-257 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-258 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-258 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-259 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-259 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-250 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-250 -j ACCEPT +-A limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-254 -m limit --limit 1/second -j LOG +-A limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-258 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-258 -j ACCEPT -A limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-27 -A limit-26 -m limit --limit 1/second -j LOG -A limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-260 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-260 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-261 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-261 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-262 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-263 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-264 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-265 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-265 -m limit --limit 1/second -j LOG --A limit-266 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-267 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-268 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-268 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-269 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-269 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-260 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-260 -m limit --limit 1/second -j LOG +-A limit-260 -j ACCEPT +-A limit-261 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-261 -m limit --limit 1/second -j LOG +-A limit-262 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-262 -j ACCEPT +-A limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-266 -m limit --limit 1/second -j LOG +-A limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-28 -A limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-270 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-270 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-271 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-271 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-272 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-272 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-273 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-273 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-274 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-275 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-276 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-277 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-277 -m limit --limit 1/second -j LOG --A limit-278 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-279 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-270 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-270 -j ACCEPT +-A limit-272 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-272 -m limit --limit 1/second -j LOG +-A limit-272 -j ACCEPT +-A limit-273 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-273 -m limit --limit 1/second -j LOG +-A limit-274 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-274 -j ACCEPT +-A limit-276 -m recent --name limit-276 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-276 -m recent --name limit-276 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-277 -m recent --name limit-277 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-277 -m recent --name limit-277 --rsource --mask 255.255.255.255 --set +-A limit-278 -m recent --name limit-278 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-278 -m limit --limit 1/second -j LOG +-A limit-278 -m recent --name limit-278 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-29 -A limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --set --A limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --set --A limit-282 -m recent --name limit-282 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-282 -m recent --name limit-282 --rsource --mask 255.255.255.255 --set --A limit-283 -m recent --name limit-283 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-283 -m recent --name limit-283 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-284 -m recent --name limit-284 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-284 -m recent --name limit-284 --rsource --mask 255.255.255.255 --set --A limit-285 -m recent --name limit-285 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-285 -m recent --name limit-285 --rsource --mask 255.255.255.255 --set --A limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-282 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-282 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-283 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-283 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-284 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-284 -m limit --limit 1/second -j LOG +-A limit-284 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-285 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-285 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-288 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-288 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-289 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-289 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-288 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-288 -j ACCEPT -A limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-30 -A limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-292 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-294 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-295 -m limit --limit 1/second -j LOG --A limit-296 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-297 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-290 -m limit --limit 1/second -j LOG +-A limit-290 -j ACCEPT +-A limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-291 -m limit --limit 1/second -j LOG +-A limit-292 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-292 -j ACCEPT +-A limit-294 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-294 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-295 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-295 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-296 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-296 -m limit --limit 1/second -j LOG +-A limit-296 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-297 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-297 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-4 -A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-30 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-31 -A limit-30 -j ACCEPT --A limit-300 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-300 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-301 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-301 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-302 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-302 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-303 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-303 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-304 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-305 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-306 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-307 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-307 -m limit --limit 1/second -j LOG --A limit-308 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-309 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-310 -m recent --name limit-310 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-103 --A limit-310 -m recent --name limit-310 --rsource --mask 255.255.255.255 --set --A limit-311 -m recent --name limit-311 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-104 --A limit-311 -m recent --name limit-311 --rsource --mask 255.255.255.255 --set --A limit-312 -m recent --name limit-312 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-105 --A limit-312 -m recent --name limit-312 --rsource --mask 255.255.255.255 --set --A limit-313 -m recent --name limit-313 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-106 --A limit-313 -m recent --name limit-313 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-314 -m recent --name limit-314 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-107 --A limit-314 -m recent --name limit-314 --rsource --mask 255.255.255.255 --set --A limit-315 -m recent --name limit-315 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-108 --A limit-315 -m recent --name limit-315 --rsource --mask 255.255.255.255 --set --A limit-316 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-109 --A limit-316 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-317 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-110 --A limit-317 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-318 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-111 --A limit-318 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-319 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-112 --A limit-319 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-300 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-300 -j ACCEPT +-A limit-302 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-302 -m limit --limit 1/second -j LOG +-A limit-302 -j ACCEPT +-A limit-303 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-303 -m limit --limit 1/second -j LOG +-A limit-304 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-304 -j ACCEPT +-A limit-306 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-306 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-307 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-307 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-308 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-308 -m limit --limit 1/second -j LOG +-A limit-308 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-311 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-311 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-312 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-312 -j ACCEPT +-A limit-314 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-314 -m limit --limit 1/second -j LOG +-A limit-314 -j ACCEPT +-A limit-315 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-315 -m limit --limit 1/second -j LOG +-A limit-316 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-316 -j ACCEPT +-A limit-318 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-318 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-32 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-33 -A limit-32 -m limit --limit 1/second -j LOG -A limit-32 -j ACCEPT --A limit-320 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-113 --A limit-320 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-321 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-114 --A limit-321 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-322 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-115 --A limit-323 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-116 --A limit-324 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-117 --A limit-325 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-118 --A limit-325 -m limit --limit 1/second -j LOG --A limit-326 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-119 --A limit-327 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-120 --A limit-328 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-121 --A limit-328 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-329 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-122 --A limit-329 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-320 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-320 -m limit --limit 1/second -j LOG +-A limit-320 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-321 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-321 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-322 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-322 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-323 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-323 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-324 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-324 -j ACCEPT +-A limit-326 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-326 -m limit --limit 1/second -j LOG +-A limit-326 -j ACCEPT +-A limit-327 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-327 -m limit --limit 1/second -j LOG +-A limit-328 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-328 -j ACCEPT -A limit-33 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-34 -A limit-33 -m limit --limit 1/second -j LOG --A limit-330 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-123 --A limit-330 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-331 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-124 --A limit-331 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-332 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-125 --A limit-332 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-333 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-126 --A limit-333 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-334 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-127 --A limit-335 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-128 --A limit-336 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-129 --A limit-337 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-130 +-A limit-330 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-330 -j ACCEPT +-A limit-330 -m limit --limit 1/second -j LOG +-A limit-330 -j DROP +-A limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-331 -j RETURN +-A limit-331 -m limit --limit 1/second -j LOG +-A limit-331 -j DROP +-A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-332 -j logaccept-0 +-A limit-332 -m limit --limit 1/second -j LOG +-A limit-332 -j DROP +-A limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-333 -j ACCEPT +-A limit-333 -m limit --limit 1/second -j LOG +-A limit-333 -j DROP +-A limit-334 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-334 -j ACCEPT +-A limit-334 -m limit --limit 1/second -j LOG +-A limit-334 -j DROP +-A limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-335 -j RETURN +-A limit-335 -m limit --limit 1/second -j LOG +-A limit-335 -j DROP +-A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-336 -j logaccept-1 +-A limit-336 -m limit --limit 1/second -j LOG +-A limit-336 -j DROP +-A limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-337 -j ACCEPT -A limit-337 -m limit --limit 1/second -j LOG --A limit-338 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-131 --A limit-339 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-132 +-A limit-337 -j DROP +-A limit-338 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-338 -j ACCEPT +-A limit-338 -j DROP +-A limit-339 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-339 -j RETURN +-A limit-339 -j DROP -A limit-34 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-35 -A limit-34 -j ACCEPT --A limit-340 -m recent --name limit-340 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-340 -m recent --name limit-340 --rsource --mask 255.255.255.255 --set --A limit-341 -m recent --name limit-341 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-341 -m recent --name limit-341 --rsource --mask 255.255.255.255 --set --A limit-342 -m recent --name limit-342 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-342 -m recent --name limit-342 --rsource --mask 255.255.255.255 --set --A limit-343 -m recent --name limit-343 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-343 -m recent --name limit-343 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-344 -m recent --name limit-344 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-344 -m recent --name limit-344 --rsource --mask 255.255.255.255 --set --A limit-345 -m recent --name limit-345 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-345 -m recent --name limit-345 --rsource --mask 255.255.255.255 --set --A limit-346 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-346 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-347 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-347 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-348 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-348 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-349 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-349 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-350 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-350 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-351 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-351 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-352 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-353 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-354 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-355 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-355 -m limit --limit 1/second -j LOG --A limit-356 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-357 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-358 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-358 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-359 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-359 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-36 -m recent --name limit-36 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-36 -m recent --name limit-36 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-360 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-360 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-361 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-361 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-362 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-362 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-363 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-363 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-364 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-365 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-366 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-367 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-367 -m limit --limit 1/second -j LOG --A limit-368 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-369 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-37 -m recent --name limit-37 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-37 -m recent --name limit-37 --rsource --mask 255.255.255.255 --set --A limit-370 -m recent --name limit-370 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-370 -m recent --name limit-370 --rsource --mask 255.255.255.255 --set --A limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --set --A limit-372 -m recent --name limit-372 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-372 -m recent --name limit-372 --rsource --mask 255.255.255.255 --set --A limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-374 -m recent --name limit-374 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-374 -m recent --name limit-374 --rsource --mask 255.255.255.255 --set --A limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --set --A limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-377 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-377 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-38 -m recent --name limit-38 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-340 -j logaccept-2 +-A limit-340 -j DROP +-A limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-341 -j ACCEPT +-A limit-341 -j DROP +-A limit-342 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-342 -j ACCEPT +-A limit-342 -j DROP +-A limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-343 -j RETURN +-A limit-343 -j DROP +-A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-344 -j logaccept-3 +-A limit-344 -j DROP +-A limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-345 -j ACCEPT +-A limit-345 -j DROP +-A limit-346 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-346 -j ACCEPT +-A limit-346 -m limit --limit 1/second -j LOG +-A limit-346 -j DROP +-A limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-347 -j RETURN +-A limit-347 -m limit --limit 1/second -j LOG +-A limit-347 -j DROP +-A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-348 -j logaccept-4 +-A limit-348 -m limit --limit 1/second -j LOG +-A limit-348 -j DROP +-A limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-349 -j ACCEPT +-A limit-349 -m limit --limit 1/second -j LOG +-A limit-349 -j DROP +-A limit-350 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-350 -j ACCEPT +-A limit-350 -j DROP +-A limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-351 -j RETURN +-A limit-351 -j DROP +-A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-352 -j logaccept-5 +-A limit-352 -j DROP +-A limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-353 -j ACCEPT +-A limit-353 -j DROP +-A limit-354 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-354 -j ACCEPT +-A limit-354 -j DROP +-A limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-355 -j RETURN +-A limit-355 -j DROP +-A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-356 -j logaccept-6 +-A limit-356 -j DROP +-A limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-357 -j ACCEPT +-A limit-357 -j DROP +-A limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-115 +-A limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --set +-A limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-116 +-A limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --set +-A limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-37 +-A limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-117 +-A limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --set +-A limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-118 +-A limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-119 +-A limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --set +-A limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-120 +-A limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --set +-A limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-121 +-A limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --set +-A limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-122 +-A limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --set +-A limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-123 +-A limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --set +-A limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-124 +-A limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-125 +-A limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --set +-A limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-126 +-A limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --set +-A limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-38 +-A limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-127 +-A limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-128 +-A limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-129 +-A limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-130 +-A limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-131 +-A limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-132 +-A limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-133 +-A limit-377 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-134 +-A limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-135 +-A limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-136 +-A limit-379 -m limit --limit 1/second -j LOG +-A limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-39 -A limit-38 -m limit --limit 1/second -j LOG --A limit-38 -m recent --name limit-38 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-382 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-383 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-384 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-385 -m limit --limit 1/second -j LOG --A limit-386 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-387 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-388 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-388 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-389 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-389 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-39 -m recent --name limit-39 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-39 -m recent --name limit-39 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-390 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-390 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-391 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-391 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-393 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-393 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-394 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-395 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-396 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-397 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-397 -m limit --limit 1/second -j LOG --A limit-398 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-399 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-137 +-A limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-138 +-A limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 +-A limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-140 +-A limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-141 +-A limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-142 +-A limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-143 +-A limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-144 +-A limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-388 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 +-A limit-389 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 +-A limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-40 +-A limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-390 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 +-A limit-391 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 +-A limit-391 -m limit --limit 1/second -j LOG +-A limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 +-A limit-393 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-150 +-A limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-151 +-A limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-152 +-A limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-153 +-A limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-154 +-A limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-155 +-A limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-156 +-A limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-5 -A limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-40 -m recent --name limit-40 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-40 -m recent --name limit-40 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-400 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-400 -j RETURN --A limit-400 -m limit --limit 1/second -j LOG --A limit-400 -j DROP --A limit-401 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-401 -j RETURN --A limit-401 -m limit --limit 1/second -j LOG --A limit-401 -j DROP --A limit-402 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-402 -j RETURN --A limit-402 -m limit --limit 1/second -j LOG --A limit-402 -j DROP --A limit-403 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-403 -j RETURN +-A limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-41 +-A limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-400 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-157 +-A limit-401 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-158 +-A limit-402 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-159 +-A limit-403 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-160 -A limit-403 -m limit --limit 1/second -j LOG --A limit-403 -j DROP --A limit-404 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-404 -j RETURN --A limit-404 -m limit --limit 1/second -j LOG --A limit-404 -j DROP --A limit-405 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-405 -j RETURN --A limit-405 -m limit --limit 1/second -j LOG --A limit-405 -j DROP --A limit-406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-406 -j RETURN --A limit-406 -m limit --limit 1/second -j LOG --A limit-406 -j DROP --A limit-407 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-407 -j RETURN --A limit-407 -m limit --limit 1/second -j LOG --A limit-407 -j DROP --A limit-408 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-408 -j RETURN --A limit-408 -j DROP --A limit-409 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-409 -j RETURN --A limit-409 -j DROP --A limit-41 -m recent --name limit-41 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-41 -m recent --name limit-41 --rsource --mask 255.255.255.255 --set --A limit-410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-410 -j RETURN --A limit-410 -j DROP --A limit-411 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-411 -j RETURN --A limit-411 -j DROP --A limit-412 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-412 -j RETURN --A limit-412 -j DROP --A limit-413 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-413 -j RETURN --A limit-413 -j DROP --A limit-414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-414 -j RETURN --A limit-414 -j DROP --A limit-415 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-415 -j RETURN --A limit-415 -j DROP --A limit-416 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-416 -j RETURN --A limit-416 -m limit --limit 1/second -j LOG --A limit-416 -j DROP --A limit-417 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-417 -j RETURN --A limit-417 -m limit --limit 1/second -j LOG --A limit-417 -j DROP --A limit-418 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-418 -j RETURN --A limit-418 -m limit --limit 1/second -j LOG --A limit-418 -j DROP --A limit-419 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-419 -j RETURN --A limit-419 -m limit --limit 1/second -j LOG --A limit-419 -j DROP --A limit-42 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-42 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-420 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-420 -j RETURN --A limit-420 -j DROP --A limit-421 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-421 -j RETURN --A limit-421 -j DROP --A limit-422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-422 -j RETURN --A limit-422 -j DROP --A limit-423 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-423 -j RETURN --A limit-423 -j DROP --A limit-424 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-424 -j RETURN --A limit-424 -j DROP --A limit-425 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-425 -j RETURN --A limit-425 -j DROP --A limit-426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-426 -j RETURN --A limit-426 -j DROP --A limit-427 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-427 -j RETURN --A limit-427 -j DROP --A limit-428 -m recent --name limit-428 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-133 --A limit-428 -m recent --name limit-428 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-429 -m recent --name limit-429 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-134 --A limit-429 -m recent --name limit-429 --rsource --mask 255.255.255.255 --set --A limit-43 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-43 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-430 -m recent --name limit-430 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-135 --A limit-430 -m limit --limit 1/second -j LOG --A limit-430 -m recent --name limit-430 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-431 -m recent --name limit-431 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-136 --A limit-431 -m recent --name limit-431 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-432 -m recent --name limit-432 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-137 --A limit-432 -m recent --name limit-432 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-433 -m recent --name limit-433 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-138 --A limit-433 -m recent --name limit-433 --rsource --mask 255.255.255.255 --set --A limit-434 -m recent --name limit-434 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 --A limit-434 -m recent --name limit-434 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-435 -m recent --name limit-435 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-140 --A limit-435 -m recent --name limit-435 --rsource --mask 255.255.255.255 --set --A limit-436 -m recent --name limit-436 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-141 --A limit-436 -m limit --limit 1/second -j LOG --A limit-436 -m recent --name limit-436 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-437 -m recent --name limit-437 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-142 --A limit-437 -m recent --name limit-437 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-438 -m recent --name limit-438 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-143 --A limit-438 -m recent --name limit-438 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-439 -m recent --name limit-439 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-144 --A limit-439 -m recent --name limit-439 --rsource --mask 255.255.255.255 --set --A limit-44 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-404 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-161 +-A limit-405 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-162 +-A limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-163 +-A limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-164 +-A limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-165 +-A limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-166 +-A limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-42 +-A limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-167 +-A limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-168 +-A limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-412 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-169 +-A limit-413 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-170 +-A limit-414 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-171 +-A limit-415 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-172 +-A limit-415 -m limit --limit 1/second -j LOG +-A limit-416 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-173 +-A limit-417 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-174 +-A limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --set +-A limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --set +-A limit-42 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-43 +-A limit-42 -j ACCEPT +-A limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --set +-A limit-421 -m recent --name limit-421 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-421 -m recent --name limit-421 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-422 -m recent --name limit-422 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-422 -m recent --name limit-422 --rsource --mask 255.255.255.255 --set +-A limit-423 -m recent --name limit-423 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-423 -m recent --name limit-423 --rsource --mask 255.255.255.255 --set +-A limit-424 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-424 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-425 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-425 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-426 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-426 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-427 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-427 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-430 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-431 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-432 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-433 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-433 -m limit --limit 1/second -j LOG +-A limit-434 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-435 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-436 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-436 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-437 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-437 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-44 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-45 -A limit-44 -m limit --limit 1/second -j LOG --A limit-44 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-440 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-145 --A limit-440 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-441 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-146 --A limit-441 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-442 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-147 --A limit-442 -m limit --limit 1/second -j LOG --A limit-442 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-443 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-148 --A limit-443 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-444 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-149 --A limit-444 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-445 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-150 --A limit-445 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-446 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-151 --A limit-446 -j ACCEPT --A limit-448 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-153 --A limit-448 -m limit --limit 1/second -j LOG --A limit-448 -j ACCEPT --A limit-449 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-154 --A limit-449 -m limit --limit 1/second -j LOG --A limit-45 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-45 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-450 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-155 --A limit-450 -j ACCEPT --A limit-452 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-157 --A limit-452 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-453 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-158 --A limit-453 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-454 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-159 --A limit-454 -m limit --limit 1/second -j LOG --A limit-454 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-455 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-160 --A limit-455 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-456 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-161 --A limit-456 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-457 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-162 --A limit-457 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-458 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-163 --A limit-458 -j ACCEPT --A limit-46 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-46 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-460 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-165 --A limit-460 -m limit --limit 1/second -j LOG --A limit-460 -j ACCEPT --A limit-461 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-166 --A limit-461 -m limit --limit 1/second -j LOG --A limit-462 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-167 --A limit-462 -j ACCEPT --A limit-464 -m recent --name limit-464 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-464 -m recent --name limit-464 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-465 -m recent --name limit-465 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-465 -m recent --name limit-465 --rsource --mask 255.255.255.255 --set --A limit-466 -m recent --name limit-466 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-466 -m limit --limit 1/second -j LOG --A limit-466 -m recent --name limit-466 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-467 -m recent --name limit-467 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-467 -m recent --name limit-467 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-468 -m recent --name limit-468 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-468 -m recent --name limit-468 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-469 -m recent --name limit-469 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-469 -m recent --name limit-469 --rsource --mask 255.255.255.255 --set --A limit-47 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-47 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-470 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-470 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-471 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-471 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-472 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-472 -m limit --limit 1/second -j LOG --A limit-472 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-473 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-473 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-474 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-474 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-475 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-475 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-476 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-476 -j ACCEPT --A limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-478 -m limit --limit 1/second -j LOG --A limit-478 -j ACCEPT --A limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-479 -m limit --limit 1/second -j LOG --A limit-48 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-48 -j ACCEPT --A limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-480 -j ACCEPT --A limit-482 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-482 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-483 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-483 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-484 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-484 -m limit --limit 1/second -j LOG --A limit-484 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-485 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-485 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-486 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-486 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-487 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-487 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-488 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-488 -j ACCEPT --A limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-490 -m limit --limit 1/second -j LOG --A limit-490 -j ACCEPT --A limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-491 -m limit --limit 1/second -j LOG --A limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-492 -j ACCEPT --A limit-494 -m recent --name limit-494 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-494 -m recent --name limit-494 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-495 -m recent --name limit-495 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-495 -m recent --name limit-495 --rsource --mask 255.255.255.255 --set --A limit-496 -m recent --name limit-496 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-496 -m limit --limit 1/second -j LOG --A limit-496 -m recent --name limit-496 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-497 -m recent --name limit-497 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-497 -m recent --name limit-497 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-498 -m recent --name limit-498 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-498 -m recent --name limit-498 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-499 -m recent --name limit-499 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-499 -m recent --name limit-499 --rsource --mask 255.255.255.255 --set +-A limit-44 -j ACCEPT +-A limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-441 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-441 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-442 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-443 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-444 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-445 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-445 -m limit --limit 1/second -j LOG +-A limit-446 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-447 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-45 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-46 +-A limit-45 -m limit --limit 1/second -j LOG +-A limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-451 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-451 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-452 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-452 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-453 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-453 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-454 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-455 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-456 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-457 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-457 -m limit --limit 1/second -j LOG +-A limit-458 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-459 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-46 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-47 +-A limit-46 -j ACCEPT +-A limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-461 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-461 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-462 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-462 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-463 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-464 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-464 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-465 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-465 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-466 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-467 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-468 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-469 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-469 -m limit --limit 1/second -j LOG +-A limit-470 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-471 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --set +-A limit-473 -m recent --name limit-473 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-473 -m recent --name limit-473 --rsource --mask 255.255.255.255 --set +-A limit-474 -m recent --name limit-474 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-474 -m recent --name limit-474 --rsource --mask 255.255.255.255 --set +-A limit-475 -m recent --name limit-475 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-475 -m recent --name limit-475 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-476 -m recent --name limit-476 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-476 -m recent --name limit-476 --rsource --mask 255.255.255.255 --set +-A limit-477 -m recent --name limit-477 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-477 -m recent --name limit-477 --rsource --mask 255.255.255.255 --set +-A limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-49 +-A limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-484 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-485 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-486 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-487 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-487 -m limit --limit 1/second -j LOG +-A limit-488 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-489 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-50 +-A limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-496 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-497 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-498 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-499 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-499 -m limit --limit 1/second -j LOG -A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-6 -A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set --A limit-50 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-51 -A limit-50 -m limit --limit 1/second -j LOG --A limit-50 -j ACCEPT --A limit-500 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-500 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-501 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-501 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-502 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-502 -m limit --limit 1/second -j LOG --A limit-502 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-503 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-503 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-504 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-504 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-505 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-505 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-506 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-506 -j ACCEPT --A limit-508 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-508 -m limit --limit 1/second -j LOG --A limit-508 -j ACCEPT --A limit-509 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-509 -m limit --limit 1/second -j LOG --A limit-51 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-51 -m limit --limit 1/second -j LOG --A limit-510 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-510 -j ACCEPT --A limit-512 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-512 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-513 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-513 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-514 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-514 -m limit --limit 1/second -j LOG --A limit-514 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-515 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-515 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-516 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-516 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-517 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-517 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-518 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-518 -j ACCEPT --A limit-52 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-52 -j ACCEPT --A limit-520 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-520 -m limit --limit 1/second -j LOG --A limit-520 -j ACCEPT --A limit-521 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-521 -m limit --limit 1/second -j LOG --A limit-522 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-522 -j ACCEPT --A limit-524 -m recent --name limit-524 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-169 --A limit-524 -m recent --name limit-524 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-525 -m recent --name limit-525 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-170 --A limit-525 -m recent --name limit-525 --rsource --mask 255.255.255.255 --set --A limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-171 --A limit-526 -m limit --limit 1/second -j LOG --A limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-172 --A limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-173 --A limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-174 --A limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --set --A limit-530 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-175 --A limit-530 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-531 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-176 --A limit-531 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-177 --A limit-532 -m limit --limit 1/second -j LOG --A limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-178 --A limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-179 --A limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-180 --A limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-181 --A limit-536 -j ACCEPT --A limit-538 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-183 --A limit-538 -m limit --limit 1/second -j LOG --A limit-538 -j ACCEPT --A limit-539 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-184 --A limit-539 -m limit --limit 1/second -j LOG --A limit-54 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-54 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-540 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-185 --A limit-540 -j ACCEPT --A limit-542 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-187 --A limit-542 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-543 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-188 --A limit-543 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-189 --A limit-544 -m limit --limit 1/second -j LOG --A limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-190 --A limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-191 --A limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-192 --A limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-193 --A limit-548 -j ACCEPT --A limit-55 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-55 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-195 --A limit-550 -m limit --limit 1/second -j LOG --A limit-550 -j ACCEPT --A limit-551 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-196 --A limit-551 -m limit --limit 1/second -j LOG --A limit-552 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-197 --A limit-552 -j ACCEPT --A limit-554 -m recent --name limit-554 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-554 -m recent --name limit-554 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-555 -m recent --name limit-555 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-555 -m recent --name limit-555 --rsource --mask 255.255.255.255 --set --A limit-556 -m recent --name limit-556 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-556 -m limit --limit 1/second -j LOG --A limit-556 -m recent --name limit-556 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-557 -m recent --name limit-557 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-557 -m recent --name limit-557 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-558 -m recent --name limit-558 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-558 -m recent --name limit-558 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-559 -m recent --name limit-559 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-559 -m recent --name limit-559 --rsource --mask 255.255.255.255 --set --A limit-56 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-500 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-501 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-502 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-502 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-503 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-503 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-504 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-504 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-505 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-505 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-506 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-506 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-508 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-509 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-52 +-A limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-510 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-511 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-511 -m limit --limit 1/second -j LOG +-A limit-512 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-513 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-514 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-514 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-515 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-515 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-516 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-516 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-517 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-517 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-53 +-A limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-520 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-521 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-522 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-523 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-523 -m limit --limit 1/second -j LOG +-A limit-524 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-525 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-175 +-A limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --set +-A limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-176 +-A limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --set +-A limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-177 +-A limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --set +-A limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-178 +-A limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-54 +-A limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-179 +-A limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --set +-A limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-180 +-A limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --set +-A limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-181 +-A limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-182 +-A limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-183 +-A limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-184 +-A limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-185 +-A limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-186 +-A limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-538 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-187 +-A limit-539 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-188 +-A limit-54 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-55 +-A limit-54 -j ACCEPT +-A limit-540 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-189 +-A limit-541 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-190 +-A limit-541 -m limit --limit 1/second -j LOG +-A limit-542 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-191 +-A limit-543 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-192 +-A limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-193 +-A limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-194 +-A limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-195 +-A limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-196 +-A limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-197 +-A limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-198 +-A limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-199 +-A limit-551 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-200 +-A limit-552 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-201 +-A limit-553 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-202 +-A limit-553 -m limit --limit 1/second -j LOG +-A limit-554 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-203 +-A limit-555 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-204 +-A limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-205 +-A limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-206 +-A limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-207 +-A limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-208 +-A limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-56 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-57 -A limit-56 -m limit --limit 1/second -j LOG --A limit-56 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-560 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-560 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-561 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-561 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-562 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-562 -m limit --limit 1/second -j LOG --A limit-562 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-563 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-563 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-564 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-564 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-565 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-565 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-566 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-566 -j ACCEPT --A limit-568 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-568 -m limit --limit 1/second -j LOG --A limit-568 -j ACCEPT --A limit-569 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-569 -m limit --limit 1/second -j LOG --A limit-57 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-57 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-570 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-570 -j ACCEPT --A limit-572 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-572 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-573 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-573 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-574 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-574 -m limit --limit 1/second -j LOG --A limit-574 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-575 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-575 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-576 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-576 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-577 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-577 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-578 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-578 -j ACCEPT --A limit-58 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-58 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-580 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-580 -m limit --limit 1/second -j LOG --A limit-580 -j ACCEPT --A limit-581 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-581 -m limit --limit 1/second -j LOG --A limit-582 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-582 -j ACCEPT +-A limit-56 -j ACCEPT +-A limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-209 +-A limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-210 +-A limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-211 +-A limit-563 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-212 +-A limit-564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-213 +-A limit-565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-214 +-A limit-565 -m limit --limit 1/second -j LOG +-A limit-566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-215 +-A limit-567 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-216 +-A limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-217 +-A limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-218 +-A limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-57 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-58 +-A limit-57 -m limit --limit 1/second -j LOG +-A limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-219 +-A limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-220 +-A limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-221 +-A limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-222 +-A limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-574 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-223 +-A limit-575 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-224 +-A limit-576 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-225 +-A limit-577 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-226 +-A limit-577 -m limit --limit 1/second -j LOG +-A limit-578 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-227 +-A limit-579 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-228 +-A limit-58 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-59 +-A limit-58 -j ACCEPT +-A limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --set +-A limit-581 -m recent --name limit-581 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-581 -m recent --name limit-581 --rsource --mask 255.255.255.255 --set +-A limit-582 -m recent --name limit-582 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-582 -m recent --name limit-582 --rsource --mask 255.255.255.255 --set +-A limit-583 -m recent --name limit-583 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-583 -m recent --name limit-583 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --set -A limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --set --A limit-586 -m recent --name limit-586 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-586 -m limit --limit 1/second -j LOG --A limit-586 -m recent --name limit-586 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-587 -m recent --name limit-587 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-587 -m recent --name limit-587 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-588 -m recent --name limit-588 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-588 -m recent --name limit-588 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-589 -m recent --name limit-589 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-589 -m recent --name limit-589 --rsource --mask 255.255.255.255 --set --A limit-59 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-59 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-586 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-586 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-587 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-587 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-592 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-592 -m limit --limit 1/second -j LOG --A limit-592 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-593 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-593 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-594 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-594 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-595 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-595 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-592 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-593 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-594 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-595 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-595 -m limit --limit 1/second -j LOG -A limit-596 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-596 -j ACCEPT --A limit-598 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-598 -m limit --limit 1/second -j LOG --A limit-598 -j ACCEPT --A limit-599 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-599 -m limit --limit 1/second -j LOG +-A limit-597 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-7 -A limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-60 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-60 -j ACCEPT --A limit-600 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-600 -j ACCEPT +-A limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-600 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-600 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-601 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-601 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-604 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-604 -m limit --limit 1/second -j LOG --A limit-604 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-605 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-605 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-606 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-606 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-607 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-607 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-604 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-605 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-606 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-607 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-607 -m limit --limit 1/second -j LOG -A limit-608 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-608 -j ACCEPT --A limit-610 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-610 -m limit --limit 1/second -j LOG --A limit-610 -j ACCEPT --A limit-611 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-611 -m limit --limit 1/second -j LOG --A limit-612 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-612 -j ACCEPT --A limit-614 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-614 -j ACCEPT --A limit-614 -m limit --limit 1/second -j LOG --A limit-614 -j DROP --A limit-615 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-615 -j RETURN --A limit-615 -m limit --limit 1/second -j LOG --A limit-615 -j DROP --A limit-616 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-616 -j logaccept-7 --A limit-616 -m limit --limit 1/second -j LOG --A limit-616 -j DROP --A limit-617 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-617 -j ACCEPT --A limit-617 -m limit --limit 1/second -j LOG --A limit-617 -j DROP --A limit-618 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-618 -j ACCEPT --A limit-618 -m limit --limit 1/second -j LOG --A limit-618 -j DROP --A limit-619 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-619 -j RETURN +-A limit-609 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-61 -m recent --name limit-61 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-61 -m recent --name limit-61 --rsource --mask 255.255.255.255 --set +-A limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-616 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-617 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-618 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-619 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-619 -m limit --limit 1/second -j LOG --A limit-619 -j DROP --A limit-62 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-62 -m recent --name limit-62 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-62 -m limit --limit 1/second -j LOG --A limit-62 -j ACCEPT --A limit-620 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-620 -j logaccept-8 --A limit-620 -m limit --limit 1/second -j LOG --A limit-620 -j DROP --A limit-621 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-621 -j ACCEPT --A limit-621 -m limit --limit 1/second -j LOG --A limit-621 -j DROP --A limit-622 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-622 -j ACCEPT --A limit-622 -j DROP --A limit-623 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-623 -j RETURN --A limit-623 -j DROP --A limit-624 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-624 -j logaccept-9 --A limit-624 -j DROP --A limit-625 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-625 -j ACCEPT --A limit-625 -j DROP --A limit-626 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-626 -j ACCEPT --A limit-626 -j DROP --A limit-627 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-627 -j RETURN --A limit-627 -j DROP --A limit-628 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-628 -j logaccept-10 --A limit-628 -j DROP --A limit-629 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-629 -j ACCEPT --A limit-629 -j DROP --A limit-63 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-63 -m limit --limit 1/second -j LOG --A limit-630 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-630 -j ACCEPT --A limit-630 -m limit --limit 1/second -j LOG --A limit-630 -j DROP --A limit-631 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-631 -j RETURN +-A limit-62 -m recent --name limit-62 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-620 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-621 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-628 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-629 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-63 -m recent --name limit-63 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-63 -m recent --name limit-63 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-630 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-631 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-631 -m limit --limit 1/second -j LOG --A limit-631 -j DROP --A limit-632 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-632 -j logaccept-11 --A limit-632 -m limit --limit 1/second -j LOG --A limit-632 -j DROP --A limit-633 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-633 -j ACCEPT --A limit-633 -m limit --limit 1/second -j LOG --A limit-633 -j DROP --A limit-634 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-634 -j ACCEPT --A limit-634 -j DROP --A limit-635 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-635 -j RETURN --A limit-635 -j DROP --A limit-636 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-636 -j logaccept-12 --A limit-636 -j DROP --A limit-637 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-637 -j ACCEPT --A limit-637 -j DROP --A limit-638 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-638 -j ACCEPT --A limit-638 -j DROP --A limit-639 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-639 -j RETURN --A limit-639 -j DROP --A limit-64 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-64 -j ACCEPT --A limit-640 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-640 -j logaccept-13 --A limit-640 -j DROP --A limit-641 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-641 -j ACCEPT --A limit-641 -j DROP --A limit-66 -m recent --name limit-66 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-66 -m recent --name limit-66 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-67 -m recent --name limit-67 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-67 -m recent --name limit-67 --rsource --mask 255.255.255.255 --set --A limit-68 -m recent --name limit-68 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-632 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-633 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --set +-A limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --set +-A limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --set +-A limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --set +-A limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --set +-A limit-64 -m recent --name limit-64 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-64 -m recent --name limit-64 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-640 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-640 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-641 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-641 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-642 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-642 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-643 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-643 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-644 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-644 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-646 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-647 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-648 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-649 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-649 -m limit --limit 1/second -j LOG +-A limit-65 -m recent --name limit-65 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-65 -m recent --name limit-65 --rsource --mask 255.255.255.255 --set +-A limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-651 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-652 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-652 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-653 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-653 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-654 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-654 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-655 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-655 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-656 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-656 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-657 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-657 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-658 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-659 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-66 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-66 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-660 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-661 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-661 -m limit --limit 1/second -j LOG +-A limit-662 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-663 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-664 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-664 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-665 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-665 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-666 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-666 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-667 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-667 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-668 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-668 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-669 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-669 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-67 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-67 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-670 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-671 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-672 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-673 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-673 -m limit --limit 1/second -j LOG +-A limit-674 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-675 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-676 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-676 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-677 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-677 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-678 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-678 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-679 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-679 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-68 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-68 -m limit --limit 1/second -j LOG --A limit-68 -m recent --name limit-68 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-69 -m recent --name limit-69 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-69 -m recent --name limit-69 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-68 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-680 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-680 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-681 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-681 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-682 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-683 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-684 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-685 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-685 -m limit --limit 1/second -j LOG +-A limit-686 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-687 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-688 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-688 -j RETURN +-A limit-688 -m limit --limit 1/second -j LOG +-A limit-688 -j DROP +-A limit-689 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-689 -j RETURN +-A limit-689 -m limit --limit 1/second -j LOG +-A limit-689 -j DROP +-A limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-690 -j RETURN +-A limit-690 -m limit --limit 1/second -j LOG +-A limit-690 -j DROP +-A limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-691 -j RETURN +-A limit-691 -m limit --limit 1/second -j LOG +-A limit-691 -j DROP +-A limit-692 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-692 -j RETURN +-A limit-692 -m limit --limit 1/second -j LOG +-A limit-692 -j DROP +-A limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-693 -j RETURN +-A limit-693 -m limit --limit 1/second -j LOG +-A limit-693 -j DROP +-A limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-694 -j RETURN +-A limit-694 -m limit --limit 1/second -j LOG +-A limit-694 -j DROP +-A limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-695 -j RETURN +-A limit-695 -m limit --limit 1/second -j LOG +-A limit-695 -j DROP +-A limit-696 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-696 -j RETURN +-A limit-696 -j DROP +-A limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-697 -j RETURN +-A limit-697 -j DROP +-A limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-698 -j RETURN +-A limit-698 -j DROP +-A limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-699 -j RETURN +-A limit-699 -j DROP -A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-8 -A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --set --A limit-70 -m recent --name limit-70 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-70 -m recent --name limit-70 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-71 -m recent --name limit-71 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-71 -m recent --name limit-71 --rsource --mask 255.255.255.255 --set --A limit-72 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-72 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-73 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-73 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-74 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-700 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-700 -j RETURN +-A limit-700 -j DROP +-A limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-701 -j RETURN +-A limit-701 -j DROP +-A limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-702 -j RETURN +-A limit-702 -j DROP +-A limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-703 -j RETURN +-A limit-703 -j DROP +-A limit-704 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-704 -j RETURN +-A limit-704 -m limit --limit 1/second -j LOG +-A limit-704 -j DROP +-A limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-705 -j RETURN +-A limit-705 -m limit --limit 1/second -j LOG +-A limit-705 -j DROP +-A limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-706 -j RETURN +-A limit-706 -m limit --limit 1/second -j LOG +-A limit-706 -j DROP +-A limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-707 -j RETURN +-A limit-707 -m limit --limit 1/second -j LOG +-A limit-707 -j DROP +-A limit-708 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-708 -j RETURN +-A limit-708 -j DROP +-A limit-709 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-709 -j RETURN +-A limit-709 -j DROP +-A limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-710 -j RETURN +-A limit-710 -j DROP +-A limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-711 -j RETURN +-A limit-711 -j DROP +-A limit-712 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-712 -j RETURN +-A limit-712 -j DROP +-A limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-713 -j RETURN +-A limit-713 -j DROP +-A limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-714 -j RETURN +-A limit-714 -j DROP +-A limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-715 -j RETURN +-A limit-715 -j DROP +-A limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-229 +-A limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-230 +-A limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --set +-A limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-231 +-A limit-718 -m limit --limit 1/second -j LOG +-A limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-232 +-A limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-72 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-72 -j ACCEPT +-A limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-233 +-A limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-234 +-A limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --set +-A limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-235 +-A limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-236 +-A limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --set +-A limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-237 +-A limit-724 -m limit --limit 1/second -j LOG +-A limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-238 +-A limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-239 +-A limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-240 +-A limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --set +-A limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-241 +-A limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-242 +-A limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-243 +-A limit-730 -m limit --limit 1/second -j LOG +-A limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-244 +-A limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-245 +-A limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-246 +-A limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-734 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-247 +-A limit-734 -j ACCEPT +-A limit-736 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-249 +-A limit-736 -m limit --limit 1/second -j LOG +-A limit-736 -j ACCEPT +-A limit-737 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-250 +-A limit-737 -m limit --limit 1/second -j LOG +-A limit-738 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-251 +-A limit-738 -j ACCEPT +-A limit-74 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-74 -m limit --limit 1/second -j LOG --A limit-74 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-75 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-75 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-76 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-76 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-77 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-77 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-78 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-78 -j ACCEPT +-A limit-74 -j ACCEPT +-A limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-253 +-A limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-254 +-A limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-255 +-A limit-742 -m limit --limit 1/second -j LOG +-A limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-256 +-A limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-257 +-A limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-258 +-A limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-746 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-259 +-A limit-746 -j ACCEPT +-A limit-748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-261 +-A limit-748 -m limit --limit 1/second -j LOG +-A limit-748 -j ACCEPT +-A limit-749 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-262 +-A limit-749 -m limit --limit 1/second -j LOG +-A limit-75 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-75 -m limit --limit 1/second -j LOG +-A limit-750 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-263 +-A limit-750 -j ACCEPT +-A limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-265 +-A limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-266 +-A limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-267 +-A limit-754 -m limit --limit 1/second -j LOG +-A limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-268 +-A limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-269 +-A limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-270 +-A limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-758 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-271 +-A limit-758 -j ACCEPT +-A limit-76 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-76 -j ACCEPT +-A limit-760 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-273 +-A limit-760 -m limit --limit 1/second -j LOG +-A limit-760 -j ACCEPT +-A limit-761 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-274 +-A limit-761 -m limit --limit 1/second -j LOG +-A limit-762 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-275 +-A limit-762 -j ACCEPT +-A limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-277 +-A limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-278 +-A limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-279 +-A limit-766 -m limit --limit 1/second -j LOG +-A limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-280 +-A limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-281 +-A limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-282 +-A limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-770 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-283 +-A limit-770 -j ACCEPT +-A limit-772 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-285 +-A limit-772 -m limit --limit 1/second -j LOG +-A limit-772 -j ACCEPT +-A limit-773 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-286 +-A limit-773 -m limit --limit 1/second -j LOG +-A limit-774 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-287 +-A limit-774 -j ACCEPT +-A limit-776 -m recent --name limit-776 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-776 -m recent --name limit-776 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-777 -m recent --name limit-777 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-777 -m recent --name limit-777 --rsource --mask 255.255.255.255 --set +-A limit-778 -m recent --name limit-778 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-778 -m limit --limit 1/second -j LOG +-A limit-778 -m recent --name limit-778 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-779 -m recent --name limit-779 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-779 -m recent --name limit-779 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-78 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-78 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-780 -m recent --name limit-780 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-780 -m recent --name limit-780 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --set +-A limit-782 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-782 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-783 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-783 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-784 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-784 -m limit --limit 1/second -j LOG +-A limit-784 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-785 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-785 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-786 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-786 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-787 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-787 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-788 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-788 -j ACCEPT +-A limit-79 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-79 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-790 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-790 -m limit --limit 1/second -j LOG +-A limit-790 -j ACCEPT +-A limit-791 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-791 -m limit --limit 1/second -j LOG +-A limit-792 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-792 -j ACCEPT +-A limit-794 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-794 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-795 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-795 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-796 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-796 -m limit --limit 1/second -j LOG +-A limit-796 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-797 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-797 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-798 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-798 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-9 -A limit-8 -m limit --limit 1/second -j LOG -A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-80 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-80 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-80 -m limit --limit 1/second -j LOG --A limit-80 -j ACCEPT --A limit-81 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-81 -m limit --limit 1/second -j LOG --A limit-82 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-82 -j ACCEPT --A limit-84 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-84 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-85 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-85 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-86 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-80 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-800 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-800 -j ACCEPT +-A limit-802 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-802 -m limit --limit 1/second -j LOG +-A limit-802 -j ACCEPT +-A limit-803 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-803 -m limit --limit 1/second -j LOG +-A limit-804 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-804 -j ACCEPT +-A limit-806 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-806 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-807 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-807 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-808 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-808 -m limit --limit 1/second -j LOG +-A limit-808 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-809 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-809 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-81 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-81 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-810 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-810 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-811 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-811 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-812 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-812 -j ACCEPT +-A limit-814 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-814 -m limit --limit 1/second -j LOG +-A limit-814 -j ACCEPT +-A limit-815 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-815 -m limit --limit 1/second -j LOG +-A limit-816 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-816 -j ACCEPT +-A limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-82 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-82 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-820 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-820 -m limit --limit 1/second -j LOG +-A limit-820 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-821 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-821 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-822 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-822 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-823 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-823 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-824 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-824 -j ACCEPT +-A limit-826 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-826 -m limit --limit 1/second -j LOG +-A limit-826 -j ACCEPT +-A limit-827 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-827 -m limit --limit 1/second -j LOG +-A limit-828 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-828 -j ACCEPT +-A limit-83 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-83 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-830 -m recent --name limit-830 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-830 -m recent --name limit-830 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-831 -m recent --name limit-831 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-831 -m recent --name limit-831 --rsource --mask 255.255.255.255 --set +-A limit-832 -m recent --name limit-832 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-832 -m limit --limit 1/second -j LOG +-A limit-832 -m recent --name limit-832 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-833 -m recent --name limit-833 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-833 -m recent --name limit-833 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-834 -m recent --name limit-834 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-834 -m recent --name limit-834 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-835 -m recent --name limit-835 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-835 -m recent --name limit-835 --rsource --mask 255.255.255.255 --set +-A limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-838 -m limit --limit 1/second -j LOG +-A limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-84 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-84 -j ACCEPT +-A limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-842 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-842 -j ACCEPT +-A limit-844 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-844 -m limit --limit 1/second -j LOG +-A limit-844 -j ACCEPT +-A limit-845 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-845 -m limit --limit 1/second -j LOG +-A limit-846 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-846 -j ACCEPT +-A limit-848 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-848 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-849 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-849 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-850 -m limit --limit 1/second -j LOG +-A limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-854 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-854 -j ACCEPT +-A limit-856 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-856 -m limit --limit 1/second -j LOG +-A limit-856 -j ACCEPT +-A limit-857 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-857 -m limit --limit 1/second -j LOG +-A limit-858 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-858 -j ACCEPT +-A limit-86 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-86 -m limit --limit 1/second -j LOG --A limit-86 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-87 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-87 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-88 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-88 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-89 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-89 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-86 -j ACCEPT +-A limit-860 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-860 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-861 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-861 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-862 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-862 -m limit --limit 1/second -j LOG +-A limit-862 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-863 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-863 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-864 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-864 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-865 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-865 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-866 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-866 -j ACCEPT +-A limit-868 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-868 -m limit --limit 1/second -j LOG +-A limit-868 -j ACCEPT +-A limit-869 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-869 -m limit --limit 1/second -j LOG +-A limit-87 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-87 -m limit --limit 1/second -j LOG +-A limit-870 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-870 -j ACCEPT +-A limit-872 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-872 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-873 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-873 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-874 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-874 -m limit --limit 1/second -j LOG +-A limit-874 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-875 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-875 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-876 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-876 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-877 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-877 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-878 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-878 -j ACCEPT +-A limit-88 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-88 -j ACCEPT +-A limit-880 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-880 -m limit --limit 1/second -j LOG +-A limit-880 -j ACCEPT +-A limit-881 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-881 -m limit --limit 1/second -j LOG +-A limit-882 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-882 -j ACCEPT +-A limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-289 +-A limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-290 +-A limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --set +-A limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-291 +-A limit-886 -m limit --limit 1/second -j LOG +-A limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-292 +-A limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-293 +-A limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-294 +-A limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --set +-A limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-295 +-A limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-296 +-A limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-297 +-A limit-892 -m limit --limit 1/second -j LOG +-A limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-298 +-A limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-299 +-A limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-300 +-A limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-896 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-301 +-A limit-896 -j ACCEPT +-A limit-898 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-303 +-A limit-898 -m limit --limit 1/second -j LOG +-A limit-898 -j ACCEPT +-A limit-899 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-304 +-A limit-899 -m limit --limit 1/second -j LOG -A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-10 -A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-90 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-90 -j ACCEPT --A limit-92 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-900 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-305 +-A limit-900 -j ACCEPT +-A limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-307 +-A limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-308 +-A limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-309 +-A limit-904 -m limit --limit 1/second -j LOG +-A limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-310 +-A limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-311 +-A limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-312 +-A limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-908 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-313 +-A limit-908 -j ACCEPT +-A limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-910 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-315 +-A limit-910 -m limit --limit 1/second -j LOG +-A limit-910 -j ACCEPT +-A limit-911 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-316 +-A limit-911 -m limit --limit 1/second -j LOG +-A limit-912 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-317 +-A limit-912 -j ACCEPT +-A limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-319 +-A limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-320 +-A limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-321 +-A limit-916 -m limit --limit 1/second -j LOG +-A limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-322 +-A limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-323 +-A limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-324 +-A limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-92 -m limit --limit 1/second -j LOG --A limit-92 -j ACCEPT --A limit-93 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-93 -m limit --limit 1/second -j LOG --A limit-94 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-94 -j ACCEPT --A limit-96 -m recent --name limit-96 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-37 --A limit-96 -m recent --name limit-96 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-97 -m recent --name limit-97 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-38 --A limit-97 -m recent --name limit-97 --rsource --mask 255.255.255.255 --set --A limit-98 -m recent --name limit-98 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-39 +-A limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-920 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-325 +-A limit-920 -j ACCEPT +-A limit-922 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-327 +-A limit-922 -m limit --limit 1/second -j LOG +-A limit-922 -j ACCEPT +-A limit-923 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-328 +-A limit-923 -m limit --limit 1/second -j LOG +-A limit-924 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-329 +-A limit-924 -j ACCEPT +-A limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-331 +-A limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-332 +-A limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-333 +-A limit-928 -m limit --limit 1/second -j LOG +-A limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-334 +-A limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-335 +-A limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-336 +-A limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-932 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-337 +-A limit-932 -j ACCEPT +-A limit-934 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-339 +-A limit-934 -m limit --limit 1/second -j LOG +-A limit-934 -j ACCEPT +-A limit-935 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-340 +-A limit-935 -m limit --limit 1/second -j LOG +-A limit-936 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-341 +-A limit-936 -j ACCEPT +-A limit-938 -m recent --name limit-938 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-938 -m recent --name limit-938 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-939 -m recent --name limit-939 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-939 -m recent --name limit-939 --rsource --mask 255.255.255.255 --set +-A limit-94 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-94 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-940 -m recent --name limit-940 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-940 -m limit --limit 1/second -j LOG +-A limit-940 -m recent --name limit-940 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-941 -m recent --name limit-941 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-941 -m recent --name limit-941 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-942 -m recent --name limit-942 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-942 -m recent --name limit-942 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-943 -m recent --name limit-943 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-943 -m recent --name limit-943 --rsource --mask 255.255.255.255 --set +-A limit-944 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-944 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-945 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-945 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-946 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-946 -m limit --limit 1/second -j LOG +-A limit-946 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-947 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-947 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-948 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-948 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-949 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-949 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-95 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-95 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-950 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-950 -j ACCEPT +-A limit-952 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-952 -m limit --limit 1/second -j LOG +-A limit-952 -j ACCEPT +-A limit-953 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-953 -m limit --limit 1/second -j LOG +-A limit-954 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-954 -j ACCEPT +-A limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-957 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-957 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-958 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-958 -m limit --limit 1/second -j LOG +-A limit-958 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-959 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-959 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-96 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-96 -j ACCEPT +-A limit-960 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-960 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-961 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-961 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-962 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-962 -j ACCEPT +-A limit-964 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-964 -m limit --limit 1/second -j LOG +-A limit-964 -j ACCEPT +-A limit-965 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-965 -m limit --limit 1/second -j LOG +-A limit-966 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-966 -j ACCEPT +-A limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-970 -m limit --limit 1/second -j LOG +-A limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-973 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-973 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-974 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-974 -j ACCEPT +-A limit-976 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-976 -m limit --limit 1/second -j LOG +-A limit-976 -j ACCEPT +-A limit-977 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-977 -m limit --limit 1/second -j LOG +-A limit-978 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-978 -j ACCEPT +-A limit-98 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-98 -m limit --limit 1/second -j LOG --A limit-98 -m recent --name limit-98 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-99 -m recent --name limit-99 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-40 --A limit-99 -m recent --name limit-99 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-98 -j ACCEPT +-A limit-980 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-980 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-982 -m limit --limit 1/second -j LOG +-A limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-986 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-986 -j ACCEPT +-A limit-988 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-988 -m limit --limit 1/second -j LOG +-A limit-988 -j ACCEPT +-A limit-989 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-989 -m limit --limit 1/second -j LOG +-A limit-99 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-99 -m limit --limit 1/second -j LOG +-A limit-990 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-990 -j ACCEPT +-A limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --set +-A limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-994 -m limit --limit 1/second -j LOG +-A limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-996 -m recent --name limit-996 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-996 -m recent --name limit-996 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --set +-A limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT -A logaccept-1 -m limit --limit 1/second -j LOG @@ -14172,12 +22814,60 @@ hash:net family inet -A logaccept-final-36 -j ACCEPT -A logaccept-final-37 -m limit --limit 1/second -j LOG -A logaccept-final-37 -j ACCEPT +-A logaccept-final-38 -m limit --limit 1/second -j LOG +-A logaccept-final-38 -j ACCEPT +-A logaccept-final-39 -m limit --limit 1/second -j LOG +-A logaccept-final-39 -j ACCEPT -A logaccept-final-4 -m limit --limit 1/second -j LOG -A logaccept-final-4 -j ACCEPT +-A logaccept-final-40 -m limit --limit 1/second -j LOG +-A logaccept-final-40 -j ACCEPT +-A logaccept-final-41 -m limit --limit 1/second -j LOG +-A logaccept-final-41 -j ACCEPT +-A logaccept-final-42 -m limit --limit 1/second -j LOG +-A logaccept-final-42 -j ACCEPT +-A logaccept-final-43 -m limit --limit 1/second -j LOG +-A logaccept-final-43 -j ACCEPT +-A logaccept-final-44 -m limit --limit 1/second -j LOG +-A logaccept-final-44 -j ACCEPT +-A logaccept-final-45 -m limit --limit 1/second -j LOG +-A logaccept-final-45 -j ACCEPT +-A logaccept-final-46 -m limit --limit 1/second -j LOG +-A logaccept-final-46 -j ACCEPT +-A logaccept-final-47 -m limit --limit 1/second -j LOG +-A logaccept-final-47 -j ACCEPT +-A logaccept-final-48 -m limit --limit 1/second -j LOG +-A logaccept-final-48 -j ACCEPT +-A logaccept-final-49 -m limit --limit 1/second -j LOG +-A logaccept-final-49 -j ACCEPT -A logaccept-final-5 -m limit --limit 1/second -j LOG -A logaccept-final-5 -j ACCEPT +-A logaccept-final-50 -m limit --limit 1/second -j LOG +-A logaccept-final-50 -j ACCEPT +-A logaccept-final-51 -m limit --limit 1/second -j LOG +-A logaccept-final-51 -j ACCEPT +-A logaccept-final-52 -m limit --limit 1/second -j LOG +-A logaccept-final-52 -j ACCEPT +-A logaccept-final-53 -m limit --limit 1/second -j LOG +-A logaccept-final-53 -j ACCEPT +-A logaccept-final-54 -m limit --limit 1/second -j LOG +-A logaccept-final-54 -j ACCEPT +-A logaccept-final-55 -m limit --limit 1/second -j LOG +-A logaccept-final-55 -j ACCEPT +-A logaccept-final-56 -m limit --limit 1/second -j LOG +-A logaccept-final-56 -j ACCEPT +-A logaccept-final-57 -m limit --limit 1/second -j LOG +-A logaccept-final-57 -j ACCEPT +-A logaccept-final-58 -m limit --limit 1/second -j LOG +-A logaccept-final-58 -j ACCEPT +-A logaccept-final-59 -m limit --limit 1/second -j LOG +-A logaccept-final-59 -j ACCEPT -A logaccept-final-6 -m limit --limit 1/second -j LOG -A logaccept-final-6 -j ACCEPT +-A logaccept-final-60 -m limit --limit 1/second -j LOG +-A logaccept-final-60 -j ACCEPT +-A logaccept-final-61 -m limit --limit 1/second -j LOG +-A logaccept-final-61 -j ACCEPT -A logaccept-final-7 -m limit --limit 1/second -j LOG -A logaccept-final-7 -j ACCEPT -A logaccept-final-8 -m limit --limit 1/second -j LOG @@ -14194,8 +22884,6 @@ hash:net family inet -A logdrop-100 -j DROP -A logdrop-101 -m limit --limit 1/second -j LOG -A logdrop-101 -j DROP --A logdrop-102 -m limit --limit 1/second -j LOG --A logdrop-102 -j DROP -A logdrop-103 -m limit --limit 1/second -j LOG -A logdrop-103 -j DROP -A logdrop-104 -m limit --limit 1/second -j LOG @@ -14212,16 +22900,12 @@ hash:net family inet -A logdrop-109 -j DROP -A logdrop-11 -m limit --limit 1/second -j LOG -A logdrop-11 -j DROP --A logdrop-110 -m limit --limit 1/second -j LOG --A logdrop-110 -j DROP -A logdrop-111 -m limit --limit 1/second -j LOG -A logdrop-111 -j DROP -A logdrop-112 -m limit --limit 1/second -j LOG -A logdrop-112 -j DROP -A logdrop-113 -m limit --limit 1/second -j LOG -A logdrop-113 -j DROP --A logdrop-114 -m limit --limit 1/second -j LOG --A logdrop-114 -j DROP -A logdrop-115 -m limit --limit 1/second -j LOG -A logdrop-115 -j DROP -A logdrop-116 -m limit --limit 1/second -j LOG @@ -14304,12 +22988,16 @@ hash:net family inet -A logdrop-150 -j DROP -A logdrop-151 -m limit --limit 1/second -j LOG -A logdrop-151 -j DROP +-A logdrop-152 -m limit --limit 1/second -j LOG +-A logdrop-152 -j DROP -A logdrop-153 -m limit --limit 1/second -j LOG -A logdrop-153 -j DROP -A logdrop-154 -m limit --limit 1/second -j LOG -A logdrop-154 -j DROP -A logdrop-155 -m limit --limit 1/second -j LOG -A logdrop-155 -j DROP +-A logdrop-156 -m limit --limit 1/second -j LOG +-A logdrop-156 -j DROP -A logdrop-157 -m limit --limit 1/second -j LOG -A logdrop-157 -j DROP -A logdrop-158 -m limit --limit 1/second -j LOG @@ -14326,12 +23014,16 @@ hash:net family inet -A logdrop-162 -j DROP -A logdrop-163 -m limit --limit 1/second -j LOG -A logdrop-163 -j DROP +-A logdrop-164 -m limit --limit 1/second -j LOG +-A logdrop-164 -j DROP -A logdrop-165 -m limit --limit 1/second -j LOG -A logdrop-165 -j DROP -A logdrop-166 -m limit --limit 1/second -j LOG -A logdrop-166 -j DROP -A logdrop-167 -m limit --limit 1/second -j LOG -A logdrop-167 -j DROP +-A logdrop-168 -m limit --limit 1/second -j LOG +-A logdrop-168 -j DROP -A logdrop-169 -m limit --limit 1/second -j LOG -A logdrop-169 -j DROP -A logdrop-17 -m limit --limit 1/second -j LOG @@ -14362,12 +23054,16 @@ hash:net family inet -A logdrop-180 -j DROP -A logdrop-181 -m limit --limit 1/second -j LOG -A logdrop-181 -j DROP +-A logdrop-182 -m limit --limit 1/second -j LOG +-A logdrop-182 -j DROP -A logdrop-183 -m limit --limit 1/second -j LOG -A logdrop-183 -j DROP -A logdrop-184 -m limit --limit 1/second -j LOG -A logdrop-184 -j DROP -A logdrop-185 -m limit --limit 1/second -j LOG -A logdrop-185 -j DROP +-A logdrop-186 -m limit --limit 1/second -j LOG +-A logdrop-186 -j DROP -A logdrop-187 -m limit --limit 1/second -j LOG -A logdrop-187 -j DROP -A logdrop-188 -m limit --limit 1/second -j LOG @@ -14384,44 +23080,304 @@ hash:net family inet -A logdrop-192 -j DROP -A logdrop-193 -m limit --limit 1/second -j LOG -A logdrop-193 -j DROP +-A logdrop-194 -m limit --limit 1/second -j LOG +-A logdrop-194 -j DROP -A logdrop-195 -m limit --limit 1/second -j LOG -A logdrop-195 -j DROP -A logdrop-196 -m limit --limit 1/second -j LOG -A logdrop-196 -j DROP -A logdrop-197 -m limit --limit 1/second -j LOG -A logdrop-197 -j DROP +-A logdrop-198 -m limit --limit 1/second -j LOG +-A logdrop-198 -j DROP -A logdrop-199 -m limit --limit 1/second -j LOG -A logdrop-199 -j DROP -A logdrop-2 -m limit --limit 1/second -j LOG -A logdrop-2 -j DROP -A logdrop-200 -m limit --limit 1/second -j LOG -A logdrop-200 -j DROP +-A logdrop-201 -m limit --limit 1/second -j LOG +-A logdrop-201 -j DROP +-A logdrop-202 -m limit --limit 1/second -j LOG +-A logdrop-202 -j DROP +-A logdrop-203 -m limit --limit 1/second -j LOG +-A logdrop-203 -j DROP +-A logdrop-204 -m limit --limit 1/second -j LOG +-A logdrop-204 -j DROP +-A logdrop-205 -m limit --limit 1/second -j LOG +-A logdrop-205 -j DROP +-A logdrop-206 -m limit --limit 1/second -j LOG +-A logdrop-206 -j DROP +-A logdrop-207 -m limit --limit 1/second -j LOG +-A logdrop-207 -j DROP +-A logdrop-208 -m limit --limit 1/second -j LOG +-A logdrop-208 -j DROP +-A logdrop-209 -m limit --limit 1/second -j LOG +-A logdrop-209 -j DROP -A logdrop-21 -m limit --limit 1/second -j LOG -A logdrop-21 -j DROP +-A logdrop-210 -m limit --limit 1/second -j LOG +-A logdrop-210 -j DROP +-A logdrop-211 -m limit --limit 1/second -j LOG +-A logdrop-211 -j DROP +-A logdrop-212 -m limit --limit 1/second -j LOG +-A logdrop-212 -j DROP +-A logdrop-213 -m limit --limit 1/second -j LOG +-A logdrop-213 -j DROP +-A logdrop-214 -m limit --limit 1/second -j LOG +-A logdrop-214 -j DROP +-A logdrop-215 -m limit --limit 1/second -j LOG +-A logdrop-215 -j DROP +-A logdrop-216 -m limit --limit 1/second -j LOG +-A logdrop-216 -j DROP +-A logdrop-217 -m limit --limit 1/second -j LOG +-A logdrop-217 -j DROP +-A logdrop-218 -m limit --limit 1/second -j LOG +-A logdrop-218 -j DROP +-A logdrop-219 -m limit --limit 1/second -j LOG +-A logdrop-219 -j DROP -A logdrop-22 -m limit --limit 1/second -j LOG -A logdrop-22 -j DROP +-A logdrop-220 -m limit --limit 1/second -j LOG +-A logdrop-220 -j DROP +-A logdrop-221 -m limit --limit 1/second -j LOG +-A logdrop-221 -j DROP +-A logdrop-222 -m limit --limit 1/second -j LOG +-A logdrop-222 -j DROP +-A logdrop-223 -m limit --limit 1/second -j LOG +-A logdrop-223 -j DROP +-A logdrop-224 -m limit --limit 1/second -j LOG +-A logdrop-224 -j DROP +-A logdrop-225 -m limit --limit 1/second -j LOG +-A logdrop-225 -j DROP +-A logdrop-226 -m limit --limit 1/second -j LOG +-A logdrop-226 -j DROP +-A logdrop-227 -m limit --limit 1/second -j LOG +-A logdrop-227 -j DROP +-A logdrop-228 -m limit --limit 1/second -j LOG +-A logdrop-228 -j DROP +-A logdrop-229 -m limit --limit 1/second -j LOG +-A logdrop-229 -j DROP -A logdrop-23 -m limit --limit 1/second -j LOG -A logdrop-23 -j DROP +-A logdrop-230 -m limit --limit 1/second -j LOG +-A logdrop-230 -j DROP +-A logdrop-231 -m limit --limit 1/second -j LOG +-A logdrop-231 -j DROP +-A logdrop-232 -m limit --limit 1/second -j LOG +-A logdrop-232 -j DROP +-A logdrop-233 -m limit --limit 1/second -j LOG +-A logdrop-233 -j DROP +-A logdrop-234 -m limit --limit 1/second -j LOG +-A logdrop-234 -j DROP +-A logdrop-235 -m limit --limit 1/second -j LOG +-A logdrop-235 -j DROP +-A logdrop-236 -m limit --limit 1/second -j LOG +-A logdrop-236 -j DROP +-A logdrop-237 -m limit --limit 1/second -j LOG +-A logdrop-237 -j DROP +-A logdrop-238 -m limit --limit 1/second -j LOG +-A logdrop-238 -j DROP +-A logdrop-239 -m limit --limit 1/second -j LOG +-A logdrop-239 -j DROP +-A logdrop-240 -m limit --limit 1/second -j LOG +-A logdrop-240 -j DROP +-A logdrop-241 -m limit --limit 1/second -j LOG +-A logdrop-241 -j DROP +-A logdrop-242 -m limit --limit 1/second -j LOG +-A logdrop-242 -j DROP +-A logdrop-243 -m limit --limit 1/second -j LOG +-A logdrop-243 -j DROP +-A logdrop-244 -m limit --limit 1/second -j LOG +-A logdrop-244 -j DROP +-A logdrop-245 -m limit --limit 1/second -j LOG +-A logdrop-245 -j DROP +-A logdrop-246 -m limit --limit 1/second -j LOG +-A logdrop-246 -j DROP +-A logdrop-247 -m limit --limit 1/second -j LOG +-A logdrop-247 -j DROP +-A logdrop-249 -m limit --limit 1/second -j LOG +-A logdrop-249 -j DROP -A logdrop-25 -m limit --limit 1/second -j LOG -A logdrop-25 -j DROP +-A logdrop-250 -m limit --limit 1/second -j LOG +-A logdrop-250 -j DROP +-A logdrop-251 -m limit --limit 1/second -j LOG +-A logdrop-251 -j DROP +-A logdrop-253 -m limit --limit 1/second -j LOG +-A logdrop-253 -j DROP +-A logdrop-254 -m limit --limit 1/second -j LOG +-A logdrop-254 -j DROP +-A logdrop-255 -m limit --limit 1/second -j LOG +-A logdrop-255 -j DROP +-A logdrop-256 -m limit --limit 1/second -j LOG +-A logdrop-256 -j DROP +-A logdrop-257 -m limit --limit 1/second -j LOG +-A logdrop-257 -j DROP +-A logdrop-258 -m limit --limit 1/second -j LOG +-A logdrop-258 -j DROP +-A logdrop-259 -m limit --limit 1/second -j LOG +-A logdrop-259 -j DROP -A logdrop-26 -m limit --limit 1/second -j LOG -A logdrop-26 -j DROP +-A logdrop-261 -m limit --limit 1/second -j LOG +-A logdrop-261 -j DROP +-A logdrop-262 -m limit --limit 1/second -j LOG +-A logdrop-262 -j DROP +-A logdrop-263 -m limit --limit 1/second -j LOG +-A logdrop-263 -j DROP +-A logdrop-265 -m limit --limit 1/second -j LOG +-A logdrop-265 -j DROP +-A logdrop-266 -m limit --limit 1/second -j LOG +-A logdrop-266 -j DROP +-A logdrop-267 -m limit --limit 1/second -j LOG +-A logdrop-267 -j DROP +-A logdrop-268 -m limit --limit 1/second -j LOG +-A logdrop-268 -j DROP +-A logdrop-269 -m limit --limit 1/second -j LOG +-A logdrop-269 -j DROP -A logdrop-27 -m limit --limit 1/second -j LOG -A logdrop-27 -j DROP +-A logdrop-270 -m limit --limit 1/second -j LOG +-A logdrop-270 -j DROP +-A logdrop-271 -m limit --limit 1/second -j LOG +-A logdrop-271 -j DROP +-A logdrop-273 -m limit --limit 1/second -j LOG +-A logdrop-273 -j DROP +-A logdrop-274 -m limit --limit 1/second -j LOG +-A logdrop-274 -j DROP +-A logdrop-275 -m limit --limit 1/second -j LOG +-A logdrop-275 -j DROP +-A logdrop-277 -m limit --limit 1/second -j LOG +-A logdrop-277 -j DROP +-A logdrop-278 -m limit --limit 1/second -j LOG +-A logdrop-278 -j DROP +-A logdrop-279 -m limit --limit 1/second -j LOG +-A logdrop-279 -j DROP -A logdrop-28 -m limit --limit 1/second -j LOG -A logdrop-28 -j DROP +-A logdrop-280 -m limit --limit 1/second -j LOG +-A logdrop-280 -j DROP +-A logdrop-281 -m limit --limit 1/second -j LOG +-A logdrop-281 -j DROP +-A logdrop-282 -m limit --limit 1/second -j LOG +-A logdrop-282 -j DROP +-A logdrop-283 -m limit --limit 1/second -j LOG +-A logdrop-283 -j DROP +-A logdrop-285 -m limit --limit 1/second -j LOG +-A logdrop-285 -j DROP +-A logdrop-286 -m limit --limit 1/second -j LOG +-A logdrop-286 -j DROP +-A logdrop-287 -m limit --limit 1/second -j LOG +-A logdrop-287 -j DROP +-A logdrop-289 -m limit --limit 1/second -j LOG +-A logdrop-289 -j DROP -A logdrop-29 -m limit --limit 1/second -j LOG -A logdrop-29 -j DROP +-A logdrop-290 -m limit --limit 1/second -j LOG +-A logdrop-290 -j DROP +-A logdrop-291 -m limit --limit 1/second -j LOG +-A logdrop-291 -j DROP +-A logdrop-292 -m limit --limit 1/second -j LOG +-A logdrop-292 -j DROP +-A logdrop-293 -m limit --limit 1/second -j LOG +-A logdrop-293 -j DROP +-A logdrop-294 -m limit --limit 1/second -j LOG +-A logdrop-294 -j DROP +-A logdrop-295 -m limit --limit 1/second -j LOG +-A logdrop-295 -j DROP +-A logdrop-296 -m limit --limit 1/second -j LOG +-A logdrop-296 -j DROP +-A logdrop-297 -m limit --limit 1/second -j LOG +-A logdrop-297 -j DROP +-A logdrop-298 -m limit --limit 1/second -j LOG +-A logdrop-298 -j DROP +-A logdrop-299 -m limit --limit 1/second -j LOG +-A logdrop-299 -j DROP -A logdrop-3 -m limit --limit 1/second -j LOG -A logdrop-3 -j DROP -A logdrop-30 -m limit --limit 1/second -j LOG -A logdrop-30 -j DROP +-A logdrop-300 -m limit --limit 1/second -j LOG +-A logdrop-300 -j DROP +-A logdrop-301 -m limit --limit 1/second -j LOG +-A logdrop-301 -j DROP +-A logdrop-303 -m limit --limit 1/second -j LOG +-A logdrop-303 -j DROP +-A logdrop-304 -m limit --limit 1/second -j LOG +-A logdrop-304 -j DROP +-A logdrop-305 -m limit --limit 1/second -j LOG +-A logdrop-305 -j DROP +-A logdrop-307 -m limit --limit 1/second -j LOG +-A logdrop-307 -j DROP +-A logdrop-308 -m limit --limit 1/second -j LOG +-A logdrop-308 -j DROP +-A logdrop-309 -m limit --limit 1/second -j LOG +-A logdrop-309 -j DROP -A logdrop-31 -m limit --limit 1/second -j LOG -A logdrop-31 -j DROP +-A logdrop-310 -m limit --limit 1/second -j LOG +-A logdrop-310 -j DROP +-A logdrop-311 -m limit --limit 1/second -j LOG +-A logdrop-311 -j DROP +-A logdrop-312 -m limit --limit 1/second -j LOG +-A logdrop-312 -j DROP +-A logdrop-313 -m limit --limit 1/second -j LOG +-A logdrop-313 -j DROP +-A logdrop-315 -m limit --limit 1/second -j LOG +-A logdrop-315 -j DROP +-A logdrop-316 -m limit --limit 1/second -j LOG +-A logdrop-316 -j DROP +-A logdrop-317 -m limit --limit 1/second -j LOG +-A logdrop-317 -j DROP +-A logdrop-319 -m limit --limit 1/second -j LOG +-A logdrop-319 -j DROP +-A logdrop-320 -m limit --limit 1/second -j LOG +-A logdrop-320 -j DROP +-A logdrop-321 -m limit --limit 1/second -j LOG +-A logdrop-321 -j DROP +-A logdrop-322 -m limit --limit 1/second -j LOG +-A logdrop-322 -j DROP +-A logdrop-323 -m limit --limit 1/second -j LOG +-A logdrop-323 -j DROP +-A logdrop-324 -m limit --limit 1/second -j LOG +-A logdrop-324 -j DROP +-A logdrop-325 -m limit --limit 1/second -j LOG +-A logdrop-325 -j DROP +-A logdrop-327 -m limit --limit 1/second -j LOG +-A logdrop-327 -j DROP +-A logdrop-328 -m limit --limit 1/second -j LOG +-A logdrop-328 -j DROP +-A logdrop-329 -m limit --limit 1/second -j LOG +-A logdrop-329 -j DROP -A logdrop-33 -m limit --limit 1/second -j LOG -A logdrop-33 -j DROP +-A logdrop-331 -m limit --limit 1/second -j LOG +-A logdrop-331 -j DROP +-A logdrop-332 -m limit --limit 1/second -j LOG +-A logdrop-332 -j DROP +-A logdrop-333 -m limit --limit 1/second -j LOG +-A logdrop-333 -j DROP +-A logdrop-334 -m limit --limit 1/second -j LOG +-A logdrop-334 -j DROP +-A logdrop-335 -m limit --limit 1/second -j LOG +-A logdrop-335 -j DROP +-A logdrop-336 -m limit --limit 1/second -j LOG +-A logdrop-336 -j DROP +-A logdrop-337 -m limit --limit 1/second -j LOG +-A logdrop-337 -j DROP +-A logdrop-339 -m limit --limit 1/second -j LOG +-A logdrop-339 -j DROP -A logdrop-34 -m limit --limit 1/second -j LOG -A logdrop-34 -j DROP +-A logdrop-340 -m limit --limit 1/second -j LOG +-A logdrop-340 -j DROP +-A logdrop-341 -m limit --limit 1/second -j LOG +-A logdrop-341 -j DROP +-A logdrop-343 -m limit --limit 1/second -j LOG +-A logdrop-343 -j DROP +-A logdrop-344 -m limit --limit 1/second -j LOG +-A logdrop-344 -j DROP -A logdrop-35 -m limit --limit 1/second -j LOG -A logdrop-35 -j DROP -A logdrop-37 -m limit --limit 1/second -j LOG @@ -14440,30 +23396,28 @@ hash:net family inet -A logdrop-42 -j DROP -A logdrop-43 -m limit --limit 1/second -j LOG -A logdrop-43 -j DROP --A logdrop-44 -m limit --limit 1/second -j LOG --A logdrop-44 -j DROP -A logdrop-45 -m limit --limit 1/second -j LOG -A logdrop-45 -j DROP -A logdrop-46 -m limit --limit 1/second -j LOG -A logdrop-46 -j DROP -A logdrop-47 -m limit --limit 1/second -j LOG -A logdrop-47 -j DROP --A logdrop-48 -m limit --limit 1/second -j LOG --A logdrop-48 -j DROP -A logdrop-49 -m limit --limit 1/second -j LOG -A logdrop-49 -j DROP -A logdrop-5 -m limit --limit 1/second -j LOG -A logdrop-5 -j DROP +-A logdrop-50 -m limit --limit 1/second -j LOG +-A logdrop-50 -j DROP -A logdrop-51 -m limit --limit 1/second -j LOG -A logdrop-51 -j DROP -A logdrop-52 -m limit --limit 1/second -j LOG -A logdrop-52 -j DROP -A logdrop-53 -m limit --limit 1/second -j LOG -A logdrop-53 -j DROP +-A logdrop-54 -m limit --limit 1/second -j LOG +-A logdrop-54 -j DROP -A logdrop-55 -m limit --limit 1/second -j LOG -A logdrop-55 -j DROP --A logdrop-56 -m limit --limit 1/second -j LOG --A logdrop-56 -j DROP -A logdrop-57 -m limit --limit 1/second -j LOG -A logdrop-57 -j DROP -A logdrop-58 -m limit --limit 1/second -j LOG @@ -14472,16 +23426,18 @@ hash:net family inet -A logdrop-59 -j DROP -A logdrop-6 -m limit --limit 1/second -j LOG -A logdrop-6 -j DROP --A logdrop-60 -m limit --limit 1/second -j LOG --A logdrop-60 -j DROP -A logdrop-61 -m limit --limit 1/second -j LOG -A logdrop-61 -j DROP +-A logdrop-62 -m limit --limit 1/second -j LOG +-A logdrop-62 -j DROP -A logdrop-63 -m limit --limit 1/second -j LOG -A logdrop-63 -j DROP -A logdrop-64 -m limit --limit 1/second -j LOG -A logdrop-64 -j DROP -A logdrop-65 -m limit --limit 1/second -j LOG -A logdrop-65 -j DROP +-A logdrop-66 -m limit --limit 1/second -j LOG +-A logdrop-66 -j DROP -A logdrop-67 -m limit --limit 1/second -j LOG -A logdrop-67 -j DROP -A logdrop-68 -m limit --limit 1/second -j LOG @@ -14498,16 +23454,12 @@ hash:net family inet -A logdrop-72 -j DROP -A logdrop-73 -m limit --limit 1/second -j LOG -A logdrop-73 -j DROP --A logdrop-74 -m limit --limit 1/second -j LOG --A logdrop-74 -j DROP -A logdrop-75 -m limit --limit 1/second -j LOG -A logdrop-75 -j DROP -A logdrop-76 -m limit --limit 1/second -j LOG -A logdrop-76 -j DROP -A logdrop-77 -m limit --limit 1/second -j LOG -A logdrop-77 -j DROP --A logdrop-78 -m limit --limit 1/second -j LOG --A logdrop-78 -j DROP -A logdrop-79 -m limit --limit 1/second -j LOG -A logdrop-79 -j DROP -A logdrop-8 -m limit --limit 1/second -j LOG @@ -14524,8 +23476,6 @@ hash:net family inet -A logdrop-84 -j DROP -A logdrop-85 -m limit --limit 1/second -j LOG -A logdrop-85 -j DROP --A logdrop-86 -m limit --limit 1/second -j LOG --A logdrop-86 -j DROP -A logdrop-87 -m limit --limit 1/second -j LOG -A logdrop-87 -j DROP -A logdrop-88 -m limit --limit 1/second -j LOG @@ -14534,8 +23484,6 @@ hash:net family inet -A logdrop-89 -j DROP -A logdrop-9 -m limit --limit 1/second -j LOG -A logdrop-9 -j DROP --A logdrop-90 -m limit --limit 1/second -j LOG --A logdrop-90 -j DROP -A logdrop-91 -m limit --limit 1/second -j LOG -A logdrop-91 -j DROP -A logdrop-92 -m limit --limit 1/second -j LOG @@ -14550,8 +23498,6 @@ hash:net family inet -A logdrop-96 -j DROP -A logdrop-97 -m limit --limit 1/second -j LOG -A logdrop-97 -j DROP --A logdrop-98 -m limit --limit 1/second -j LOG --A logdrop-98 -j DROP -A logdrop-99 -m limit --limit 1/second -j LOG -A logdrop-99 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG @@ -14707,6 +23653,78 @@ COMMIT -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -p tcp --dport 80 -j CT --notrack -A OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack -A OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack @@ -14932,6 +23950,150 @@ COMMIT -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack -A PREROUTING -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack -A PREROUTING -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack @@ -14956,13 +24118,78 @@ COMMIT :limit-1 - [0:0] :limit-10 - [0:0] :limit-100 - [0:0] -:limit-101 - [0:0] +:limit-1000 - [0:0] +:limit-1001 - [0:0] +:limit-1002 - [0:0] +:limit-1003 - [0:0] +:limit-1004 - [0:0] +:limit-1006 - [0:0] +:limit-1007 - [0:0] +:limit-1008 - [0:0] +:limit-1010 - [0:0] +:limit-1011 - [0:0] +:limit-1012 - [0:0] +:limit-1013 - [0:0] +:limit-1014 - [0:0] +:limit-1015 - [0:0] +:limit-1016 - [0:0] +:limit-1018 - [0:0] +:limit-1019 - [0:0] :limit-102 - [0:0] +:limit-1020 - [0:0] +:limit-1022 - [0:0] +:limit-1023 - [0:0] +:limit-1024 - [0:0] +:limit-1025 - [0:0] +:limit-1026 - [0:0] +:limit-1027 - [0:0] +:limit-1028 - [0:0] :limit-103 - [0:0] +:limit-1030 - [0:0] +:limit-1031 - [0:0] +:limit-1032 - [0:0] +:limit-1034 - [0:0] +:limit-1035 - [0:0] +:limit-1036 - [0:0] +:limit-1037 - [0:0] +:limit-1038 - [0:0] +:limit-1039 - [0:0] :limit-104 - [0:0] +:limit-1040 - [0:0] +:limit-1042 - [0:0] +:limit-1043 - [0:0] +:limit-1044 - [0:0] +:limit-1046 - [0:0] +:limit-1047 - [0:0] +:limit-1048 - [0:0] +:limit-1049 - [0:0] :limit-105 - [0:0] +:limit-1050 - [0:0] +:limit-1051 - [0:0] +:limit-1052 - [0:0] +:limit-1053 - [0:0] +:limit-1054 - [0:0] +:limit-1055 - [0:0] +:limit-1056 - [0:0] +:limit-1057 - [0:0] +:limit-1058 - [0:0] +:limit-1059 - [0:0] :limit-106 - [0:0] +:limit-1060 - [0:0] +:limit-1061 - [0:0] +:limit-1062 - [0:0] +:limit-1063 - [0:0] +:limit-1064 - [0:0] +:limit-1065 - [0:0] +:limit-1066 - [0:0] +:limit-1067 - [0:0] +:limit-1068 - [0:0] +:limit-1069 - [0:0] :limit-107 - [0:0] +:limit-1070 - [0:0] +:limit-1071 - [0:0] +:limit-1072 - [0:0] +:limit-1073 - [0:0] :limit-108 - [0:0] :limit-11 - [0:0] :limit-110 - [0:0] @@ -14976,16 +24203,16 @@ COMMIT :limit-119 - [0:0] :limit-12 - [0:0] :limit-120 - [0:0] +:limit-121 - [0:0] :limit-122 - [0:0] :limit-123 - [0:0] :limit-124 - [0:0] +:limit-125 - [0:0] :limit-126 - [0:0] -:limit-127 - [0:0] :limit-128 - [0:0] :limit-129 - [0:0] :limit-13 - [0:0] :limit-130 - [0:0] -:limit-131 - [0:0] :limit-132 - [0:0] :limit-133 - [0:0] :limit-134 - [0:0] @@ -15016,16 +24243,16 @@ COMMIT :limit-160 - [0:0] :limit-161 - [0:0] :limit-162 - [0:0] -:limit-163 - [0:0] :limit-164 - [0:0] :limit-165 - [0:0] :limit-166 - [0:0] -:limit-167 - [0:0] :limit-168 - [0:0] +:limit-169 - [0:0] :limit-17 - [0:0] :limit-170 - [0:0] :limit-171 - [0:0] :limit-172 - [0:0] +:limit-173 - [0:0] :limit-174 - [0:0] :limit-175 - [0:0] :limit-176 - [0:0] @@ -15044,11 +24271,9 @@ COMMIT :limit-190 - [0:0] :limit-191 - [0:0] :limit-192 - [0:0] -:limit-193 - [0:0] :limit-194 - [0:0] :limit-195 - [0:0] :limit-196 - [0:0] -:limit-197 - [0:0] :limit-198 - [0:0] :limit-199 - [0:0] :limit-2 - [0:0] @@ -15058,11 +24283,9 @@ COMMIT :limit-202 - [0:0] :limit-203 - [0:0] :limit-204 - [0:0] -:limit-205 - [0:0] :limit-206 - [0:0] :limit-207 - [0:0] :limit-208 - [0:0] -:limit-209 - [0:0] :limit-21 - [0:0] :limit-210 - [0:0] :limit-211 - [0:0] @@ -15071,12 +24294,10 @@ COMMIT :limit-214 - [0:0] :limit-215 - [0:0] :limit-216 - [0:0] -:limit-217 - [0:0] :limit-218 - [0:0] :limit-219 - [0:0] :limit-22 - [0:0] :limit-220 - [0:0] -:limit-221 - [0:0] :limit-222 - [0:0] :limit-223 - [0:0] :limit-224 - [0:0] @@ -15090,11 +24311,9 @@ COMMIT :limit-232 - [0:0] :limit-233 - [0:0] :limit-234 - [0:0] -:limit-235 - [0:0] :limit-236 - [0:0] :limit-237 - [0:0] :limit-238 - [0:0] -:limit-239 - [0:0] :limit-24 - [0:0] :limit-240 - [0:0] :limit-241 - [0:0] @@ -15103,12 +24322,10 @@ COMMIT :limit-244 - [0:0] :limit-245 - [0:0] :limit-246 - [0:0] -:limit-247 - [0:0] :limit-248 - [0:0] :limit-249 - [0:0] :limit-25 - [0:0] :limit-250 - [0:0] -:limit-251 - [0:0] :limit-252 - [0:0] :limit-253 - [0:0] :limit-254 - [0:0] @@ -15116,12 +24333,10 @@ COMMIT :limit-256 - [0:0] :limit-257 - [0:0] :limit-258 - [0:0] -:limit-259 - [0:0] :limit-26 - [0:0] :limit-260 - [0:0] :limit-261 - [0:0] :limit-262 - [0:0] -:limit-263 - [0:0] :limit-264 - [0:0] :limit-265 - [0:0] :limit-266 - [0:0] @@ -15130,11 +24345,9 @@ COMMIT :limit-269 - [0:0] :limit-27 - [0:0] :limit-270 - [0:0] -:limit-271 - [0:0] :limit-272 - [0:0] :limit-273 - [0:0] :limit-274 - [0:0] -:limit-275 - [0:0] :limit-276 - [0:0] :limit-277 - [0:0] :limit-278 - [0:0] @@ -15149,12 +24362,10 @@ COMMIT :limit-286 - [0:0] :limit-287 - [0:0] :limit-288 - [0:0] -:limit-289 - [0:0] :limit-29 - [0:0] :limit-290 - [0:0] :limit-291 - [0:0] :limit-292 - [0:0] -:limit-293 - [0:0] :limit-294 - [0:0] :limit-295 - [0:0] :limit-296 - [0:0] @@ -15164,11 +24375,9 @@ COMMIT :limit-3 - [0:0] :limit-30 - [0:0] :limit-300 - [0:0] -:limit-301 - [0:0] :limit-302 - [0:0] :limit-303 - [0:0] :limit-304 - [0:0] -:limit-305 - [0:0] :limit-306 - [0:0] :limit-307 - [0:0] :limit-308 - [0:0] @@ -15176,11 +24385,9 @@ COMMIT :limit-310 - [0:0] :limit-311 - [0:0] :limit-312 - [0:0] -:limit-313 - [0:0] :limit-314 - [0:0] :limit-315 - [0:0] :limit-316 - [0:0] -:limit-317 - [0:0] :limit-318 - [0:0] :limit-319 - [0:0] :limit-32 - [0:0] @@ -15189,11 +24396,9 @@ COMMIT :limit-322 - [0:0] :limit-323 - [0:0] :limit-324 - [0:0] -:limit-325 - [0:0] :limit-326 - [0:0] :limit-327 - [0:0] :limit-328 - [0:0] -:limit-329 - [0:0] :limit-33 - [0:0] :limit-330 - [0:0] :limit-331 - [0:0] @@ -15304,7 +24509,6 @@ COMMIT :limit-427 - [0:0] :limit-428 - [0:0] :limit-429 - [0:0] -:limit-43 - [0:0] :limit-430 - [0:0] :limit-431 - [0:0] :limit-432 - [0:0] @@ -15323,10 +24527,12 @@ COMMIT :limit-444 - [0:0] :limit-445 - [0:0] :limit-446 - [0:0] +:limit-447 - [0:0] :limit-448 - [0:0] :limit-449 - [0:0] :limit-45 - [0:0] :limit-450 - [0:0] +:limit-451 - [0:0] :limit-452 - [0:0] :limit-453 - [0:0] :limit-454 - [0:0] @@ -15334,17 +24540,18 @@ COMMIT :limit-456 - [0:0] :limit-457 - [0:0] :limit-458 - [0:0] +:limit-459 - [0:0] :limit-46 - [0:0] :limit-460 - [0:0] :limit-461 - [0:0] :limit-462 - [0:0] +:limit-463 - [0:0] :limit-464 - [0:0] :limit-465 - [0:0] :limit-466 - [0:0] :limit-467 - [0:0] :limit-468 - [0:0] :limit-469 - [0:0] -:limit-47 - [0:0] :limit-470 - [0:0] :limit-471 - [0:0] :limit-472 - [0:0] @@ -15352,10 +24559,12 @@ COMMIT :limit-474 - [0:0] :limit-475 - [0:0] :limit-476 - [0:0] +:limit-477 - [0:0] :limit-478 - [0:0] :limit-479 - [0:0] :limit-48 - [0:0] :limit-480 - [0:0] +:limit-481 - [0:0] :limit-482 - [0:0] :limit-483 - [0:0] :limit-484 - [0:0] @@ -15363,9 +24572,12 @@ COMMIT :limit-486 - [0:0] :limit-487 - [0:0] :limit-488 - [0:0] +:limit-489 - [0:0] +:limit-49 - [0:0] :limit-490 - [0:0] :limit-491 - [0:0] :limit-492 - [0:0] +:limit-493 - [0:0] :limit-494 - [0:0] :limit-495 - [0:0] :limit-496 - [0:0] @@ -15381,10 +24593,12 @@ COMMIT :limit-504 - [0:0] :limit-505 - [0:0] :limit-506 - [0:0] +:limit-507 - [0:0] :limit-508 - [0:0] :limit-509 - [0:0] :limit-51 - [0:0] :limit-510 - [0:0] +:limit-511 - [0:0] :limit-512 - [0:0] :limit-513 - [0:0] :limit-514 - [0:0] @@ -15392,16 +24606,19 @@ COMMIT :limit-516 - [0:0] :limit-517 - [0:0] :limit-518 - [0:0] +:limit-519 - [0:0] :limit-52 - [0:0] :limit-520 - [0:0] :limit-521 - [0:0] :limit-522 - [0:0] +:limit-523 - [0:0] :limit-524 - [0:0] :limit-525 - [0:0] :limit-526 - [0:0] :limit-527 - [0:0] :limit-528 - [0:0] :limit-529 - [0:0] +:limit-53 - [0:0] :limit-530 - [0:0] :limit-531 - [0:0] :limit-532 - [0:0] @@ -15409,10 +24626,12 @@ COMMIT :limit-534 - [0:0] :limit-535 - [0:0] :limit-536 - [0:0] +:limit-537 - [0:0] :limit-538 - [0:0] :limit-539 - [0:0] :limit-54 - [0:0] :limit-540 - [0:0] +:limit-541 - [0:0] :limit-542 - [0:0] :limit-543 - [0:0] :limit-544 - [0:0] @@ -15420,10 +24639,11 @@ COMMIT :limit-546 - [0:0] :limit-547 - [0:0] :limit-548 - [0:0] -:limit-55 - [0:0] +:limit-549 - [0:0] :limit-550 - [0:0] :limit-551 - [0:0] :limit-552 - [0:0] +:limit-553 - [0:0] :limit-554 - [0:0] :limit-555 - [0:0] :limit-556 - [0:0] @@ -15438,10 +24658,12 @@ COMMIT :limit-564 - [0:0] :limit-565 - [0:0] :limit-566 - [0:0] +:limit-567 - [0:0] :limit-568 - [0:0] :limit-569 - [0:0] :limit-57 - [0:0] :limit-570 - [0:0] +:limit-571 - [0:0] :limit-572 - [0:0] :limit-573 - [0:0] :limit-574 - [0:0] @@ -15449,17 +24671,18 @@ COMMIT :limit-576 - [0:0] :limit-577 - [0:0] :limit-578 - [0:0] +:limit-579 - [0:0] :limit-58 - [0:0] :limit-580 - [0:0] :limit-581 - [0:0] :limit-582 - [0:0] +:limit-583 - [0:0] :limit-584 - [0:0] :limit-585 - [0:0] :limit-586 - [0:0] :limit-587 - [0:0] :limit-588 - [0:0] :limit-589 - [0:0] -:limit-59 - [0:0] :limit-590 - [0:0] :limit-591 - [0:0] :limit-592 - [0:0] @@ -15467,11 +24690,13 @@ COMMIT :limit-594 - [0:0] :limit-595 - [0:0] :limit-596 - [0:0] +:limit-597 - [0:0] :limit-598 - [0:0] :limit-599 - [0:0] :limit-6 - [0:0] :limit-60 - [0:0] :limit-600 - [0:0] +:limit-601 - [0:0] :limit-602 - [0:0] :limit-603 - [0:0] :limit-604 - [0:0] @@ -15479,9 +24704,12 @@ COMMIT :limit-606 - [0:0] :limit-607 - [0:0] :limit-608 - [0:0] +:limit-609 - [0:0] +:limit-61 - [0:0] :limit-610 - [0:0] :limit-611 - [0:0] :limit-612 - [0:0] +:limit-613 - [0:0] :limit-614 - [0:0] :limit-615 - [0:0] :limit-616 - [0:0] @@ -15513,39 +24741,357 @@ COMMIT :limit-64 - [0:0] :limit-640 - [0:0] :limit-641 - [0:0] +:limit-642 - [0:0] +:limit-643 - [0:0] +:limit-644 - [0:0] +:limit-645 - [0:0] +:limit-646 - [0:0] +:limit-647 - [0:0] +:limit-648 - [0:0] +:limit-649 - [0:0] +:limit-65 - [0:0] +:limit-650 - [0:0] +:limit-651 - [0:0] +:limit-652 - [0:0] +:limit-653 - [0:0] +:limit-654 - [0:0] +:limit-655 - [0:0] +:limit-656 - [0:0] +:limit-657 - [0:0] +:limit-658 - [0:0] +:limit-659 - [0:0] :limit-66 - [0:0] +:limit-660 - [0:0] +:limit-661 - [0:0] +:limit-662 - [0:0] +:limit-663 - [0:0] +:limit-664 - [0:0] +:limit-665 - [0:0] +:limit-666 - [0:0] +:limit-667 - [0:0] +:limit-668 - [0:0] +:limit-669 - [0:0] :limit-67 - [0:0] +:limit-670 - [0:0] +:limit-671 - [0:0] +:limit-672 - [0:0] +:limit-673 - [0:0] +:limit-674 - [0:0] +:limit-675 - [0:0] +:limit-676 - [0:0] +:limit-677 - [0:0] +:limit-678 - [0:0] +:limit-679 - [0:0] :limit-68 - [0:0] +:limit-680 - [0:0] +:limit-681 - [0:0] +:limit-682 - [0:0] +:limit-683 - [0:0] +:limit-684 - [0:0] +:limit-685 - [0:0] +:limit-686 - [0:0] +:limit-687 - [0:0] +:limit-688 - [0:0] +:limit-689 - [0:0] :limit-69 - [0:0] +:limit-690 - [0:0] +:limit-691 - [0:0] +:limit-692 - [0:0] +:limit-693 - [0:0] +:limit-694 - [0:0] +:limit-695 - [0:0] +:limit-696 - [0:0] +:limit-697 - [0:0] +:limit-698 - [0:0] +:limit-699 - [0:0] :limit-7 - [0:0] :limit-70 - [0:0] +:limit-700 - [0:0] +:limit-701 - [0:0] +:limit-702 - [0:0] +:limit-703 - [0:0] +:limit-704 - [0:0] +:limit-705 - [0:0] +:limit-706 - [0:0] +:limit-707 - [0:0] +:limit-708 - [0:0] +:limit-709 - [0:0] :limit-71 - [0:0] +:limit-710 - [0:0] +:limit-711 - [0:0] +:limit-712 - [0:0] +:limit-713 - [0:0] +:limit-714 - [0:0] +:limit-715 - [0:0] +:limit-716 - [0:0] +:limit-717 - [0:0] +:limit-718 - [0:0] +:limit-719 - [0:0] :limit-72 - [0:0] -:limit-73 - [0:0] +:limit-720 - [0:0] +:limit-721 - [0:0] +:limit-722 - [0:0] +:limit-723 - [0:0] +:limit-724 - [0:0] +:limit-725 - [0:0] +:limit-726 - [0:0] +:limit-727 - [0:0] +:limit-728 - [0:0] +:limit-729 - [0:0] +:limit-730 - [0:0] +:limit-731 - [0:0] +:limit-732 - [0:0] +:limit-733 - [0:0] +:limit-734 - [0:0] +:limit-736 - [0:0] +:limit-737 - [0:0] +:limit-738 - [0:0] :limit-74 - [0:0] +:limit-740 - [0:0] +:limit-741 - [0:0] +:limit-742 - [0:0] +:limit-743 - [0:0] +:limit-744 - [0:0] +:limit-745 - [0:0] +:limit-746 - [0:0] +:limit-748 - [0:0] +:limit-749 - [0:0] :limit-75 - [0:0] +:limit-750 - [0:0] +:limit-752 - [0:0] +:limit-753 - [0:0] +:limit-754 - [0:0] +:limit-755 - [0:0] +:limit-756 - [0:0] +:limit-757 - [0:0] +:limit-758 - [0:0] :limit-76 - [0:0] -:limit-77 - [0:0] +:limit-760 - [0:0] +:limit-761 - [0:0] +:limit-762 - [0:0] +:limit-764 - [0:0] +:limit-765 - [0:0] +:limit-766 - [0:0] +:limit-767 - [0:0] +:limit-768 - [0:0] +:limit-769 - [0:0] +:limit-770 - [0:0] +:limit-772 - [0:0] +:limit-773 - [0:0] +:limit-774 - [0:0] +:limit-776 - [0:0] +:limit-777 - [0:0] +:limit-778 - [0:0] +:limit-779 - [0:0] :limit-78 - [0:0] +:limit-780 - [0:0] +:limit-781 - [0:0] +:limit-782 - [0:0] +:limit-783 - [0:0] +:limit-784 - [0:0] +:limit-785 - [0:0] +:limit-786 - [0:0] +:limit-787 - [0:0] +:limit-788 - [0:0] +:limit-79 - [0:0] +:limit-790 - [0:0] +:limit-791 - [0:0] +:limit-792 - [0:0] +:limit-794 - [0:0] +:limit-795 - [0:0] +:limit-796 - [0:0] +:limit-797 - [0:0] +:limit-798 - [0:0] +:limit-799 - [0:0] :limit-8 - [0:0] :limit-80 - [0:0] +:limit-800 - [0:0] +:limit-802 - [0:0] +:limit-803 - [0:0] +:limit-804 - [0:0] +:limit-806 - [0:0] +:limit-807 - [0:0] +:limit-808 - [0:0] +:limit-809 - [0:0] :limit-81 - [0:0] +:limit-810 - [0:0] +:limit-811 - [0:0] +:limit-812 - [0:0] +:limit-814 - [0:0] +:limit-815 - [0:0] +:limit-816 - [0:0] +:limit-818 - [0:0] +:limit-819 - [0:0] :limit-82 - [0:0] +:limit-820 - [0:0] +:limit-821 - [0:0] +:limit-822 - [0:0] +:limit-823 - [0:0] +:limit-824 - [0:0] +:limit-826 - [0:0] +:limit-827 - [0:0] +:limit-828 - [0:0] +:limit-83 - [0:0] +:limit-830 - [0:0] +:limit-831 - [0:0] +:limit-832 - [0:0] +:limit-833 - [0:0] +:limit-834 - [0:0] +:limit-835 - [0:0] +:limit-836 - [0:0] +:limit-837 - [0:0] +:limit-838 - [0:0] +:limit-839 - [0:0] :limit-84 - [0:0] -:limit-85 - [0:0] +:limit-840 - [0:0] +:limit-841 - [0:0] +:limit-842 - [0:0] +:limit-844 - [0:0] +:limit-845 - [0:0] +:limit-846 - [0:0] +:limit-848 - [0:0] +:limit-849 - [0:0] +:limit-850 - [0:0] +:limit-851 - [0:0] +:limit-852 - [0:0] +:limit-853 - [0:0] +:limit-854 - [0:0] +:limit-856 - [0:0] +:limit-857 - [0:0] +:limit-858 - [0:0] :limit-86 - [0:0] +:limit-860 - [0:0] +:limit-861 - [0:0] +:limit-862 - [0:0] +:limit-863 - [0:0] +:limit-864 - [0:0] +:limit-865 - [0:0] +:limit-866 - [0:0] +:limit-868 - [0:0] +:limit-869 - [0:0] :limit-87 - [0:0] +:limit-870 - [0:0] +:limit-872 - [0:0] +:limit-873 - [0:0] +:limit-874 - [0:0] +:limit-875 - [0:0] +:limit-876 - [0:0] +:limit-877 - [0:0] +:limit-878 - [0:0] :limit-88 - [0:0] -:limit-89 - [0:0] +:limit-880 - [0:0] +:limit-881 - [0:0] +:limit-882 - [0:0] +:limit-884 - [0:0] +:limit-885 - [0:0] +:limit-886 - [0:0] +:limit-887 - [0:0] +:limit-888 - [0:0] +:limit-889 - [0:0] +:limit-890 - [0:0] +:limit-891 - [0:0] +:limit-892 - [0:0] +:limit-893 - [0:0] +:limit-894 - [0:0] +:limit-895 - [0:0] +:limit-896 - [0:0] +:limit-898 - [0:0] +:limit-899 - [0:0] :limit-9 - [0:0] :limit-90 - [0:0] +:limit-900 - [0:0] +:limit-902 - [0:0] +:limit-903 - [0:0] +:limit-904 - [0:0] +:limit-905 - [0:0] +:limit-906 - [0:0] +:limit-907 - [0:0] +:limit-908 - [0:0] +:limit-91 - [0:0] +:limit-910 - [0:0] +:limit-911 - [0:0] +:limit-912 - [0:0] +:limit-914 - [0:0] +:limit-915 - [0:0] +:limit-916 - [0:0] +:limit-917 - [0:0] +:limit-918 - [0:0] +:limit-919 - [0:0] :limit-92 - [0:0] +:limit-920 - [0:0] +:limit-922 - [0:0] +:limit-923 - [0:0] +:limit-924 - [0:0] +:limit-926 - [0:0] +:limit-927 - [0:0] +:limit-928 - [0:0] +:limit-929 - [0:0] :limit-93 - [0:0] +:limit-930 - [0:0] +:limit-931 - [0:0] +:limit-932 - [0:0] +:limit-934 - [0:0] +:limit-935 - [0:0] +:limit-936 - [0:0] +:limit-938 - [0:0] +:limit-939 - [0:0] :limit-94 - [0:0] +:limit-940 - [0:0] +:limit-941 - [0:0] +:limit-942 - [0:0] +:limit-943 - [0:0] +:limit-944 - [0:0] +:limit-945 - [0:0] +:limit-946 - [0:0] +:limit-947 - [0:0] +:limit-948 - [0:0] +:limit-949 - [0:0] +:limit-95 - [0:0] +:limit-950 - [0:0] +:limit-952 - [0:0] +:limit-953 - [0:0] +:limit-954 - [0:0] +:limit-956 - [0:0] +:limit-957 - [0:0] +:limit-958 - [0:0] +:limit-959 - [0:0] :limit-96 - [0:0] -:limit-97 - [0:0] +:limit-960 - [0:0] +:limit-961 - [0:0] +:limit-962 - [0:0] +:limit-964 - [0:0] +:limit-965 - [0:0] +:limit-966 - [0:0] +:limit-968 - [0:0] +:limit-969 - [0:0] +:limit-970 - [0:0] +:limit-971 - [0:0] +:limit-972 - [0:0] +:limit-973 - [0:0] +:limit-974 - [0:0] +:limit-976 - [0:0] +:limit-977 - [0:0] +:limit-978 - [0:0] :limit-98 - [0:0] +:limit-980 - [0:0] +:limit-981 - [0:0] +:limit-982 - [0:0] +:limit-983 - [0:0] +:limit-984 - [0:0] +:limit-985 - [0:0] +:limit-986 - [0:0] +:limit-988 - [0:0] +:limit-989 - [0:0] :limit-99 - [0:0] +:limit-990 - [0:0] +:limit-992 - [0:0] +:limit-993 - [0:0] +:limit-994 - [0:0] +:limit-995 - [0:0] +:limit-996 - [0:0] +:limit-997 - [0:0] +:limit-998 - [0:0] +:limit-999 - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] :logaccept-10 - [0:0] @@ -15593,9 +25139,33 @@ COMMIT :logaccept-final-35 - [0:0] :logaccept-final-36 - [0:0] :logaccept-final-37 - [0:0] +:logaccept-final-38 - [0:0] +:logaccept-final-39 - [0:0] :logaccept-final-4 - [0:0] +:logaccept-final-40 - [0:0] +:logaccept-final-41 - [0:0] +:logaccept-final-42 - [0:0] +:logaccept-final-43 - [0:0] +:logaccept-final-44 - [0:0] +:logaccept-final-45 - [0:0] +:logaccept-final-46 - [0:0] +:logaccept-final-47 - [0:0] +:logaccept-final-48 - [0:0] +:logaccept-final-49 - [0:0] :logaccept-final-5 - [0:0] +:logaccept-final-50 - [0:0] +:logaccept-final-51 - [0:0] +:logaccept-final-52 - [0:0] +:logaccept-final-53 - [0:0] +:logaccept-final-54 - [0:0] +:logaccept-final-55 - [0:0] +:logaccept-final-56 - [0:0] +:logaccept-final-57 - [0:0] +:logaccept-final-58 - [0:0] +:logaccept-final-59 - [0:0] :logaccept-final-6 - [0:0] +:logaccept-final-60 - [0:0] +:logaccept-final-61 - [0:0] :logaccept-final-7 - [0:0] :logaccept-final-8 - [0:0] :logaccept-final-9 - [0:0] @@ -15604,7 +25174,6 @@ COMMIT :logdrop-10 - [0:0] :logdrop-100 - [0:0] :logdrop-101 - [0:0] -:logdrop-102 - [0:0] :logdrop-103 - [0:0] :logdrop-104 - [0:0] :logdrop-105 - [0:0] @@ -15613,11 +25182,9 @@ COMMIT :logdrop-108 - [0:0] :logdrop-109 - [0:0] :logdrop-11 - [0:0] -:logdrop-110 - [0:0] :logdrop-111 - [0:0] :logdrop-112 - [0:0] :logdrop-113 - [0:0] -:logdrop-114 - [0:0] :logdrop-115 - [0:0] :logdrop-116 - [0:0] :logdrop-117 - [0:0] @@ -15659,9 +25226,11 @@ COMMIT :logdrop-15 - [0:0] :logdrop-150 - [0:0] :logdrop-151 - [0:0] +:logdrop-152 - [0:0] :logdrop-153 - [0:0] :logdrop-154 - [0:0] :logdrop-155 - [0:0] +:logdrop-156 - [0:0] :logdrop-157 - [0:0] :logdrop-158 - [0:0] :logdrop-159 - [0:0] @@ -15670,9 +25239,11 @@ COMMIT :logdrop-161 - [0:0] :logdrop-162 - [0:0] :logdrop-163 - [0:0] +:logdrop-164 - [0:0] :logdrop-165 - [0:0] :logdrop-166 - [0:0] :logdrop-167 - [0:0] +:logdrop-168 - [0:0] :logdrop-169 - [0:0] :logdrop-17 - [0:0] :logdrop-170 - [0:0] @@ -15688,9 +25259,11 @@ COMMIT :logdrop-18 - [0:0] :logdrop-180 - [0:0] :logdrop-181 - [0:0] +:logdrop-182 - [0:0] :logdrop-183 - [0:0] :logdrop-184 - [0:0] :logdrop-185 - [0:0] +:logdrop-186 - [0:0] :logdrop-187 - [0:0] :logdrop-188 - [0:0] :logdrop-189 - [0:0] @@ -15699,25 +25272,155 @@ COMMIT :logdrop-191 - [0:0] :logdrop-192 - [0:0] :logdrop-193 - [0:0] +:logdrop-194 - [0:0] :logdrop-195 - [0:0] :logdrop-196 - [0:0] :logdrop-197 - [0:0] +:logdrop-198 - [0:0] :logdrop-199 - [0:0] :logdrop-2 - [0:0] :logdrop-200 - [0:0] +:logdrop-201 - [0:0] +:logdrop-202 - [0:0] +:logdrop-203 - [0:0] +:logdrop-204 - [0:0] +:logdrop-205 - [0:0] +:logdrop-206 - [0:0] +:logdrop-207 - [0:0] +:logdrop-208 - [0:0] +:logdrop-209 - [0:0] :logdrop-21 - [0:0] +:logdrop-210 - [0:0] +:logdrop-211 - [0:0] +:logdrop-212 - [0:0] +:logdrop-213 - [0:0] +:logdrop-214 - [0:0] +:logdrop-215 - [0:0] +:logdrop-216 - [0:0] +:logdrop-217 - [0:0] +:logdrop-218 - [0:0] +:logdrop-219 - [0:0] :logdrop-22 - [0:0] +:logdrop-220 - [0:0] +:logdrop-221 - [0:0] +:logdrop-222 - [0:0] +:logdrop-223 - [0:0] +:logdrop-224 - [0:0] +:logdrop-225 - [0:0] +:logdrop-226 - [0:0] +:logdrop-227 - [0:0] +:logdrop-228 - [0:0] +:logdrop-229 - [0:0] :logdrop-23 - [0:0] +:logdrop-230 - [0:0] +:logdrop-231 - [0:0] +:logdrop-232 - [0:0] +:logdrop-233 - [0:0] +:logdrop-234 - [0:0] +:logdrop-235 - [0:0] +:logdrop-236 - [0:0] +:logdrop-237 - [0:0] +:logdrop-238 - [0:0] +:logdrop-239 - [0:0] +:logdrop-240 - [0:0] +:logdrop-241 - [0:0] +:logdrop-242 - [0:0] +:logdrop-243 - [0:0] +:logdrop-244 - [0:0] +:logdrop-245 - [0:0] +:logdrop-246 - [0:0] +:logdrop-247 - [0:0] +:logdrop-249 - [0:0] :logdrop-25 - [0:0] +:logdrop-250 - [0:0] +:logdrop-251 - [0:0] +:logdrop-253 - [0:0] +:logdrop-254 - [0:0] +:logdrop-255 - [0:0] +:logdrop-256 - [0:0] +:logdrop-257 - [0:0] +:logdrop-258 - [0:0] +:logdrop-259 - [0:0] :logdrop-26 - [0:0] +:logdrop-261 - [0:0] +:logdrop-262 - [0:0] +:logdrop-263 - [0:0] +:logdrop-265 - [0:0] +:logdrop-266 - [0:0] +:logdrop-267 - [0:0] +:logdrop-268 - [0:0] +:logdrop-269 - [0:0] :logdrop-27 - [0:0] +:logdrop-270 - [0:0] +:logdrop-271 - [0:0] +:logdrop-273 - [0:0] +:logdrop-274 - [0:0] +:logdrop-275 - [0:0] +:logdrop-277 - [0:0] +:logdrop-278 - [0:0] +:logdrop-279 - [0:0] :logdrop-28 - [0:0] +:logdrop-280 - [0:0] +:logdrop-281 - [0:0] +:logdrop-282 - [0:0] +:logdrop-283 - [0:0] +:logdrop-285 - [0:0] +:logdrop-286 - [0:0] +:logdrop-287 - [0:0] +:logdrop-289 - [0:0] :logdrop-29 - [0:0] +:logdrop-290 - [0:0] +:logdrop-291 - [0:0] +:logdrop-292 - [0:0] +:logdrop-293 - [0:0] +:logdrop-294 - [0:0] +:logdrop-295 - [0:0] +:logdrop-296 - [0:0] +:logdrop-297 - [0:0] +:logdrop-298 - [0:0] +:logdrop-299 - [0:0] :logdrop-3 - [0:0] :logdrop-30 - [0:0] +:logdrop-300 - [0:0] +:logdrop-301 - [0:0] +:logdrop-303 - [0:0] +:logdrop-304 - [0:0] +:logdrop-305 - [0:0] +:logdrop-307 - [0:0] +:logdrop-308 - [0:0] +:logdrop-309 - [0:0] :logdrop-31 - [0:0] +:logdrop-310 - [0:0] +:logdrop-311 - [0:0] +:logdrop-312 - [0:0] +:logdrop-313 - [0:0] +:logdrop-315 - [0:0] +:logdrop-316 - [0:0] +:logdrop-317 - [0:0] +:logdrop-319 - [0:0] +:logdrop-320 - [0:0] +:logdrop-321 - [0:0] +:logdrop-322 - [0:0] +:logdrop-323 - [0:0] +:logdrop-324 - [0:0] +:logdrop-325 - [0:0] +:logdrop-327 - [0:0] +:logdrop-328 - [0:0] +:logdrop-329 - [0:0] :logdrop-33 - [0:0] +:logdrop-331 - [0:0] +:logdrop-332 - [0:0] +:logdrop-333 - [0:0] +:logdrop-334 - [0:0] +:logdrop-335 - [0:0] +:logdrop-336 - [0:0] +:logdrop-337 - [0:0] +:logdrop-339 - [0:0] :logdrop-34 - [0:0] +:logdrop-340 - [0:0] +:logdrop-341 - [0:0] +:logdrop-343 - [0:0] +:logdrop-344 - [0:0] :logdrop-35 - [0:0] :logdrop-37 - [0:0] :logdrop-38 - [0:0] @@ -15727,27 +25430,27 @@ COMMIT :logdrop-41 - [0:0] :logdrop-42 - [0:0] :logdrop-43 - [0:0] -:logdrop-44 - [0:0] :logdrop-45 - [0:0] :logdrop-46 - [0:0] :logdrop-47 - [0:0] -:logdrop-48 - [0:0] :logdrop-49 - [0:0] :logdrop-5 - [0:0] +:logdrop-50 - [0:0] :logdrop-51 - [0:0] :logdrop-52 - [0:0] :logdrop-53 - [0:0] +:logdrop-54 - [0:0] :logdrop-55 - [0:0] -:logdrop-56 - [0:0] :logdrop-57 - [0:0] :logdrop-58 - [0:0] :logdrop-59 - [0:0] :logdrop-6 - [0:0] -:logdrop-60 - [0:0] :logdrop-61 - [0:0] +:logdrop-62 - [0:0] :logdrop-63 - [0:0] :logdrop-64 - [0:0] :logdrop-65 - [0:0] +:logdrop-66 - [0:0] :logdrop-67 - [0:0] :logdrop-68 - [0:0] :logdrop-69 - [0:0] @@ -15756,11 +25459,9 @@ COMMIT :logdrop-71 - [0:0] :logdrop-72 - [0:0] :logdrop-73 - [0:0] -:logdrop-74 - [0:0] :logdrop-75 - [0:0] :logdrop-76 - [0:0] :logdrop-77 - [0:0] -:logdrop-78 - [0:0] :logdrop-79 - [0:0] :logdrop-8 - [0:0] :logdrop-80 - [0:0] @@ -15769,12 +25470,10 @@ COMMIT :logdrop-83 - [0:0] :logdrop-84 - [0:0] :logdrop-85 - [0:0] -:logdrop-86 - [0:0] :logdrop-87 - [0:0] :logdrop-88 - [0:0] :logdrop-89 - [0:0] :logdrop-9 - [0:0] -:logdrop-90 - [0:0] :logdrop-91 - [0:0] :logdrop-92 - [0:0] :logdrop-93 - [0:0] @@ -15782,7 +25481,6 @@ COMMIT :logdrop-95 - [0:0] :logdrop-96 - [0:0] :logdrop-97 - [0:0] -:logdrop-98 - [0:0] :logdrop-99 - [0:0] :logpass-0 - [0:0] :logreject-0 - [0:0] @@ -15790,6 +25488,294 @@ COMMIT :tarpit - [0:0] -A FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A FORWARD -j limit-715 +-A FORWARD -j limit-714 +-A FORWARD -j limit-713 +-A FORWARD -j limit-712 +-A FORWARD -j limit-711 +-A FORWARD -j limit-710 +-A FORWARD -j limit-709 +-A FORWARD -j limit-708 +-A FORWARD -j limit-707 +-A FORWARD -j limit-706 +-A FORWARD -j limit-705 +-A FORWARD -j limit-704 +-A FORWARD -j limit-703 +-A FORWARD -j limit-702 +-A FORWARD -j limit-701 +-A FORWARD -j limit-700 +-A FORWARD -j limit-699 +-A FORWARD -j limit-698 +-A FORWARD -j limit-697 +-A FORWARD -j limit-696 +-A FORWARD -j limit-695 +-A FORWARD -j limit-694 +-A FORWARD -j limit-693 +-A FORWARD -j limit-692 +-A FORWARD -j limit-691 +-A FORWARD -j limit-690 +-A FORWARD -j limit-689 +-A FORWARD -j limit-688 +-A FORWARD -j limit-687 +-A FORWARD -j limit-686 +-A FORWARD -j limit-685 +-A FORWARD -j limit-684 +-A FORWARD -j limit-683 +-A FORWARD -j limit-682 +-A FORWARD -j limit-681 +-A FORWARD -j limit-680 +-A FORWARD -j limit-679 +-A FORWARD -j limit-678 +-A FORWARD -j limit-677 +-A FORWARD -j limit-676 +-A FORWARD -j limit-675 +-A FORWARD -j limit-674 +-A FORWARD -j limit-673 +-A FORWARD -j limit-672 +-A FORWARD -j limit-671 +-A FORWARD -j limit-670 +-A FORWARD -j limit-669 +-A FORWARD -j limit-668 +-A FORWARD -j limit-667 +-A FORWARD -j limit-666 +-A FORWARD -j limit-665 +-A FORWARD -j limit-664 +-A FORWARD -j limit-663 +-A FORWARD -j limit-662 +-A FORWARD -j limit-661 +-A FORWARD -j limit-660 +-A FORWARD -j limit-659 +-A FORWARD -j limit-658 +-A FORWARD -j limit-657 +-A FORWARD -j limit-656 +-A FORWARD -j limit-655 +-A FORWARD -j limit-654 +-A FORWARD -j limit-653 +-A FORWARD -j limit-652 +-A FORWARD -j limit-651 +-A FORWARD -j limit-650 +-A FORWARD -j limit-649 +-A FORWARD -j limit-648 +-A FORWARD -j limit-647 +-A FORWARD -j limit-646 +-A FORWARD -j limit-645 +-A FORWARD -j limit-644 +-A FORWARD -j limit-643 +-A FORWARD -j limit-642 +-A FORWARD -j limit-641 +-A FORWARD -j limit-640 +-A FORWARD -j limit-639 +-A FORWARD -j limit-638 +-A FORWARD -j limit-637 +-A FORWARD -j limit-636 +-A FORWARD -j limit-635 +-A FORWARD -j limit-634 +-A FORWARD -j limit-633 +-A FORWARD -j limit-632 +-A FORWARD -j limit-631 +-A FORWARD -j limit-630 +-A FORWARD -j limit-629 +-A FORWARD -j limit-628 +-A FORWARD -j limit-627 +-A FORWARD -j limit-626 +-A FORWARD -j limit-625 +-A FORWARD -j limit-624 +-A FORWARD -j limit-623 +-A FORWARD -j limit-622 +-A FORWARD -j limit-621 +-A FORWARD -j limit-620 +-A FORWARD -j limit-619 +-A FORWARD -j limit-618 +-A FORWARD -j limit-617 +-A FORWARD -j limit-616 +-A FORWARD -j limit-615 +-A FORWARD -j limit-614 +-A FORWARD -j limit-613 +-A FORWARD -j limit-612 +-A FORWARD -j limit-611 +-A FORWARD -j limit-610 +-A FORWARD -j limit-609 +-A FORWARD -j limit-608 +-A FORWARD -j limit-607 +-A FORWARD -j limit-606 +-A FORWARD -j limit-605 +-A FORWARD -j limit-604 +-A FORWARD -j limit-603 +-A FORWARD -j limit-602 +-A FORWARD -j limit-601 +-A FORWARD -j limit-600 +-A FORWARD -j limit-599 +-A FORWARD -j limit-598 +-A FORWARD -j limit-597 +-A FORWARD -j limit-596 +-A FORWARD -j limit-595 +-A FORWARD -j limit-594 +-A FORWARD -j limit-593 +-A FORWARD -j limit-592 +-A FORWARD -j limit-591 +-A FORWARD -j limit-590 +-A FORWARD -j limit-589 +-A FORWARD -j limit-588 +-A FORWARD -j limit-587 +-A FORWARD -j limit-586 +-A FORWARD -j limit-585 +-A FORWARD -j limit-584 +-A FORWARD -j limit-583 +-A FORWARD -j limit-582 +-A FORWARD -j limit-581 +-A FORWARD -j limit-580 +-A FORWARD -j limit-579 +-A FORWARD -j limit-578 +-A FORWARD -j limit-577 +-A FORWARD -j limit-576 +-A FORWARD -j limit-575 +-A FORWARD -j limit-574 +-A FORWARD -j limit-573 +-A FORWARD -j limit-572 +-A FORWARD -j limit-571 +-A FORWARD -j limit-570 +-A FORWARD -j limit-569 +-A FORWARD -j limit-568 +-A FORWARD -j limit-567 +-A FORWARD -j limit-566 +-A FORWARD -j limit-565 +-A FORWARD -j limit-564 +-A FORWARD -j limit-563 +-A FORWARD -j limit-562 +-A FORWARD -j limit-561 +-A FORWARD -j limit-560 +-A FORWARD -j limit-559 +-A FORWARD -j limit-558 +-A FORWARD -j limit-557 +-A FORWARD -j limit-556 +-A FORWARD -j limit-555 +-A FORWARD -j limit-554 +-A FORWARD -j limit-553 +-A FORWARD -j limit-552 +-A FORWARD -j limit-551 +-A FORWARD -j limit-550 +-A FORWARD -j limit-549 +-A FORWARD -j limit-548 +-A FORWARD -j limit-547 +-A FORWARD -j limit-546 +-A FORWARD -j limit-545 +-A FORWARD -j limit-544 +-A FORWARD -j limit-543 +-A FORWARD -j limit-542 +-A FORWARD -j limit-541 +-A FORWARD -j limit-540 +-A FORWARD -j limit-539 +-A FORWARD -j limit-538 +-A FORWARD -j limit-537 +-A FORWARD -j limit-536 +-A FORWARD -j limit-535 +-A FORWARD -j limit-534 +-A FORWARD -j limit-533 +-A FORWARD -j limit-532 +-A FORWARD -j limit-531 +-A FORWARD -j limit-530 +-A FORWARD -j limit-529 +-A FORWARD -j limit-528 +-A FORWARD -j limit-527 +-A FORWARD -j limit-526 +-A FORWARD -j limit-525 +-A FORWARD -j limit-524 +-A FORWARD -j limit-523 +-A FORWARD -j limit-522 +-A FORWARD -j limit-521 +-A FORWARD -j limit-520 +-A FORWARD -j limit-519 +-A FORWARD -j limit-518 +-A FORWARD -j limit-517 +-A FORWARD -j limit-516 +-A FORWARD -j limit-515 +-A FORWARD -j limit-514 +-A FORWARD -j limit-513 +-A FORWARD -j limit-512 +-A FORWARD -j limit-511 +-A FORWARD -j limit-510 +-A FORWARD -j limit-509 +-A FORWARD -j limit-508 +-A FORWARD -j limit-507 +-A FORWARD -j limit-506 +-A FORWARD -j limit-505 +-A FORWARD -j limit-504 +-A FORWARD -j limit-503 +-A FORWARD -j limit-502 +-A FORWARD -j limit-501 +-A FORWARD -j limit-500 +-A FORWARD -j limit-499 +-A FORWARD -j limit-498 +-A FORWARD -j limit-497 +-A FORWARD -j limit-496 +-A FORWARD -j limit-495 +-A FORWARD -j limit-494 +-A FORWARD -j limit-493 +-A FORWARD -j limit-492 +-A FORWARD -j limit-491 +-A FORWARD -j limit-490 +-A FORWARD -j limit-489 +-A FORWARD -j limit-488 +-A FORWARD -j limit-487 +-A FORWARD -j limit-486 +-A FORWARD -j limit-485 +-A FORWARD -j limit-484 +-A FORWARD -j limit-483 +-A FORWARD -j limit-482 +-A FORWARD -j limit-481 +-A FORWARD -j limit-480 +-A FORWARD -j limit-479 +-A FORWARD -j limit-478 +-A FORWARD -j limit-477 +-A FORWARD -j limit-476 +-A FORWARD -j limit-475 +-A FORWARD -j limit-474 +-A FORWARD -j limit-473 +-A FORWARD -j limit-472 +-A FORWARD -j limit-471 +-A FORWARD -j limit-470 +-A FORWARD -j limit-469 +-A FORWARD -j limit-468 +-A FORWARD -j limit-467 +-A FORWARD -j limit-466 +-A FORWARD -j limit-465 +-A FORWARD -j limit-464 +-A FORWARD -j limit-463 +-A FORWARD -j limit-462 +-A FORWARD -j limit-461 +-A FORWARD -j limit-460 +-A FORWARD -j limit-459 +-A FORWARD -j limit-458 +-A FORWARD -j limit-457 +-A FORWARD -j limit-456 +-A FORWARD -j limit-455 +-A FORWARD -j limit-454 +-A FORWARD -j limit-453 +-A FORWARD -j limit-452 +-A FORWARD -j limit-451 +-A FORWARD -j limit-450 +-A FORWARD -j limit-449 +-A FORWARD -j limit-448 +-A FORWARD -j limit-447 +-A FORWARD -j limit-446 +-A FORWARD -j limit-445 +-A FORWARD -j limit-444 +-A FORWARD -j limit-443 +-A FORWARD -j limit-442 +-A FORWARD -j limit-441 +-A FORWARD -j limit-440 +-A FORWARD -j limit-439 +-A FORWARD -j limit-438 +-A FORWARD -j limit-437 +-A FORWARD -j limit-436 +-A FORWARD -j limit-435 +-A FORWARD -j limit-434 +-A FORWARD -j limit-433 +-A FORWARD -j limit-432 +-A FORWARD -j limit-431 +-A FORWARD -j limit-430 +-A FORWARD -j limit-429 +-A FORWARD -j limit-428 -A FORWARD -j limit-427 -A FORWARD -j limit-426 -A FORWARD -j limit-425 @@ -15860,150 +25846,6 @@ COMMIT -A FORWARD -j limit-360 -A FORWARD -j limit-359 -A FORWARD -j limit-358 --A FORWARD -j limit-357 --A FORWARD -j limit-356 --A FORWARD -j limit-355 --A FORWARD -j limit-354 --A FORWARD -j limit-353 --A FORWARD -j limit-352 --A FORWARD -j limit-351 --A FORWARD -j limit-350 --A FORWARD -j limit-349 --A FORWARD -j limit-348 --A FORWARD -j limit-347 --A FORWARD -j limit-346 --A FORWARD -j limit-345 --A FORWARD -j limit-344 --A FORWARD -j limit-343 --A FORWARD -j limit-342 --A FORWARD -j limit-341 --A FORWARD -j limit-340 --A FORWARD -j limit-339 --A FORWARD -j limit-338 --A FORWARD -j limit-337 --A FORWARD -j limit-336 --A FORWARD -j limit-335 --A FORWARD -j limit-334 --A FORWARD -j limit-333 --A FORWARD -j limit-332 --A FORWARD -j limit-331 --A FORWARD -j limit-330 --A FORWARD -j limit-329 --A FORWARD -j limit-328 --A FORWARD -j limit-327 --A FORWARD -j limit-326 --A FORWARD -j limit-325 --A FORWARD -j limit-324 --A FORWARD -j limit-323 --A FORWARD -j limit-322 --A FORWARD -j limit-321 --A FORWARD -j limit-320 --A FORWARD -j limit-319 --A FORWARD -j limit-318 --A FORWARD -j limit-317 --A FORWARD -j limit-316 --A FORWARD -j limit-315 --A FORWARD -j limit-314 --A FORWARD -j limit-313 --A FORWARD -j limit-312 --A FORWARD -j limit-311 --A FORWARD -j limit-310 --A FORWARD -j limit-309 --A FORWARD -j limit-308 --A FORWARD -j limit-307 --A FORWARD -j limit-306 --A FORWARD -j limit-305 --A FORWARD -j limit-304 --A FORWARD -j limit-303 --A FORWARD -j limit-302 --A FORWARD -j limit-301 --A FORWARD -j limit-300 --A FORWARD -j limit-299 --A FORWARD -j limit-298 --A FORWARD -j limit-297 --A FORWARD -j limit-296 --A FORWARD -j limit-295 --A FORWARD -j limit-294 --A FORWARD -j limit-293 --A FORWARD -j limit-292 --A FORWARD -j limit-291 --A FORWARD -j limit-290 --A FORWARD -j limit-289 --A FORWARD -j limit-288 --A FORWARD -j limit-287 --A FORWARD -j limit-286 --A FORWARD -j limit-285 --A FORWARD -j limit-284 --A FORWARD -j limit-283 --A FORWARD -j limit-282 --A FORWARD -j limit-281 --A FORWARD -j limit-280 --A FORWARD -j limit-279 --A FORWARD -j limit-278 --A FORWARD -j limit-277 --A FORWARD -j limit-276 --A FORWARD -j limit-275 --A FORWARD -j limit-274 --A FORWARD -j limit-273 --A FORWARD -j limit-272 --A FORWARD -j limit-271 --A FORWARD -j limit-270 --A FORWARD -j limit-269 --A FORWARD -j limit-268 --A FORWARD -j limit-267 --A FORWARD -j limit-266 --A FORWARD -j limit-265 --A FORWARD -j limit-264 --A FORWARD -j limit-263 --A FORWARD -j limit-262 --A FORWARD -j limit-261 --A FORWARD -j limit-260 --A FORWARD -j limit-259 --A FORWARD -j limit-258 --A FORWARD -j limit-257 --A FORWARD -j limit-256 --A FORWARD -j limit-255 --A FORWARD -j limit-254 --A FORWARD -j limit-253 --A FORWARD -j limit-252 --A FORWARD -j limit-251 --A FORWARD -j limit-250 --A FORWARD -j limit-249 --A FORWARD -j limit-248 --A FORWARD -j limit-247 --A FORWARD -j limit-246 --A FORWARD -j limit-245 --A FORWARD -j limit-244 --A FORWARD -j limit-243 --A FORWARD -j limit-242 --A FORWARD -j limit-241 --A FORWARD -j limit-240 --A FORWARD -j limit-239 --A FORWARD -j limit-238 --A FORWARD -j limit-237 --A FORWARD -j limit-236 --A FORWARD -j limit-235 --A FORWARD -j limit-234 --A FORWARD -j limit-233 --A FORWARD -j limit-232 --A FORWARD -j limit-231 --A FORWARD -j limit-230 --A FORWARD -j limit-229 --A FORWARD -j limit-228 --A FORWARD -j limit-227 --A FORWARD -j limit-226 --A FORWARD -j limit-225 --A FORWARD -j limit-224 --A FORWARD -j limit-223 --A FORWARD -j limit-222 --A FORWARD -j limit-221 --A FORWARD -j limit-220 --A FORWARD -j limit-219 --A FORWARD -j limit-218 --A FORWARD -j limit-217 --A FORWARD -j limit-216 --A FORWARD -j limit-215 --A FORWARD -j limit-214 -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -j ACCEPT -A FORWARD -j ACCEPT @@ -16054,29 +25896,29 @@ COMMIT -A FORWARD -o eth1 -d fc00::/7 -j limit-40 -A FORWARD -o eth1 -d fc00::/7 -j limit-41 -A FORWARD -o eth1 -d fc00::/7 -j limit-42 --A FORWARD -o eth1 -d fc00::/7 -j limit-43 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-44 -A FORWARD -o eth1 -d fc00::/7 -j limit-44 -A FORWARD -o eth1 -d fc00::/7 -j limit-45 -A FORWARD -o eth1 -d fc00::/7 -j limit-46 --A FORWARD -o eth1 -d fc00::/7 -j limit-47 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-48 -A FORWARD -o eth1 -d fc00::/7 -j limit-48 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-49 -A FORWARD -o eth1 -d fc00::/7 -j limit-50 -A FORWARD -o eth1 -d fc00::/7 -j limit-51 -A FORWARD -o eth1 -d fc00::/7 -j limit-52 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-53 -A FORWARD -o eth1 -d fc00::/7 -j limit-54 --A FORWARD -o eth1 -d fc00::/7 -j limit-55 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56 -A FORWARD -o eth1 -d fc00::/7 -j limit-56 -A FORWARD -o eth1 -d fc00::/7 -j limit-57 -A FORWARD -o eth1 -d fc00::/7 -j limit-58 --A FORWARD -o eth1 -d fc00::/7 -j limit-59 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-60 -A FORWARD -o eth1 -d fc00::/7 -j limit-60 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-61 -A FORWARD -o eth1 -d fc00::/7 -j limit-62 -A FORWARD -o eth1 -d fc00::/7 -j limit-63 -A FORWARD -o eth1 -d fc00::/7 -j limit-64 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-65 -A FORWARD -o eth1 -d fc00::/7 -j limit-66 -A FORWARD -o eth1 -d fc00::/7 -j limit-67 -A FORWARD -o eth1 -d fc00::/7 -j limit-68 @@ -16084,35 +25926,35 @@ COMMIT -A FORWARD -o eth1 -d fc00::/7 -j limit-70 -A FORWARD -o eth1 -d fc00::/7 -j limit-71 -A FORWARD -o eth1 -d fc00::/7 -j limit-72 --A FORWARD -o eth1 -d fc00::/7 -j limit-73 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-74 -A FORWARD -o eth1 -d fc00::/7 -j limit-75 -A FORWARD -o eth1 -d fc00::/7 -j limit-76 --A FORWARD -o eth1 -d fc00::/7 -j limit-77 --A FORWARD -o eth1 -d fc00::/7 -j limit-78 -A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-78 +-A FORWARD -o eth1 -d fc00::/7 -j limit-79 -A FORWARD -o eth1 -d fc00::/7 -j limit-80 -A FORWARD -o eth1 -d fc00::/7 -j limit-81 -A FORWARD -o eth1 -d fc00::/7 -j limit-82 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-83 -A FORWARD -o eth1 -d fc00::/7 -j limit-84 --A FORWARD -o eth1 -d fc00::/7 -j limit-85 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-86 -A FORWARD -o eth1 -d fc00::/7 -j limit-87 -A FORWARD -o eth1 -d fc00::/7 -j limit-88 --A FORWARD -o eth1 -d fc00::/7 -j limit-89 --A FORWARD -o eth1 -d fc00::/7 -j limit-90 -A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-90 +-A FORWARD -o eth1 -d fc00::/7 -j limit-91 -A FORWARD -o eth1 -d fc00::/7 -j limit-92 -A FORWARD -o eth1 -d fc00::/7 -j limit-93 -A FORWARD -o eth1 -d fc00::/7 -j limit-94 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-95 -A FORWARD -o eth1 -d fc00::/7 -j limit-96 --A FORWARD -o eth1 -d fc00::/7 -j limit-97 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-98 -A FORWARD -o eth1 -d fc00::/7 -j limit-99 -A FORWARD -o eth1 -d fc00::/7 -j limit-100 --A FORWARD -o eth1 -d fc00::/7 -j limit-101 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-102 -A FORWARD -o eth1 -d fc00::/7 -j limit-103 -A FORWARD -o eth1 -d fc00::/7 -j limit-104 @@ -16120,11 +25962,11 @@ COMMIT -A FORWARD -o eth1 -d fc00::/7 -j limit-106 -A FORWARD -o eth1 -d fc00::/7 -j limit-107 -A FORWARD -o eth1 -d fc00::/7 -j limit-108 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-50 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-110 -A FORWARD -o eth1 -d fc00::/7 -j limit-111 -A FORWARD -o eth1 -d fc00::/7 -j limit-112 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-54 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-114 -A FORWARD -o eth1 -d fc00::/7 -j limit-115 -A FORWARD -o eth1 -d fc00::/7 -j limit-116 @@ -16132,17 +25974,17 @@ COMMIT -A FORWARD -o eth1 -d fc00::/7 -j limit-118 -A FORWARD -o eth1 -d fc00::/7 -j limit-119 -A FORWARD -o eth1 -d fc00::/7 -j limit-120 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-62 +-A FORWARD -o eth1 -d fc00::/7 -j limit-121 -A FORWARD -o eth1 -d fc00::/7 -j limit-122 -A FORWARD -o eth1 -d fc00::/7 -j limit-123 -A FORWARD -o eth1 -d fc00::/7 -j limit-124 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-66 +-A FORWARD -o eth1 -d fc00::/7 -j limit-125 -A FORWARD -o eth1 -d fc00::/7 -j limit-126 --A FORWARD -o eth1 -d fc00::/7 -j limit-127 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-128 -A FORWARD -o eth1 -d fc00::/7 -j limit-129 -A FORWARD -o eth1 -d fc00::/7 -j limit-130 --A FORWARD -o eth1 -d fc00::/7 -j limit-131 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-132 -A FORWARD -o eth1 -d fc00::/7 -j limit-133 -A FORWARD -o eth1 -d fc00::/7 -j limit-134 @@ -16150,11 +25992,11 @@ COMMIT -A FORWARD -o eth1 -d fc00::/7 -j limit-136 -A FORWARD -o eth1 -d fc00::/7 -j limit-137 -A FORWARD -o eth1 -d fc00::/7 -j limit-138 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-140 -A FORWARD -o eth1 -d fc00::/7 -j limit-141 -A FORWARD -o eth1 -d fc00::/7 -j limit-142 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-144 -A FORWARD -o eth1 -d fc00::/7 -j limit-145 -A FORWARD -o eth1 -d fc00::/7 -j limit-146 @@ -16162,11 +26004,11 @@ COMMIT -A FORWARD -o eth1 -d fc00::/7 -j limit-148 -A FORWARD -o eth1 -d fc00::/7 -j limit-149 -A FORWARD -o eth1 -d fc00::/7 -j limit-150 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-152 -A FORWARD -o eth1 -d fc00::/7 -j limit-153 -A FORWARD -o eth1 -d fc00::/7 -j limit-154 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-156 -A FORWARD -o eth1 -d fc00::/7 -j limit-157 -A FORWARD -o eth1 -d fc00::/7 -j limit-158 @@ -16174,17 +26016,17 @@ COMMIT -A FORWARD -o eth1 -d fc00::/7 -j limit-160 -A FORWARD -o eth1 -d fc00::/7 -j limit-161 -A FORWARD -o eth1 -d fc00::/7 -j limit-162 --A FORWARD -o eth1 -d fc00::/7 -j limit-163 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-164 -A FORWARD -o eth1 -d fc00::/7 -j limit-165 -A FORWARD -o eth1 -d fc00::/7 -j limit-166 --A FORWARD -o eth1 -d fc00::/7 -j limit-167 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-168 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-169 -A FORWARD -o eth1 -d fc00::/7 -j limit-170 -A FORWARD -o eth1 -d fc00::/7 -j limit-171 -A FORWARD -o eth1 -d fc00::/7 -j limit-172 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-173 -A FORWARD -o eth1 -d fc00::/7 -j limit-174 -A FORWARD -o eth1 -d fc00::/7 -j limit-175 -A FORWARD -o eth1 -d fc00::/7 -j limit-176 @@ -16192,11 +26034,11 @@ COMMIT -A FORWARD -o eth1 -d fc00::/7 -j limit-178 -A FORWARD -o eth1 -d fc00::/7 -j limit-179 -A FORWARD -o eth1 -d fc00::/7 -j limit-180 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-74 -A FORWARD -o eth1 -d fc00::/7 -j limit-182 -A FORWARD -o eth1 -d fc00::/7 -j limit-183 -A FORWARD -o eth1 -d fc00::/7 -j limit-184 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-78 -A FORWARD -o eth1 -d fc00::/7 -j limit-186 -A FORWARD -o eth1 -d fc00::/7 -j limit-187 -A FORWARD -o eth1 -d fc00::/7 -j limit-188 @@ -16204,11 +26046,11 @@ COMMIT -A FORWARD -o eth1 -d fc00::/7 -j limit-190 -A FORWARD -o eth1 -d fc00::/7 -j limit-191 -A FORWARD -o eth1 -d fc00::/7 -j limit-192 --A FORWARD -o eth1 -d fc00::/7 -j limit-193 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-86 -A FORWARD -o eth1 -d fc00::/7 -j limit-194 -A FORWARD -o eth1 -d fc00::/7 -j limit-195 -A FORWARD -o eth1 -d fc00::/7 -j limit-196 --A FORWARD -o eth1 -d fc00::/7 -j limit-197 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-90 -A FORWARD -o eth1 -d fc00::/7 -j limit-198 -A FORWARD -o eth1 -d fc00::/7 -j limit-199 -A FORWARD -o eth1 -d fc00::/7 -j limit-200 @@ -16216,15 +26058,159 @@ COMMIT -A FORWARD -o eth1 -d fc00::/7 -j limit-202 -A FORWARD -o eth1 -d fc00::/7 -j limit-203 -A FORWARD -o eth1 -d fc00::/7 -j limit-204 --A FORWARD -o eth1 -d fc00::/7 -j limit-205 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-98 -A FORWARD -o eth1 -d fc00::/7 -j limit-206 -A FORWARD -o eth1 -d fc00::/7 -j limit-207 -A FORWARD -o eth1 -d fc00::/7 -j limit-208 --A FORWARD -o eth1 -d fc00::/7 -j limit-209 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-102 -A FORWARD -o eth1 -d fc00::/7 -j limit-210 -A FORWARD -o eth1 -d fc00::/7 -j limit-211 -A FORWARD -o eth1 -d fc00::/7 -j limit-212 -A FORWARD -o eth1 -d fc00::/7 -j limit-213 +-A FORWARD -o eth1 -d fc00::/7 -j limit-214 +-A FORWARD -o eth1 -d fc00::/7 -j limit-215 +-A FORWARD -o eth1 -d fc00::/7 -j limit-216 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-110 +-A FORWARD -o eth1 -d fc00::/7 -j limit-218 +-A FORWARD -o eth1 -d fc00::/7 -j limit-219 +-A FORWARD -o eth1 -d fc00::/7 -j limit-220 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-114 +-A FORWARD -o eth1 -d fc00::/7 -j limit-222 +-A FORWARD -o eth1 -d fc00::/7 -j limit-223 +-A FORWARD -o eth1 -d fc00::/7 -j limit-224 +-A FORWARD -o eth1 -d fc00::/7 -j limit-225 +-A FORWARD -o eth1 -d fc00::/7 -j limit-226 +-A FORWARD -o eth1 -d fc00::/7 -j limit-227 +-A FORWARD -o eth1 -d fc00::/7 -j limit-228 +-A FORWARD -o eth1 -d fc00::/7 -j limit-229 +-A FORWARD -o eth1 -d fc00::/7 -j limit-230 +-A FORWARD -o eth1 -d fc00::/7 -j limit-231 +-A FORWARD -o eth1 -d fc00::/7 -j limit-232 +-A FORWARD -o eth1 -d fc00::/7 -j limit-233 +-A FORWARD -o eth1 -d fc00::/7 -j limit-234 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-236 +-A FORWARD -o eth1 -d fc00::/7 -j limit-237 +-A FORWARD -o eth1 -d fc00::/7 -j limit-238 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-240 +-A FORWARD -o eth1 -d fc00::/7 -j limit-241 +-A FORWARD -o eth1 -d fc00::/7 -j limit-242 +-A FORWARD -o eth1 -d fc00::/7 -j limit-243 +-A FORWARD -o eth1 -d fc00::/7 -j limit-244 +-A FORWARD -o eth1 -d fc00::/7 -j limit-245 +-A FORWARD -o eth1 -d fc00::/7 -j limit-246 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-248 +-A FORWARD -o eth1 -d fc00::/7 -j limit-249 +-A FORWARD -o eth1 -d fc00::/7 -j limit-250 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-252 +-A FORWARD -o eth1 -d fc00::/7 -j limit-253 +-A FORWARD -o eth1 -d fc00::/7 -j limit-254 +-A FORWARD -o eth1 -d fc00::/7 -j limit-255 +-A FORWARD -o eth1 -d fc00::/7 -j limit-256 +-A FORWARD -o eth1 -d fc00::/7 -j limit-257 +-A FORWARD -o eth1 -d fc00::/7 -j limit-258 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-260 +-A FORWARD -o eth1 -d fc00::/7 -j limit-261 +-A FORWARD -o eth1 -d fc00::/7 -j limit-262 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-264 +-A FORWARD -o eth1 -d fc00::/7 -j limit-265 +-A FORWARD -o eth1 -d fc00::/7 -j limit-266 +-A FORWARD -o eth1 -d fc00::/7 -j limit-267 +-A FORWARD -o eth1 -d fc00::/7 -j limit-268 +-A FORWARD -o eth1 -d fc00::/7 -j limit-269 +-A FORWARD -o eth1 -d fc00::/7 -j limit-270 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-272 +-A FORWARD -o eth1 -d fc00::/7 -j limit-273 +-A FORWARD -o eth1 -d fc00::/7 -j limit-274 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-276 +-A FORWARD -o eth1 -d fc00::/7 -j limit-277 +-A FORWARD -o eth1 -d fc00::/7 -j limit-278 +-A FORWARD -o eth1 -d fc00::/7 -j limit-279 +-A FORWARD -o eth1 -d fc00::/7 -j limit-280 +-A FORWARD -o eth1 -d fc00::/7 -j limit-281 +-A FORWARD -o eth1 -d fc00::/7 -j limit-282 +-A FORWARD -o eth1 -d fc00::/7 -j limit-283 +-A FORWARD -o eth1 -d fc00::/7 -j limit-284 +-A FORWARD -o eth1 -d fc00::/7 -j limit-285 +-A FORWARD -o eth1 -d fc00::/7 -j limit-286 +-A FORWARD -o eth1 -d fc00::/7 -j limit-287 +-A FORWARD -o eth1 -d fc00::/7 -j limit-288 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-290 +-A FORWARD -o eth1 -d fc00::/7 -j limit-291 +-A FORWARD -o eth1 -d fc00::/7 -j limit-292 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-294 +-A FORWARD -o eth1 -d fc00::/7 -j limit-295 +-A FORWARD -o eth1 -d fc00::/7 -j limit-296 +-A FORWARD -o eth1 -d fc00::/7 -j limit-297 +-A FORWARD -o eth1 -d fc00::/7 -j limit-298 +-A FORWARD -o eth1 -d fc00::/7 -j limit-299 +-A FORWARD -o eth1 -d fc00::/7 -j limit-300 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-302 +-A FORWARD -o eth1 -d fc00::/7 -j limit-303 +-A FORWARD -o eth1 -d fc00::/7 -j limit-304 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-306 +-A FORWARD -o eth1 -d fc00::/7 -j limit-307 +-A FORWARD -o eth1 -d fc00::/7 -j limit-308 +-A FORWARD -o eth1 -d fc00::/7 -j limit-309 +-A FORWARD -o eth1 -d fc00::/7 -j limit-310 +-A FORWARD -o eth1 -d fc00::/7 -j limit-311 +-A FORWARD -o eth1 -d fc00::/7 -j limit-312 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-314 +-A FORWARD -o eth1 -d fc00::/7 -j limit-315 +-A FORWARD -o eth1 -d fc00::/7 -j limit-316 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-318 +-A FORWARD -o eth1 -d fc00::/7 -j limit-319 +-A FORWARD -o eth1 -d fc00::/7 -j limit-320 +-A FORWARD -o eth1 -d fc00::/7 -j limit-321 +-A FORWARD -o eth1 -d fc00::/7 -j limit-322 +-A FORWARD -o eth1 -d fc00::/7 -j limit-323 +-A FORWARD -o eth1 -d fc00::/7 -j limit-324 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-326 +-A FORWARD -o eth1 -d fc00::/7 -j limit-327 +-A FORWARD -o eth1 -d fc00::/7 -j limit-328 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-330 +-A FORWARD -o eth1 -d fc00::/7 -j limit-331 +-A FORWARD -o eth1 -d fc00::/7 -j limit-332 +-A FORWARD -o eth1 -d fc00::/7 -j limit-333 +-A FORWARD -o eth1 -d fc00::/7 -j limit-334 +-A FORWARD -o eth1 -d fc00::/7 -j limit-335 +-A FORWARD -o eth1 -d fc00::/7 -j limit-336 +-A FORWARD -o eth1 -d fc00::/7 -j limit-337 +-A FORWARD -o eth1 -d fc00::/7 -j limit-338 +-A FORWARD -o eth1 -d fc00::/7 -j limit-339 +-A FORWARD -o eth1 -d fc00::/7 -j limit-340 +-A FORWARD -o eth1 -d fc00::/7 -j limit-341 +-A FORWARD -o eth1 -d fc00::/7 -j limit-342 +-A FORWARD -o eth1 -d fc00::/7 -j limit-343 +-A FORWARD -o eth1 -d fc00::/7 -j limit-344 +-A FORWARD -o eth1 -d fc00::/7 -j limit-345 +-A FORWARD -o eth1 -d fc00::/7 -j limit-346 +-A FORWARD -o eth1 -d fc00::/7 -j limit-347 +-A FORWARD -o eth1 -d fc00::/7 -j limit-348 +-A FORWARD -o eth1 -d fc00::/7 -j limit-349 +-A FORWARD -o eth1 -d fc00::/7 -j limit-350 +-A FORWARD -o eth1 -d fc00::/7 -j limit-351 +-A FORWARD -o eth1 -d fc00::/7 -j limit-352 +-A FORWARD -o eth1 -d fc00::/7 -j limit-353 +-A FORWARD -o eth1 -d fc00::/7 -j limit-354 +-A FORWARD -o eth1 -d fc00::/7 -j limit-355 +-A FORWARD -o eth1 -d fc00::/7 -j limit-356 +-A FORWARD -o eth1 -d fc00::/7 -j limit-357 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-0 -A FORWARD -j ACCEPT @@ -16339,17 +26325,92 @@ COMMIT -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-37 -A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-38 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-39 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-40 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-41 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-42 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-43 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-44 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-45 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-46 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-47 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-48 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-49 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-50 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-51 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-52 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-53 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-54 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-55 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-56 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-57 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-58 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-59 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-60 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-61 +-A FORWARD -j ACCEPT -A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A FORWARD -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A FORWARD -m recent --name user:C --rsource --mask fe00:: --set +-A FORWARD -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set -A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -j ACCEPT --A FORWARD -j logdrop-199 +-A FORWARD -j logdrop-343 -A FORWARD -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD -A FORWARD -j logaccept-14 --A FORWARD -j logdrop-200 +-A FORWARD -j logdrop-344 -A FORWARD -j logpass-0 -A FORWARD -j ACCEPT -A FORWARD -j DROP @@ -16382,6 +26443,294 @@ COMMIT -A FORWARD -p icmpv6 -j icmp-routing -A INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A INPUT -j limit-715 +-A INPUT -j limit-714 +-A INPUT -j limit-713 +-A INPUT -j limit-712 +-A INPUT -j limit-711 +-A INPUT -j limit-710 +-A INPUT -j limit-709 +-A INPUT -j limit-708 +-A INPUT -j limit-707 +-A INPUT -j limit-706 +-A INPUT -j limit-705 +-A INPUT -j limit-704 +-A INPUT -j limit-703 +-A INPUT -j limit-702 +-A INPUT -j limit-701 +-A INPUT -j limit-700 +-A INPUT -j limit-699 +-A INPUT -j limit-698 +-A INPUT -j limit-697 +-A INPUT -j limit-696 +-A INPUT -j limit-695 +-A INPUT -j limit-694 +-A INPUT -j limit-693 +-A INPUT -j limit-692 +-A INPUT -j limit-691 +-A INPUT -j limit-690 +-A INPUT -j limit-689 +-A INPUT -j limit-688 +-A INPUT -j limit-687 +-A INPUT -j limit-686 +-A INPUT -j limit-685 +-A INPUT -j limit-684 +-A INPUT -j limit-683 +-A INPUT -j limit-682 +-A INPUT -j limit-681 +-A INPUT -j limit-680 +-A INPUT -j limit-679 +-A INPUT -j limit-678 +-A INPUT -j limit-677 +-A INPUT -j limit-676 +-A INPUT -j limit-675 +-A INPUT -j limit-674 +-A INPUT -j limit-673 +-A INPUT -j limit-672 +-A INPUT -j limit-671 +-A INPUT -j limit-670 +-A INPUT -j limit-669 +-A INPUT -j limit-668 +-A INPUT -j limit-667 +-A INPUT -j limit-666 +-A INPUT -j limit-665 +-A INPUT -j limit-664 +-A INPUT -j limit-663 +-A INPUT -j limit-662 +-A INPUT -j limit-661 +-A INPUT -j limit-660 +-A INPUT -j limit-659 +-A INPUT -j limit-658 +-A INPUT -j limit-657 +-A INPUT -j limit-656 +-A INPUT -j limit-655 +-A INPUT -j limit-654 +-A INPUT -j limit-653 +-A INPUT -j limit-652 +-A INPUT -j limit-651 +-A INPUT -j limit-650 +-A INPUT -j limit-649 +-A INPUT -j limit-648 +-A INPUT -j limit-647 +-A INPUT -j limit-646 +-A INPUT -j limit-645 +-A INPUT -j limit-644 +-A INPUT -j limit-643 +-A INPUT -j limit-642 +-A INPUT -j limit-641 +-A INPUT -j limit-640 +-A INPUT -j limit-639 +-A INPUT -j limit-638 +-A INPUT -j limit-637 +-A INPUT -j limit-636 +-A INPUT -j limit-635 +-A INPUT -j limit-634 +-A INPUT -j limit-633 +-A INPUT -j limit-632 +-A INPUT -j limit-631 +-A INPUT -j limit-630 +-A INPUT -j limit-629 +-A INPUT -j limit-628 +-A INPUT -j limit-627 +-A INPUT -j limit-626 +-A INPUT -j limit-625 +-A INPUT -j limit-624 +-A INPUT -j limit-623 +-A INPUT -j limit-622 +-A INPUT -j limit-621 +-A INPUT -j limit-620 +-A INPUT -j limit-619 +-A INPUT -j limit-618 +-A INPUT -j limit-617 +-A INPUT -j limit-616 +-A INPUT -j limit-615 +-A INPUT -j limit-614 +-A INPUT -j limit-613 +-A INPUT -j limit-612 +-A INPUT -j limit-611 +-A INPUT -j limit-610 +-A INPUT -j limit-609 +-A INPUT -j limit-608 +-A INPUT -j limit-607 +-A INPUT -j limit-606 +-A INPUT -j limit-605 +-A INPUT -j limit-604 +-A INPUT -j limit-603 +-A INPUT -j limit-602 +-A INPUT -j limit-601 +-A INPUT -j limit-600 +-A INPUT -j limit-599 +-A INPUT -j limit-598 +-A INPUT -j limit-597 +-A INPUT -j limit-596 +-A INPUT -j limit-595 +-A INPUT -j limit-594 +-A INPUT -j limit-593 +-A INPUT -j limit-592 +-A INPUT -j limit-591 +-A INPUT -j limit-590 +-A INPUT -j limit-589 +-A INPUT -j limit-588 +-A INPUT -j limit-587 +-A INPUT -j limit-586 +-A INPUT -j limit-585 +-A INPUT -j limit-584 +-A INPUT -j limit-583 +-A INPUT -j limit-582 +-A INPUT -j limit-581 +-A INPUT -j limit-580 +-A INPUT -j limit-579 +-A INPUT -j limit-578 +-A INPUT -j limit-577 +-A INPUT -j limit-576 +-A INPUT -j limit-575 +-A INPUT -j limit-574 +-A INPUT -j limit-573 +-A INPUT -j limit-572 +-A INPUT -j limit-571 +-A INPUT -j limit-570 +-A INPUT -j limit-569 +-A INPUT -j limit-568 +-A INPUT -j limit-567 +-A INPUT -j limit-566 +-A INPUT -j limit-565 +-A INPUT -j limit-564 +-A INPUT -j limit-563 +-A INPUT -j limit-562 +-A INPUT -j limit-561 +-A INPUT -j limit-560 +-A INPUT -j limit-559 +-A INPUT -j limit-558 +-A INPUT -j limit-557 +-A INPUT -j limit-556 +-A INPUT -j limit-555 +-A INPUT -j limit-554 +-A INPUT -j limit-553 +-A INPUT -j limit-552 +-A INPUT -j limit-551 +-A INPUT -j limit-550 +-A INPUT -j limit-549 +-A INPUT -j limit-548 +-A INPUT -j limit-547 +-A INPUT -j limit-546 +-A INPUT -j limit-545 +-A INPUT -j limit-544 +-A INPUT -j limit-543 +-A INPUT -j limit-542 +-A INPUT -j limit-541 +-A INPUT -j limit-540 +-A INPUT -j limit-539 +-A INPUT -j limit-538 +-A INPUT -j limit-537 +-A INPUT -j limit-536 +-A INPUT -j limit-535 +-A INPUT -j limit-534 +-A INPUT -j limit-533 +-A INPUT -j limit-532 +-A INPUT -j limit-531 +-A INPUT -j limit-530 +-A INPUT -j limit-529 +-A INPUT -j limit-528 +-A INPUT -j limit-527 +-A INPUT -j limit-526 +-A INPUT -j limit-525 +-A INPUT -j limit-524 +-A INPUT -j limit-523 +-A INPUT -j limit-522 +-A INPUT -j limit-521 +-A INPUT -j limit-520 +-A INPUT -j limit-519 +-A INPUT -j limit-518 +-A INPUT -j limit-517 +-A INPUT -j limit-516 +-A INPUT -j limit-515 +-A INPUT -j limit-514 +-A INPUT -j limit-513 +-A INPUT -j limit-512 +-A INPUT -j limit-511 +-A INPUT -j limit-510 +-A INPUT -j limit-509 +-A INPUT -j limit-508 +-A INPUT -j limit-507 +-A INPUT -j limit-506 +-A INPUT -j limit-505 +-A INPUT -j limit-504 +-A INPUT -j limit-503 +-A INPUT -j limit-502 +-A INPUT -j limit-501 +-A INPUT -j limit-500 +-A INPUT -j limit-499 +-A INPUT -j limit-498 +-A INPUT -j limit-497 +-A INPUT -j limit-496 +-A INPUT -j limit-495 +-A INPUT -j limit-494 +-A INPUT -j limit-493 +-A INPUT -j limit-492 +-A INPUT -j limit-491 +-A INPUT -j limit-490 +-A INPUT -j limit-489 +-A INPUT -j limit-488 +-A INPUT -j limit-487 +-A INPUT -j limit-486 +-A INPUT -j limit-485 +-A INPUT -j limit-484 +-A INPUT -j limit-483 +-A INPUT -j limit-482 +-A INPUT -j limit-481 +-A INPUT -j limit-480 +-A INPUT -j limit-479 +-A INPUT -j limit-478 +-A INPUT -j limit-477 +-A INPUT -j limit-476 +-A INPUT -j limit-475 +-A INPUT -j limit-474 +-A INPUT -j limit-473 +-A INPUT -j limit-472 +-A INPUT -j limit-471 +-A INPUT -j limit-470 +-A INPUT -j limit-469 +-A INPUT -j limit-468 +-A INPUT -j limit-467 +-A INPUT -j limit-466 +-A INPUT -j limit-465 +-A INPUT -j limit-464 +-A INPUT -j limit-463 +-A INPUT -j limit-462 +-A INPUT -j limit-461 +-A INPUT -j limit-460 +-A INPUT -j limit-459 +-A INPUT -j limit-458 +-A INPUT -j limit-457 +-A INPUT -j limit-456 +-A INPUT -j limit-455 +-A INPUT -j limit-454 +-A INPUT -j limit-453 +-A INPUT -j limit-452 +-A INPUT -j limit-451 +-A INPUT -j limit-450 +-A INPUT -j limit-449 +-A INPUT -j limit-448 +-A INPUT -j limit-447 +-A INPUT -j limit-446 +-A INPUT -j limit-445 +-A INPUT -j limit-444 +-A INPUT -j limit-443 +-A INPUT -j limit-442 +-A INPUT -j limit-441 +-A INPUT -j limit-440 +-A INPUT -j limit-439 +-A INPUT -j limit-438 +-A INPUT -j limit-437 +-A INPUT -j limit-436 +-A INPUT -j limit-435 +-A INPUT -j limit-434 +-A INPUT -j limit-433 +-A INPUT -j limit-432 +-A INPUT -j limit-431 +-A INPUT -j limit-430 +-A INPUT -j limit-429 +-A INPUT -j limit-428 -A INPUT -j limit-427 -A INPUT -j limit-426 -A INPUT -j limit-425 @@ -16452,150 +26801,6 @@ COMMIT -A INPUT -j limit-360 -A INPUT -j limit-359 -A INPUT -j limit-358 --A INPUT -j limit-357 --A INPUT -j limit-356 --A INPUT -j limit-355 --A INPUT -j limit-354 --A INPUT -j limit-353 --A INPUT -j limit-352 --A INPUT -j limit-351 --A INPUT -j limit-350 --A INPUT -j limit-349 --A INPUT -j limit-348 --A INPUT -j limit-347 --A INPUT -j limit-346 --A INPUT -j limit-345 --A INPUT -j limit-344 --A INPUT -j limit-343 --A INPUT -j limit-342 --A INPUT -j limit-341 --A INPUT -j limit-340 --A INPUT -j limit-339 --A INPUT -j limit-338 --A INPUT -j limit-337 --A INPUT -j limit-336 --A INPUT -j limit-335 --A INPUT -j limit-334 --A INPUT -j limit-333 --A INPUT -j limit-332 --A INPUT -j limit-331 --A INPUT -j limit-330 --A INPUT -j limit-329 --A INPUT -j limit-328 --A INPUT -j limit-327 --A INPUT -j limit-326 --A INPUT -j limit-325 --A INPUT -j limit-324 --A INPUT -j limit-323 --A INPUT -j limit-322 --A INPUT -j limit-321 --A INPUT -j limit-320 --A INPUT -j limit-319 --A INPUT -j limit-318 --A INPUT -j limit-317 --A INPUT -j limit-316 --A INPUT -j limit-315 --A INPUT -j limit-314 --A INPUT -j limit-313 --A INPUT -j limit-312 --A INPUT -j limit-311 --A INPUT -j limit-310 --A INPUT -j limit-309 --A INPUT -j limit-308 --A INPUT -j limit-307 --A INPUT -j limit-306 --A INPUT -j limit-305 --A INPUT -j limit-304 --A INPUT -j limit-303 --A INPUT -j limit-302 --A INPUT -j limit-301 --A INPUT -j limit-300 --A INPUT -j limit-299 --A INPUT -j limit-298 --A INPUT -j limit-297 --A INPUT -j limit-296 --A INPUT -j limit-295 --A INPUT -j limit-294 --A INPUT -j limit-293 --A INPUT -j limit-292 --A INPUT -j limit-291 --A INPUT -j limit-290 --A INPUT -j limit-289 --A INPUT -j limit-288 --A INPUT -j limit-287 --A INPUT -j limit-286 --A INPUT -j limit-285 --A INPUT -j limit-284 --A INPUT -j limit-283 --A INPUT -j limit-282 --A INPUT -j limit-281 --A INPUT -j limit-280 --A INPUT -j limit-279 --A INPUT -j limit-278 --A INPUT -j limit-277 --A INPUT -j limit-276 --A INPUT -j limit-275 --A INPUT -j limit-274 --A INPUT -j limit-273 --A INPUT -j limit-272 --A INPUT -j limit-271 --A INPUT -j limit-270 --A INPUT -j limit-269 --A INPUT -j limit-268 --A INPUT -j limit-267 --A INPUT -j limit-266 --A INPUT -j limit-265 --A INPUT -j limit-264 --A INPUT -j limit-263 --A INPUT -j limit-262 --A INPUT -j limit-261 --A INPUT -j limit-260 --A INPUT -j limit-259 --A INPUT -j limit-258 --A INPUT -j limit-257 --A INPUT -j limit-256 --A INPUT -j limit-255 --A INPUT -j limit-254 --A INPUT -j limit-253 --A INPUT -j limit-252 --A INPUT -j limit-251 --A INPUT -j limit-250 --A INPUT -j limit-249 --A INPUT -j limit-248 --A INPUT -j limit-247 --A INPUT -j limit-246 --A INPUT -j limit-245 --A INPUT -j limit-244 --A INPUT -j limit-243 --A INPUT -j limit-242 --A INPUT -j limit-241 --A INPUT -j limit-240 --A INPUT -j limit-239 --A INPUT -j limit-238 --A INPUT -j limit-237 --A INPUT -j limit-236 --A INPUT -j limit-235 --A INPUT -j limit-234 --A INPUT -j limit-233 --A INPUT -j limit-232 --A INPUT -j limit-231 --A INPUT -j limit-230 --A INPUT -j limit-229 --A INPUT -j limit-228 --A INPUT -j limit-227 --A INPUT -j limit-226 --A INPUT -j limit-225 --A INPUT -j limit-224 --A INPUT -j limit-223 --A INPUT -j limit-222 --A INPUT -j limit-221 --A INPUT -j limit-220 --A INPUT -j limit-219 --A INPUT -j limit-218 --A INPUT -j limit-217 --A INPUT -j limit-216 --A INPUT -j limit-215 --A INPUT -j limit-214 -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -j ACCEPT @@ -16718,231 +26923,450 @@ COMMIT -A INPUT -j ACCEPT -A INPUT -j logaccept-final-37 -A INPUT -j ACCEPT --A INPUT -i eth0 -j limit-428 --A INPUT -i eth0 -j limit-429 --A INPUT -i eth0 -j limit-430 --A INPUT -i eth0 -j limit-431 --A INPUT -i eth0 -j limit-432 --A INPUT -i eth0 -j limit-433 --A INPUT -i eth0 -j limit-434 --A INPUT -i eth0 -j limit-435 --A INPUT -i eth0 -j limit-436 --A INPUT -i eth0 -j limit-437 --A INPUT -i eth0 -j limit-438 --A INPUT -i eth0 -j limit-439 --A INPUT -i eth0 -j limit-440 --A INPUT -i eth0 -j limit-441 --A INPUT -i eth0 -j limit-442 --A INPUT -i eth0 -j limit-443 --A INPUT -i eth0 -j limit-444 --A INPUT -i eth0 -j limit-445 --A INPUT -i eth0 -j limit-446 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-152 --A INPUT -i eth0 -j limit-448 --A INPUT -i eth0 -j limit-449 --A INPUT -i eth0 -j limit-450 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-156 --A INPUT -i eth0 -j limit-452 --A INPUT -i eth0 -j limit-453 --A INPUT -i eth0 -j limit-454 --A INPUT -i eth0 -j limit-455 --A INPUT -i eth0 -j limit-456 --A INPUT -i eth0 -j limit-457 --A INPUT -i eth0 -j limit-458 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-164 --A INPUT -i eth0 -j limit-460 --A INPUT -i eth0 -j limit-461 --A INPUT -i eth0 -j limit-462 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-168 --A INPUT -i eth0 -j limit-464 --A INPUT -i eth0 -j limit-465 --A INPUT -i eth0 -j limit-466 --A INPUT -i eth0 -j limit-467 --A INPUT -i eth0 -j limit-468 --A INPUT -i eth0 -j limit-469 --A INPUT -i eth0 -j limit-470 --A INPUT -i eth0 -j limit-471 --A INPUT -i eth0 -j limit-472 --A INPUT -i eth0 -j limit-473 --A INPUT -i eth0 -j limit-474 --A INPUT -i eth0 -j limit-475 --A INPUT -i eth0 -j limit-476 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-38 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-39 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-40 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-41 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-42 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-43 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-44 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-45 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-46 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-47 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-48 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-49 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-50 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-51 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-52 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-53 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-54 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-55 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-56 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-57 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-58 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-59 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-60 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-61 +-A INPUT -j ACCEPT +-A INPUT -i eth0 -j limit-716 +-A INPUT -i eth0 -j limit-717 +-A INPUT -i eth0 -j limit-718 +-A INPUT -i eth0 -j limit-719 +-A INPUT -i eth0 -j limit-720 +-A INPUT -i eth0 -j limit-721 +-A INPUT -i eth0 -j limit-722 +-A INPUT -i eth0 -j limit-723 +-A INPUT -i eth0 -j limit-724 +-A INPUT -i eth0 -j limit-725 +-A INPUT -i eth0 -j limit-726 +-A INPUT -i eth0 -j limit-727 +-A INPUT -i eth0 -j limit-728 +-A INPUT -i eth0 -j limit-729 +-A INPUT -i eth0 -j limit-730 +-A INPUT -i eth0 -j limit-731 +-A INPUT -i eth0 -j limit-732 +-A INPUT -i eth0 -j limit-733 +-A INPUT -i eth0 -j limit-734 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-248 +-A INPUT -i eth0 -j limit-736 +-A INPUT -i eth0 -j limit-737 +-A INPUT -i eth0 -j limit-738 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-252 +-A INPUT -i eth0 -j limit-740 +-A INPUT -i eth0 -j limit-741 +-A INPUT -i eth0 -j limit-742 +-A INPUT -i eth0 -j limit-743 +-A INPUT -i eth0 -j limit-744 +-A INPUT -i eth0 -j limit-745 +-A INPUT -i eth0 -j limit-746 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-260 +-A INPUT -i eth0 -j limit-748 +-A INPUT -i eth0 -j limit-749 +-A INPUT -i eth0 -j limit-750 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-264 +-A INPUT -i eth0 -j limit-752 +-A INPUT -i eth0 -j limit-753 +-A INPUT -i eth0 -j limit-754 +-A INPUT -i eth0 -j limit-755 +-A INPUT -i eth0 -j limit-756 +-A INPUT -i eth0 -j limit-757 +-A INPUT -i eth0 -j limit-758 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-272 +-A INPUT -i eth0 -j limit-760 +-A INPUT -i eth0 -j limit-761 +-A INPUT -i eth0 -j limit-762 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-276 +-A INPUT -i eth0 -j limit-764 +-A INPUT -i eth0 -j limit-765 +-A INPUT -i eth0 -j limit-766 +-A INPUT -i eth0 -j limit-767 +-A INPUT -i eth0 -j limit-768 +-A INPUT -i eth0 -j limit-769 +-A INPUT -i eth0 -j limit-770 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-284 +-A INPUT -i eth0 -j limit-772 +-A INPUT -i eth0 -j limit-773 +-A INPUT -i eth0 -j limit-774 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-288 +-A INPUT -i eth0 -j limit-776 +-A INPUT -i eth0 -j limit-777 +-A INPUT -i eth0 -j limit-778 +-A INPUT -i eth0 -j limit-779 +-A INPUT -i eth0 -j limit-780 +-A INPUT -i eth0 -j limit-781 +-A INPUT -i eth0 -j limit-782 +-A INPUT -i eth0 -j limit-783 +-A INPUT -i eth0 -j limit-784 +-A INPUT -i eth0 -j limit-785 +-A INPUT -i eth0 -j limit-786 +-A INPUT -i eth0 -j limit-787 +-A INPUT -i eth0 -j limit-788 -A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-478 --A INPUT -i eth0 -j limit-479 --A INPUT -i eth0 -j limit-480 +-A INPUT -i eth0 -j limit-790 +-A INPUT -i eth0 -j limit-791 +-A INPUT -i eth0 -j limit-792 -A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-482 --A INPUT -i eth0 -j limit-483 --A INPUT -i eth0 -j limit-484 --A INPUT -i eth0 -j limit-485 --A INPUT -i eth0 -j limit-486 --A INPUT -i eth0 -j limit-487 --A INPUT -i eth0 -j limit-488 +-A INPUT -i eth0 -j limit-794 +-A INPUT -i eth0 -j limit-795 +-A INPUT -i eth0 -j limit-796 +-A INPUT -i eth0 -j limit-797 +-A INPUT -i eth0 -j limit-798 +-A INPUT -i eth0 -j limit-799 +-A INPUT -i eth0 -j limit-800 -A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-490 --A INPUT -i eth0 -j limit-491 --A INPUT -i eth0 -j limit-492 +-A INPUT -i eth0 -j limit-802 +-A INPUT -i eth0 -j limit-803 +-A INPUT -i eth0 -j limit-804 -A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-494 --A INPUT -i eth0 -j limit-495 --A INPUT -i eth0 -j limit-496 --A INPUT -i eth0 -j limit-497 --A INPUT -i eth0 -j limit-498 --A INPUT -i eth0 -j limit-499 --A INPUT -i eth0 -j limit-500 --A INPUT -i eth0 -j limit-501 --A INPUT -i eth0 -j limit-502 --A INPUT -i eth0 -j limit-503 --A INPUT -i eth0 -j limit-504 --A INPUT -i eth0 -j limit-505 --A INPUT -i eth0 -j limit-506 +-A INPUT -i eth0 -j limit-806 +-A INPUT -i eth0 -j limit-807 +-A INPUT -i eth0 -j limit-808 +-A INPUT -i eth0 -j limit-809 +-A INPUT -i eth0 -j limit-810 +-A INPUT -i eth0 -j limit-811 +-A INPUT -i eth0 -j limit-812 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-814 +-A INPUT -i eth0 -j limit-815 +-A INPUT -i eth0 -j limit-816 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-818 +-A INPUT -i eth0 -j limit-819 +-A INPUT -i eth0 -j limit-820 +-A INPUT -i eth0 -j limit-821 +-A INPUT -i eth0 -j limit-822 +-A INPUT -i eth0 -j limit-823 +-A INPUT -i eth0 -j limit-824 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-826 +-A INPUT -i eth0 -j limit-827 +-A INPUT -i eth0 -j limit-828 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-830 +-A INPUT -i eth0 -j limit-831 +-A INPUT -i eth0 -j limit-832 +-A INPUT -i eth0 -j limit-833 +-A INPUT -i eth0 -j limit-834 +-A INPUT -i eth0 -j limit-835 +-A INPUT -i eth0 -j limit-836 +-A INPUT -i eth0 -j limit-837 +-A INPUT -i eth0 -j limit-838 +-A INPUT -i eth0 -j limit-839 +-A INPUT -i eth0 -j limit-840 +-A INPUT -i eth0 -j limit-841 +-A INPUT -i eth0 -j limit-842 -A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-508 --A INPUT -i eth0 -j limit-509 --A INPUT -i eth0 -j limit-510 +-A INPUT -i eth0 -j limit-844 +-A INPUT -i eth0 -j limit-845 +-A INPUT -i eth0 -j limit-846 -A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-512 --A INPUT -i eth0 -j limit-513 --A INPUT -i eth0 -j limit-514 --A INPUT -i eth0 -j limit-515 --A INPUT -i eth0 -j limit-516 --A INPUT -i eth0 -j limit-517 --A INPUT -i eth0 -j limit-518 +-A INPUT -i eth0 -j limit-848 +-A INPUT -i eth0 -j limit-849 +-A INPUT -i eth0 -j limit-850 +-A INPUT -i eth0 -j limit-851 +-A INPUT -i eth0 -j limit-852 +-A INPUT -i eth0 -j limit-853 +-A INPUT -i eth0 -j limit-854 -A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-520 --A INPUT -i eth0 -j limit-521 --A INPUT -i eth0 -j limit-522 +-A INPUT -i eth0 -j limit-856 +-A INPUT -i eth0 -j limit-857 +-A INPUT -i eth0 -j limit-858 -A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-524 --A INPUT -i eth0 -j limit-525 --A INPUT -i eth0 -j limit-526 --A INPUT -i eth0 -j limit-527 --A INPUT -i eth0 -j limit-528 --A INPUT -i eth0 -j limit-529 --A INPUT -i eth0 -j limit-530 --A INPUT -i eth0 -j limit-531 --A INPUT -i eth0 -j limit-532 --A INPUT -i eth0 -j limit-533 --A INPUT -i eth0 -j limit-534 --A INPUT -i eth0 -j limit-535 --A INPUT -i eth0 -j limit-536 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-182 --A INPUT -i eth0 -j limit-538 --A INPUT -i eth0 -j limit-539 --A INPUT -i eth0 -j limit-540 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-186 --A INPUT -i eth0 -j limit-542 --A INPUT -i eth0 -j limit-543 --A INPUT -i eth0 -j limit-544 --A INPUT -i eth0 -j limit-545 --A INPUT -i eth0 -j limit-546 --A INPUT -i eth0 -j limit-547 --A INPUT -i eth0 -j limit-548 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-194 --A INPUT -i eth0 -j limit-550 --A INPUT -i eth0 -j limit-551 --A INPUT -i eth0 -j limit-552 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-198 --A INPUT -i eth0 -j limit-554 --A INPUT -i eth0 -j limit-555 --A INPUT -i eth0 -j limit-556 --A INPUT -i eth0 -j limit-557 --A INPUT -i eth0 -j limit-558 --A INPUT -i eth0 -j limit-559 --A INPUT -i eth0 -j limit-560 --A INPUT -i eth0 -j limit-561 --A INPUT -i eth0 -j limit-562 --A INPUT -i eth0 -j limit-563 --A INPUT -i eth0 -j limit-564 --A INPUT -i eth0 -j limit-565 --A INPUT -i eth0 -j limit-566 +-A INPUT -i eth0 -j limit-860 +-A INPUT -i eth0 -j limit-861 +-A INPUT -i eth0 -j limit-862 +-A INPUT -i eth0 -j limit-863 +-A INPUT -i eth0 -j limit-864 +-A INPUT -i eth0 -j limit-865 +-A INPUT -i eth0 -j limit-866 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-868 +-A INPUT -i eth0 -j limit-869 +-A INPUT -i eth0 -j limit-870 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-872 +-A INPUT -i eth0 -j limit-873 +-A INPUT -i eth0 -j limit-874 +-A INPUT -i eth0 -j limit-875 +-A INPUT -i eth0 -j limit-876 +-A INPUT -i eth0 -j limit-877 +-A INPUT -i eth0 -j limit-878 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-880 +-A INPUT -i eth0 -j limit-881 +-A INPUT -i eth0 -j limit-882 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-884 +-A INPUT -i eth0 -j limit-885 +-A INPUT -i eth0 -j limit-886 +-A INPUT -i eth0 -j limit-887 +-A INPUT -i eth0 -j limit-888 +-A INPUT -i eth0 -j limit-889 +-A INPUT -i eth0 -j limit-890 +-A INPUT -i eth0 -j limit-891 +-A INPUT -i eth0 -j limit-892 +-A INPUT -i eth0 -j limit-893 +-A INPUT -i eth0 -j limit-894 +-A INPUT -i eth0 -j limit-895 +-A INPUT -i eth0 -j limit-896 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-302 +-A INPUT -i eth0 -j limit-898 +-A INPUT -i eth0 -j limit-899 +-A INPUT -i eth0 -j limit-900 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-306 +-A INPUT -i eth0 -j limit-902 +-A INPUT -i eth0 -j limit-903 +-A INPUT -i eth0 -j limit-904 +-A INPUT -i eth0 -j limit-905 +-A INPUT -i eth0 -j limit-906 +-A INPUT -i eth0 -j limit-907 +-A INPUT -i eth0 -j limit-908 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-314 +-A INPUT -i eth0 -j limit-910 +-A INPUT -i eth0 -j limit-911 +-A INPUT -i eth0 -j limit-912 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-318 +-A INPUT -i eth0 -j limit-914 +-A INPUT -i eth0 -j limit-915 +-A INPUT -i eth0 -j limit-916 +-A INPUT -i eth0 -j limit-917 +-A INPUT -i eth0 -j limit-918 +-A INPUT -i eth0 -j limit-919 +-A INPUT -i eth0 -j limit-920 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-326 +-A INPUT -i eth0 -j limit-922 +-A INPUT -i eth0 -j limit-923 +-A INPUT -i eth0 -j limit-924 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-330 +-A INPUT -i eth0 -j limit-926 +-A INPUT -i eth0 -j limit-927 +-A INPUT -i eth0 -j limit-928 +-A INPUT -i eth0 -j limit-929 +-A INPUT -i eth0 -j limit-930 +-A INPUT -i eth0 -j limit-931 +-A INPUT -i eth0 -j limit-932 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-338 +-A INPUT -i eth0 -j limit-934 +-A INPUT -i eth0 -j limit-935 +-A INPUT -i eth0 -j limit-936 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-342 +-A INPUT -i eth0 -j limit-938 +-A INPUT -i eth0 -j limit-939 +-A INPUT -i eth0 -j limit-940 +-A INPUT -i eth0 -j limit-941 +-A INPUT -i eth0 -j limit-942 +-A INPUT -i eth0 -j limit-943 +-A INPUT -i eth0 -j limit-944 +-A INPUT -i eth0 -j limit-945 +-A INPUT -i eth0 -j limit-946 +-A INPUT -i eth0 -j limit-947 +-A INPUT -i eth0 -j limit-948 +-A INPUT -i eth0 -j limit-949 +-A INPUT -i eth0 -j limit-950 -A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-568 --A INPUT -i eth0 -j limit-569 --A INPUT -i eth0 -j limit-570 +-A INPUT -i eth0 -j limit-952 +-A INPUT -i eth0 -j limit-953 +-A INPUT -i eth0 -j limit-954 -A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-572 --A INPUT -i eth0 -j limit-573 --A INPUT -i eth0 -j limit-574 --A INPUT -i eth0 -j limit-575 --A INPUT -i eth0 -j limit-576 --A INPUT -i eth0 -j limit-577 --A INPUT -i eth0 -j limit-578 +-A INPUT -i eth0 -j limit-956 +-A INPUT -i eth0 -j limit-957 +-A INPUT -i eth0 -j limit-958 +-A INPUT -i eth0 -j limit-959 +-A INPUT -i eth0 -j limit-960 +-A INPUT -i eth0 -j limit-961 +-A INPUT -i eth0 -j limit-962 -A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-580 --A INPUT -i eth0 -j limit-581 --A INPUT -i eth0 -j limit-582 +-A INPUT -i eth0 -j limit-964 +-A INPUT -i eth0 -j limit-965 +-A INPUT -i eth0 -j limit-966 -A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-584 --A INPUT -i eth0 -j limit-585 --A INPUT -i eth0 -j limit-586 --A INPUT -i eth0 -j limit-587 --A INPUT -i eth0 -j limit-588 --A INPUT -i eth0 -j limit-589 --A INPUT -i eth0 -j limit-590 --A INPUT -i eth0 -j limit-591 --A INPUT -i eth0 -j limit-592 --A INPUT -i eth0 -j limit-593 --A INPUT -i eth0 -j limit-594 --A INPUT -i eth0 -j limit-595 --A INPUT -i eth0 -j limit-596 +-A INPUT -i eth0 -j limit-968 +-A INPUT -i eth0 -j limit-969 +-A INPUT -i eth0 -j limit-970 +-A INPUT -i eth0 -j limit-971 +-A INPUT -i eth0 -j limit-972 +-A INPUT -i eth0 -j limit-973 +-A INPUT -i eth0 -j limit-974 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-976 +-A INPUT -i eth0 -j limit-977 +-A INPUT -i eth0 -j limit-978 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-980 +-A INPUT -i eth0 -j limit-981 +-A INPUT -i eth0 -j limit-982 +-A INPUT -i eth0 -j limit-983 +-A INPUT -i eth0 -j limit-984 +-A INPUT -i eth0 -j limit-985 +-A INPUT -i eth0 -j limit-986 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-988 +-A INPUT -i eth0 -j limit-989 +-A INPUT -i eth0 -j limit-990 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-992 +-A INPUT -i eth0 -j limit-993 +-A INPUT -i eth0 -j limit-994 +-A INPUT -i eth0 -j limit-995 +-A INPUT -i eth0 -j limit-996 +-A INPUT -i eth0 -j limit-997 +-A INPUT -i eth0 -j limit-998 +-A INPUT -i eth0 -j limit-999 +-A INPUT -i eth0 -j limit-1000 +-A INPUT -i eth0 -j limit-1001 +-A INPUT -i eth0 -j limit-1002 +-A INPUT -i eth0 -j limit-1003 +-A INPUT -i eth0 -j limit-1004 -A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-598 --A INPUT -i eth0 -j limit-599 --A INPUT -i eth0 -j limit-600 +-A INPUT -i eth0 -j limit-1006 +-A INPUT -i eth0 -j limit-1007 +-A INPUT -i eth0 -j limit-1008 -A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-602 --A INPUT -i eth0 -j limit-603 --A INPUT -i eth0 -j limit-604 --A INPUT -i eth0 -j limit-605 --A INPUT -i eth0 -j limit-606 --A INPUT -i eth0 -j limit-607 --A INPUT -i eth0 -j limit-608 +-A INPUT -i eth0 -j limit-1010 +-A INPUT -i eth0 -j limit-1011 +-A INPUT -i eth0 -j limit-1012 +-A INPUT -i eth0 -j limit-1013 +-A INPUT -i eth0 -j limit-1014 +-A INPUT -i eth0 -j limit-1015 +-A INPUT -i eth0 -j limit-1016 -A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-610 --A INPUT -i eth0 -j limit-611 --A INPUT -i eth0 -j limit-612 +-A INPUT -i eth0 -j limit-1018 +-A INPUT -i eth0 -j limit-1019 +-A INPUT -i eth0 -j limit-1020 -A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-614 --A INPUT -i eth0 -j limit-615 --A INPUT -i eth0 -j limit-616 --A INPUT -i eth0 -j limit-617 --A INPUT -i eth0 -j limit-618 --A INPUT -i eth0 -j limit-619 --A INPUT -i eth0 -j limit-620 --A INPUT -i eth0 -j limit-621 --A INPUT -i eth0 -j limit-622 --A INPUT -i eth0 -j limit-623 --A INPUT -i eth0 -j limit-624 --A INPUT -i eth0 -j limit-625 --A INPUT -i eth0 -j limit-626 --A INPUT -i eth0 -j limit-627 --A INPUT -i eth0 -j limit-628 --A INPUT -i eth0 -j limit-629 --A INPUT -i eth0 -j limit-630 --A INPUT -i eth0 -j limit-631 --A INPUT -i eth0 -j limit-632 --A INPUT -i eth0 -j limit-633 --A INPUT -i eth0 -j limit-634 --A INPUT -i eth0 -j limit-635 --A INPUT -i eth0 -j limit-636 --A INPUT -i eth0 -j limit-637 --A INPUT -i eth0 -j limit-638 --A INPUT -i eth0 -j limit-639 --A INPUT -i eth0 -j limit-640 --A INPUT -i eth0 -j limit-641 +-A INPUT -i eth0 -j limit-1022 +-A INPUT -i eth0 -j limit-1023 +-A INPUT -i eth0 -j limit-1024 +-A INPUT -i eth0 -j limit-1025 +-A INPUT -i eth0 -j limit-1026 +-A INPUT -i eth0 -j limit-1027 +-A INPUT -i eth0 -j limit-1028 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1030 +-A INPUT -i eth0 -j limit-1031 +-A INPUT -i eth0 -j limit-1032 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1034 +-A INPUT -i eth0 -j limit-1035 +-A INPUT -i eth0 -j limit-1036 +-A INPUT -i eth0 -j limit-1037 +-A INPUT -i eth0 -j limit-1038 +-A INPUT -i eth0 -j limit-1039 +-A INPUT -i eth0 -j limit-1040 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1042 +-A INPUT -i eth0 -j limit-1043 +-A INPUT -i eth0 -j limit-1044 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1046 +-A INPUT -i eth0 -j limit-1047 +-A INPUT -i eth0 -j limit-1048 +-A INPUT -i eth0 -j limit-1049 +-A INPUT -i eth0 -j limit-1050 +-A INPUT -i eth0 -j limit-1051 +-A INPUT -i eth0 -j limit-1052 +-A INPUT -i eth0 -j limit-1053 +-A INPUT -i eth0 -j limit-1054 +-A INPUT -i eth0 -j limit-1055 +-A INPUT -i eth0 -j limit-1056 +-A INPUT -i eth0 -j limit-1057 +-A INPUT -i eth0 -j limit-1058 +-A INPUT -i eth0 -j limit-1059 +-A INPUT -i eth0 -j limit-1060 +-A INPUT -i eth0 -j limit-1061 +-A INPUT -i eth0 -j limit-1062 +-A INPUT -i eth0 -j limit-1063 +-A INPUT -i eth0 -j limit-1064 +-A INPUT -i eth0 -j limit-1065 +-A INPUT -i eth0 -j limit-1066 +-A INPUT -i eth0 -j limit-1067 +-A INPUT -i eth0 -j limit-1068 +-A INPUT -i eth0 -j limit-1069 +-A INPUT -i eth0 -j limit-1070 +-A INPUT -i eth0 -j limit-1071 +-A INPUT -i eth0 -j limit-1072 +-A INPUT -i eth0 -j limit-1073 -A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A INPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A INPUT -m recent --name user:C --rsource --mask fe00:: --set +-A INPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set -A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -j ACCEPT --A INPUT -j logdrop-199 +-A INPUT -j logdrop-343 -A INPUT -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT -A INPUT -j logaccept-14 --A INPUT -j logdrop-200 +-A INPUT -j logdrop-344 -A INPUT -j logpass-0 -A INPUT -j ACCEPT -A INPUT -j DROP @@ -16955,6 +27379,294 @@ COMMIT -A INPUT -p icmpv6 -j ACCEPT -A OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -j limit-715 +-A OUTPUT -j limit-714 +-A OUTPUT -j limit-713 +-A OUTPUT -j limit-712 +-A OUTPUT -j limit-711 +-A OUTPUT -j limit-710 +-A OUTPUT -j limit-709 +-A OUTPUT -j limit-708 +-A OUTPUT -j limit-707 +-A OUTPUT -j limit-706 +-A OUTPUT -j limit-705 +-A OUTPUT -j limit-704 +-A OUTPUT -j limit-703 +-A OUTPUT -j limit-702 +-A OUTPUT -j limit-701 +-A OUTPUT -j limit-700 +-A OUTPUT -j limit-699 +-A OUTPUT -j limit-698 +-A OUTPUT -j limit-697 +-A OUTPUT -j limit-696 +-A OUTPUT -j limit-695 +-A OUTPUT -j limit-694 +-A OUTPUT -j limit-693 +-A OUTPUT -j limit-692 +-A OUTPUT -j limit-691 +-A OUTPUT -j limit-690 +-A OUTPUT -j limit-689 +-A OUTPUT -j limit-688 +-A OUTPUT -j limit-687 +-A OUTPUT -j limit-686 +-A OUTPUT -j limit-685 +-A OUTPUT -j limit-684 +-A OUTPUT -j limit-683 +-A OUTPUT -j limit-682 +-A OUTPUT -j limit-681 +-A OUTPUT -j limit-680 +-A OUTPUT -j limit-679 +-A OUTPUT -j limit-678 +-A OUTPUT -j limit-677 +-A OUTPUT -j limit-676 +-A OUTPUT -j limit-675 +-A OUTPUT -j limit-674 +-A OUTPUT -j limit-673 +-A OUTPUT -j limit-672 +-A OUTPUT -j limit-671 +-A OUTPUT -j limit-670 +-A OUTPUT -j limit-669 +-A OUTPUT -j limit-668 +-A OUTPUT -j limit-667 +-A OUTPUT -j limit-666 +-A OUTPUT -j limit-665 +-A OUTPUT -j limit-664 +-A OUTPUT -j limit-663 +-A OUTPUT -j limit-662 +-A OUTPUT -j limit-661 +-A OUTPUT -j limit-660 +-A OUTPUT -j limit-659 +-A OUTPUT -j limit-658 +-A OUTPUT -j limit-657 +-A OUTPUT -j limit-656 +-A OUTPUT -j limit-655 +-A OUTPUT -j limit-654 +-A OUTPUT -j limit-653 +-A OUTPUT -j limit-652 +-A OUTPUT -j limit-651 +-A OUTPUT -j limit-650 +-A OUTPUT -j limit-649 +-A OUTPUT -j limit-648 +-A OUTPUT -j limit-647 +-A OUTPUT -j limit-646 +-A OUTPUT -j limit-645 +-A OUTPUT -j limit-644 +-A OUTPUT -j limit-643 +-A OUTPUT -j limit-642 +-A OUTPUT -j limit-641 +-A OUTPUT -j limit-640 +-A OUTPUT -j limit-639 +-A OUTPUT -j limit-638 +-A OUTPUT -j limit-637 +-A OUTPUT -j limit-636 +-A OUTPUT -j limit-635 +-A OUTPUT -j limit-634 +-A OUTPUT -j limit-633 +-A OUTPUT -j limit-632 +-A OUTPUT -j limit-631 +-A OUTPUT -j limit-630 +-A OUTPUT -j limit-629 +-A OUTPUT -j limit-628 +-A OUTPUT -j limit-627 +-A OUTPUT -j limit-626 +-A OUTPUT -j limit-625 +-A OUTPUT -j limit-624 +-A OUTPUT -j limit-623 +-A OUTPUT -j limit-622 +-A OUTPUT -j limit-621 +-A OUTPUT -j limit-620 +-A OUTPUT -j limit-619 +-A OUTPUT -j limit-618 +-A OUTPUT -j limit-617 +-A OUTPUT -j limit-616 +-A OUTPUT -j limit-615 +-A OUTPUT -j limit-614 +-A OUTPUT -j limit-613 +-A OUTPUT -j limit-612 +-A OUTPUT -j limit-611 +-A OUTPUT -j limit-610 +-A OUTPUT -j limit-609 +-A OUTPUT -j limit-608 +-A OUTPUT -j limit-607 +-A OUTPUT -j limit-606 +-A OUTPUT -j limit-605 +-A OUTPUT -j limit-604 +-A OUTPUT -j limit-603 +-A OUTPUT -j limit-602 +-A OUTPUT -j limit-601 +-A OUTPUT -j limit-600 +-A OUTPUT -j limit-599 +-A OUTPUT -j limit-598 +-A OUTPUT -j limit-597 +-A OUTPUT -j limit-596 +-A OUTPUT -j limit-595 +-A OUTPUT -j limit-594 +-A OUTPUT -j limit-593 +-A OUTPUT -j limit-592 +-A OUTPUT -j limit-591 +-A OUTPUT -j limit-590 +-A OUTPUT -j limit-589 +-A OUTPUT -j limit-588 +-A OUTPUT -j limit-587 +-A OUTPUT -j limit-586 +-A OUTPUT -j limit-585 +-A OUTPUT -j limit-584 +-A OUTPUT -j limit-583 +-A OUTPUT -j limit-582 +-A OUTPUT -j limit-581 +-A OUTPUT -j limit-580 +-A OUTPUT -j limit-579 +-A OUTPUT -j limit-578 +-A OUTPUT -j limit-577 +-A OUTPUT -j limit-576 +-A OUTPUT -j limit-575 +-A OUTPUT -j limit-574 +-A OUTPUT -j limit-573 +-A OUTPUT -j limit-572 +-A OUTPUT -j limit-571 +-A OUTPUT -j limit-570 +-A OUTPUT -j limit-569 +-A OUTPUT -j limit-568 +-A OUTPUT -j limit-567 +-A OUTPUT -j limit-566 +-A OUTPUT -j limit-565 +-A OUTPUT -j limit-564 +-A OUTPUT -j limit-563 +-A OUTPUT -j limit-562 +-A OUTPUT -j limit-561 +-A OUTPUT -j limit-560 +-A OUTPUT -j limit-559 +-A OUTPUT -j limit-558 +-A OUTPUT -j limit-557 +-A OUTPUT -j limit-556 +-A OUTPUT -j limit-555 +-A OUTPUT -j limit-554 +-A OUTPUT -j limit-553 +-A OUTPUT -j limit-552 +-A OUTPUT -j limit-551 +-A OUTPUT -j limit-550 +-A OUTPUT -j limit-549 +-A OUTPUT -j limit-548 +-A OUTPUT -j limit-547 +-A OUTPUT -j limit-546 +-A OUTPUT -j limit-545 +-A OUTPUT -j limit-544 +-A OUTPUT -j limit-543 +-A OUTPUT -j limit-542 +-A OUTPUT -j limit-541 +-A OUTPUT -j limit-540 +-A OUTPUT -j limit-539 +-A OUTPUT -j limit-538 +-A OUTPUT -j limit-537 +-A OUTPUT -j limit-536 +-A OUTPUT -j limit-535 +-A OUTPUT -j limit-534 +-A OUTPUT -j limit-533 +-A OUTPUT -j limit-532 +-A OUTPUT -j limit-531 +-A OUTPUT -j limit-530 +-A OUTPUT -j limit-529 +-A OUTPUT -j limit-528 +-A OUTPUT -j limit-527 +-A OUTPUT -j limit-526 +-A OUTPUT -j limit-525 +-A OUTPUT -j limit-524 +-A OUTPUT -j limit-523 +-A OUTPUT -j limit-522 +-A OUTPUT -j limit-521 +-A OUTPUT -j limit-520 +-A OUTPUT -j limit-519 +-A OUTPUT -j limit-518 +-A OUTPUT -j limit-517 +-A OUTPUT -j limit-516 +-A OUTPUT -j limit-515 +-A OUTPUT -j limit-514 +-A OUTPUT -j limit-513 +-A OUTPUT -j limit-512 +-A OUTPUT -j limit-511 +-A OUTPUT -j limit-510 +-A OUTPUT -j limit-509 +-A OUTPUT -j limit-508 +-A OUTPUT -j limit-507 +-A OUTPUT -j limit-506 +-A OUTPUT -j limit-505 +-A OUTPUT -j limit-504 +-A OUTPUT -j limit-503 +-A OUTPUT -j limit-502 +-A OUTPUT -j limit-501 +-A OUTPUT -j limit-500 +-A OUTPUT -j limit-499 +-A OUTPUT -j limit-498 +-A OUTPUT -j limit-497 +-A OUTPUT -j limit-496 +-A OUTPUT -j limit-495 +-A OUTPUT -j limit-494 +-A OUTPUT -j limit-493 +-A OUTPUT -j limit-492 +-A OUTPUT -j limit-491 +-A OUTPUT -j limit-490 +-A OUTPUT -j limit-489 +-A OUTPUT -j limit-488 +-A OUTPUT -j limit-487 +-A OUTPUT -j limit-486 +-A OUTPUT -j limit-485 +-A OUTPUT -j limit-484 +-A OUTPUT -j limit-483 +-A OUTPUT -j limit-482 +-A OUTPUT -j limit-481 +-A OUTPUT -j limit-480 +-A OUTPUT -j limit-479 +-A OUTPUT -j limit-478 +-A OUTPUT -j limit-477 +-A OUTPUT -j limit-476 +-A OUTPUT -j limit-475 +-A OUTPUT -j limit-474 +-A OUTPUT -j limit-473 +-A OUTPUT -j limit-472 +-A OUTPUT -j limit-471 +-A OUTPUT -j limit-470 +-A OUTPUT -j limit-469 +-A OUTPUT -j limit-468 +-A OUTPUT -j limit-467 +-A OUTPUT -j limit-466 +-A OUTPUT -j limit-465 +-A OUTPUT -j limit-464 +-A OUTPUT -j limit-463 +-A OUTPUT -j limit-462 +-A OUTPUT -j limit-461 +-A OUTPUT -j limit-460 +-A OUTPUT -j limit-459 +-A OUTPUT -j limit-458 +-A OUTPUT -j limit-457 +-A OUTPUT -j limit-456 +-A OUTPUT -j limit-455 +-A OUTPUT -j limit-454 +-A OUTPUT -j limit-453 +-A OUTPUT -j limit-452 +-A OUTPUT -j limit-451 +-A OUTPUT -j limit-450 +-A OUTPUT -j limit-449 +-A OUTPUT -j limit-448 +-A OUTPUT -j limit-447 +-A OUTPUT -j limit-446 +-A OUTPUT -j limit-445 +-A OUTPUT -j limit-444 +-A OUTPUT -j limit-443 +-A OUTPUT -j limit-442 +-A OUTPUT -j limit-441 +-A OUTPUT -j limit-440 +-A OUTPUT -j limit-439 +-A OUTPUT -j limit-438 +-A OUTPUT -j limit-437 +-A OUTPUT -j limit-436 +-A OUTPUT -j limit-435 +-A OUTPUT -j limit-434 +-A OUTPUT -j limit-433 +-A OUTPUT -j limit-432 +-A OUTPUT -j limit-431 +-A OUTPUT -j limit-430 +-A OUTPUT -j limit-429 +-A OUTPUT -j limit-428 -A OUTPUT -j limit-427 -A OUTPUT -j limit-426 -A OUTPUT -j limit-425 @@ -17025,150 +27737,6 @@ COMMIT -A OUTPUT -j limit-360 -A OUTPUT -j limit-359 -A OUTPUT -j limit-358 --A OUTPUT -j limit-357 --A OUTPUT -j limit-356 --A OUTPUT -j limit-355 --A OUTPUT -j limit-354 --A OUTPUT -j limit-353 --A OUTPUT -j limit-352 --A OUTPUT -j limit-351 --A OUTPUT -j limit-350 --A OUTPUT -j limit-349 --A OUTPUT -j limit-348 --A OUTPUT -j limit-347 --A OUTPUT -j limit-346 --A OUTPUT -j limit-345 --A OUTPUT -j limit-344 --A OUTPUT -j limit-343 --A OUTPUT -j limit-342 --A OUTPUT -j limit-341 --A OUTPUT -j limit-340 --A OUTPUT -j limit-339 --A OUTPUT -j limit-338 --A OUTPUT -j limit-337 --A OUTPUT -j limit-336 --A OUTPUT -j limit-335 --A OUTPUT -j limit-334 --A OUTPUT -j limit-333 --A OUTPUT -j limit-332 --A OUTPUT -j limit-331 --A OUTPUT -j limit-330 --A OUTPUT -j limit-329 --A OUTPUT -j limit-328 --A OUTPUT -j limit-327 --A OUTPUT -j limit-326 --A OUTPUT -j limit-325 --A OUTPUT -j limit-324 --A OUTPUT -j limit-323 --A OUTPUT -j limit-322 --A OUTPUT -j limit-321 --A OUTPUT -j limit-320 --A OUTPUT -j limit-319 --A OUTPUT -j limit-318 --A OUTPUT -j limit-317 --A OUTPUT -j limit-316 --A OUTPUT -j limit-315 --A OUTPUT -j limit-314 --A OUTPUT -j limit-313 --A OUTPUT -j limit-312 --A OUTPUT -j limit-311 --A OUTPUT -j limit-310 --A OUTPUT -j limit-309 --A OUTPUT -j limit-308 --A OUTPUT -j limit-307 --A OUTPUT -j limit-306 --A OUTPUT -j limit-305 --A OUTPUT -j limit-304 --A OUTPUT -j limit-303 --A OUTPUT -j limit-302 --A OUTPUT -j limit-301 --A OUTPUT -j limit-300 --A OUTPUT -j limit-299 --A OUTPUT -j limit-298 --A OUTPUT -j limit-297 --A OUTPUT -j limit-296 --A OUTPUT -j limit-295 --A OUTPUT -j limit-294 --A OUTPUT -j limit-293 --A OUTPUT -j limit-292 --A OUTPUT -j limit-291 --A OUTPUT -j limit-290 --A OUTPUT -j limit-289 --A OUTPUT -j limit-288 --A OUTPUT -j limit-287 --A OUTPUT -j limit-286 --A OUTPUT -j limit-285 --A OUTPUT -j limit-284 --A OUTPUT -j limit-283 --A OUTPUT -j limit-282 --A OUTPUT -j limit-281 --A OUTPUT -j limit-280 --A OUTPUT -j limit-279 --A OUTPUT -j limit-278 --A OUTPUT -j limit-277 --A OUTPUT -j limit-276 --A OUTPUT -j limit-275 --A OUTPUT -j limit-274 --A OUTPUT -j limit-273 --A OUTPUT -j limit-272 --A OUTPUT -j limit-271 --A OUTPUT -j limit-270 --A OUTPUT -j limit-269 --A OUTPUT -j limit-268 --A OUTPUT -j limit-267 --A OUTPUT -j limit-266 --A OUTPUT -j limit-265 --A OUTPUT -j limit-264 --A OUTPUT -j limit-263 --A OUTPUT -j limit-262 --A OUTPUT -j limit-261 --A OUTPUT -j limit-260 --A OUTPUT -j limit-259 --A OUTPUT -j limit-258 --A OUTPUT -j limit-257 --A OUTPUT -j limit-256 --A OUTPUT -j limit-255 --A OUTPUT -j limit-254 --A OUTPUT -j limit-253 --A OUTPUT -j limit-252 --A OUTPUT -j limit-251 --A OUTPUT -j limit-250 --A OUTPUT -j limit-249 --A OUTPUT -j limit-248 --A OUTPUT -j limit-247 --A OUTPUT -j limit-246 --A OUTPUT -j limit-245 --A OUTPUT -j limit-244 --A OUTPUT -j limit-243 --A OUTPUT -j limit-242 --A OUTPUT -j limit-241 --A OUTPUT -j limit-240 --A OUTPUT -j limit-239 --A OUTPUT -j limit-238 --A OUTPUT -j limit-237 --A OUTPUT -j limit-236 --A OUTPUT -j limit-235 --A OUTPUT -j limit-234 --A OUTPUT -j limit-233 --A OUTPUT -j limit-232 --A OUTPUT -j limit-231 --A OUTPUT -j limit-230 --A OUTPUT -j limit-229 --A OUTPUT -j limit-228 --A OUTPUT -j limit-227 --A OUTPUT -j limit-226 --A OUTPUT -j limit-225 --A OUTPUT -j limit-224 --A OUTPUT -j limit-223 --A OUTPUT -j limit-222 --A OUTPUT -j limit-221 --A OUTPUT -j limit-220 --A OUTPUT -j limit-219 --A OUTPUT -j limit-218 --A OUTPUT -j limit-217 --A OUTPUT -j limit-216 --A OUTPUT -j limit-215 --A OUTPUT -j limit-214 -A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A OUTPUT -o lo -j ACCEPT -A OUTPUT -j ACCEPT @@ -17220,29 +27788,29 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-40 -A OUTPUT -o eth1 -d fc00::/7 -j limit-41 -A OUTPUT -o eth1 -d fc00::/7 -j limit-42 --A OUTPUT -o eth1 -d fc00::/7 -j limit-43 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-44 -A OUTPUT -o eth1 -d fc00::/7 -j limit-44 -A OUTPUT -o eth1 -d fc00::/7 -j limit-45 -A OUTPUT -o eth1 -d fc00::/7 -j limit-46 --A OUTPUT -o eth1 -d fc00::/7 -j limit-47 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-48 -A OUTPUT -o eth1 -d fc00::/7 -j limit-48 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-49 -A OUTPUT -o eth1 -d fc00::/7 -j limit-50 -A OUTPUT -o eth1 -d fc00::/7 -j limit-51 -A OUTPUT -o eth1 -d fc00::/7 -j limit-52 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-53 -A OUTPUT -o eth1 -d fc00::/7 -j limit-54 --A OUTPUT -o eth1 -d fc00::/7 -j limit-55 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56 -A OUTPUT -o eth1 -d fc00::/7 -j limit-56 -A OUTPUT -o eth1 -d fc00::/7 -j limit-57 -A OUTPUT -o eth1 -d fc00::/7 -j limit-58 --A OUTPUT -o eth1 -d fc00::/7 -j limit-59 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-60 -A OUTPUT -o eth1 -d fc00::/7 -j limit-60 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-61 -A OUTPUT -o eth1 -d fc00::/7 -j limit-62 -A OUTPUT -o eth1 -d fc00::/7 -j limit-63 -A OUTPUT -o eth1 -d fc00::/7 -j limit-64 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-65 -A OUTPUT -o eth1 -d fc00::/7 -j limit-66 -A OUTPUT -o eth1 -d fc00::/7 -j limit-67 -A OUTPUT -o eth1 -d fc00::/7 -j limit-68 @@ -17250,35 +27818,35 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-70 -A OUTPUT -o eth1 -d fc00::/7 -j limit-71 -A OUTPUT -o eth1 -d fc00::/7 -j limit-72 --A OUTPUT -o eth1 -d fc00::/7 -j limit-73 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-74 -A OUTPUT -o eth1 -d fc00::/7 -j limit-75 -A OUTPUT -o eth1 -d fc00::/7 -j limit-76 --A OUTPUT -o eth1 -d fc00::/7 -j limit-77 --A OUTPUT -o eth1 -d fc00::/7 -j limit-78 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-78 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-79 -A OUTPUT -o eth1 -d fc00::/7 -j limit-80 -A OUTPUT -o eth1 -d fc00::/7 -j limit-81 -A OUTPUT -o eth1 -d fc00::/7 -j limit-82 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-83 -A OUTPUT -o eth1 -d fc00::/7 -j limit-84 --A OUTPUT -o eth1 -d fc00::/7 -j limit-85 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-86 -A OUTPUT -o eth1 -d fc00::/7 -j limit-87 -A OUTPUT -o eth1 -d fc00::/7 -j limit-88 --A OUTPUT -o eth1 -d fc00::/7 -j limit-89 --A OUTPUT -o eth1 -d fc00::/7 -j limit-90 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-90 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-91 -A OUTPUT -o eth1 -d fc00::/7 -j limit-92 -A OUTPUT -o eth1 -d fc00::/7 -j limit-93 -A OUTPUT -o eth1 -d fc00::/7 -j limit-94 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-95 -A OUTPUT -o eth1 -d fc00::/7 -j limit-96 --A OUTPUT -o eth1 -d fc00::/7 -j limit-97 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-98 -A OUTPUT -o eth1 -d fc00::/7 -j limit-99 -A OUTPUT -o eth1 -d fc00::/7 -j limit-100 --A OUTPUT -o eth1 -d fc00::/7 -j limit-101 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-102 -A OUTPUT -o eth1 -d fc00::/7 -j limit-103 -A OUTPUT -o eth1 -d fc00::/7 -j limit-104 @@ -17286,11 +27854,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-106 -A OUTPUT -o eth1 -d fc00::/7 -j limit-107 -A OUTPUT -o eth1 -d fc00::/7 -j limit-108 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-50 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-110 -A OUTPUT -o eth1 -d fc00::/7 -j limit-111 -A OUTPUT -o eth1 -d fc00::/7 -j limit-112 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-54 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-114 -A OUTPUT -o eth1 -d fc00::/7 -j limit-115 -A OUTPUT -o eth1 -d fc00::/7 -j limit-116 @@ -17298,17 +27866,17 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-118 -A OUTPUT -o eth1 -d fc00::/7 -j limit-119 -A OUTPUT -o eth1 -d fc00::/7 -j limit-120 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-62 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-121 -A OUTPUT -o eth1 -d fc00::/7 -j limit-122 -A OUTPUT -o eth1 -d fc00::/7 -j limit-123 -A OUTPUT -o eth1 -d fc00::/7 -j limit-124 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-66 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-125 -A OUTPUT -o eth1 -d fc00::/7 -j limit-126 --A OUTPUT -o eth1 -d fc00::/7 -j limit-127 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-128 -A OUTPUT -o eth1 -d fc00::/7 -j limit-129 -A OUTPUT -o eth1 -d fc00::/7 -j limit-130 --A OUTPUT -o eth1 -d fc00::/7 -j limit-131 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-132 -A OUTPUT -o eth1 -d fc00::/7 -j limit-133 -A OUTPUT -o eth1 -d fc00::/7 -j limit-134 @@ -17316,11 +27884,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-136 -A OUTPUT -o eth1 -d fc00::/7 -j limit-137 -A OUTPUT -o eth1 -d fc00::/7 -j limit-138 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-140 -A OUTPUT -o eth1 -d fc00::/7 -j limit-141 -A OUTPUT -o eth1 -d fc00::/7 -j limit-142 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-144 -A OUTPUT -o eth1 -d fc00::/7 -j limit-145 -A OUTPUT -o eth1 -d fc00::/7 -j limit-146 @@ -17328,11 +27896,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-148 -A OUTPUT -o eth1 -d fc00::/7 -j limit-149 -A OUTPUT -o eth1 -d fc00::/7 -j limit-150 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-152 -A OUTPUT -o eth1 -d fc00::/7 -j limit-153 -A OUTPUT -o eth1 -d fc00::/7 -j limit-154 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-156 -A OUTPUT -o eth1 -d fc00::/7 -j limit-157 -A OUTPUT -o eth1 -d fc00::/7 -j limit-158 @@ -17340,17 +27908,17 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-160 -A OUTPUT -o eth1 -d fc00::/7 -j limit-161 -A OUTPUT -o eth1 -d fc00::/7 -j limit-162 --A OUTPUT -o eth1 -d fc00::/7 -j limit-163 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-164 -A OUTPUT -o eth1 -d fc00::/7 -j limit-165 -A OUTPUT -o eth1 -d fc00::/7 -j limit-166 --A OUTPUT -o eth1 -d fc00::/7 -j limit-167 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-168 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-169 -A OUTPUT -o eth1 -d fc00::/7 -j limit-170 -A OUTPUT -o eth1 -d fc00::/7 -j limit-171 -A OUTPUT -o eth1 -d fc00::/7 -j limit-172 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-173 -A OUTPUT -o eth1 -d fc00::/7 -j limit-174 -A OUTPUT -o eth1 -d fc00::/7 -j limit-175 -A OUTPUT -o eth1 -d fc00::/7 -j limit-176 @@ -17358,11 +27926,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-178 -A OUTPUT -o eth1 -d fc00::/7 -j limit-179 -A OUTPUT -o eth1 -d fc00::/7 -j limit-180 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-74 -A OUTPUT -o eth1 -d fc00::/7 -j limit-182 -A OUTPUT -o eth1 -d fc00::/7 -j limit-183 -A OUTPUT -o eth1 -d fc00::/7 -j limit-184 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-78 -A OUTPUT -o eth1 -d fc00::/7 -j limit-186 -A OUTPUT -o eth1 -d fc00::/7 -j limit-187 -A OUTPUT -o eth1 -d fc00::/7 -j limit-188 @@ -17370,11 +27938,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-190 -A OUTPUT -o eth1 -d fc00::/7 -j limit-191 -A OUTPUT -o eth1 -d fc00::/7 -j limit-192 --A OUTPUT -o eth1 -d fc00::/7 -j limit-193 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-86 -A OUTPUT -o eth1 -d fc00::/7 -j limit-194 -A OUTPUT -o eth1 -d fc00::/7 -j limit-195 -A OUTPUT -o eth1 -d fc00::/7 -j limit-196 --A OUTPUT -o eth1 -d fc00::/7 -j limit-197 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-90 -A OUTPUT -o eth1 -d fc00::/7 -j limit-198 -A OUTPUT -o eth1 -d fc00::/7 -j limit-199 -A OUTPUT -o eth1 -d fc00::/7 -j limit-200 @@ -17382,15 +27950,159 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-202 -A OUTPUT -o eth1 -d fc00::/7 -j limit-203 -A OUTPUT -o eth1 -d fc00::/7 -j limit-204 --A OUTPUT -o eth1 -d fc00::/7 -j limit-205 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-98 -A OUTPUT -o eth1 -d fc00::/7 -j limit-206 -A OUTPUT -o eth1 -d fc00::/7 -j limit-207 -A OUTPUT -o eth1 -d fc00::/7 -j limit-208 --A OUTPUT -o eth1 -d fc00::/7 -j limit-209 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-102 -A OUTPUT -o eth1 -d fc00::/7 -j limit-210 -A OUTPUT -o eth1 -d fc00::/7 -j limit-211 -A OUTPUT -o eth1 -d fc00::/7 -j limit-212 -A OUTPUT -o eth1 -d fc00::/7 -j limit-213 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-214 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-215 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-216 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-110 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-218 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-219 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-220 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-114 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-222 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-223 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-224 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-225 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-226 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-227 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-228 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-229 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-230 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-231 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-232 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-233 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-234 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-236 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-237 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-238 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-240 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-241 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-242 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-243 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-244 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-245 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-246 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-248 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-249 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-250 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-252 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-253 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-254 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-255 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-256 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-257 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-258 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-260 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-261 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-262 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-264 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-265 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-266 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-267 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-268 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-269 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-270 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-272 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-273 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-274 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-276 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-277 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-278 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-279 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-280 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-281 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-282 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-283 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-284 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-285 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-286 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-287 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-288 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-290 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-291 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-292 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-294 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-295 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-296 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-297 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-298 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-299 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-300 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-302 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-303 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-304 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-306 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-307 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-308 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-309 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-310 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-311 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-312 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-314 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-315 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-316 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-318 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-319 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-320 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-321 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-322 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-323 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-324 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-326 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-327 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-328 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-330 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-331 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-332 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-333 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-334 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-335 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-336 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-337 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-338 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-339 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-340 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-341 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-342 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-343 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-344 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-345 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-346 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-347 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-348 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-349 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-350 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-351 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-352 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-353 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-354 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-355 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-356 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-357 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-0 -A OUTPUT -j ACCEPT @@ -17505,6 +28217,150 @@ COMMIT -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-37 -A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-38 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-39 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-40 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-41 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-42 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-43 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-44 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-45 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-46 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-47 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-48 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-49 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-50 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-51 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-52 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-53 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-54 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-55 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-56 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-57 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-58 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-59 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-60 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-61 +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT @@ -17620,16 +28476,19 @@ COMMIT -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -m recent --name user:C --rsource --mask fe00:: --set +-A OUTPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set -A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-199 +-A OUTPUT -j logdrop-343 -A OUTPUT -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT -A OUTPUT -j logaccept-14 --A OUTPUT -j logdrop-200 +-A OUTPUT -j logdrop-344 -A OUTPUT -j logpass-0 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP @@ -17650,1226 +28509,1982 @@ COMMIT -A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-11 -A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-100 -m recent --name limit-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-41 --A limit-100 -m recent --name limit-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-101 -m recent --name limit-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-42 --A limit-101 -m recent --name limit-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-102 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-43 --A limit-102 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-103 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-44 --A limit-103 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-104 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-45 +-A limit-100 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-100 -j ACCEPT +-A limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1000 -m limit --limit 1/second -j LOG +-A limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1004 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1004 -j ACCEPT +-A limit-1006 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1006 -m limit --limit 1/second -j LOG +-A limit-1006 -j ACCEPT +-A limit-1007 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1007 -m limit --limit 1/second -j LOG +-A limit-1008 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1008 -j ACCEPT +-A limit-1010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1012 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1012 -m limit --limit 1/second -j LOG +-A limit-1012 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1013 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1013 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1014 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1014 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1015 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1015 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1016 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1016 -j ACCEPT +-A limit-1018 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1018 -m limit --limit 1/second -j LOG +-A limit-1018 -j ACCEPT +-A limit-1019 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1019 -m limit --limit 1/second -j LOG +-A limit-102 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-102 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1020 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1020 -j ACCEPT +-A limit-1022 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1022 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1023 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1023 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1024 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1024 -m limit --limit 1/second -j LOG +-A limit-1024 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1025 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1025 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1026 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1026 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1027 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1027 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1028 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1028 -j ACCEPT +-A limit-103 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-103 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1030 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1030 -m limit --limit 1/second -j LOG +-A limit-1030 -j ACCEPT +-A limit-1031 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1031 -m limit --limit 1/second -j LOG +-A limit-1032 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1032 -j ACCEPT +-A limit-1034 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1034 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1035 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1035 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1036 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1036 -m limit --limit 1/second -j LOG +-A limit-1036 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1037 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1037 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1038 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1038 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1039 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1039 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-104 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-104 -m limit --limit 1/second -j LOG --A limit-104 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-105 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-46 --A limit-105 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-106 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-47 --A limit-106 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-107 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-48 --A limit-107 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-108 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-49 +-A limit-104 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1040 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1040 -j ACCEPT +-A limit-1042 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1042 -m limit --limit 1/second -j LOG +-A limit-1042 -j ACCEPT +-A limit-1043 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1043 -m limit --limit 1/second -j LOG +-A limit-1044 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1044 -j ACCEPT +-A limit-1046 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1046 -j ACCEPT +-A limit-1046 -m limit --limit 1/second -j LOG +-A limit-1046 -j DROP +-A limit-1047 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1047 -j RETURN +-A limit-1047 -m limit --limit 1/second -j LOG +-A limit-1047 -j DROP +-A limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1048 -j logaccept-7 +-A limit-1048 -m limit --limit 1/second -j LOG +-A limit-1048 -j DROP +-A limit-1049 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1049 -j ACCEPT +-A limit-1049 -m limit --limit 1/second -j LOG +-A limit-1049 -j DROP +-A limit-105 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-105 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1050 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1050 -j ACCEPT +-A limit-1050 -m limit --limit 1/second -j LOG +-A limit-1050 -j DROP +-A limit-1051 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1051 -j RETURN +-A limit-1051 -m limit --limit 1/second -j LOG +-A limit-1051 -j DROP +-A limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1052 -j logaccept-8 +-A limit-1052 -m limit --limit 1/second -j LOG +-A limit-1052 -j DROP +-A limit-1053 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1053 -j ACCEPT +-A limit-1053 -m limit --limit 1/second -j LOG +-A limit-1053 -j DROP +-A limit-1054 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1054 -j ACCEPT +-A limit-1054 -j DROP +-A limit-1055 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1055 -j RETURN +-A limit-1055 -j DROP +-A limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1056 -j logaccept-9 +-A limit-1056 -j DROP +-A limit-1057 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1057 -j ACCEPT +-A limit-1057 -j DROP +-A limit-1058 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1058 -j ACCEPT +-A limit-1058 -j DROP +-A limit-1059 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1059 -j RETURN +-A limit-1059 -j DROP +-A limit-106 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-106 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1060 -j logaccept-10 +-A limit-1060 -j DROP +-A limit-1061 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1061 -j ACCEPT +-A limit-1061 -j DROP +-A limit-1062 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1062 -j ACCEPT +-A limit-1062 -m limit --limit 1/second -j LOG +-A limit-1062 -j DROP +-A limit-1063 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1063 -j RETURN +-A limit-1063 -m limit --limit 1/second -j LOG +-A limit-1063 -j DROP +-A limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1064 -j logaccept-11 +-A limit-1064 -m limit --limit 1/second -j LOG +-A limit-1064 -j DROP +-A limit-1065 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1065 -j ACCEPT +-A limit-1065 -m limit --limit 1/second -j LOG +-A limit-1065 -j DROP +-A limit-1066 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1066 -j ACCEPT +-A limit-1066 -j DROP +-A limit-1067 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1067 -j RETURN +-A limit-1067 -j DROP +-A limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1068 -j logaccept-12 +-A limit-1068 -j DROP +-A limit-1069 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1069 -j ACCEPT +-A limit-1069 -j DROP +-A limit-107 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-107 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1070 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1070 -j ACCEPT +-A limit-1070 -j DROP +-A limit-1071 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1071 -j RETURN +-A limit-1071 -j DROP +-A limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1072 -j logaccept-13 +-A limit-1072 -j DROP +-A limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1073 -j ACCEPT +-A limit-1073 -j DROP +-A limit-108 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-108 -j ACCEPT -A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-12 -A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-110 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-51 +-A limit-110 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-110 -m limit --limit 1/second -j LOG -A limit-110 -j ACCEPT --A limit-111 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-52 +-A limit-111 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-111 -m limit --limit 1/second -j LOG --A limit-112 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-53 +-A limit-112 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-112 -j ACCEPT --A limit-114 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-55 --A limit-114 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-115 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-56 --A limit-115 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-116 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-57 +-A limit-114 -m recent --name limit-114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-114 -m recent --name limit-114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-115 -m recent --name limit-115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-115 -m recent --name limit-115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-116 -m recent --name limit-116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-116 -m limit --limit 1/second -j LOG --A limit-116 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-117 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-58 --A limit-117 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-118 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-59 --A limit-118 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-119 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-60 --A limit-119 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-116 -m recent --name limit-116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-117 -m recent --name limit-117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-117 -m recent --name limit-117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-13 -A limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-120 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-61 --A limit-120 -j ACCEPT --A limit-122 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-63 +-A limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-122 -m limit --limit 1/second -j LOG --A limit-122 -j ACCEPT --A limit-123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-64 --A limit-123 -m limit --limit 1/second -j LOG --A limit-124 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-65 --A limit-124 -j ACCEPT --A limit-126 -m recent --name limit-126 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-126 -m recent --name limit-126 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-127 -m recent --name limit-127 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-127 -m recent --name limit-127 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-128 -m recent --name limit-128 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-126 -j ACCEPT +-A limit-128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-128 -m limit --limit 1/second -j LOG --A limit-128 -m recent --name limit-128 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-129 -m recent --name limit-129 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-129 -m recent --name limit-129 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-128 -j ACCEPT +-A limit-129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-129 -m limit --limit 1/second -j LOG -A limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-14 -A limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-130 -m recent --name limit-130 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-130 -m recent --name limit-130 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-131 -m recent --name limit-131 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-131 -m recent --name limit-131 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-132 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-132 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-133 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-133 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-134 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-130 -j ACCEPT +-A limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-134 -m limit --limit 1/second -j LOG --A limit-134 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-135 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-135 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-136 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-136 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-137 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-137 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-138 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-138 -j ACCEPT -A limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-15 -A limit-14 -m limit --limit 1/second -j LOG -A limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-140 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-140 -m limit --limit 1/second -j LOG -A limit-140 -j ACCEPT --A limit-141 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-141 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-141 -m limit --limit 1/second -j LOG --A limit-142 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-142 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-142 -j ACCEPT --A limit-144 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-144 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-145 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-145 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-146 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-144 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-144 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-145 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-145 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-146 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-146 -m limit --limit 1/second -j LOG --A limit-146 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-147 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-147 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-146 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-147 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-147 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-148 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-148 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-149 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-149 -m recent --name user:C --rsource --mask fe00:: --set -A limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-16 -A limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-150 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-150 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-150 -j ACCEPT --A limit-152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-152 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-152 -m limit --limit 1/second -j LOG -A limit-152 -j ACCEPT --A limit-153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-153 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-153 -m limit --limit 1/second -j LOG --A limit-154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-154 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-154 -j ACCEPT --A limit-156 -m recent --name limit-156 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-156 -m recent --name limit-156 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-157 -m recent --name limit-157 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-157 -m recent --name limit-157 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-158 -m recent --name limit-158 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-156 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-156 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-157 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-157 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-158 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-158 -m limit --limit 1/second -j LOG --A limit-158 -m recent --name limit-158 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-159 -m recent --name limit-159 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-159 -m recent --name limit-159 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-158 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-159 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-159 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-17 -A limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-160 -m recent --name limit-160 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-160 -m recent --name limit-160 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-161 -m recent --name limit-161 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-161 -m recent --name limit-161 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-162 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-162 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-163 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-163 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-164 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-160 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-160 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-161 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-161 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-162 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-162 -j ACCEPT +-A limit-164 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-164 -m limit --limit 1/second -j LOG --A limit-164 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-165 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-165 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-166 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-166 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-167 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-167 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-168 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-168 -j ACCEPT +-A limit-164 -j ACCEPT +-A limit-165 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-165 -m limit --limit 1/second -j LOG +-A limit-166 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-166 -j ACCEPT +-A limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-61 +-A limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-62 +-A limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-18 -A limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-170 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-63 -A limit-170 -m limit --limit 1/second -j LOG --A limit-170 -j ACCEPT --A limit-171 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-171 -m limit --limit 1/second -j LOG --A limit-172 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-172 -j ACCEPT --A limit-174 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-174 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-175 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-175 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-64 +-A limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-65 +-A limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-66 +-A limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-67 +-A limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-68 +-A limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-69 -A limit-176 -m limit --limit 1/second -j LOG --A limit-176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-178 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-178 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-70 +-A limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-71 +-A limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-72 +-A limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-18 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-19 -A limit-18 -j ACCEPT --A limit-180 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-73 -A limit-180 -j ACCEPT --A limit-182 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-75 -A limit-182 -m limit --limit 1/second -j LOG -A limit-182 -j ACCEPT --A limit-183 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-76 -A limit-183 -m limit --limit 1/second -j LOG --A limit-184 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-77 -A limit-184 -j ACCEPT --A limit-186 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-186 -j ACCEPT --A limit-186 -m limit --limit 1/second -j LOG --A limit-186 -j DROP --A limit-187 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-187 -j RETURN --A limit-187 -m limit --limit 1/second -j LOG --A limit-187 -j DROP --A limit-188 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-188 -j logaccept-0 +-A limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-79 +-A limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-80 +-A limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-81 -A limit-188 -m limit --limit 1/second -j LOG --A limit-188 -j DROP --A limit-189 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-189 -j ACCEPT --A limit-189 -m limit --limit 1/second -j LOG --A limit-189 -j DROP --A limit-190 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-190 -j ACCEPT --A limit-190 -m limit --limit 1/second -j LOG --A limit-190 -j DROP --A limit-191 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-191 -j RETURN --A limit-191 -m limit --limit 1/second -j LOG --A limit-191 -j DROP --A limit-192 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-192 -j logaccept-1 --A limit-192 -m limit --limit 1/second -j LOG --A limit-192 -j DROP --A limit-193 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-193 -j ACCEPT --A limit-193 -m limit --limit 1/second -j LOG --A limit-193 -j DROP --A limit-194 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-194 -j ACCEPT --A limit-194 -j DROP --A limit-195 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-195 -j RETURN --A limit-195 -j DROP --A limit-196 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-196 -j logaccept-2 --A limit-196 -j DROP --A limit-197 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-197 -j ACCEPT --A limit-197 -j DROP --A limit-198 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-198 -j ACCEPT --A limit-198 -j DROP --A limit-199 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-199 -j RETURN --A limit-199 -j DROP +-A limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-82 +-A limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-83 +-A limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-84 +-A limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-192 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-85 +-A limit-192 -j ACCEPT +-A limit-194 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-87 +-A limit-194 -m limit --limit 1/second -j LOG +-A limit-194 -j ACCEPT +-A limit-195 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-88 +-A limit-195 -m limit --limit 1/second -j LOG +-A limit-196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-89 +-A limit-196 -j ACCEPT +-A limit-198 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-91 +-A limit-198 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-199 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-92 +-A limit-199 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-3 -A limit-2 -m limit --limit 1/second -j LOG -A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-21 -A limit-20 -m limit --limit 1/second -j LOG -A limit-20 -j ACCEPT --A limit-200 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-200 -j logaccept-3 --A limit-200 -j DROP --A limit-201 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-201 -j ACCEPT --A limit-201 -j DROP --A limit-202 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-202 -j ACCEPT --A limit-202 -m limit --limit 1/second -j LOG --A limit-202 -j DROP --A limit-203 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-203 -j RETURN --A limit-203 -m limit --limit 1/second -j LOG --A limit-203 -j DROP --A limit-204 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-204 -j logaccept-4 --A limit-204 -m limit --limit 1/second -j LOG --A limit-204 -j DROP --A limit-205 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-205 -j ACCEPT --A limit-205 -m limit --limit 1/second -j LOG --A limit-205 -j DROP --A limit-206 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-206 -j ACCEPT --A limit-206 -j DROP --A limit-207 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-207 -j RETURN --A limit-207 -j DROP --A limit-208 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-208 -j logaccept-5 --A limit-208 -j DROP --A limit-209 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-209 -j ACCEPT --A limit-209 -j DROP +-A limit-200 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-93 +-A limit-200 -m limit --limit 1/second -j LOG +-A limit-200 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-201 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-94 +-A limit-201 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-202 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-95 +-A limit-202 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-203 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-96 +-A limit-203 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-204 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-97 +-A limit-204 -j ACCEPT +-A limit-206 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-99 +-A limit-206 -m limit --limit 1/second -j LOG +-A limit-206 -j ACCEPT +-A limit-207 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-100 +-A limit-207 -m limit --limit 1/second -j LOG +-A limit-208 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-101 +-A limit-208 -j ACCEPT -A limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-22 -A limit-21 -m limit --limit 1/second -j LOG --A limit-210 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-210 -j ACCEPT --A limit-210 -j DROP --A limit-211 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-211 -j RETURN --A limit-211 -j DROP --A limit-212 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-212 -j logaccept-6 --A limit-212 -j DROP --A limit-213 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-213 -j ACCEPT --A limit-213 -j DROP --A limit-214 -m recent --name limit-214 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-67 --A limit-214 -m recent --name limit-214 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-215 -m recent --name limit-215 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-68 --A limit-215 -m recent --name limit-215 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-216 -m recent --name limit-216 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-69 --A limit-216 -m recent --name limit-216 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-217 -m recent --name limit-217 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-70 --A limit-217 -m recent --name limit-217 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-218 -m recent --name limit-218 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-71 --A limit-218 -m recent --name limit-218 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-219 -m recent --name limit-219 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-72 --A limit-219 -m recent --name limit-219 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-210 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-103 +-A limit-210 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-211 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-104 +-A limit-211 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-212 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-105 +-A limit-212 -m limit --limit 1/second -j LOG +-A limit-212 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-213 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-106 +-A limit-213 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-214 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-107 +-A limit-214 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-215 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-108 +-A limit-215 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-216 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-109 +-A limit-216 -j ACCEPT +-A limit-218 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-111 +-A limit-218 -m limit --limit 1/second -j LOG +-A limit-218 -j ACCEPT +-A limit-219 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-112 +-A limit-219 -m limit --limit 1/second -j LOG -A limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-23 -A limit-22 -j ACCEPT --A limit-220 -m recent --name limit-220 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-73 --A limit-220 -m recent --name limit-220 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-221 -m recent --name limit-221 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-74 --A limit-221 -m recent --name limit-221 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-75 --A limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-76 --A limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-77 --A limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-78 --A limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-226 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-79 --A limit-226 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-227 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-80 --A limit-227 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-81 --A limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-82 --A limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-83 --A limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-84 --A limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-85 --A limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-86 --A limit-234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-87 --A limit-235 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-88 --A limit-235 -m limit --limit 1/second -j LOG --A limit-236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-89 --A limit-237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-90 --A limit-238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-91 --A limit-238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-92 --A limit-239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-220 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-113 +-A limit-220 -j ACCEPT +-A limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-224 -m limit --limit 1/second -j LOG +-A limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-230 -m limit --limit 1/second -j LOG +-A limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-234 -j ACCEPT +-A limit-236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-236 -m limit --limit 1/second -j LOG +-A limit-236 -j ACCEPT +-A limit-237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-237 -m limit --limit 1/second -j LOG +-A limit-238 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-238 -j ACCEPT -A limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-25 -A limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-93 --A limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-94 --A limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-95 --A limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-96 --A limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-97 --A limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-98 --A limit-246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-99 --A limit-247 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-100 --A limit-247 -m limit --limit 1/second -j LOG --A limit-248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-101 --A limit-249 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-102 +-A limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-242 -m limit --limit 1/second -j LOG +-A limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-246 -j ACCEPT +-A limit-248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-248 -m limit --limit 1/second -j LOG +-A limit-248 -j ACCEPT +-A limit-249 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-249 -m limit --limit 1/second -j LOG -A limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-26 -A limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-250 -m recent --name limit-250 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-250 -m recent --name limit-250 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-251 -m recent --name limit-251 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-251 -m recent --name limit-251 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-252 -m recent --name limit-252 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-252 -m recent --name limit-252 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-253 -m recent --name limit-253 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-253 -m recent --name limit-253 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-254 -m recent --name limit-254 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-254 -m recent --name limit-254 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-255 -m recent --name limit-255 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-255 -m recent --name limit-255 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-259 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-259 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-250 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-250 -j ACCEPT +-A limit-252 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-252 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-253 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-253 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-254 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-254 -m limit --limit 1/second -j LOG +-A limit-254 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-255 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-255 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-256 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-256 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-257 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-257 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-258 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-258 -j ACCEPT -A limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-27 -A limit-26 -m limit --limit 1/second -j LOG -A limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-260 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-260 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-261 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-261 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-262 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-263 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-264 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-265 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-265 -m limit --limit 1/second -j LOG --A limit-266 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-267 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-260 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-260 -m limit --limit 1/second -j LOG +-A limit-260 -j ACCEPT +-A limit-261 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-261 -m limit --limit 1/second -j LOG +-A limit-262 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-262 -j ACCEPT +-A limit-264 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-264 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-265 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-265 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-266 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-266 -m limit --limit 1/second -j LOG +-A limit-266 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-267 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-267 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-268 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-268 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-269 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-269 -m recent --name user:C --rdest --mask fe00:: --set -A limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-28 -A limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-271 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-271 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-272 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-272 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-273 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-273 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-274 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-275 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-276 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-277 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-277 -m limit --limit 1/second -j LOG --A limit-278 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-279 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-270 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-270 -j ACCEPT +-A limit-272 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-272 -m limit --limit 1/second -j LOG +-A limit-272 -j ACCEPT +-A limit-273 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-273 -m limit --limit 1/second -j LOG +-A limit-274 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-274 -j ACCEPT +-A limit-276 -m recent --name limit-276 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-276 -m recent --name limit-276 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-277 -m recent --name limit-277 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-277 -m recent --name limit-277 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-278 -m recent --name limit-278 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-278 -m limit --limit 1/second -j LOG +-A limit-278 -m recent --name limit-278 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-29 -A limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-282 -m recent --name limit-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-282 -m recent --name limit-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-283 -m recent --name limit-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-283 -m recent --name limit-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-284 -m recent --name limit-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-284 -m recent --name limit-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-285 -m recent --name limit-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-285 -m recent --name limit-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-284 -m limit --limit 1/second -j LOG +-A limit-284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-288 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-288 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-289 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-289 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-288 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-288 -j ACCEPT -A limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-30 -A limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-295 -m limit --limit 1/second -j LOG --A limit-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-290 -m limit --limit 1/second -j LOG +-A limit-290 -j ACCEPT +-A limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-291 -m limit --limit 1/second -j LOG +-A limit-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-292 -j ACCEPT +-A limit-294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-296 -m limit --limit 1/second -j LOG +-A limit-296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-4 -A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-30 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-31 -A limit-30 -j ACCEPT --A limit-300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-301 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-301 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-302 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-302 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-303 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-303 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-304 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-305 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-306 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-307 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-307 -m limit --limit 1/second -j LOG --A limit-308 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-309 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-310 -m recent --name limit-310 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-103 --A limit-310 -m recent --name limit-310 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-311 -m recent --name limit-311 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-104 --A limit-311 -m recent --name limit-311 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-312 -m recent --name limit-312 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-105 --A limit-312 -m recent --name limit-312 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-313 -m recent --name limit-313 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-106 --A limit-313 -m recent --name limit-313 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-314 -m recent --name limit-314 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-107 --A limit-314 -m recent --name limit-314 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-315 -m recent --name limit-315 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-108 --A limit-315 -m recent --name limit-315 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-316 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-109 --A limit-316 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-317 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-110 --A limit-317 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-318 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-111 --A limit-318 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-319 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-112 --A limit-319 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-300 -j ACCEPT +-A limit-302 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-302 -m limit --limit 1/second -j LOG +-A limit-302 -j ACCEPT +-A limit-303 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-303 -m limit --limit 1/second -j LOG +-A limit-304 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-304 -j ACCEPT +-A limit-306 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-306 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-307 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-307 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-308 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-308 -m limit --limit 1/second -j LOG +-A limit-308 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-309 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-309 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-310 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-310 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-311 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-311 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-312 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-312 -j ACCEPT +-A limit-314 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-314 -m limit --limit 1/second -j LOG +-A limit-314 -j ACCEPT +-A limit-315 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-315 -m limit --limit 1/second -j LOG +-A limit-316 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-316 -j ACCEPT +-A limit-318 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-318 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-319 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-319 -m recent --name user:C --rdest --mask fe00:: --set -A limit-32 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-33 -A limit-32 -m limit --limit 1/second -j LOG -A limit-32 -j ACCEPT --A limit-320 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-113 --A limit-320 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-321 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-114 --A limit-321 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-322 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-115 --A limit-323 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-116 --A limit-324 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-117 --A limit-325 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-118 --A limit-325 -m limit --limit 1/second -j LOG --A limit-326 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-119 --A limit-327 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-120 --A limit-328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-121 --A limit-328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-122 --A limit-329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-320 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-320 -m limit --limit 1/second -j LOG +-A limit-320 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-321 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-321 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-322 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-322 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-323 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-323 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-324 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-324 -j ACCEPT +-A limit-326 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-326 -m limit --limit 1/second -j LOG +-A limit-326 -j ACCEPT +-A limit-327 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-327 -m limit --limit 1/second -j LOG +-A limit-328 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-328 -j ACCEPT -A limit-33 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-34 -A limit-33 -m limit --limit 1/second -j LOG --A limit-330 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-123 --A limit-330 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-331 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-124 --A limit-331 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-332 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-125 --A limit-332 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-333 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-126 --A limit-333 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-334 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-127 --A limit-335 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-128 --A limit-336 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-129 --A limit-337 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-130 +-A limit-330 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-330 -j ACCEPT +-A limit-330 -m limit --limit 1/second -j LOG +-A limit-330 -j DROP +-A limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-331 -j RETURN +-A limit-331 -m limit --limit 1/second -j LOG +-A limit-331 -j DROP +-A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-332 -j logaccept-0 +-A limit-332 -m limit --limit 1/second -j LOG +-A limit-332 -j DROP +-A limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-333 -j ACCEPT +-A limit-333 -m limit --limit 1/second -j LOG +-A limit-333 -j DROP +-A limit-334 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-334 -j ACCEPT +-A limit-334 -m limit --limit 1/second -j LOG +-A limit-334 -j DROP +-A limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-335 -j RETURN +-A limit-335 -m limit --limit 1/second -j LOG +-A limit-335 -j DROP +-A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-336 -j logaccept-1 +-A limit-336 -m limit --limit 1/second -j LOG +-A limit-336 -j DROP +-A limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-337 -j ACCEPT -A limit-337 -m limit --limit 1/second -j LOG --A limit-338 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-131 --A limit-339 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-132 +-A limit-337 -j DROP +-A limit-338 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-338 -j ACCEPT +-A limit-338 -j DROP +-A limit-339 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-339 -j RETURN +-A limit-339 -j DROP -A limit-34 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-35 -A limit-34 -j ACCEPT --A limit-340 -m recent --name limit-340 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-340 -m recent --name limit-340 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-341 -m recent --name limit-341 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-341 -m recent --name limit-341 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-342 -m recent --name limit-342 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-342 -m recent --name limit-342 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-343 -m recent --name limit-343 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-343 -m recent --name limit-343 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-344 -m recent --name limit-344 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-344 -m recent --name limit-344 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-345 -m recent --name limit-345 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-345 -m recent --name limit-345 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-346 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-346 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-347 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-347 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-348 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-348 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-349 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-349 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-350 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-350 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-351 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-351 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-352 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-353 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-354 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-355 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-355 -m limit --limit 1/second -j LOG --A limit-356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-358 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-358 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-359 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-359 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-36 -m recent --name limit-36 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-36 -m recent --name limit-36 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-360 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-360 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-361 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-361 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-362 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-362 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-363 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-363 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-364 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-365 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-366 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-367 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-367 -m limit --limit 1/second -j LOG --A limit-368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-369 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-37 -m recent --name limit-37 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-37 -m recent --name limit-37 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-370 -m recent --name limit-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-370 -m recent --name limit-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-372 -m recent --name limit-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-372 -m recent --name limit-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-374 -m recent --name limit-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-374 -m recent --name limit-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-375 -m recent --name limit-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-375 -m recent --name limit-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-377 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-377 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-38 -m recent --name limit-38 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-340 -j logaccept-2 +-A limit-340 -j DROP +-A limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-341 -j ACCEPT +-A limit-341 -j DROP +-A limit-342 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-342 -j ACCEPT +-A limit-342 -j DROP +-A limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-343 -j RETURN +-A limit-343 -j DROP +-A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-344 -j logaccept-3 +-A limit-344 -j DROP +-A limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-345 -j ACCEPT +-A limit-345 -j DROP +-A limit-346 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-346 -j ACCEPT +-A limit-346 -m limit --limit 1/second -j LOG +-A limit-346 -j DROP +-A limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-347 -j RETURN +-A limit-347 -m limit --limit 1/second -j LOG +-A limit-347 -j DROP +-A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-348 -j logaccept-4 +-A limit-348 -m limit --limit 1/second -j LOG +-A limit-348 -j DROP +-A limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-349 -j ACCEPT +-A limit-349 -m limit --limit 1/second -j LOG +-A limit-349 -j DROP +-A limit-350 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-350 -j ACCEPT +-A limit-350 -j DROP +-A limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-351 -j RETURN +-A limit-351 -j DROP +-A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-352 -j logaccept-5 +-A limit-352 -j DROP +-A limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-353 -j ACCEPT +-A limit-353 -j DROP +-A limit-354 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-354 -j ACCEPT +-A limit-354 -j DROP +-A limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-355 -j RETURN +-A limit-355 -j DROP +-A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-356 -j logaccept-6 +-A limit-356 -j DROP +-A limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-357 -j ACCEPT +-A limit-357 -j DROP +-A limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-115 +-A limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-116 +-A limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-36 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-37 +-A limit-36 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-117 +-A limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-118 +-A limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-119 +-A limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-120 +-A limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-121 +-A limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-122 +-A limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-123 +-A limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-124 +-A limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-125 +-A limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-126 +-A limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-37 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-38 +-A limit-37 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-127 +-A limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-128 +-A limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-129 +-A limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-130 +-A limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-131 +-A limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-132 +-A limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-133 +-A limit-377 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-134 +-A limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-135 +-A limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-136 +-A limit-379 -m limit --limit 1/second -j LOG +-A limit-38 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-39 -A limit-38 -m limit --limit 1/second -j LOG --A limit-38 -m recent --name limit-38 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-385 -m limit --limit 1/second -j LOG --A limit-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-389 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-389 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-39 -m recent --name limit-39 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-39 -m recent --name limit-39 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-393 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-393 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-394 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-395 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-396 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-397 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-397 -m limit --limit 1/second -j LOG --A limit-398 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-399 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-38 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-137 +-A limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-138 +-A limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 +-A limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-140 +-A limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-141 +-A limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-142 +-A limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-143 +-A limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-144 +-A limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-145 +-A limit-389 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-146 +-A limit-39 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-40 +-A limit-39 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-147 +-A limit-391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-148 +-A limit-391 -m limit --limit 1/second -j LOG +-A limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-149 +-A limit-393 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-150 +-A limit-394 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-151 +-A limit-394 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-395 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-152 +-A limit-395 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-396 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-153 +-A limit-396 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-397 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-154 +-A limit-397 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-398 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-155 +-A limit-398 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-399 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-156 +-A limit-399 -m recent --name user:C --rsource --mask fe00:: --set -A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-5 -A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-40 -m recent --name limit-40 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-40 -m recent --name limit-40 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-400 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-400 -j RETURN --A limit-400 -m limit --limit 1/second -j LOG --A limit-400 -j DROP --A limit-401 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-401 -j RETURN --A limit-401 -m limit --limit 1/second -j LOG --A limit-401 -j DROP --A limit-402 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-402 -j RETURN --A limit-402 -m limit --limit 1/second -j LOG --A limit-402 -j DROP --A limit-403 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-403 -j RETURN +-A limit-40 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-41 +-A limit-40 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-400 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-157 +-A limit-401 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-158 +-A limit-402 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-159 +-A limit-403 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-160 -A limit-403 -m limit --limit 1/second -j LOG --A limit-403 -j DROP --A limit-404 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-404 -j RETURN --A limit-404 -m limit --limit 1/second -j LOG --A limit-404 -j DROP --A limit-405 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-405 -j RETURN --A limit-405 -m limit --limit 1/second -j LOG --A limit-405 -j DROP --A limit-406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-406 -j RETURN --A limit-406 -m limit --limit 1/second -j LOG --A limit-406 -j DROP --A limit-407 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-407 -j RETURN --A limit-407 -m limit --limit 1/second -j LOG --A limit-407 -j DROP --A limit-408 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-408 -j RETURN --A limit-408 -j DROP --A limit-409 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-409 -j RETURN --A limit-409 -j DROP --A limit-41 -m recent --name limit-41 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-41 -m recent --name limit-41 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-410 -j RETURN --A limit-410 -j DROP --A limit-411 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-411 -j RETURN --A limit-411 -j DROP --A limit-412 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-412 -j RETURN --A limit-412 -j DROP --A limit-413 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-413 -j RETURN --A limit-413 -j DROP --A limit-414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-414 -j RETURN --A limit-414 -j DROP --A limit-415 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-415 -j RETURN --A limit-415 -j DROP --A limit-416 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-416 -j RETURN --A limit-416 -m limit --limit 1/second -j LOG --A limit-416 -j DROP --A limit-417 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-417 -j RETURN --A limit-417 -m limit --limit 1/second -j LOG --A limit-417 -j DROP --A limit-418 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-418 -j RETURN --A limit-418 -m limit --limit 1/second -j LOG --A limit-418 -j DROP --A limit-419 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-419 -j RETURN --A limit-419 -m limit --limit 1/second -j LOG --A limit-419 -j DROP --A limit-42 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-42 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-420 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-420 -j RETURN --A limit-420 -j DROP --A limit-421 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-421 -j RETURN --A limit-421 -j DROP --A limit-422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-422 -j RETURN --A limit-422 -j DROP --A limit-423 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-423 -j RETURN --A limit-423 -j DROP --A limit-424 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-424 -j RETURN --A limit-424 -j DROP --A limit-425 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-425 -j RETURN --A limit-425 -j DROP --A limit-426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-426 -j RETURN --A limit-426 -j DROP --A limit-427 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-427 -j RETURN --A limit-427 -j DROP --A limit-428 -m recent --name limit-428 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-133 --A limit-428 -m recent --name limit-428 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-429 -m recent --name limit-429 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-134 --A limit-429 -m recent --name limit-429 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-43 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-43 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-430 -m recent --name limit-430 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-135 --A limit-430 -m limit --limit 1/second -j LOG --A limit-430 -m recent --name limit-430 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-431 -m recent --name limit-431 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-136 --A limit-431 -m recent --name limit-431 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-432 -m recent --name limit-432 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-137 --A limit-432 -m recent --name limit-432 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-433 -m recent --name limit-433 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-138 --A limit-433 -m recent --name limit-433 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-434 -m recent --name limit-434 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 --A limit-434 -m recent --name limit-434 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-435 -m recent --name limit-435 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-140 --A limit-435 -m recent --name limit-435 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-436 -m recent --name limit-436 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-141 --A limit-436 -m limit --limit 1/second -j LOG --A limit-436 -m recent --name limit-436 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-437 -m recent --name limit-437 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-142 --A limit-437 -m recent --name limit-437 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-438 -m recent --name limit-438 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-143 --A limit-438 -m recent --name limit-438 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-439 -m recent --name limit-439 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-144 --A limit-439 -m recent --name limit-439 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-44 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-404 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-161 +-A limit-405 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-162 +-A limit-406 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-163 +-A limit-406 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-407 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-164 +-A limit-407 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-408 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-165 +-A limit-408 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-409 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-166 +-A limit-409 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-41 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-42 +-A limit-41 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-410 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-167 +-A limit-410 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-411 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-168 +-A limit-411 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-412 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-169 +-A limit-413 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-170 +-A limit-414 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-171 +-A limit-415 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-172 +-A limit-415 -m limit --limit 1/second -j LOG +-A limit-416 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-173 +-A limit-417 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-174 +-A limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-42 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-43 +-A limit-42 -j ACCEPT +-A limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-421 -m recent --name limit-421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-421 -m recent --name limit-421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-422 -m recent --name limit-422 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-422 -m recent --name limit-422 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-423 -m recent --name limit-423 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-423 -m recent --name limit-423 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-431 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-432 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-433 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-433 -m limit --limit 1/second -j LOG +-A limit-434 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-435 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-44 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-45 -A limit-44 -m limit --limit 1/second -j LOG --A limit-44 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-440 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-145 --A limit-440 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-441 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-146 --A limit-441 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-442 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-147 --A limit-442 -m limit --limit 1/second -j LOG --A limit-442 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-443 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-148 --A limit-443 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-444 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-149 --A limit-444 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-445 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-150 --A limit-445 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-446 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-151 --A limit-446 -j ACCEPT --A limit-448 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-153 --A limit-448 -m limit --limit 1/second -j LOG --A limit-448 -j ACCEPT --A limit-449 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-154 --A limit-449 -m limit --limit 1/second -j LOG --A limit-45 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-45 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-450 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-155 --A limit-450 -j ACCEPT --A limit-452 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-157 --A limit-452 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-453 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-158 --A limit-453 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-454 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-159 --A limit-454 -m limit --limit 1/second -j LOG --A limit-454 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-455 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-160 --A limit-455 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-456 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-161 --A limit-456 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-457 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-162 --A limit-457 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-458 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-163 --A limit-458 -j ACCEPT --A limit-46 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-46 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-460 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-165 --A limit-460 -m limit --limit 1/second -j LOG --A limit-460 -j ACCEPT --A limit-461 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-166 --A limit-461 -m limit --limit 1/second -j LOG --A limit-462 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-167 --A limit-462 -j ACCEPT --A limit-464 -m recent --name limit-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-464 -m recent --name limit-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-465 -m recent --name limit-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-465 -m recent --name limit-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-466 -m recent --name limit-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-466 -m limit --limit 1/second -j LOG --A limit-466 -m recent --name limit-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-467 -m recent --name limit-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-467 -m recent --name limit-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-468 -m recent --name limit-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-468 -m recent --name limit-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-469 -m recent --name limit-469 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-469 -m recent --name limit-469 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-47 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-47 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-472 -m limit --limit 1/second -j LOG --A limit-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-476 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-476 -j ACCEPT --A limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-478 -m limit --limit 1/second -j LOG --A limit-478 -j ACCEPT --A limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-479 -m limit --limit 1/second -j LOG --A limit-48 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-48 -j ACCEPT --A limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-480 -j ACCEPT --A limit-482 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-482 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-483 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-483 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-484 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-484 -m limit --limit 1/second -j LOG --A limit-484 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-485 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-485 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-486 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-486 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-487 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-487 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-488 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-488 -j ACCEPT --A limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-490 -m limit --limit 1/second -j LOG --A limit-490 -j ACCEPT --A limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-491 -m limit --limit 1/second -j LOG --A limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-492 -j ACCEPT --A limit-494 -m recent --name limit-494 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-494 -m recent --name limit-494 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-495 -m recent --name limit-495 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-495 -m recent --name limit-495 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-496 -m recent --name limit-496 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-496 -m limit --limit 1/second -j LOG --A limit-496 -m recent --name limit-496 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-497 -m recent --name limit-497 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-497 -m recent --name limit-497 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-498 -m recent --name limit-498 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-498 -m recent --name limit-498 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-499 -m recent --name limit-499 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-499 -m recent --name limit-499 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-44 -j ACCEPT +-A limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-442 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-443 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-444 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-445 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-445 -m limit --limit 1/second -j LOG +-A limit-446 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-447 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-448 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-448 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-449 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-449 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-45 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-46 +-A limit-45 -m limit --limit 1/second -j LOG +-A limit-450 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-450 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-451 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-451 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-452 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-452 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-453 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-453 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-454 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-455 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-456 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-457 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-457 -m limit --limit 1/second -j LOG +-A limit-458 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-459 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-46 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-47 +-A limit-46 -j ACCEPT +-A limit-460 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-460 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-461 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-461 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-462 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-462 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-463 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-463 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-464 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-464 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-465 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-465 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-466 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-467 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-468 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-469 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-469 -m limit --limit 1/second -j LOG +-A limit-470 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-471 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-473 -m recent --name limit-473 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-473 -m recent --name limit-473 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-474 -m recent --name limit-474 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-474 -m recent --name limit-474 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-475 -m recent --name limit-475 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-475 -m recent --name limit-475 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-476 -m recent --name limit-476 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-476 -m recent --name limit-476 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-477 -m recent --name limit-477 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-477 -m recent --name limit-477 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-48 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-49 +-A limit-48 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-484 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-485 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-486 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-487 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-487 -m limit --limit 1/second -j LOG +-A limit-488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-49 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-50 +-A limit-49 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-499 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-499 -m limit --limit 1/second -j LOG -A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-6 -A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-50 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-50 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-51 -A limit-50 -m limit --limit 1/second -j LOG --A limit-50 -j ACCEPT --A limit-500 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-500 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-501 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-501 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-502 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-502 -m limit --limit 1/second -j LOG --A limit-502 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-503 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-503 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-504 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-504 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-505 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-505 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-506 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-506 -j ACCEPT --A limit-508 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-508 -m limit --limit 1/second -j LOG --A limit-508 -j ACCEPT --A limit-509 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-509 -m limit --limit 1/second -j LOG --A limit-51 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-51 -m limit --limit 1/second -j LOG --A limit-510 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-510 -j ACCEPT --A limit-512 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-512 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-513 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-513 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-514 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-514 -m limit --limit 1/second -j LOG --A limit-514 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-515 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-515 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-516 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-516 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-517 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-517 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-518 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-518 -j ACCEPT --A limit-52 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-52 -j ACCEPT --A limit-520 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-520 -m limit --limit 1/second -j LOG --A limit-520 -j ACCEPT --A limit-521 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-521 -m limit --limit 1/second -j LOG --A limit-522 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-522 -j ACCEPT --A limit-524 -m recent --name limit-524 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-169 --A limit-524 -m recent --name limit-524 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-525 -m recent --name limit-525 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-170 --A limit-525 -m recent --name limit-525 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-171 --A limit-526 -m limit --limit 1/second -j LOG --A limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-172 --A limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-173 --A limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-174 --A limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-530 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-175 --A limit-530 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-531 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-176 --A limit-531 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-177 --A limit-532 -m limit --limit 1/second -j LOG --A limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-178 --A limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-179 --A limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-180 --A limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-181 --A limit-536 -j ACCEPT --A limit-538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-183 --A limit-538 -m limit --limit 1/second -j LOG --A limit-538 -j ACCEPT --A limit-539 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-184 --A limit-539 -m limit --limit 1/second -j LOG --A limit-54 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-54 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-185 --A limit-540 -j ACCEPT --A limit-542 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-187 --A limit-542 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-543 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-188 --A limit-543 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-189 --A limit-544 -m limit --limit 1/second -j LOG --A limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-190 --A limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-191 --A limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-192 --A limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-193 --A limit-548 -j ACCEPT --A limit-55 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-55 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-195 --A limit-550 -m limit --limit 1/second -j LOG --A limit-550 -j ACCEPT --A limit-551 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-196 --A limit-551 -m limit --limit 1/second -j LOG --A limit-552 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-197 --A limit-552 -j ACCEPT --A limit-554 -m recent --name limit-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-554 -m recent --name limit-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-555 -m recent --name limit-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-555 -m recent --name limit-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-556 -m recent --name limit-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-556 -m limit --limit 1/second -j LOG --A limit-556 -m recent --name limit-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-557 -m recent --name limit-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-557 -m recent --name limit-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-558 -m recent --name limit-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-558 -m recent --name limit-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-559 -m recent --name limit-559 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-559 -m recent --name limit-559 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-56 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-50 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-500 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-501 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-502 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-502 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-503 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-503 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-504 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-504 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-505 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-505 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-506 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-506 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-507 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-507 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-508 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-509 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-51 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-52 +-A limit-51 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-510 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-511 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-511 -m limit --limit 1/second -j LOG +-A limit-512 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-513 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-514 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-514 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-515 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-515 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-516 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-516 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-517 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-517 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-518 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-518 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-519 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-519 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-52 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-53 +-A limit-52 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-520 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-521 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-522 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-523 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-523 -m limit --limit 1/second -j LOG +-A limit-524 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-525 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-175 +-A limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-176 +-A limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-177 +-A limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-178 +-A limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-53 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-54 +-A limit-53 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-179 +-A limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-180 +-A limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-181 +-A limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-182 +-A limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-183 +-A limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-184 +-A limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-185 +-A limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-186 +-A limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-187 +-A limit-539 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-188 +-A limit-54 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-55 +-A limit-54 -j ACCEPT +-A limit-540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-189 +-A limit-541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-190 +-A limit-541 -m limit --limit 1/second -j LOG +-A limit-542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-191 +-A limit-543 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-192 +-A limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-193 +-A limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-194 +-A limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-195 +-A limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-196 +-A limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-197 +-A limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-198 +-A limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-199 +-A limit-551 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-200 +-A limit-552 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-201 +-A limit-553 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-202 +-A limit-553 -m limit --limit 1/second -j LOG +-A limit-554 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-203 +-A limit-555 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-204 +-A limit-556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-205 +-A limit-556 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-206 +-A limit-557 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-207 +-A limit-558 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-208 +-A limit-559 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-56 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-57 -A limit-56 -m limit --limit 1/second -j LOG --A limit-56 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-562 -m limit --limit 1/second -j LOG --A limit-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-566 -j ACCEPT --A limit-568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-568 -m limit --limit 1/second -j LOG --A limit-568 -j ACCEPT --A limit-569 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-569 -m limit --limit 1/second -j LOG --A limit-57 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-57 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-570 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-570 -j ACCEPT --A limit-572 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-572 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-573 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-573 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-574 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-574 -m limit --limit 1/second -j LOG --A limit-574 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-575 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-575 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-576 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-576 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-577 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-577 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-578 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-578 -j ACCEPT --A limit-58 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-58 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-580 -m limit --limit 1/second -j LOG --A limit-580 -j ACCEPT --A limit-581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-581 -m limit --limit 1/second -j LOG --A limit-582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-582 -j ACCEPT +-A limit-56 -j ACCEPT +-A limit-560 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-209 +-A limit-560 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-561 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-210 +-A limit-561 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-211 +-A limit-563 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-212 +-A limit-564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-213 +-A limit-565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-214 +-A limit-565 -m limit --limit 1/second -j LOG +-A limit-566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-215 +-A limit-567 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-216 +-A limit-568 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-217 +-A limit-568 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-569 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-218 +-A limit-569 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-57 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-58 +-A limit-57 -m limit --limit 1/second -j LOG +-A limit-570 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-219 +-A limit-570 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-571 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-220 +-A limit-571 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-221 +-A limit-572 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-222 +-A limit-573 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-574 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-223 +-A limit-575 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-224 +-A limit-576 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-225 +-A limit-577 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-226 +-A limit-577 -m limit --limit 1/second -j LOG +-A limit-578 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-227 +-A limit-579 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-228 +-A limit-58 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-59 +-A limit-58 -j ACCEPT +-A limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-581 -m recent --name limit-581 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-581 -m recent --name limit-581 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-582 -m recent --name limit-582 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-582 -m recent --name limit-582 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-583 -m recent --name limit-583 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-583 -m recent --name limit-583 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-586 -m recent --name limit-586 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-586 -m limit --limit 1/second -j LOG --A limit-586 -m recent --name limit-586 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-587 -m recent --name limit-587 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-587 -m recent --name limit-587 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-588 -m recent --name limit-588 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-588 -m recent --name limit-588 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-589 -m recent --name limit-589 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-589 -m recent --name limit-589 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-59 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-59 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-592 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-592 -m limit --limit 1/second -j LOG --A limit-592 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-593 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-593 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-594 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-594 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-595 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-595 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-592 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-593 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-594 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-595 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-595 -m limit --limit 1/second -j LOG -A limit-596 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-596 -j ACCEPT --A limit-598 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-598 -m limit --limit 1/second -j LOG --A limit-598 -j ACCEPT --A limit-599 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-599 -m limit --limit 1/second -j LOG +-A limit-597 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-7 -A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-60 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-60 -j ACCEPT --A limit-600 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-600 -j ACCEPT +-A limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-604 -m limit --limit 1/second -j LOG --A limit-604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-605 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-605 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-607 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-607 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-605 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-607 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-607 -m limit --limit 1/second -j LOG -A limit-608 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-608 -j ACCEPT --A limit-610 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-610 -m limit --limit 1/second -j LOG --A limit-610 -j ACCEPT --A limit-611 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-611 -m limit --limit 1/second -j LOG --A limit-612 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-612 -j ACCEPT --A limit-614 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-614 -j ACCEPT --A limit-614 -m limit --limit 1/second -j LOG --A limit-614 -j DROP --A limit-615 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-615 -j RETURN --A limit-615 -m limit --limit 1/second -j LOG --A limit-615 -j DROP --A limit-616 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-616 -j logaccept-7 --A limit-616 -m limit --limit 1/second -j LOG --A limit-616 -j DROP --A limit-617 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-617 -j ACCEPT --A limit-617 -m limit --limit 1/second -j LOG --A limit-617 -j DROP --A limit-618 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-618 -j ACCEPT --A limit-618 -m limit --limit 1/second -j LOG --A limit-618 -j DROP --A limit-619 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-619 -j RETURN +-A limit-609 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-61 -m recent --name limit-61 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-61 -m recent --name limit-61 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-610 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-610 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-611 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-611 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-612 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-612 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-613 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-613 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-614 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-614 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-615 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-615 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-616 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-617 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-618 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-619 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-619 -m limit --limit 1/second -j LOG --A limit-619 -j DROP --A limit-62 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-62 -m recent --name limit-62 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-62 -m limit --limit 1/second -j LOG --A limit-62 -j ACCEPT --A limit-620 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-620 -j logaccept-8 --A limit-620 -m limit --limit 1/second -j LOG --A limit-620 -j DROP --A limit-621 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-621 -j ACCEPT --A limit-621 -m limit --limit 1/second -j LOG --A limit-621 -j DROP --A limit-622 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-622 -j ACCEPT --A limit-622 -j DROP --A limit-623 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-623 -j RETURN --A limit-623 -j DROP --A limit-624 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-624 -j logaccept-9 --A limit-624 -j DROP --A limit-625 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-625 -j ACCEPT --A limit-625 -j DROP --A limit-626 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-626 -j ACCEPT --A limit-626 -j DROP --A limit-627 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-627 -j RETURN --A limit-627 -j DROP --A limit-628 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-628 -j logaccept-10 --A limit-628 -j DROP --A limit-629 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-629 -j ACCEPT --A limit-629 -j DROP --A limit-63 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-63 -m limit --limit 1/second -j LOG --A limit-630 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-630 -j ACCEPT --A limit-630 -m limit --limit 1/second -j LOG --A limit-630 -j DROP --A limit-631 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-631 -j RETURN +-A limit-62 -m recent --name limit-62 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-620 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-621 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-622 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-622 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-623 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-623 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-624 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-624 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-625 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-625 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-626 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-626 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-627 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-627 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-628 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-629 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-63 -m recent --name limit-63 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-63 -m recent --name limit-63 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-630 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-631 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-631 -m limit --limit 1/second -j LOG --A limit-631 -j DROP --A limit-632 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-632 -j logaccept-11 --A limit-632 -m limit --limit 1/second -j LOG --A limit-632 -j DROP --A limit-633 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-633 -j ACCEPT --A limit-633 -m limit --limit 1/second -j LOG --A limit-633 -j DROP --A limit-634 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-634 -j ACCEPT --A limit-634 -j DROP --A limit-635 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-635 -j RETURN --A limit-635 -j DROP --A limit-636 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-636 -j logaccept-12 --A limit-636 -j DROP --A limit-637 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-637 -j ACCEPT --A limit-637 -j DROP --A limit-638 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-638 -j ACCEPT --A limit-638 -j DROP --A limit-639 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-639 -j RETURN --A limit-639 -j DROP --A limit-64 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-64 -j ACCEPT --A limit-640 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-640 -j logaccept-13 --A limit-640 -j DROP --A limit-641 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-641 -j ACCEPT --A limit-641 -j DROP --A limit-66 -m recent --name limit-66 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-66 -m recent --name limit-66 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-67 -m recent --name limit-67 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-67 -m recent --name limit-67 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-68 -m recent --name limit-68 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-632 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-633 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-64 -m recent --name limit-64 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-64 -m recent --name limit-64 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-646 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-647 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-648 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-649 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-649 -m limit --limit 1/second -j LOG +-A limit-65 -m recent --name limit-65 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-65 -m recent --name limit-65 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-658 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-659 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-66 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-66 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-660 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-661 -m limit --limit 1/second -j LOG +-A limit-662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-663 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-664 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-664 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-665 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-665 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-666 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-666 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-667 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-667 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-668 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-668 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-669 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-669 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-67 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-67 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-670 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-671 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-672 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-673 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-673 -m limit --limit 1/second -j LOG +-A limit-674 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-675 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-676 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-676 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-677 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-677 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-678 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-678 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-679 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-679 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-68 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-68 -m limit --limit 1/second -j LOG --A limit-68 -m recent --name limit-68 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-69 -m recent --name limit-69 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-69 -m recent --name limit-69 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-68 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-680 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-680 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-681 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-681 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-682 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-683 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-684 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-685 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-685 -m limit --limit 1/second -j LOG +-A limit-686 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-687 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-688 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-688 -j RETURN +-A limit-688 -m limit --limit 1/second -j LOG +-A limit-688 -j DROP +-A limit-689 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-689 -j RETURN +-A limit-689 -m limit --limit 1/second -j LOG +-A limit-689 -j DROP +-A limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-690 -j RETURN +-A limit-690 -m limit --limit 1/second -j LOG +-A limit-690 -j DROP +-A limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-691 -j RETURN +-A limit-691 -m limit --limit 1/second -j LOG +-A limit-691 -j DROP +-A limit-692 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-692 -j RETURN +-A limit-692 -m limit --limit 1/second -j LOG +-A limit-692 -j DROP +-A limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-693 -j RETURN +-A limit-693 -m limit --limit 1/second -j LOG +-A limit-693 -j DROP +-A limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-694 -j RETURN +-A limit-694 -m limit --limit 1/second -j LOG +-A limit-694 -j DROP +-A limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-695 -j RETURN +-A limit-695 -m limit --limit 1/second -j LOG +-A limit-695 -j DROP +-A limit-696 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-696 -j RETURN +-A limit-696 -j DROP +-A limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-697 -j RETURN +-A limit-697 -j DROP +-A limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-698 -j RETURN +-A limit-698 -j DROP +-A limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-699 -j RETURN +-A limit-699 -j DROP -A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-8 -A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-70 -m recent --name limit-70 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-70 -m recent --name limit-70 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-71 -m recent --name limit-71 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-71 -m recent --name limit-71 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-72 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-72 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-73 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-73 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-74 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-700 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-700 -j RETURN +-A limit-700 -j DROP +-A limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-701 -j RETURN +-A limit-701 -j DROP +-A limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-702 -j RETURN +-A limit-702 -j DROP +-A limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-703 -j RETURN +-A limit-703 -j DROP +-A limit-704 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-704 -j RETURN +-A limit-704 -m limit --limit 1/second -j LOG +-A limit-704 -j DROP +-A limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-705 -j RETURN +-A limit-705 -m limit --limit 1/second -j LOG +-A limit-705 -j DROP +-A limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-706 -j RETURN +-A limit-706 -m limit --limit 1/second -j LOG +-A limit-706 -j DROP +-A limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-707 -j RETURN +-A limit-707 -m limit --limit 1/second -j LOG +-A limit-707 -j DROP +-A limit-708 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-708 -j RETURN +-A limit-708 -j DROP +-A limit-709 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-709 -j RETURN +-A limit-709 -j DROP +-A limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-710 -j RETURN +-A limit-710 -j DROP +-A limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-711 -j RETURN +-A limit-711 -j DROP +-A limit-712 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-712 -j RETURN +-A limit-712 -j DROP +-A limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-713 -j RETURN +-A limit-713 -j DROP +-A limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-714 -j RETURN +-A limit-714 -j DROP +-A limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-715 -j RETURN +-A limit-715 -j DROP +-A limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-229 +-A limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-230 +-A limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-231 +-A limit-718 -m limit --limit 1/second -j LOG +-A limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-232 +-A limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-72 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-72 -j ACCEPT +-A limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-233 +-A limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-234 +-A limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-235 +-A limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-236 +-A limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-237 +-A limit-724 -m limit --limit 1/second -j LOG +-A limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-238 +-A limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-239 +-A limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-240 +-A limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-241 +-A limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-242 +-A limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-243 +-A limit-730 -m limit --limit 1/second -j LOG +-A limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-244 +-A limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-245 +-A limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-246 +-A limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-734 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-247 +-A limit-734 -j ACCEPT +-A limit-736 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-249 +-A limit-736 -m limit --limit 1/second -j LOG +-A limit-736 -j ACCEPT +-A limit-737 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-250 +-A limit-737 -m limit --limit 1/second -j LOG +-A limit-738 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-251 +-A limit-738 -j ACCEPT +-A limit-74 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-74 -m limit --limit 1/second -j LOG --A limit-74 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-75 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-75 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-76 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-76 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-77 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-77 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-78 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-78 -j ACCEPT +-A limit-74 -j ACCEPT +-A limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-253 +-A limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-254 +-A limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-255 +-A limit-742 -m limit --limit 1/second -j LOG +-A limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-256 +-A limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-257 +-A limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-258 +-A limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-746 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-259 +-A limit-746 -j ACCEPT +-A limit-748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-261 +-A limit-748 -m limit --limit 1/second -j LOG +-A limit-748 -j ACCEPT +-A limit-749 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-262 +-A limit-749 -m limit --limit 1/second -j LOG +-A limit-75 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-75 -m limit --limit 1/second -j LOG +-A limit-750 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-263 +-A limit-750 -j ACCEPT +-A limit-752 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-265 +-A limit-752 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-753 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-266 +-A limit-753 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-754 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-267 +-A limit-754 -m limit --limit 1/second -j LOG +-A limit-754 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-755 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-268 +-A limit-755 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-269 +-A limit-756 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-757 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-270 +-A limit-757 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-758 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-271 +-A limit-758 -j ACCEPT +-A limit-76 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-76 -j ACCEPT +-A limit-760 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-273 +-A limit-760 -m limit --limit 1/second -j LOG +-A limit-760 -j ACCEPT +-A limit-761 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-274 +-A limit-761 -m limit --limit 1/second -j LOG +-A limit-762 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-275 +-A limit-762 -j ACCEPT +-A limit-764 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-277 +-A limit-764 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-765 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-278 +-A limit-765 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-766 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-279 +-A limit-766 -m limit --limit 1/second -j LOG +-A limit-766 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-767 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-280 +-A limit-767 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-768 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-281 +-A limit-768 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-769 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-282 +-A limit-769 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-770 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-283 +-A limit-770 -j ACCEPT +-A limit-772 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-285 +-A limit-772 -m limit --limit 1/second -j LOG +-A limit-772 -j ACCEPT +-A limit-773 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-286 +-A limit-773 -m limit --limit 1/second -j LOG +-A limit-774 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-287 +-A limit-774 -j ACCEPT +-A limit-776 -m recent --name limit-776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-776 -m recent --name limit-776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-777 -m recent --name limit-777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-777 -m recent --name limit-777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-778 -m recent --name limit-778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-778 -m limit --limit 1/second -j LOG +-A limit-778 -m recent --name limit-778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-779 -m recent --name limit-779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-779 -m recent --name limit-779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-78 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-78 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-780 -m recent --name limit-780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-780 -m recent --name limit-780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-784 -m limit --limit 1/second -j LOG +-A limit-784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-788 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-788 -j ACCEPT +-A limit-79 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-79 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-790 -m limit --limit 1/second -j LOG +-A limit-790 -j ACCEPT +-A limit-791 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-791 -m limit --limit 1/second -j LOG +-A limit-792 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-792 -j ACCEPT +-A limit-794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-796 -m limit --limit 1/second -j LOG +-A limit-796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-9 -A limit-8 -m limit --limit 1/second -j LOG -A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-80 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-80 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-80 -m limit --limit 1/second -j LOG --A limit-80 -j ACCEPT --A limit-81 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-81 -m limit --limit 1/second -j LOG --A limit-82 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-82 -j ACCEPT --A limit-84 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-84 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-85 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-85 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-86 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-80 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-800 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-800 -j ACCEPT +-A limit-802 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-802 -m limit --limit 1/second -j LOG +-A limit-802 -j ACCEPT +-A limit-803 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-803 -m limit --limit 1/second -j LOG +-A limit-804 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-804 -j ACCEPT +-A limit-806 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-806 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-807 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-807 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-808 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-808 -m limit --limit 1/second -j LOG +-A limit-808 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-809 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-809 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-81 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-81 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-810 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-810 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-811 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-811 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-812 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-812 -j ACCEPT +-A limit-814 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-814 -m limit --limit 1/second -j LOG +-A limit-814 -j ACCEPT +-A limit-815 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-815 -m limit --limit 1/second -j LOG +-A limit-816 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-816 -j ACCEPT +-A limit-818 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-818 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-819 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-819 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-82 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-82 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-820 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-820 -m limit --limit 1/second -j LOG +-A limit-820 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-821 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-821 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-822 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-822 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-823 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-823 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-824 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-824 -j ACCEPT +-A limit-826 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-826 -m limit --limit 1/second -j LOG +-A limit-826 -j ACCEPT +-A limit-827 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-827 -m limit --limit 1/second -j LOG +-A limit-828 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-828 -j ACCEPT +-A limit-83 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-83 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-830 -m recent --name limit-830 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-830 -m recent --name limit-830 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-831 -m recent --name limit-831 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-831 -m recent --name limit-831 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-832 -m recent --name limit-832 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-832 -m limit --limit 1/second -j LOG +-A limit-832 -m recent --name limit-832 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-833 -m recent --name limit-833 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-833 -m recent --name limit-833 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-834 -m recent --name limit-834 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-834 -m recent --name limit-834 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-835 -m recent --name limit-835 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-835 -m recent --name limit-835 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-838 -m limit --limit 1/second -j LOG +-A limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-84 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-84 -j ACCEPT +-A limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-842 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-842 -j ACCEPT +-A limit-844 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-844 -m limit --limit 1/second -j LOG +-A limit-844 -j ACCEPT +-A limit-845 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-845 -m limit --limit 1/second -j LOG +-A limit-846 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-846 -j ACCEPT +-A limit-848 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-848 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-849 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-849 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-850 -m limit --limit 1/second -j LOG +-A limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-854 -j ACCEPT +-A limit-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-856 -m limit --limit 1/second -j LOG +-A limit-856 -j ACCEPT +-A limit-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-857 -m limit --limit 1/second -j LOG +-A limit-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-858 -j ACCEPT +-A limit-86 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-86 -m limit --limit 1/second -j LOG --A limit-86 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-87 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-87 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-88 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-88 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-89 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-89 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-86 -j ACCEPT +-A limit-860 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-860 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-861 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-861 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-862 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-862 -m limit --limit 1/second -j LOG +-A limit-862 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-863 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-863 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-864 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-864 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-865 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-865 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-866 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-866 -j ACCEPT +-A limit-868 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-868 -m limit --limit 1/second -j LOG +-A limit-868 -j ACCEPT +-A limit-869 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-869 -m limit --limit 1/second -j LOG +-A limit-87 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-87 -m limit --limit 1/second -j LOG +-A limit-870 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-870 -j ACCEPT +-A limit-872 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-872 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-873 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-873 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-874 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-874 -m limit --limit 1/second -j LOG +-A limit-874 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-875 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-875 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-876 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-876 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-877 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-877 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-878 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-878 -j ACCEPT +-A limit-88 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-88 -j ACCEPT +-A limit-880 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-880 -m limit --limit 1/second -j LOG +-A limit-880 -j ACCEPT +-A limit-881 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-881 -m limit --limit 1/second -j LOG +-A limit-882 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-882 -j ACCEPT +-A limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-289 +-A limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-290 +-A limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-291 +-A limit-886 -m limit --limit 1/second -j LOG +-A limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-292 +-A limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-293 +-A limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-294 +-A limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-295 +-A limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-296 +-A limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-297 +-A limit-892 -m limit --limit 1/second -j LOG +-A limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-298 +-A limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-299 +-A limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-300 +-A limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-896 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-301 +-A limit-896 -j ACCEPT +-A limit-898 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-303 +-A limit-898 -m limit --limit 1/second -j LOG +-A limit-898 -j ACCEPT +-A limit-899 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-304 +-A limit-899 -m limit --limit 1/second -j LOG -A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-10 -A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-90 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-90 -j ACCEPT --A limit-92 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-90 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-90 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-900 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-305 +-A limit-900 -j ACCEPT +-A limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-307 +-A limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-308 +-A limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-309 +-A limit-904 -m limit --limit 1/second -j LOG +-A limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-310 +-A limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-311 +-A limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-312 +-A limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-908 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-313 +-A limit-908 -j ACCEPT +-A limit-91 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-91 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-910 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-315 +-A limit-910 -m limit --limit 1/second -j LOG +-A limit-910 -j ACCEPT +-A limit-911 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-316 +-A limit-911 -m limit --limit 1/second -j LOG +-A limit-912 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-317 +-A limit-912 -j ACCEPT +-A limit-914 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-319 +-A limit-914 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-915 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-320 +-A limit-915 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-916 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-321 +-A limit-916 -m limit --limit 1/second -j LOG +-A limit-916 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-917 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-322 +-A limit-917 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-918 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-323 +-A limit-918 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-919 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-324 +-A limit-919 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-92 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-92 -m limit --limit 1/second -j LOG --A limit-92 -j ACCEPT --A limit-93 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-93 -m limit --limit 1/second -j LOG --A limit-94 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-94 -j ACCEPT --A limit-96 -m recent --name limit-96 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-37 --A limit-96 -m recent --name limit-96 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-97 -m recent --name limit-97 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-38 --A limit-97 -m recent --name limit-97 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-98 -m recent --name limit-98 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-39 +-A limit-92 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-920 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-325 +-A limit-920 -j ACCEPT +-A limit-922 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-327 +-A limit-922 -m limit --limit 1/second -j LOG +-A limit-922 -j ACCEPT +-A limit-923 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-328 +-A limit-923 -m limit --limit 1/second -j LOG +-A limit-924 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-329 +-A limit-924 -j ACCEPT +-A limit-926 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-331 +-A limit-926 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-927 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-332 +-A limit-927 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-928 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-333 +-A limit-928 -m limit --limit 1/second -j LOG +-A limit-928 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-929 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-334 +-A limit-929 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-93 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-93 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-930 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-335 +-A limit-930 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-931 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-336 +-A limit-931 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-932 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-337 +-A limit-932 -j ACCEPT +-A limit-934 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-339 +-A limit-934 -m limit --limit 1/second -j LOG +-A limit-934 -j ACCEPT +-A limit-935 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-340 +-A limit-935 -m limit --limit 1/second -j LOG +-A limit-936 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-341 +-A limit-936 -j ACCEPT +-A limit-938 -m recent --name limit-938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-938 -m recent --name limit-938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-939 -m recent --name limit-939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-939 -m recent --name limit-939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-94 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-94 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-940 -m recent --name limit-940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-940 -m limit --limit 1/second -j LOG +-A limit-940 -m recent --name limit-940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-941 -m recent --name limit-941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-941 -m recent --name limit-941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-942 -m recent --name limit-942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-942 -m recent --name limit-942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-943 -m recent --name limit-943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-943 -m recent --name limit-943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-944 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-944 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-945 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-945 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-946 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-946 -m limit --limit 1/second -j LOG +-A limit-946 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-947 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-947 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-95 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-95 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-950 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-950 -j ACCEPT +-A limit-952 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-952 -m limit --limit 1/second -j LOG +-A limit-952 -j ACCEPT +-A limit-953 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-953 -m limit --limit 1/second -j LOG +-A limit-954 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-954 -j ACCEPT +-A limit-956 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-956 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-957 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-957 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-958 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-958 -m limit --limit 1/second -j LOG +-A limit-958 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-959 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-959 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-96 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-96 -j ACCEPT +-A limit-960 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-960 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-961 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-961 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-962 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-962 -j ACCEPT +-A limit-964 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-964 -m limit --limit 1/second -j LOG +-A limit-964 -j ACCEPT +-A limit-965 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-965 -m limit --limit 1/second -j LOG +-A limit-966 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-966 -j ACCEPT +-A limit-968 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-968 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-969 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-969 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-970 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-970 -m limit --limit 1/second -j LOG +-A limit-970 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-971 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-971 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-972 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-972 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-973 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-973 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-974 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-974 -j ACCEPT +-A limit-976 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-976 -m limit --limit 1/second -j LOG +-A limit-976 -j ACCEPT +-A limit-977 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-977 -m limit --limit 1/second -j LOG +-A limit-978 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-978 -j ACCEPT +-A limit-98 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-98 -m limit --limit 1/second -j LOG --A limit-98 -m recent --name limit-98 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-99 -m recent --name limit-99 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-40 --A limit-99 -m recent --name limit-99 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-98 -j ACCEPT +-A limit-980 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-980 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-981 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-981 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-982 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-982 -m limit --limit 1/second -j LOG +-A limit-982 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-983 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-983 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-984 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-984 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-985 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-985 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-986 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-986 -j ACCEPT +-A limit-988 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-988 -m limit --limit 1/second -j LOG +-A limit-988 -j ACCEPT +-A limit-989 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-989 -m limit --limit 1/second -j LOG +-A limit-99 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-99 -m limit --limit 1/second -j LOG +-A limit-990 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-990 -j ACCEPT +-A limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-994 -m limit --limit 1/second -j LOG +-A limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-996 -m recent --name limit-996 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-996 -m recent --name limit-996 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT -A logaccept-1 -m limit --limit 1/second -j LOG @@ -18964,12 +30579,60 @@ COMMIT -A logaccept-final-36 -j ACCEPT -A logaccept-final-37 -m limit --limit 1/second -j LOG -A logaccept-final-37 -j ACCEPT +-A logaccept-final-38 -m limit --limit 1/second -j LOG +-A logaccept-final-38 -j ACCEPT +-A logaccept-final-39 -m limit --limit 1/second -j LOG +-A logaccept-final-39 -j ACCEPT -A logaccept-final-4 -m limit --limit 1/second -j LOG -A logaccept-final-4 -j ACCEPT +-A logaccept-final-40 -m limit --limit 1/second -j LOG +-A logaccept-final-40 -j ACCEPT +-A logaccept-final-41 -m limit --limit 1/second -j LOG +-A logaccept-final-41 -j ACCEPT +-A logaccept-final-42 -m limit --limit 1/second -j LOG +-A logaccept-final-42 -j ACCEPT +-A logaccept-final-43 -m limit --limit 1/second -j LOG +-A logaccept-final-43 -j ACCEPT +-A logaccept-final-44 -m limit --limit 1/second -j LOG +-A logaccept-final-44 -j ACCEPT +-A logaccept-final-45 -m limit --limit 1/second -j LOG +-A logaccept-final-45 -j ACCEPT +-A logaccept-final-46 -m limit --limit 1/second -j LOG +-A logaccept-final-46 -j ACCEPT +-A logaccept-final-47 -m limit --limit 1/second -j LOG +-A logaccept-final-47 -j ACCEPT +-A logaccept-final-48 -m limit --limit 1/second -j LOG +-A logaccept-final-48 -j ACCEPT +-A logaccept-final-49 -m limit --limit 1/second -j LOG +-A logaccept-final-49 -j ACCEPT -A logaccept-final-5 -m limit --limit 1/second -j LOG -A logaccept-final-5 -j ACCEPT +-A logaccept-final-50 -m limit --limit 1/second -j LOG +-A logaccept-final-50 -j ACCEPT +-A logaccept-final-51 -m limit --limit 1/second -j LOG +-A logaccept-final-51 -j ACCEPT +-A logaccept-final-52 -m limit --limit 1/second -j LOG +-A logaccept-final-52 -j ACCEPT +-A logaccept-final-53 -m limit --limit 1/second -j LOG +-A logaccept-final-53 -j ACCEPT +-A logaccept-final-54 -m limit --limit 1/second -j LOG +-A logaccept-final-54 -j ACCEPT +-A logaccept-final-55 -m limit --limit 1/second -j LOG +-A logaccept-final-55 -j ACCEPT +-A logaccept-final-56 -m limit --limit 1/second -j LOG +-A logaccept-final-56 -j ACCEPT +-A logaccept-final-57 -m limit --limit 1/second -j LOG +-A logaccept-final-57 -j ACCEPT +-A logaccept-final-58 -m limit --limit 1/second -j LOG +-A logaccept-final-58 -j ACCEPT +-A logaccept-final-59 -m limit --limit 1/second -j LOG +-A logaccept-final-59 -j ACCEPT -A logaccept-final-6 -m limit --limit 1/second -j LOG -A logaccept-final-6 -j ACCEPT +-A logaccept-final-60 -m limit --limit 1/second -j LOG +-A logaccept-final-60 -j ACCEPT +-A logaccept-final-61 -m limit --limit 1/second -j LOG +-A logaccept-final-61 -j ACCEPT -A logaccept-final-7 -m limit --limit 1/second -j LOG -A logaccept-final-7 -j ACCEPT -A logaccept-final-8 -m limit --limit 1/second -j LOG @@ -18986,8 +30649,6 @@ COMMIT -A logdrop-100 -j DROP -A logdrop-101 -m limit --limit 1/second -j LOG -A logdrop-101 -j DROP --A logdrop-102 -m limit --limit 1/second -j LOG --A logdrop-102 -j DROP -A logdrop-103 -m limit --limit 1/second -j LOG -A logdrop-103 -j DROP -A logdrop-104 -m limit --limit 1/second -j LOG @@ -19004,16 +30665,12 @@ COMMIT -A logdrop-109 -j DROP -A logdrop-11 -m limit --limit 1/second -j LOG -A logdrop-11 -j DROP --A logdrop-110 -m limit --limit 1/second -j LOG --A logdrop-110 -j DROP -A logdrop-111 -m limit --limit 1/second -j LOG -A logdrop-111 -j DROP -A logdrop-112 -m limit --limit 1/second -j LOG -A logdrop-112 -j DROP -A logdrop-113 -m limit --limit 1/second -j LOG -A logdrop-113 -j DROP --A logdrop-114 -m limit --limit 1/second -j LOG --A logdrop-114 -j DROP -A logdrop-115 -m limit --limit 1/second -j LOG -A logdrop-115 -j DROP -A logdrop-116 -m limit --limit 1/second -j LOG @@ -19096,12 +30753,16 @@ COMMIT -A logdrop-150 -j DROP -A logdrop-151 -m limit --limit 1/second -j LOG -A logdrop-151 -j DROP +-A logdrop-152 -m limit --limit 1/second -j LOG +-A logdrop-152 -j DROP -A logdrop-153 -m limit --limit 1/second -j LOG -A logdrop-153 -j DROP -A logdrop-154 -m limit --limit 1/second -j LOG -A logdrop-154 -j DROP -A logdrop-155 -m limit --limit 1/second -j LOG -A logdrop-155 -j DROP +-A logdrop-156 -m limit --limit 1/second -j LOG +-A logdrop-156 -j DROP -A logdrop-157 -m limit --limit 1/second -j LOG -A logdrop-157 -j DROP -A logdrop-158 -m limit --limit 1/second -j LOG @@ -19118,12 +30779,16 @@ COMMIT -A logdrop-162 -j DROP -A logdrop-163 -m limit --limit 1/second -j LOG -A logdrop-163 -j DROP +-A logdrop-164 -m limit --limit 1/second -j LOG +-A logdrop-164 -j DROP -A logdrop-165 -m limit --limit 1/second -j LOG -A logdrop-165 -j DROP -A logdrop-166 -m limit --limit 1/second -j LOG -A logdrop-166 -j DROP -A logdrop-167 -m limit --limit 1/second -j LOG -A logdrop-167 -j DROP +-A logdrop-168 -m limit --limit 1/second -j LOG +-A logdrop-168 -j DROP -A logdrop-169 -m limit --limit 1/second -j LOG -A logdrop-169 -j DROP -A logdrop-17 -m limit --limit 1/second -j LOG @@ -19154,12 +30819,16 @@ COMMIT -A logdrop-180 -j DROP -A logdrop-181 -m limit --limit 1/second -j LOG -A logdrop-181 -j DROP +-A logdrop-182 -m limit --limit 1/second -j LOG +-A logdrop-182 -j DROP -A logdrop-183 -m limit --limit 1/second -j LOG -A logdrop-183 -j DROP -A logdrop-184 -m limit --limit 1/second -j LOG -A logdrop-184 -j DROP -A logdrop-185 -m limit --limit 1/second -j LOG -A logdrop-185 -j DROP +-A logdrop-186 -m limit --limit 1/second -j LOG +-A logdrop-186 -j DROP -A logdrop-187 -m limit --limit 1/second -j LOG -A logdrop-187 -j DROP -A logdrop-188 -m limit --limit 1/second -j LOG @@ -19176,44 +30845,304 @@ COMMIT -A logdrop-192 -j DROP -A logdrop-193 -m limit --limit 1/second -j LOG -A logdrop-193 -j DROP +-A logdrop-194 -m limit --limit 1/second -j LOG +-A logdrop-194 -j DROP -A logdrop-195 -m limit --limit 1/second -j LOG -A logdrop-195 -j DROP -A logdrop-196 -m limit --limit 1/second -j LOG -A logdrop-196 -j DROP -A logdrop-197 -m limit --limit 1/second -j LOG -A logdrop-197 -j DROP +-A logdrop-198 -m limit --limit 1/second -j LOG +-A logdrop-198 -j DROP -A logdrop-199 -m limit --limit 1/second -j LOG -A logdrop-199 -j DROP -A logdrop-2 -m limit --limit 1/second -j LOG -A logdrop-2 -j DROP -A logdrop-200 -m limit --limit 1/second -j LOG -A logdrop-200 -j DROP +-A logdrop-201 -m limit --limit 1/second -j LOG +-A logdrop-201 -j DROP +-A logdrop-202 -m limit --limit 1/second -j LOG +-A logdrop-202 -j DROP +-A logdrop-203 -m limit --limit 1/second -j LOG +-A logdrop-203 -j DROP +-A logdrop-204 -m limit --limit 1/second -j LOG +-A logdrop-204 -j DROP +-A logdrop-205 -m limit --limit 1/second -j LOG +-A logdrop-205 -j DROP +-A logdrop-206 -m limit --limit 1/second -j LOG +-A logdrop-206 -j DROP +-A logdrop-207 -m limit --limit 1/second -j LOG +-A logdrop-207 -j DROP +-A logdrop-208 -m limit --limit 1/second -j LOG +-A logdrop-208 -j DROP +-A logdrop-209 -m limit --limit 1/second -j LOG +-A logdrop-209 -j DROP -A logdrop-21 -m limit --limit 1/second -j LOG -A logdrop-21 -j DROP +-A logdrop-210 -m limit --limit 1/second -j LOG +-A logdrop-210 -j DROP +-A logdrop-211 -m limit --limit 1/second -j LOG +-A logdrop-211 -j DROP +-A logdrop-212 -m limit --limit 1/second -j LOG +-A logdrop-212 -j DROP +-A logdrop-213 -m limit --limit 1/second -j LOG +-A logdrop-213 -j DROP +-A logdrop-214 -m limit --limit 1/second -j LOG +-A logdrop-214 -j DROP +-A logdrop-215 -m limit --limit 1/second -j LOG +-A logdrop-215 -j DROP +-A logdrop-216 -m limit --limit 1/second -j LOG +-A logdrop-216 -j DROP +-A logdrop-217 -m limit --limit 1/second -j LOG +-A logdrop-217 -j DROP +-A logdrop-218 -m limit --limit 1/second -j LOG +-A logdrop-218 -j DROP +-A logdrop-219 -m limit --limit 1/second -j LOG +-A logdrop-219 -j DROP -A logdrop-22 -m limit --limit 1/second -j LOG -A logdrop-22 -j DROP +-A logdrop-220 -m limit --limit 1/second -j LOG +-A logdrop-220 -j DROP +-A logdrop-221 -m limit --limit 1/second -j LOG +-A logdrop-221 -j DROP +-A logdrop-222 -m limit --limit 1/second -j LOG +-A logdrop-222 -j DROP +-A logdrop-223 -m limit --limit 1/second -j LOG +-A logdrop-223 -j DROP +-A logdrop-224 -m limit --limit 1/second -j LOG +-A logdrop-224 -j DROP +-A logdrop-225 -m limit --limit 1/second -j LOG +-A logdrop-225 -j DROP +-A logdrop-226 -m limit --limit 1/second -j LOG +-A logdrop-226 -j DROP +-A logdrop-227 -m limit --limit 1/second -j LOG +-A logdrop-227 -j DROP +-A logdrop-228 -m limit --limit 1/second -j LOG +-A logdrop-228 -j DROP +-A logdrop-229 -m limit --limit 1/second -j LOG +-A logdrop-229 -j DROP -A logdrop-23 -m limit --limit 1/second -j LOG -A logdrop-23 -j DROP +-A logdrop-230 -m limit --limit 1/second -j LOG +-A logdrop-230 -j DROP +-A logdrop-231 -m limit --limit 1/second -j LOG +-A logdrop-231 -j DROP +-A logdrop-232 -m limit --limit 1/second -j LOG +-A logdrop-232 -j DROP +-A logdrop-233 -m limit --limit 1/second -j LOG +-A logdrop-233 -j DROP +-A logdrop-234 -m limit --limit 1/second -j LOG +-A logdrop-234 -j DROP +-A logdrop-235 -m limit --limit 1/second -j LOG +-A logdrop-235 -j DROP +-A logdrop-236 -m limit --limit 1/second -j LOG +-A logdrop-236 -j DROP +-A logdrop-237 -m limit --limit 1/second -j LOG +-A logdrop-237 -j DROP +-A logdrop-238 -m limit --limit 1/second -j LOG +-A logdrop-238 -j DROP +-A logdrop-239 -m limit --limit 1/second -j LOG +-A logdrop-239 -j DROP +-A logdrop-240 -m limit --limit 1/second -j LOG +-A logdrop-240 -j DROP +-A logdrop-241 -m limit --limit 1/second -j LOG +-A logdrop-241 -j DROP +-A logdrop-242 -m limit --limit 1/second -j LOG +-A logdrop-242 -j DROP +-A logdrop-243 -m limit --limit 1/second -j LOG +-A logdrop-243 -j DROP +-A logdrop-244 -m limit --limit 1/second -j LOG +-A logdrop-244 -j DROP +-A logdrop-245 -m limit --limit 1/second -j LOG +-A logdrop-245 -j DROP +-A logdrop-246 -m limit --limit 1/second -j LOG +-A logdrop-246 -j DROP +-A logdrop-247 -m limit --limit 1/second -j LOG +-A logdrop-247 -j DROP +-A logdrop-249 -m limit --limit 1/second -j LOG +-A logdrop-249 -j DROP -A logdrop-25 -m limit --limit 1/second -j LOG -A logdrop-25 -j DROP +-A logdrop-250 -m limit --limit 1/second -j LOG +-A logdrop-250 -j DROP +-A logdrop-251 -m limit --limit 1/second -j LOG +-A logdrop-251 -j DROP +-A logdrop-253 -m limit --limit 1/second -j LOG +-A logdrop-253 -j DROP +-A logdrop-254 -m limit --limit 1/second -j LOG +-A logdrop-254 -j DROP +-A logdrop-255 -m limit --limit 1/second -j LOG +-A logdrop-255 -j DROP +-A logdrop-256 -m limit --limit 1/second -j LOG +-A logdrop-256 -j DROP +-A logdrop-257 -m limit --limit 1/second -j LOG +-A logdrop-257 -j DROP +-A logdrop-258 -m limit --limit 1/second -j LOG +-A logdrop-258 -j DROP +-A logdrop-259 -m limit --limit 1/second -j LOG +-A logdrop-259 -j DROP -A logdrop-26 -m limit --limit 1/second -j LOG -A logdrop-26 -j DROP +-A logdrop-261 -m limit --limit 1/second -j LOG +-A logdrop-261 -j DROP +-A logdrop-262 -m limit --limit 1/second -j LOG +-A logdrop-262 -j DROP +-A logdrop-263 -m limit --limit 1/second -j LOG +-A logdrop-263 -j DROP +-A logdrop-265 -m limit --limit 1/second -j LOG +-A logdrop-265 -j DROP +-A logdrop-266 -m limit --limit 1/second -j LOG +-A logdrop-266 -j DROP +-A logdrop-267 -m limit --limit 1/second -j LOG +-A logdrop-267 -j DROP +-A logdrop-268 -m limit --limit 1/second -j LOG +-A logdrop-268 -j DROP +-A logdrop-269 -m limit --limit 1/second -j LOG +-A logdrop-269 -j DROP -A logdrop-27 -m limit --limit 1/second -j LOG -A logdrop-27 -j DROP +-A logdrop-270 -m limit --limit 1/second -j LOG +-A logdrop-270 -j DROP +-A logdrop-271 -m limit --limit 1/second -j LOG +-A logdrop-271 -j DROP +-A logdrop-273 -m limit --limit 1/second -j LOG +-A logdrop-273 -j DROP +-A logdrop-274 -m limit --limit 1/second -j LOG +-A logdrop-274 -j DROP +-A logdrop-275 -m limit --limit 1/second -j LOG +-A logdrop-275 -j DROP +-A logdrop-277 -m limit --limit 1/second -j LOG +-A logdrop-277 -j DROP +-A logdrop-278 -m limit --limit 1/second -j LOG +-A logdrop-278 -j DROP +-A logdrop-279 -m limit --limit 1/second -j LOG +-A logdrop-279 -j DROP -A logdrop-28 -m limit --limit 1/second -j LOG -A logdrop-28 -j DROP +-A logdrop-280 -m limit --limit 1/second -j LOG +-A logdrop-280 -j DROP +-A logdrop-281 -m limit --limit 1/second -j LOG +-A logdrop-281 -j DROP +-A logdrop-282 -m limit --limit 1/second -j LOG +-A logdrop-282 -j DROP +-A logdrop-283 -m limit --limit 1/second -j LOG +-A logdrop-283 -j DROP +-A logdrop-285 -m limit --limit 1/second -j LOG +-A logdrop-285 -j DROP +-A logdrop-286 -m limit --limit 1/second -j LOG +-A logdrop-286 -j DROP +-A logdrop-287 -m limit --limit 1/second -j LOG +-A logdrop-287 -j DROP +-A logdrop-289 -m limit --limit 1/second -j LOG +-A logdrop-289 -j DROP -A logdrop-29 -m limit --limit 1/second -j LOG -A logdrop-29 -j DROP +-A logdrop-290 -m limit --limit 1/second -j LOG +-A logdrop-290 -j DROP +-A logdrop-291 -m limit --limit 1/second -j LOG +-A logdrop-291 -j DROP +-A logdrop-292 -m limit --limit 1/second -j LOG +-A logdrop-292 -j DROP +-A logdrop-293 -m limit --limit 1/second -j LOG +-A logdrop-293 -j DROP +-A logdrop-294 -m limit --limit 1/second -j LOG +-A logdrop-294 -j DROP +-A logdrop-295 -m limit --limit 1/second -j LOG +-A logdrop-295 -j DROP +-A logdrop-296 -m limit --limit 1/second -j LOG +-A logdrop-296 -j DROP +-A logdrop-297 -m limit --limit 1/second -j LOG +-A logdrop-297 -j DROP +-A logdrop-298 -m limit --limit 1/second -j LOG +-A logdrop-298 -j DROP +-A logdrop-299 -m limit --limit 1/second -j LOG +-A logdrop-299 -j DROP -A logdrop-3 -m limit --limit 1/second -j LOG -A logdrop-3 -j DROP -A logdrop-30 -m limit --limit 1/second -j LOG -A logdrop-30 -j DROP +-A logdrop-300 -m limit --limit 1/second -j LOG +-A logdrop-300 -j DROP +-A logdrop-301 -m limit --limit 1/second -j LOG +-A logdrop-301 -j DROP +-A logdrop-303 -m limit --limit 1/second -j LOG +-A logdrop-303 -j DROP +-A logdrop-304 -m limit --limit 1/second -j LOG +-A logdrop-304 -j DROP +-A logdrop-305 -m limit --limit 1/second -j LOG +-A logdrop-305 -j DROP +-A logdrop-307 -m limit --limit 1/second -j LOG +-A logdrop-307 -j DROP +-A logdrop-308 -m limit --limit 1/second -j LOG +-A logdrop-308 -j DROP +-A logdrop-309 -m limit --limit 1/second -j LOG +-A logdrop-309 -j DROP -A logdrop-31 -m limit --limit 1/second -j LOG -A logdrop-31 -j DROP +-A logdrop-310 -m limit --limit 1/second -j LOG +-A logdrop-310 -j DROP +-A logdrop-311 -m limit --limit 1/second -j LOG +-A logdrop-311 -j DROP +-A logdrop-312 -m limit --limit 1/second -j LOG +-A logdrop-312 -j DROP +-A logdrop-313 -m limit --limit 1/second -j LOG +-A logdrop-313 -j DROP +-A logdrop-315 -m limit --limit 1/second -j LOG +-A logdrop-315 -j DROP +-A logdrop-316 -m limit --limit 1/second -j LOG +-A logdrop-316 -j DROP +-A logdrop-317 -m limit --limit 1/second -j LOG +-A logdrop-317 -j DROP +-A logdrop-319 -m limit --limit 1/second -j LOG +-A logdrop-319 -j DROP +-A logdrop-320 -m limit --limit 1/second -j LOG +-A logdrop-320 -j DROP +-A logdrop-321 -m limit --limit 1/second -j LOG +-A logdrop-321 -j DROP +-A logdrop-322 -m limit --limit 1/second -j LOG +-A logdrop-322 -j DROP +-A logdrop-323 -m limit --limit 1/second -j LOG +-A logdrop-323 -j DROP +-A logdrop-324 -m limit --limit 1/second -j LOG +-A logdrop-324 -j DROP +-A logdrop-325 -m limit --limit 1/second -j LOG +-A logdrop-325 -j DROP +-A logdrop-327 -m limit --limit 1/second -j LOG +-A logdrop-327 -j DROP +-A logdrop-328 -m limit --limit 1/second -j LOG +-A logdrop-328 -j DROP +-A logdrop-329 -m limit --limit 1/second -j LOG +-A logdrop-329 -j DROP -A logdrop-33 -m limit --limit 1/second -j LOG -A logdrop-33 -j DROP +-A logdrop-331 -m limit --limit 1/second -j LOG +-A logdrop-331 -j DROP +-A logdrop-332 -m limit --limit 1/second -j LOG +-A logdrop-332 -j DROP +-A logdrop-333 -m limit --limit 1/second -j LOG +-A logdrop-333 -j DROP +-A logdrop-334 -m limit --limit 1/second -j LOG +-A logdrop-334 -j DROP +-A logdrop-335 -m limit --limit 1/second -j LOG +-A logdrop-335 -j DROP +-A logdrop-336 -m limit --limit 1/second -j LOG +-A logdrop-336 -j DROP +-A logdrop-337 -m limit --limit 1/second -j LOG +-A logdrop-337 -j DROP +-A logdrop-339 -m limit --limit 1/second -j LOG +-A logdrop-339 -j DROP -A logdrop-34 -m limit --limit 1/second -j LOG -A logdrop-34 -j DROP +-A logdrop-340 -m limit --limit 1/second -j LOG +-A logdrop-340 -j DROP +-A logdrop-341 -m limit --limit 1/second -j LOG +-A logdrop-341 -j DROP +-A logdrop-343 -m limit --limit 1/second -j LOG +-A logdrop-343 -j DROP +-A logdrop-344 -m limit --limit 1/second -j LOG +-A logdrop-344 -j DROP -A logdrop-35 -m limit --limit 1/second -j LOG -A logdrop-35 -j DROP -A logdrop-37 -m limit --limit 1/second -j LOG @@ -19232,30 +31161,28 @@ COMMIT -A logdrop-42 -j DROP -A logdrop-43 -m limit --limit 1/second -j LOG -A logdrop-43 -j DROP --A logdrop-44 -m limit --limit 1/second -j LOG --A logdrop-44 -j DROP -A logdrop-45 -m limit --limit 1/second -j LOG -A logdrop-45 -j DROP -A logdrop-46 -m limit --limit 1/second -j LOG -A logdrop-46 -j DROP -A logdrop-47 -m limit --limit 1/second -j LOG -A logdrop-47 -j DROP --A logdrop-48 -m limit --limit 1/second -j LOG --A logdrop-48 -j DROP -A logdrop-49 -m limit --limit 1/second -j LOG -A logdrop-49 -j DROP -A logdrop-5 -m limit --limit 1/second -j LOG -A logdrop-5 -j DROP +-A logdrop-50 -m limit --limit 1/second -j LOG +-A logdrop-50 -j DROP -A logdrop-51 -m limit --limit 1/second -j LOG -A logdrop-51 -j DROP -A logdrop-52 -m limit --limit 1/second -j LOG -A logdrop-52 -j DROP -A logdrop-53 -m limit --limit 1/second -j LOG -A logdrop-53 -j DROP +-A logdrop-54 -m limit --limit 1/second -j LOG +-A logdrop-54 -j DROP -A logdrop-55 -m limit --limit 1/second -j LOG -A logdrop-55 -j DROP --A logdrop-56 -m limit --limit 1/second -j LOG --A logdrop-56 -j DROP -A logdrop-57 -m limit --limit 1/second -j LOG -A logdrop-57 -j DROP -A logdrop-58 -m limit --limit 1/second -j LOG @@ -19264,16 +31191,18 @@ COMMIT -A logdrop-59 -j DROP -A logdrop-6 -m limit --limit 1/second -j LOG -A logdrop-6 -j DROP --A logdrop-60 -m limit --limit 1/second -j LOG --A logdrop-60 -j DROP -A logdrop-61 -m limit --limit 1/second -j LOG -A logdrop-61 -j DROP +-A logdrop-62 -m limit --limit 1/second -j LOG +-A logdrop-62 -j DROP -A logdrop-63 -m limit --limit 1/second -j LOG -A logdrop-63 -j DROP -A logdrop-64 -m limit --limit 1/second -j LOG -A logdrop-64 -j DROP -A logdrop-65 -m limit --limit 1/second -j LOG -A logdrop-65 -j DROP +-A logdrop-66 -m limit --limit 1/second -j LOG +-A logdrop-66 -j DROP -A logdrop-67 -m limit --limit 1/second -j LOG -A logdrop-67 -j DROP -A logdrop-68 -m limit --limit 1/second -j LOG @@ -19290,16 +31219,12 @@ COMMIT -A logdrop-72 -j DROP -A logdrop-73 -m limit --limit 1/second -j LOG -A logdrop-73 -j DROP --A logdrop-74 -m limit --limit 1/second -j LOG --A logdrop-74 -j DROP -A logdrop-75 -m limit --limit 1/second -j LOG -A logdrop-75 -j DROP -A logdrop-76 -m limit --limit 1/second -j LOG -A logdrop-76 -j DROP -A logdrop-77 -m limit --limit 1/second -j LOG -A logdrop-77 -j DROP --A logdrop-78 -m limit --limit 1/second -j LOG --A logdrop-78 -j DROP -A logdrop-79 -m limit --limit 1/second -j LOG -A logdrop-79 -j DROP -A logdrop-8 -m limit --limit 1/second -j LOG @@ -19316,8 +31241,6 @@ COMMIT -A logdrop-84 -j DROP -A logdrop-85 -m limit --limit 1/second -j LOG -A logdrop-85 -j DROP --A logdrop-86 -m limit --limit 1/second -j LOG --A logdrop-86 -j DROP -A logdrop-87 -m limit --limit 1/second -j LOG -A logdrop-87 -j DROP -A logdrop-88 -m limit --limit 1/second -j LOG @@ -19326,8 +31249,6 @@ COMMIT -A logdrop-89 -j DROP -A logdrop-9 -m limit --limit 1/second -j LOG -A logdrop-9 -j DROP --A logdrop-90 -m limit --limit 1/second -j LOG --A logdrop-90 -j DROP -A logdrop-91 -m limit --limit 1/second -j LOG -A logdrop-91 -j DROP -A logdrop-92 -m limit --limit 1/second -j LOG @@ -19342,8 +31263,6 @@ COMMIT -A logdrop-96 -j DROP -A logdrop-97 -m limit --limit 1/second -j LOG -A logdrop-97 -j DROP --A logdrop-98 -m limit --limit 1/second -j LOG --A logdrop-98 -j DROP -A logdrop-99 -m limit --limit 1/second -j LOG -A logdrop-99 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG @@ -19482,6 +31401,78 @@ COMMIT -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -p tcp --dport 80 -j CT --notrack -A OUTPUT -p esp -j CT --notrack -A OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack @@ -19701,6 +31692,150 @@ COMMIT -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack diff --git a/test/output/rules-save b/test/output/rules-save index f69d65d..85884ba 100644 --- a/test/output/rules-save +++ b/test/output/rules-save @@ -8,13 +8,78 @@ :limit-1 - [0:0] :limit-10 - [0:0] :limit-100 - [0:0] -:limit-101 - [0:0] +:limit-1000 - [0:0] +:limit-1001 - [0:0] +:limit-1002 - [0:0] +:limit-1003 - [0:0] +:limit-1004 - [0:0] +:limit-1006 - [0:0] +:limit-1007 - [0:0] +:limit-1008 - [0:0] +:limit-1010 - [0:0] +:limit-1011 - [0:0] +:limit-1012 - [0:0] +:limit-1013 - [0:0] +:limit-1014 - [0:0] +:limit-1015 - [0:0] +:limit-1016 - [0:0] +:limit-1018 - [0:0] +:limit-1019 - [0:0] :limit-102 - [0:0] +:limit-1020 - [0:0] +:limit-1022 - [0:0] +:limit-1023 - [0:0] +:limit-1024 - [0:0] +:limit-1025 - [0:0] +:limit-1026 - [0:0] +:limit-1027 - [0:0] +:limit-1028 - [0:0] :limit-103 - [0:0] +:limit-1030 - [0:0] +:limit-1031 - [0:0] +:limit-1032 - [0:0] +:limit-1034 - [0:0] +:limit-1035 - [0:0] +:limit-1036 - [0:0] +:limit-1037 - [0:0] +:limit-1038 - [0:0] +:limit-1039 - [0:0] :limit-104 - [0:0] +:limit-1040 - [0:0] +:limit-1042 - [0:0] +:limit-1043 - [0:0] +:limit-1044 - [0:0] +:limit-1046 - [0:0] +:limit-1047 - [0:0] +:limit-1048 - [0:0] +:limit-1049 - [0:0] :limit-105 - [0:0] +:limit-1050 - [0:0] +:limit-1051 - [0:0] +:limit-1052 - [0:0] +:limit-1053 - [0:0] +:limit-1054 - [0:0] +:limit-1055 - [0:0] +:limit-1056 - [0:0] +:limit-1057 - [0:0] +:limit-1058 - [0:0] +:limit-1059 - [0:0] :limit-106 - [0:0] +:limit-1060 - [0:0] +:limit-1061 - [0:0] +:limit-1062 - [0:0] +:limit-1063 - [0:0] +:limit-1064 - [0:0] +:limit-1065 - [0:0] +:limit-1066 - [0:0] +:limit-1067 - [0:0] +:limit-1068 - [0:0] +:limit-1069 - [0:0] :limit-107 - [0:0] +:limit-1070 - [0:0] +:limit-1071 - [0:0] +:limit-1072 - [0:0] +:limit-1073 - [0:0] :limit-108 - [0:0] :limit-11 - [0:0] :limit-110 - [0:0] @@ -28,16 +93,16 @@ :limit-119 - [0:0] :limit-12 - [0:0] :limit-120 - [0:0] +:limit-121 - [0:0] :limit-122 - [0:0] :limit-123 - [0:0] :limit-124 - [0:0] +:limit-125 - [0:0] :limit-126 - [0:0] -:limit-127 - [0:0] :limit-128 - [0:0] :limit-129 - [0:0] :limit-13 - [0:0] :limit-130 - [0:0] -:limit-131 - [0:0] :limit-132 - [0:0] :limit-133 - [0:0] :limit-134 - [0:0] @@ -68,16 +133,16 @@ :limit-160 - [0:0] :limit-161 - [0:0] :limit-162 - [0:0] -:limit-163 - [0:0] :limit-164 - [0:0] :limit-165 - [0:0] :limit-166 - [0:0] -:limit-167 - [0:0] :limit-168 - [0:0] +:limit-169 - [0:0] :limit-17 - [0:0] :limit-170 - [0:0] :limit-171 - [0:0] :limit-172 - [0:0] +:limit-173 - [0:0] :limit-174 - [0:0] :limit-175 - [0:0] :limit-176 - [0:0] @@ -96,11 +161,9 @@ :limit-190 - [0:0] :limit-191 - [0:0] :limit-192 - [0:0] -:limit-193 - [0:0] :limit-194 - [0:0] :limit-195 - [0:0] :limit-196 - [0:0] -:limit-197 - [0:0] :limit-198 - [0:0] :limit-199 - [0:0] :limit-2 - [0:0] @@ -110,11 +173,9 @@ :limit-202 - [0:0] :limit-203 - [0:0] :limit-204 - [0:0] -:limit-205 - [0:0] :limit-206 - [0:0] :limit-207 - [0:0] :limit-208 - [0:0] -:limit-209 - [0:0] :limit-21 - [0:0] :limit-210 - [0:0] :limit-211 - [0:0] @@ -123,12 +184,10 @@ :limit-214 - [0:0] :limit-215 - [0:0] :limit-216 - [0:0] -:limit-217 - [0:0] :limit-218 - [0:0] :limit-219 - [0:0] :limit-22 - [0:0] :limit-220 - [0:0] -:limit-221 - [0:0] :limit-222 - [0:0] :limit-223 - [0:0] :limit-224 - [0:0] @@ -142,11 +201,9 @@ :limit-232 - [0:0] :limit-233 - [0:0] :limit-234 - [0:0] -:limit-235 - [0:0] :limit-236 - [0:0] :limit-237 - [0:0] :limit-238 - [0:0] -:limit-239 - [0:0] :limit-24 - [0:0] :limit-240 - [0:0] :limit-241 - [0:0] @@ -155,12 +212,10 @@ :limit-244 - [0:0] :limit-245 - [0:0] :limit-246 - [0:0] -:limit-247 - [0:0] :limit-248 - [0:0] :limit-249 - [0:0] :limit-25 - [0:0] :limit-250 - [0:0] -:limit-251 - [0:0] :limit-252 - [0:0] :limit-253 - [0:0] :limit-254 - [0:0] @@ -168,12 +223,10 @@ :limit-256 - [0:0] :limit-257 - [0:0] :limit-258 - [0:0] -:limit-259 - [0:0] :limit-26 - [0:0] :limit-260 - [0:0] :limit-261 - [0:0] :limit-262 - [0:0] -:limit-263 - [0:0] :limit-264 - [0:0] :limit-265 - [0:0] :limit-266 - [0:0] @@ -182,11 +235,9 @@ :limit-269 - [0:0] :limit-27 - [0:0] :limit-270 - [0:0] -:limit-271 - [0:0] :limit-272 - [0:0] :limit-273 - [0:0] :limit-274 - [0:0] -:limit-275 - [0:0] :limit-276 - [0:0] :limit-277 - [0:0] :limit-278 - [0:0] @@ -201,12 +252,10 @@ :limit-286 - [0:0] :limit-287 - [0:0] :limit-288 - [0:0] -:limit-289 - [0:0] :limit-29 - [0:0] :limit-290 - [0:0] :limit-291 - [0:0] :limit-292 - [0:0] -:limit-293 - [0:0] :limit-294 - [0:0] :limit-295 - [0:0] :limit-296 - [0:0] @@ -216,11 +265,9 @@ :limit-3 - [0:0] :limit-30 - [0:0] :limit-300 - [0:0] -:limit-301 - [0:0] :limit-302 - [0:0] :limit-303 - [0:0] :limit-304 - [0:0] -:limit-305 - [0:0] :limit-306 - [0:0] :limit-307 - [0:0] :limit-308 - [0:0] @@ -228,11 +275,9 @@ :limit-310 - [0:0] :limit-311 - [0:0] :limit-312 - [0:0] -:limit-313 - [0:0] :limit-314 - [0:0] :limit-315 - [0:0] :limit-316 - [0:0] -:limit-317 - [0:0] :limit-318 - [0:0] :limit-319 - [0:0] :limit-32 - [0:0] @@ -241,11 +286,9 @@ :limit-322 - [0:0] :limit-323 - [0:0] :limit-324 - [0:0] -:limit-325 - [0:0] :limit-326 - [0:0] :limit-327 - [0:0] :limit-328 - [0:0] -:limit-329 - [0:0] :limit-33 - [0:0] :limit-330 - [0:0] :limit-331 - [0:0] @@ -356,7 +399,6 @@ :limit-427 - [0:0] :limit-428 - [0:0] :limit-429 - [0:0] -:limit-43 - [0:0] :limit-430 - [0:0] :limit-431 - [0:0] :limit-432 - [0:0] @@ -375,10 +417,12 @@ :limit-444 - [0:0] :limit-445 - [0:0] :limit-446 - [0:0] +:limit-447 - [0:0] :limit-448 - [0:0] :limit-449 - [0:0] :limit-45 - [0:0] :limit-450 - [0:0] +:limit-451 - [0:0] :limit-452 - [0:0] :limit-453 - [0:0] :limit-454 - [0:0] @@ -386,17 +430,18 @@ :limit-456 - [0:0] :limit-457 - [0:0] :limit-458 - [0:0] +:limit-459 - [0:0] :limit-46 - [0:0] :limit-460 - [0:0] :limit-461 - [0:0] :limit-462 - [0:0] +:limit-463 - [0:0] :limit-464 - [0:0] :limit-465 - [0:0] :limit-466 - [0:0] :limit-467 - [0:0] :limit-468 - [0:0] :limit-469 - [0:0] -:limit-47 - [0:0] :limit-470 - [0:0] :limit-471 - [0:0] :limit-472 - [0:0] @@ -404,10 +449,12 @@ :limit-474 - [0:0] :limit-475 - [0:0] :limit-476 - [0:0] +:limit-477 - [0:0] :limit-478 - [0:0] :limit-479 - [0:0] :limit-48 - [0:0] :limit-480 - [0:0] +:limit-481 - [0:0] :limit-482 - [0:0] :limit-483 - [0:0] :limit-484 - [0:0] @@ -415,9 +462,12 @@ :limit-486 - [0:0] :limit-487 - [0:0] :limit-488 - [0:0] +:limit-489 - [0:0] +:limit-49 - [0:0] :limit-490 - [0:0] :limit-491 - [0:0] :limit-492 - [0:0] +:limit-493 - [0:0] :limit-494 - [0:0] :limit-495 - [0:0] :limit-496 - [0:0] @@ -433,10 +483,12 @@ :limit-504 - [0:0] :limit-505 - [0:0] :limit-506 - [0:0] +:limit-507 - [0:0] :limit-508 - [0:0] :limit-509 - [0:0] :limit-51 - [0:0] :limit-510 - [0:0] +:limit-511 - [0:0] :limit-512 - [0:0] :limit-513 - [0:0] :limit-514 - [0:0] @@ -444,16 +496,19 @@ :limit-516 - [0:0] :limit-517 - [0:0] :limit-518 - [0:0] +:limit-519 - [0:0] :limit-52 - [0:0] :limit-520 - [0:0] :limit-521 - [0:0] :limit-522 - [0:0] +:limit-523 - [0:0] :limit-524 - [0:0] :limit-525 - [0:0] :limit-526 - [0:0] :limit-527 - [0:0] :limit-528 - [0:0] :limit-529 - [0:0] +:limit-53 - [0:0] :limit-530 - [0:0] :limit-531 - [0:0] :limit-532 - [0:0] @@ -461,10 +516,12 @@ :limit-534 - [0:0] :limit-535 - [0:0] :limit-536 - [0:0] +:limit-537 - [0:0] :limit-538 - [0:0] :limit-539 - [0:0] :limit-54 - [0:0] :limit-540 - [0:0] +:limit-541 - [0:0] :limit-542 - [0:0] :limit-543 - [0:0] :limit-544 - [0:0] @@ -472,10 +529,11 @@ :limit-546 - [0:0] :limit-547 - [0:0] :limit-548 - [0:0] -:limit-55 - [0:0] +:limit-549 - [0:0] :limit-550 - [0:0] :limit-551 - [0:0] :limit-552 - [0:0] +:limit-553 - [0:0] :limit-554 - [0:0] :limit-555 - [0:0] :limit-556 - [0:0] @@ -490,10 +548,12 @@ :limit-564 - [0:0] :limit-565 - [0:0] :limit-566 - [0:0] +:limit-567 - [0:0] :limit-568 - [0:0] :limit-569 - [0:0] :limit-57 - [0:0] :limit-570 - [0:0] +:limit-571 - [0:0] :limit-572 - [0:0] :limit-573 - [0:0] :limit-574 - [0:0] @@ -501,17 +561,18 @@ :limit-576 - [0:0] :limit-577 - [0:0] :limit-578 - [0:0] +:limit-579 - [0:0] :limit-58 - [0:0] :limit-580 - [0:0] :limit-581 - [0:0] :limit-582 - [0:0] +:limit-583 - [0:0] :limit-584 - [0:0] :limit-585 - [0:0] :limit-586 - [0:0] :limit-587 - [0:0] :limit-588 - [0:0] :limit-589 - [0:0] -:limit-59 - [0:0] :limit-590 - [0:0] :limit-591 - [0:0] :limit-592 - [0:0] @@ -519,11 +580,13 @@ :limit-594 - [0:0] :limit-595 - [0:0] :limit-596 - [0:0] +:limit-597 - [0:0] :limit-598 - [0:0] :limit-599 - [0:0] :limit-6 - [0:0] :limit-60 - [0:0] :limit-600 - [0:0] +:limit-601 - [0:0] :limit-602 - [0:0] :limit-603 - [0:0] :limit-604 - [0:0] @@ -531,9 +594,12 @@ :limit-606 - [0:0] :limit-607 - [0:0] :limit-608 - [0:0] +:limit-609 - [0:0] +:limit-61 - [0:0] :limit-610 - [0:0] :limit-611 - [0:0] :limit-612 - [0:0] +:limit-613 - [0:0] :limit-614 - [0:0] :limit-615 - [0:0] :limit-616 - [0:0] @@ -565,39 +631,357 @@ :limit-64 - [0:0] :limit-640 - [0:0] :limit-641 - [0:0] +:limit-642 - [0:0] +:limit-643 - [0:0] +:limit-644 - [0:0] +:limit-645 - [0:0] +:limit-646 - [0:0] +:limit-647 - [0:0] +:limit-648 - [0:0] +:limit-649 - [0:0] +:limit-65 - [0:0] +:limit-650 - [0:0] +:limit-651 - [0:0] +:limit-652 - [0:0] +:limit-653 - [0:0] +:limit-654 - [0:0] +:limit-655 - [0:0] +:limit-656 - [0:0] +:limit-657 - [0:0] +:limit-658 - [0:0] +:limit-659 - [0:0] :limit-66 - [0:0] +:limit-660 - [0:0] +:limit-661 - [0:0] +:limit-662 - [0:0] +:limit-663 - [0:0] +:limit-664 - [0:0] +:limit-665 - [0:0] +:limit-666 - [0:0] +:limit-667 - [0:0] +:limit-668 - [0:0] +:limit-669 - [0:0] :limit-67 - [0:0] +:limit-670 - [0:0] +:limit-671 - [0:0] +:limit-672 - [0:0] +:limit-673 - [0:0] +:limit-674 - [0:0] +:limit-675 - [0:0] +:limit-676 - [0:0] +:limit-677 - [0:0] +:limit-678 - [0:0] +:limit-679 - [0:0] :limit-68 - [0:0] +:limit-680 - [0:0] +:limit-681 - [0:0] +:limit-682 - [0:0] +:limit-683 - [0:0] +:limit-684 - [0:0] +:limit-685 - [0:0] +:limit-686 - [0:0] +:limit-687 - [0:0] +:limit-688 - [0:0] +:limit-689 - [0:0] :limit-69 - [0:0] +:limit-690 - [0:0] +:limit-691 - [0:0] +:limit-692 - [0:0] +:limit-693 - [0:0] +:limit-694 - [0:0] +:limit-695 - [0:0] +:limit-696 - [0:0] +:limit-697 - [0:0] +:limit-698 - [0:0] +:limit-699 - [0:0] :limit-7 - [0:0] :limit-70 - [0:0] +:limit-700 - [0:0] +:limit-701 - [0:0] +:limit-702 - [0:0] +:limit-703 - [0:0] +:limit-704 - [0:0] +:limit-705 - [0:0] +:limit-706 - [0:0] +:limit-707 - [0:0] +:limit-708 - [0:0] +:limit-709 - [0:0] :limit-71 - [0:0] +:limit-710 - [0:0] +:limit-711 - [0:0] +:limit-712 - [0:0] +:limit-713 - [0:0] +:limit-714 - [0:0] +:limit-715 - [0:0] +:limit-716 - [0:0] +:limit-717 - [0:0] +:limit-718 - [0:0] +:limit-719 - [0:0] :limit-72 - [0:0] -:limit-73 - [0:0] +:limit-720 - [0:0] +:limit-721 - [0:0] +:limit-722 - [0:0] +:limit-723 - [0:0] +:limit-724 - [0:0] +:limit-725 - [0:0] +:limit-726 - [0:0] +:limit-727 - [0:0] +:limit-728 - [0:0] +:limit-729 - [0:0] +:limit-730 - [0:0] +:limit-731 - [0:0] +:limit-732 - [0:0] +:limit-733 - [0:0] +:limit-734 - [0:0] +:limit-736 - [0:0] +:limit-737 - [0:0] +:limit-738 - [0:0] :limit-74 - [0:0] +:limit-740 - [0:0] +:limit-741 - [0:0] +:limit-742 - [0:0] +:limit-743 - [0:0] +:limit-744 - [0:0] +:limit-745 - [0:0] +:limit-746 - [0:0] +:limit-748 - [0:0] +:limit-749 - [0:0] :limit-75 - [0:0] +:limit-750 - [0:0] +:limit-752 - [0:0] +:limit-753 - [0:0] +:limit-754 - [0:0] +:limit-755 - [0:0] +:limit-756 - [0:0] +:limit-757 - [0:0] +:limit-758 - [0:0] :limit-76 - [0:0] -:limit-77 - [0:0] +:limit-760 - [0:0] +:limit-761 - [0:0] +:limit-762 - [0:0] +:limit-764 - [0:0] +:limit-765 - [0:0] +:limit-766 - [0:0] +:limit-767 - [0:0] +:limit-768 - [0:0] +:limit-769 - [0:0] +:limit-770 - [0:0] +:limit-772 - [0:0] +:limit-773 - [0:0] +:limit-774 - [0:0] +:limit-776 - [0:0] +:limit-777 - [0:0] +:limit-778 - [0:0] +:limit-779 - [0:0] :limit-78 - [0:0] +:limit-780 - [0:0] +:limit-781 - [0:0] +:limit-782 - [0:0] +:limit-783 - [0:0] +:limit-784 - [0:0] +:limit-785 - [0:0] +:limit-786 - [0:0] +:limit-787 - [0:0] +:limit-788 - [0:0] +:limit-79 - [0:0] +:limit-790 - [0:0] +:limit-791 - [0:0] +:limit-792 - [0:0] +:limit-794 - [0:0] +:limit-795 - [0:0] +:limit-796 - [0:0] +:limit-797 - [0:0] +:limit-798 - [0:0] +:limit-799 - [0:0] :limit-8 - [0:0] :limit-80 - [0:0] +:limit-800 - [0:0] +:limit-802 - [0:0] +:limit-803 - [0:0] +:limit-804 - [0:0] +:limit-806 - [0:0] +:limit-807 - [0:0] +:limit-808 - [0:0] +:limit-809 - [0:0] :limit-81 - [0:0] +:limit-810 - [0:0] +:limit-811 - [0:0] +:limit-812 - [0:0] +:limit-814 - [0:0] +:limit-815 - [0:0] +:limit-816 - [0:0] +:limit-818 - [0:0] +:limit-819 - [0:0] :limit-82 - [0:0] +:limit-820 - [0:0] +:limit-821 - [0:0] +:limit-822 - [0:0] +:limit-823 - [0:0] +:limit-824 - [0:0] +:limit-826 - [0:0] +:limit-827 - [0:0] +:limit-828 - [0:0] +:limit-83 - [0:0] +:limit-830 - [0:0] +:limit-831 - [0:0] +:limit-832 - [0:0] +:limit-833 - [0:0] +:limit-834 - [0:0] +:limit-835 - [0:0] +:limit-836 - [0:0] +:limit-837 - [0:0] +:limit-838 - [0:0] +:limit-839 - [0:0] :limit-84 - [0:0] -:limit-85 - [0:0] +:limit-840 - [0:0] +:limit-841 - [0:0] +:limit-842 - [0:0] +:limit-844 - [0:0] +:limit-845 - [0:0] +:limit-846 - [0:0] +:limit-848 - [0:0] +:limit-849 - [0:0] +:limit-850 - [0:0] +:limit-851 - [0:0] +:limit-852 - [0:0] +:limit-853 - [0:0] +:limit-854 - [0:0] +:limit-856 - [0:0] +:limit-857 - [0:0] +:limit-858 - [0:0] :limit-86 - [0:0] +:limit-860 - [0:0] +:limit-861 - [0:0] +:limit-862 - [0:0] +:limit-863 - [0:0] +:limit-864 - [0:0] +:limit-865 - [0:0] +:limit-866 - [0:0] +:limit-868 - [0:0] +:limit-869 - [0:0] :limit-87 - [0:0] +:limit-870 - [0:0] +:limit-872 - [0:0] +:limit-873 - [0:0] +:limit-874 - [0:0] +:limit-875 - [0:0] +:limit-876 - [0:0] +:limit-877 - [0:0] +:limit-878 - [0:0] :limit-88 - [0:0] -:limit-89 - [0:0] +:limit-880 - [0:0] +:limit-881 - [0:0] +:limit-882 - [0:0] +:limit-884 - [0:0] +:limit-885 - [0:0] +:limit-886 - [0:0] +:limit-887 - [0:0] +:limit-888 - [0:0] +:limit-889 - [0:0] +:limit-890 - [0:0] +:limit-891 - [0:0] +:limit-892 - [0:0] +:limit-893 - [0:0] +:limit-894 - [0:0] +:limit-895 - [0:0] +:limit-896 - [0:0] +:limit-898 - [0:0] +:limit-899 - [0:0] :limit-9 - [0:0] :limit-90 - [0:0] +:limit-900 - [0:0] +:limit-902 - [0:0] +:limit-903 - [0:0] +:limit-904 - [0:0] +:limit-905 - [0:0] +:limit-906 - [0:0] +:limit-907 - [0:0] +:limit-908 - [0:0] +:limit-91 - [0:0] +:limit-910 - [0:0] +:limit-911 - [0:0] +:limit-912 - [0:0] +:limit-914 - [0:0] +:limit-915 - [0:0] +:limit-916 - [0:0] +:limit-917 - [0:0] +:limit-918 - [0:0] +:limit-919 - [0:0] :limit-92 - [0:0] +:limit-920 - [0:0] +:limit-922 - [0:0] +:limit-923 - [0:0] +:limit-924 - [0:0] +:limit-926 - [0:0] +:limit-927 - [0:0] +:limit-928 - [0:0] +:limit-929 - [0:0] :limit-93 - [0:0] +:limit-930 - [0:0] +:limit-931 - [0:0] +:limit-932 - [0:0] +:limit-934 - [0:0] +:limit-935 - [0:0] +:limit-936 - [0:0] +:limit-938 - [0:0] +:limit-939 - [0:0] :limit-94 - [0:0] +:limit-940 - [0:0] +:limit-941 - [0:0] +:limit-942 - [0:0] +:limit-943 - [0:0] +:limit-944 - [0:0] +:limit-945 - [0:0] +:limit-946 - [0:0] +:limit-947 - [0:0] +:limit-948 - [0:0] +:limit-949 - [0:0] +:limit-95 - [0:0] +:limit-950 - [0:0] +:limit-952 - [0:0] +:limit-953 - [0:0] +:limit-954 - [0:0] +:limit-956 - [0:0] +:limit-957 - [0:0] +:limit-958 - [0:0] +:limit-959 - [0:0] :limit-96 - [0:0] -:limit-97 - [0:0] +:limit-960 - [0:0] +:limit-961 - [0:0] +:limit-962 - [0:0] +:limit-964 - [0:0] +:limit-965 - [0:0] +:limit-966 - [0:0] +:limit-968 - [0:0] +:limit-969 - [0:0] +:limit-970 - [0:0] +:limit-971 - [0:0] +:limit-972 - [0:0] +:limit-973 - [0:0] +:limit-974 - [0:0] +:limit-976 - [0:0] +:limit-977 - [0:0] +:limit-978 - [0:0] :limit-98 - [0:0] +:limit-980 - [0:0] +:limit-981 - [0:0] +:limit-982 - [0:0] +:limit-983 - [0:0] +:limit-984 - [0:0] +:limit-985 - [0:0] +:limit-986 - [0:0] +:limit-988 - [0:0] +:limit-989 - [0:0] :limit-99 - [0:0] +:limit-990 - [0:0] +:limit-992 - [0:0] +:limit-993 - [0:0] +:limit-994 - [0:0] +:limit-995 - [0:0] +:limit-996 - [0:0] +:limit-997 - [0:0] +:limit-998 - [0:0] +:limit-999 - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] :logaccept-10 - [0:0] @@ -645,9 +1029,33 @@ :logaccept-final-35 - [0:0] :logaccept-final-36 - [0:0] :logaccept-final-37 - [0:0] +:logaccept-final-38 - [0:0] +:logaccept-final-39 - [0:0] :logaccept-final-4 - [0:0] +:logaccept-final-40 - [0:0] +:logaccept-final-41 - [0:0] +:logaccept-final-42 - [0:0] +:logaccept-final-43 - [0:0] +:logaccept-final-44 - [0:0] +:logaccept-final-45 - [0:0] +:logaccept-final-46 - [0:0] +:logaccept-final-47 - [0:0] +:logaccept-final-48 - [0:0] +:logaccept-final-49 - [0:0] :logaccept-final-5 - [0:0] +:logaccept-final-50 - [0:0] +:logaccept-final-51 - [0:0] +:logaccept-final-52 - [0:0] +:logaccept-final-53 - [0:0] +:logaccept-final-54 - [0:0] +:logaccept-final-55 - [0:0] +:logaccept-final-56 - [0:0] +:logaccept-final-57 - [0:0] +:logaccept-final-58 - [0:0] +:logaccept-final-59 - [0:0] :logaccept-final-6 - [0:0] +:logaccept-final-60 - [0:0] +:logaccept-final-61 - [0:0] :logaccept-final-7 - [0:0] :logaccept-final-8 - [0:0] :logaccept-final-9 - [0:0] @@ -656,7 +1064,6 @@ :logdrop-10 - [0:0] :logdrop-100 - [0:0] :logdrop-101 - [0:0] -:logdrop-102 - [0:0] :logdrop-103 - [0:0] :logdrop-104 - [0:0] :logdrop-105 - [0:0] @@ -665,11 +1072,9 @@ :logdrop-108 - [0:0] :logdrop-109 - [0:0] :logdrop-11 - [0:0] -:logdrop-110 - [0:0] :logdrop-111 - [0:0] :logdrop-112 - [0:0] :logdrop-113 - [0:0] -:logdrop-114 - [0:0] :logdrop-115 - [0:0] :logdrop-116 - [0:0] :logdrop-117 - [0:0] @@ -711,9 +1116,11 @@ :logdrop-15 - [0:0] :logdrop-150 - [0:0] :logdrop-151 - [0:0] +:logdrop-152 - [0:0] :logdrop-153 - [0:0] :logdrop-154 - [0:0] :logdrop-155 - [0:0] +:logdrop-156 - [0:0] :logdrop-157 - [0:0] :logdrop-158 - [0:0] :logdrop-159 - [0:0] @@ -722,9 +1129,11 @@ :logdrop-161 - [0:0] :logdrop-162 - [0:0] :logdrop-163 - [0:0] +:logdrop-164 - [0:0] :logdrop-165 - [0:0] :logdrop-166 - [0:0] :logdrop-167 - [0:0] +:logdrop-168 - [0:0] :logdrop-169 - [0:0] :logdrop-17 - [0:0] :logdrop-170 - [0:0] @@ -740,9 +1149,11 @@ :logdrop-18 - [0:0] :logdrop-180 - [0:0] :logdrop-181 - [0:0] +:logdrop-182 - [0:0] :logdrop-183 - [0:0] :logdrop-184 - [0:0] :logdrop-185 - [0:0] +:logdrop-186 - [0:0] :logdrop-187 - [0:0] :logdrop-188 - [0:0] :logdrop-189 - [0:0] @@ -751,25 +1162,155 @@ :logdrop-191 - [0:0] :logdrop-192 - [0:0] :logdrop-193 - [0:0] +:logdrop-194 - [0:0] :logdrop-195 - [0:0] :logdrop-196 - [0:0] :logdrop-197 - [0:0] +:logdrop-198 - [0:0] :logdrop-199 - [0:0] :logdrop-2 - [0:0] :logdrop-200 - [0:0] +:logdrop-201 - [0:0] +:logdrop-202 - [0:0] +:logdrop-203 - [0:0] +:logdrop-204 - [0:0] +:logdrop-205 - [0:0] +:logdrop-206 - [0:0] +:logdrop-207 - [0:0] +:logdrop-208 - [0:0] +:logdrop-209 - [0:0] :logdrop-21 - [0:0] +:logdrop-210 - [0:0] +:logdrop-211 - [0:0] +:logdrop-212 - [0:0] +:logdrop-213 - [0:0] +:logdrop-214 - [0:0] +:logdrop-215 - [0:0] +:logdrop-216 - [0:0] +:logdrop-217 - [0:0] +:logdrop-218 - [0:0] +:logdrop-219 - [0:0] :logdrop-22 - [0:0] +:logdrop-220 - [0:0] +:logdrop-221 - [0:0] +:logdrop-222 - [0:0] +:logdrop-223 - [0:0] +:logdrop-224 - [0:0] +:logdrop-225 - [0:0] +:logdrop-226 - [0:0] +:logdrop-227 - [0:0] +:logdrop-228 - [0:0] +:logdrop-229 - [0:0] :logdrop-23 - [0:0] +:logdrop-230 - [0:0] +:logdrop-231 - [0:0] +:logdrop-232 - [0:0] +:logdrop-233 - [0:0] +:logdrop-234 - [0:0] +:logdrop-235 - [0:0] +:logdrop-236 - [0:0] +:logdrop-237 - [0:0] +:logdrop-238 - [0:0] +:logdrop-239 - [0:0] +:logdrop-240 - [0:0] +:logdrop-241 - [0:0] +:logdrop-242 - [0:0] +:logdrop-243 - [0:0] +:logdrop-244 - [0:0] +:logdrop-245 - [0:0] +:logdrop-246 - [0:0] +:logdrop-247 - [0:0] +:logdrop-249 - [0:0] :logdrop-25 - [0:0] +:logdrop-250 - [0:0] +:logdrop-251 - [0:0] +:logdrop-253 - [0:0] +:logdrop-254 - [0:0] +:logdrop-255 - [0:0] +:logdrop-256 - [0:0] +:logdrop-257 - [0:0] +:logdrop-258 - [0:0] +:logdrop-259 - [0:0] :logdrop-26 - [0:0] +:logdrop-261 - [0:0] +:logdrop-262 - [0:0] +:logdrop-263 - [0:0] +:logdrop-265 - [0:0] +:logdrop-266 - [0:0] +:logdrop-267 - [0:0] +:logdrop-268 - [0:0] +:logdrop-269 - [0:0] :logdrop-27 - [0:0] +:logdrop-270 - [0:0] +:logdrop-271 - [0:0] +:logdrop-273 - [0:0] +:logdrop-274 - [0:0] +:logdrop-275 - [0:0] +:logdrop-277 - [0:0] +:logdrop-278 - [0:0] +:logdrop-279 - [0:0] :logdrop-28 - [0:0] +:logdrop-280 - [0:0] +:logdrop-281 - [0:0] +:logdrop-282 - [0:0] +:logdrop-283 - [0:0] +:logdrop-285 - [0:0] +:logdrop-286 - [0:0] +:logdrop-287 - [0:0] +:logdrop-289 - [0:0] :logdrop-29 - [0:0] +:logdrop-290 - [0:0] +:logdrop-291 - [0:0] +:logdrop-292 - [0:0] +:logdrop-293 - [0:0] +:logdrop-294 - [0:0] +:logdrop-295 - [0:0] +:logdrop-296 - [0:0] +:logdrop-297 - [0:0] +:logdrop-298 - [0:0] +:logdrop-299 - [0:0] :logdrop-3 - [0:0] :logdrop-30 - [0:0] +:logdrop-300 - [0:0] +:logdrop-301 - [0:0] +:logdrop-303 - [0:0] +:logdrop-304 - [0:0] +:logdrop-305 - [0:0] +:logdrop-307 - [0:0] +:logdrop-308 - [0:0] +:logdrop-309 - [0:0] :logdrop-31 - [0:0] +:logdrop-310 - [0:0] +:logdrop-311 - [0:0] +:logdrop-312 - [0:0] +:logdrop-313 - [0:0] +:logdrop-315 - [0:0] +:logdrop-316 - [0:0] +:logdrop-317 - [0:0] +:logdrop-319 - [0:0] +:logdrop-320 - [0:0] +:logdrop-321 - [0:0] +:logdrop-322 - [0:0] +:logdrop-323 - [0:0] +:logdrop-324 - [0:0] +:logdrop-325 - [0:0] +:logdrop-327 - [0:0] +:logdrop-328 - [0:0] +:logdrop-329 - [0:0] :logdrop-33 - [0:0] +:logdrop-331 - [0:0] +:logdrop-332 - [0:0] +:logdrop-333 - [0:0] +:logdrop-334 - [0:0] +:logdrop-335 - [0:0] +:logdrop-336 - [0:0] +:logdrop-337 - [0:0] +:logdrop-339 - [0:0] :logdrop-34 - [0:0] +:logdrop-340 - [0:0] +:logdrop-341 - [0:0] +:logdrop-343 - [0:0] +:logdrop-344 - [0:0] :logdrop-35 - [0:0] :logdrop-37 - [0:0] :logdrop-38 - [0:0] @@ -779,27 +1320,27 @@ :logdrop-41 - [0:0] :logdrop-42 - [0:0] :logdrop-43 - [0:0] -:logdrop-44 - [0:0] :logdrop-45 - [0:0] :logdrop-46 - [0:0] :logdrop-47 - [0:0] -:logdrop-48 - [0:0] :logdrop-49 - [0:0] :logdrop-5 - [0:0] +:logdrop-50 - [0:0] :logdrop-51 - [0:0] :logdrop-52 - [0:0] :logdrop-53 - [0:0] +:logdrop-54 - [0:0] :logdrop-55 - [0:0] -:logdrop-56 - [0:0] :logdrop-57 - [0:0] :logdrop-58 - [0:0] :logdrop-59 - [0:0] :logdrop-6 - [0:0] -:logdrop-60 - [0:0] :logdrop-61 - [0:0] +:logdrop-62 - [0:0] :logdrop-63 - [0:0] :logdrop-64 - [0:0] :logdrop-65 - [0:0] +:logdrop-66 - [0:0] :logdrop-67 - [0:0] :logdrop-68 - [0:0] :logdrop-69 - [0:0] @@ -808,11 +1349,9 @@ :logdrop-71 - [0:0] :logdrop-72 - [0:0] :logdrop-73 - [0:0] -:logdrop-74 - [0:0] :logdrop-75 - [0:0] :logdrop-76 - [0:0] :logdrop-77 - [0:0] -:logdrop-78 - [0:0] :logdrop-79 - [0:0] :logdrop-8 - [0:0] :logdrop-80 - [0:0] @@ -821,12 +1360,10 @@ :logdrop-83 - [0:0] :logdrop-84 - [0:0] :logdrop-85 - [0:0] -:logdrop-86 - [0:0] :logdrop-87 - [0:0] :logdrop-88 - [0:0] :logdrop-89 - [0:0] :logdrop-9 - [0:0] -:logdrop-90 - [0:0] :logdrop-91 - [0:0] :logdrop-92 - [0:0] :logdrop-93 - [0:0] @@ -834,7 +1371,6 @@ :logdrop-95 - [0:0] :logdrop-96 - [0:0] :logdrop-97 - [0:0] -:logdrop-98 - [0:0] :logdrop-99 - [0:0] :logpass-0 - [0:0] :logreject-0 - [0:0] @@ -842,6 +1378,294 @@ :tarpit - [0:0] -A FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set -A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A FORWARD -j limit-715 +-A FORWARD -j limit-714 +-A FORWARD -j limit-713 +-A FORWARD -j limit-712 +-A FORWARD -j limit-711 +-A FORWARD -j limit-710 +-A FORWARD -j limit-709 +-A FORWARD -j limit-708 +-A FORWARD -j limit-707 +-A FORWARD -j limit-706 +-A FORWARD -j limit-705 +-A FORWARD -j limit-704 +-A FORWARD -j limit-703 +-A FORWARD -j limit-702 +-A FORWARD -j limit-701 +-A FORWARD -j limit-700 +-A FORWARD -j limit-699 +-A FORWARD -j limit-698 +-A FORWARD -j limit-697 +-A FORWARD -j limit-696 +-A FORWARD -j limit-695 +-A FORWARD -j limit-694 +-A FORWARD -j limit-693 +-A FORWARD -j limit-692 +-A FORWARD -j limit-691 +-A FORWARD -j limit-690 +-A FORWARD -j limit-689 +-A FORWARD -j limit-688 +-A FORWARD -j limit-687 +-A FORWARD -j limit-686 +-A FORWARD -j limit-685 +-A FORWARD -j limit-684 +-A FORWARD -j limit-683 +-A FORWARD -j limit-682 +-A FORWARD -j limit-681 +-A FORWARD -j limit-680 +-A FORWARD -j limit-679 +-A FORWARD -j limit-678 +-A FORWARD -j limit-677 +-A FORWARD -j limit-676 +-A FORWARD -j limit-675 +-A FORWARD -j limit-674 +-A FORWARD -j limit-673 +-A FORWARD -j limit-672 +-A FORWARD -j limit-671 +-A FORWARD -j limit-670 +-A FORWARD -j limit-669 +-A FORWARD -j limit-668 +-A FORWARD -j limit-667 +-A FORWARD -j limit-666 +-A FORWARD -j limit-665 +-A FORWARD -j limit-664 +-A FORWARD -j limit-663 +-A FORWARD -j limit-662 +-A FORWARD -j limit-661 +-A FORWARD -j limit-660 +-A FORWARD -j limit-659 +-A FORWARD -j limit-658 +-A FORWARD -j limit-657 +-A FORWARD -j limit-656 +-A FORWARD -j limit-655 +-A FORWARD -j limit-654 +-A FORWARD -j limit-653 +-A FORWARD -j limit-652 +-A FORWARD -j limit-651 +-A FORWARD -j limit-650 +-A FORWARD -j limit-649 +-A FORWARD -j limit-648 +-A FORWARD -j limit-647 +-A FORWARD -j limit-646 +-A FORWARD -j limit-645 +-A FORWARD -j limit-644 +-A FORWARD -j limit-643 +-A FORWARD -j limit-642 +-A FORWARD -j limit-641 +-A FORWARD -j limit-640 +-A FORWARD -j limit-639 +-A FORWARD -j limit-638 +-A FORWARD -j limit-637 +-A FORWARD -j limit-636 +-A FORWARD -j limit-635 +-A FORWARD -j limit-634 +-A FORWARD -j limit-633 +-A FORWARD -j limit-632 +-A FORWARD -j limit-631 +-A FORWARD -j limit-630 +-A FORWARD -j limit-629 +-A FORWARD -j limit-628 +-A FORWARD -j limit-627 +-A FORWARD -j limit-626 +-A FORWARD -j limit-625 +-A FORWARD -j limit-624 +-A FORWARD -j limit-623 +-A FORWARD -j limit-622 +-A FORWARD -j limit-621 +-A FORWARD -j limit-620 +-A FORWARD -j limit-619 +-A FORWARD -j limit-618 +-A FORWARD -j limit-617 +-A FORWARD -j limit-616 +-A FORWARD -j limit-615 +-A FORWARD -j limit-614 +-A FORWARD -j limit-613 +-A FORWARD -j limit-612 +-A FORWARD -j limit-611 +-A FORWARD -j limit-610 +-A FORWARD -j limit-609 +-A FORWARD -j limit-608 +-A FORWARD -j limit-607 +-A FORWARD -j limit-606 +-A FORWARD -j limit-605 +-A FORWARD -j limit-604 +-A FORWARD -j limit-603 +-A FORWARD -j limit-602 +-A FORWARD -j limit-601 +-A FORWARD -j limit-600 +-A FORWARD -j limit-599 +-A FORWARD -j limit-598 +-A FORWARD -j limit-597 +-A FORWARD -j limit-596 +-A FORWARD -j limit-595 +-A FORWARD -j limit-594 +-A FORWARD -j limit-593 +-A FORWARD -j limit-592 +-A FORWARD -j limit-591 +-A FORWARD -j limit-590 +-A FORWARD -j limit-589 +-A FORWARD -j limit-588 +-A FORWARD -j limit-587 +-A FORWARD -j limit-586 +-A FORWARD -j limit-585 +-A FORWARD -j limit-584 +-A FORWARD -j limit-583 +-A FORWARD -j limit-582 +-A FORWARD -j limit-581 +-A FORWARD -j limit-580 +-A FORWARD -j limit-579 +-A FORWARD -j limit-578 +-A FORWARD -j limit-577 +-A FORWARD -j limit-576 +-A FORWARD -j limit-575 +-A FORWARD -j limit-574 +-A FORWARD -j limit-573 +-A FORWARD -j limit-572 +-A FORWARD -j limit-571 +-A FORWARD -j limit-570 +-A FORWARD -j limit-569 +-A FORWARD -j limit-568 +-A FORWARD -j limit-567 +-A FORWARD -j limit-566 +-A FORWARD -j limit-565 +-A FORWARD -j limit-564 +-A FORWARD -j limit-563 +-A FORWARD -j limit-562 +-A FORWARD -j limit-561 +-A FORWARD -j limit-560 +-A FORWARD -j limit-559 +-A FORWARD -j limit-558 +-A FORWARD -j limit-557 +-A FORWARD -j limit-556 +-A FORWARD -j limit-555 +-A FORWARD -j limit-554 +-A FORWARD -j limit-553 +-A FORWARD -j limit-552 +-A FORWARD -j limit-551 +-A FORWARD -j limit-550 +-A FORWARD -j limit-549 +-A FORWARD -j limit-548 +-A FORWARD -j limit-547 +-A FORWARD -j limit-546 +-A FORWARD -j limit-545 +-A FORWARD -j limit-544 +-A FORWARD -j limit-543 +-A FORWARD -j limit-542 +-A FORWARD -j limit-541 +-A FORWARD -j limit-540 +-A FORWARD -j limit-539 +-A FORWARD -j limit-538 +-A FORWARD -j limit-537 +-A FORWARD -j limit-536 +-A FORWARD -j limit-535 +-A FORWARD -j limit-534 +-A FORWARD -j limit-533 +-A FORWARD -j limit-532 +-A FORWARD -j limit-531 +-A FORWARD -j limit-530 +-A FORWARD -j limit-529 +-A FORWARD -j limit-528 +-A FORWARD -j limit-527 +-A FORWARD -j limit-526 +-A FORWARD -j limit-525 +-A FORWARD -j limit-524 +-A FORWARD -j limit-523 +-A FORWARD -j limit-522 +-A FORWARD -j limit-521 +-A FORWARD -j limit-520 +-A FORWARD -j limit-519 +-A FORWARD -j limit-518 +-A FORWARD -j limit-517 +-A FORWARD -j limit-516 +-A FORWARD -j limit-515 +-A FORWARD -j limit-514 +-A FORWARD -j limit-513 +-A FORWARD -j limit-512 +-A FORWARD -j limit-511 +-A FORWARD -j limit-510 +-A FORWARD -j limit-509 +-A FORWARD -j limit-508 +-A FORWARD -j limit-507 +-A FORWARD -j limit-506 +-A FORWARD -j limit-505 +-A FORWARD -j limit-504 +-A FORWARD -j limit-503 +-A FORWARD -j limit-502 +-A FORWARD -j limit-501 +-A FORWARD -j limit-500 +-A FORWARD -j limit-499 +-A FORWARD -j limit-498 +-A FORWARD -j limit-497 +-A FORWARD -j limit-496 +-A FORWARD -j limit-495 +-A FORWARD -j limit-494 +-A FORWARD -j limit-493 +-A FORWARD -j limit-492 +-A FORWARD -j limit-491 +-A FORWARD -j limit-490 +-A FORWARD -j limit-489 +-A FORWARD -j limit-488 +-A FORWARD -j limit-487 +-A FORWARD -j limit-486 +-A FORWARD -j limit-485 +-A FORWARD -j limit-484 +-A FORWARD -j limit-483 +-A FORWARD -j limit-482 +-A FORWARD -j limit-481 +-A FORWARD -j limit-480 +-A FORWARD -j limit-479 +-A FORWARD -j limit-478 +-A FORWARD -j limit-477 +-A FORWARD -j limit-476 +-A FORWARD -j limit-475 +-A FORWARD -j limit-474 +-A FORWARD -j limit-473 +-A FORWARD -j limit-472 +-A FORWARD -j limit-471 +-A FORWARD -j limit-470 +-A FORWARD -j limit-469 +-A FORWARD -j limit-468 +-A FORWARD -j limit-467 +-A FORWARD -j limit-466 +-A FORWARD -j limit-465 +-A FORWARD -j limit-464 +-A FORWARD -j limit-463 +-A FORWARD -j limit-462 +-A FORWARD -j limit-461 +-A FORWARD -j limit-460 +-A FORWARD -j limit-459 +-A FORWARD -j limit-458 +-A FORWARD -j limit-457 +-A FORWARD -j limit-456 +-A FORWARD -j limit-455 +-A FORWARD -j limit-454 +-A FORWARD -j limit-453 +-A FORWARD -j limit-452 +-A FORWARD -j limit-451 +-A FORWARD -j limit-450 +-A FORWARD -j limit-449 +-A FORWARD -j limit-448 +-A FORWARD -j limit-447 +-A FORWARD -j limit-446 +-A FORWARD -j limit-445 +-A FORWARD -j limit-444 +-A FORWARD -j limit-443 +-A FORWARD -j limit-442 +-A FORWARD -j limit-441 +-A FORWARD -j limit-440 +-A FORWARD -j limit-439 +-A FORWARD -j limit-438 +-A FORWARD -j limit-437 +-A FORWARD -j limit-436 +-A FORWARD -j limit-435 +-A FORWARD -j limit-434 +-A FORWARD -j limit-433 +-A FORWARD -j limit-432 +-A FORWARD -j limit-431 +-A FORWARD -j limit-430 +-A FORWARD -j limit-429 +-A FORWARD -j limit-428 -A FORWARD -j limit-427 -A FORWARD -j limit-426 -A FORWARD -j limit-425 @@ -912,150 +1736,6 @@ -A FORWARD -j limit-360 -A FORWARD -j limit-359 -A FORWARD -j limit-358 --A FORWARD -j limit-357 --A FORWARD -j limit-356 --A FORWARD -j limit-355 --A FORWARD -j limit-354 --A FORWARD -j limit-353 --A FORWARD -j limit-352 --A FORWARD -j limit-351 --A FORWARD -j limit-350 --A FORWARD -j limit-349 --A FORWARD -j limit-348 --A FORWARD -j limit-347 --A FORWARD -j limit-346 --A FORWARD -j limit-345 --A FORWARD -j limit-344 --A FORWARD -j limit-343 --A FORWARD -j limit-342 --A FORWARD -j limit-341 --A FORWARD -j limit-340 --A FORWARD -j limit-339 --A FORWARD -j limit-338 --A FORWARD -j limit-337 --A FORWARD -j limit-336 --A FORWARD -j limit-335 --A FORWARD -j limit-334 --A FORWARD -j limit-333 --A FORWARD -j limit-332 --A FORWARD -j limit-331 --A FORWARD -j limit-330 --A FORWARD -j limit-329 --A FORWARD -j limit-328 --A FORWARD -j limit-327 --A FORWARD -j limit-326 --A FORWARD -j limit-325 --A FORWARD -j limit-324 --A FORWARD -j limit-323 --A FORWARD -j limit-322 --A FORWARD -j limit-321 --A FORWARD -j limit-320 --A FORWARD -j limit-319 --A FORWARD -j limit-318 --A FORWARD -j limit-317 --A FORWARD -j limit-316 --A FORWARD -j limit-315 --A FORWARD -j limit-314 --A FORWARD -j limit-313 --A FORWARD -j limit-312 --A FORWARD -j limit-311 --A FORWARD -j limit-310 --A FORWARD -j limit-309 --A FORWARD -j limit-308 --A FORWARD -j limit-307 --A FORWARD -j limit-306 --A FORWARD -j limit-305 --A FORWARD -j limit-304 --A FORWARD -j limit-303 --A FORWARD -j limit-302 --A FORWARD -j limit-301 --A FORWARD -j limit-300 --A FORWARD -j limit-299 --A FORWARD -j limit-298 --A FORWARD -j limit-297 --A FORWARD -j limit-296 --A FORWARD -j limit-295 --A FORWARD -j limit-294 --A FORWARD -j limit-293 --A FORWARD -j limit-292 --A FORWARD -j limit-291 --A FORWARD -j limit-290 --A FORWARD -j limit-289 --A FORWARD -j limit-288 --A FORWARD -j limit-287 --A FORWARD -j limit-286 --A FORWARD -j limit-285 --A FORWARD -j limit-284 --A FORWARD -j limit-283 --A FORWARD -j limit-282 --A FORWARD -j limit-281 --A FORWARD -j limit-280 --A FORWARD -j limit-279 --A FORWARD -j limit-278 --A FORWARD -j limit-277 --A FORWARD -j limit-276 --A FORWARD -j limit-275 --A FORWARD -j limit-274 --A FORWARD -j limit-273 --A FORWARD -j limit-272 --A FORWARD -j limit-271 --A FORWARD -j limit-270 --A FORWARD -j limit-269 --A FORWARD -j limit-268 --A FORWARD -j limit-267 --A FORWARD -j limit-266 --A FORWARD -j limit-265 --A FORWARD -j limit-264 --A FORWARD -j limit-263 --A FORWARD -j limit-262 --A FORWARD -j limit-261 --A FORWARD -j limit-260 --A FORWARD -j limit-259 --A FORWARD -j limit-258 --A FORWARD -j limit-257 --A FORWARD -j limit-256 --A FORWARD -j limit-255 --A FORWARD -j limit-254 --A FORWARD -j limit-253 --A FORWARD -j limit-252 --A FORWARD -j limit-251 --A FORWARD -j limit-250 --A FORWARD -j limit-249 --A FORWARD -j limit-248 --A FORWARD -j limit-247 --A FORWARD -j limit-246 --A FORWARD -j limit-245 --A FORWARD -j limit-244 --A FORWARD -j limit-243 --A FORWARD -j limit-242 --A FORWARD -j limit-241 --A FORWARD -j limit-240 --A FORWARD -j limit-239 --A FORWARD -j limit-238 --A FORWARD -j limit-237 --A FORWARD -j limit-236 --A FORWARD -j limit-235 --A FORWARD -j limit-234 --A FORWARD -j limit-233 --A FORWARD -j limit-232 --A FORWARD -j limit-231 --A FORWARD -j limit-230 --A FORWARD -j limit-229 --A FORWARD -j limit-228 --A FORWARD -j limit-227 --A FORWARD -j limit-226 --A FORWARD -j limit-225 --A FORWARD -j limit-224 --A FORWARD -j limit-223 --A FORWARD -j limit-222 --A FORWARD -j limit-221 --A FORWARD -j limit-220 --A FORWARD -j limit-219 --A FORWARD -j limit-218 --A FORWARD -j limit-217 --A FORWARD -j limit-216 --A FORWARD -j limit-215 --A FORWARD -j limit-214 -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -j ACCEPT -A FORWARD -j ACCEPT @@ -1106,29 +1786,29 @@ -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-40 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-41 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-42 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-43 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-44 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-45 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-46 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-47 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-48 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-48 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-49 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-50 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-51 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-52 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-53 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-54 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-55 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-56 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-57 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-58 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-59 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-60 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-60 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-61 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-62 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-63 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-64 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-65 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-66 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-67 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-68 @@ -1136,35 +1816,35 @@ -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-70 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-71 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-72 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-73 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-74 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-75 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-76 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-77 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-78 -A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-78 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-79 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-80 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-81 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-82 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-83 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-84 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-85 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-86 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-87 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-88 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-89 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-90 -A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-90 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-91 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-92 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-93 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-94 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-95 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-96 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-97 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-98 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-99 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-100 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-101 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-102 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-103 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-104 @@ -1172,11 +1852,11 @@ -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-106 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-107 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-108 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-50 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-110 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-111 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-112 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-54 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-114 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-115 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-116 @@ -1184,17 +1864,17 @@ -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-118 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-119 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-120 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-62 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-121 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-122 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-123 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-124 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-66 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-125 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-126 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-127 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-128 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-129 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-130 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-131 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-132 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-133 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-134 @@ -1202,11 +1882,11 @@ -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-136 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-137 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-138 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-140 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-141 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-142 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-144 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-145 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-146 @@ -1214,11 +1894,11 @@ -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-148 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-149 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-150 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-152 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-153 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-154 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-156 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-157 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-158 @@ -1226,17 +1906,17 @@ -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-160 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-161 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-162 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-163 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-164 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-165 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-166 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-167 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-168 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-169 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-170 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-171 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-172 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-173 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-174 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-175 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-176 @@ -1244,11 +1924,11 @@ -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-178 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-179 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-180 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-74 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-182 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-183 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-184 --A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-78 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-186 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-187 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-188 @@ -1256,11 +1936,11 @@ -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-190 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-191 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-192 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-193 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-86 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-194 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-195 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-196 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-197 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-90 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-198 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-199 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-200 @@ -1268,15 +1948,159 @@ -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-202 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-203 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-204 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-205 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-98 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-206 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-207 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-208 --A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-209 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-102 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-210 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-211 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-212 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-213 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-214 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-215 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-216 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-110 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-218 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-219 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-220 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-114 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-222 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-223 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-224 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-225 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-226 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-227 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-228 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-229 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-230 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-231 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-232 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-233 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-234 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-236 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-237 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-238 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-240 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-241 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-242 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-243 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-244 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-245 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-246 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-248 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-249 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-250 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-252 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-253 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-254 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-255 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-256 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-257 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-258 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-260 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-261 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-262 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-264 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-265 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-266 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-267 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-268 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-269 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-270 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-272 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-273 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-274 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-276 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-277 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-278 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-279 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-280 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-281 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-282 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-283 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-284 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-285 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-286 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-287 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-288 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-290 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-291 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-292 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-294 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-295 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-296 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-297 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-298 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-299 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-300 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-302 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-303 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-304 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-306 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-307 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-308 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-309 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-310 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-311 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-312 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-314 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-315 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-316 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-318 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-319 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-320 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-321 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-322 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-323 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-324 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-326 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-327 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-328 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-330 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-331 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-332 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-333 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-334 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-335 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-336 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-337 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-338 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-339 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-340 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-341 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-342 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-343 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-344 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-345 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-346 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-347 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-348 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-349 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-350 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-351 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-352 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-353 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-354 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-355 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-356 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-357 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-0 -A FORWARD -j ACCEPT @@ -1391,17 +2215,92 @@ -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-37 -A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-38 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-39 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-40 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-41 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-42 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-43 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-44 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-45 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-46 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-47 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-48 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-49 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-50 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-51 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-52 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-53 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-54 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-55 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-56 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-57 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-58 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-59 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-60 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-61 +-A FORWARD -j ACCEPT -A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A FORWARD -m recent --name user:B --rsource --mask 255.255.255.255 --set +-A FORWARD -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A FORWARD -m recent --name user:D --rsource --mask 255.255.252.0 --set -A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set -A FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set -A FORWARD -j ACCEPT --A FORWARD -j logdrop-199 +-A FORWARD -j logdrop-343 -A FORWARD -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD -A FORWARD -j logaccept-14 --A FORWARD -j logdrop-200 +-A FORWARD -j logdrop-344 -A FORWARD -j logpass-0 -A FORWARD -j ACCEPT -A FORWARD -j DROP @@ -1464,6 +2363,294 @@ -A FORWARD -p icmp -j icmp-routing -A INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set -A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A INPUT -j limit-715 +-A INPUT -j limit-714 +-A INPUT -j limit-713 +-A INPUT -j limit-712 +-A INPUT -j limit-711 +-A INPUT -j limit-710 +-A INPUT -j limit-709 +-A INPUT -j limit-708 +-A INPUT -j limit-707 +-A INPUT -j limit-706 +-A INPUT -j limit-705 +-A INPUT -j limit-704 +-A INPUT -j limit-703 +-A INPUT -j limit-702 +-A INPUT -j limit-701 +-A INPUT -j limit-700 +-A INPUT -j limit-699 +-A INPUT -j limit-698 +-A INPUT -j limit-697 +-A INPUT -j limit-696 +-A INPUT -j limit-695 +-A INPUT -j limit-694 +-A INPUT -j limit-693 +-A INPUT -j limit-692 +-A INPUT -j limit-691 +-A INPUT -j limit-690 +-A INPUT -j limit-689 +-A INPUT -j limit-688 +-A INPUT -j limit-687 +-A INPUT -j limit-686 +-A INPUT -j limit-685 +-A INPUT -j limit-684 +-A INPUT -j limit-683 +-A INPUT -j limit-682 +-A INPUT -j limit-681 +-A INPUT -j limit-680 +-A INPUT -j limit-679 +-A INPUT -j limit-678 +-A INPUT -j limit-677 +-A INPUT -j limit-676 +-A INPUT -j limit-675 +-A INPUT -j limit-674 +-A INPUT -j limit-673 +-A INPUT -j limit-672 +-A INPUT -j limit-671 +-A INPUT -j limit-670 +-A INPUT -j limit-669 +-A INPUT -j limit-668 +-A INPUT -j limit-667 +-A INPUT -j limit-666 +-A INPUT -j limit-665 +-A INPUT -j limit-664 +-A INPUT -j limit-663 +-A INPUT -j limit-662 +-A INPUT -j limit-661 +-A INPUT -j limit-660 +-A INPUT -j limit-659 +-A INPUT -j limit-658 +-A INPUT -j limit-657 +-A INPUT -j limit-656 +-A INPUT -j limit-655 +-A INPUT -j limit-654 +-A INPUT -j limit-653 +-A INPUT -j limit-652 +-A INPUT -j limit-651 +-A INPUT -j limit-650 +-A INPUT -j limit-649 +-A INPUT -j limit-648 +-A INPUT -j limit-647 +-A INPUT -j limit-646 +-A INPUT -j limit-645 +-A INPUT -j limit-644 +-A INPUT -j limit-643 +-A INPUT -j limit-642 +-A INPUT -j limit-641 +-A INPUT -j limit-640 +-A INPUT -j limit-639 +-A INPUT -j limit-638 +-A INPUT -j limit-637 +-A INPUT -j limit-636 +-A INPUT -j limit-635 +-A INPUT -j limit-634 +-A INPUT -j limit-633 +-A INPUT -j limit-632 +-A INPUT -j limit-631 +-A INPUT -j limit-630 +-A INPUT -j limit-629 +-A INPUT -j limit-628 +-A INPUT -j limit-627 +-A INPUT -j limit-626 +-A INPUT -j limit-625 +-A INPUT -j limit-624 +-A INPUT -j limit-623 +-A INPUT -j limit-622 +-A INPUT -j limit-621 +-A INPUT -j limit-620 +-A INPUT -j limit-619 +-A INPUT -j limit-618 +-A INPUT -j limit-617 +-A INPUT -j limit-616 +-A INPUT -j limit-615 +-A INPUT -j limit-614 +-A INPUT -j limit-613 +-A INPUT -j limit-612 +-A INPUT -j limit-611 +-A INPUT -j limit-610 +-A INPUT -j limit-609 +-A INPUT -j limit-608 +-A INPUT -j limit-607 +-A INPUT -j limit-606 +-A INPUT -j limit-605 +-A INPUT -j limit-604 +-A INPUT -j limit-603 +-A INPUT -j limit-602 +-A INPUT -j limit-601 +-A INPUT -j limit-600 +-A INPUT -j limit-599 +-A INPUT -j limit-598 +-A INPUT -j limit-597 +-A INPUT -j limit-596 +-A INPUT -j limit-595 +-A INPUT -j limit-594 +-A INPUT -j limit-593 +-A INPUT -j limit-592 +-A INPUT -j limit-591 +-A INPUT -j limit-590 +-A INPUT -j limit-589 +-A INPUT -j limit-588 +-A INPUT -j limit-587 +-A INPUT -j limit-586 +-A INPUT -j limit-585 +-A INPUT -j limit-584 +-A INPUT -j limit-583 +-A INPUT -j limit-582 +-A INPUT -j limit-581 +-A INPUT -j limit-580 +-A INPUT -j limit-579 +-A INPUT -j limit-578 +-A INPUT -j limit-577 +-A INPUT -j limit-576 +-A INPUT -j limit-575 +-A INPUT -j limit-574 +-A INPUT -j limit-573 +-A INPUT -j limit-572 +-A INPUT -j limit-571 +-A INPUT -j limit-570 +-A INPUT -j limit-569 +-A INPUT -j limit-568 +-A INPUT -j limit-567 +-A INPUT -j limit-566 +-A INPUT -j limit-565 +-A INPUT -j limit-564 +-A INPUT -j limit-563 +-A INPUT -j limit-562 +-A INPUT -j limit-561 +-A INPUT -j limit-560 +-A INPUT -j limit-559 +-A INPUT -j limit-558 +-A INPUT -j limit-557 +-A INPUT -j limit-556 +-A INPUT -j limit-555 +-A INPUT -j limit-554 +-A INPUT -j limit-553 +-A INPUT -j limit-552 +-A INPUT -j limit-551 +-A INPUT -j limit-550 +-A INPUT -j limit-549 +-A INPUT -j limit-548 +-A INPUT -j limit-547 +-A INPUT -j limit-546 +-A INPUT -j limit-545 +-A INPUT -j limit-544 +-A INPUT -j limit-543 +-A INPUT -j limit-542 +-A INPUT -j limit-541 +-A INPUT -j limit-540 +-A INPUT -j limit-539 +-A INPUT -j limit-538 +-A INPUT -j limit-537 +-A INPUT -j limit-536 +-A INPUT -j limit-535 +-A INPUT -j limit-534 +-A INPUT -j limit-533 +-A INPUT -j limit-532 +-A INPUT -j limit-531 +-A INPUT -j limit-530 +-A INPUT -j limit-529 +-A INPUT -j limit-528 +-A INPUT -j limit-527 +-A INPUT -j limit-526 +-A INPUT -j limit-525 +-A INPUT -j limit-524 +-A INPUT -j limit-523 +-A INPUT -j limit-522 +-A INPUT -j limit-521 +-A INPUT -j limit-520 +-A INPUT -j limit-519 +-A INPUT -j limit-518 +-A INPUT -j limit-517 +-A INPUT -j limit-516 +-A INPUT -j limit-515 +-A INPUT -j limit-514 +-A INPUT -j limit-513 +-A INPUT -j limit-512 +-A INPUT -j limit-511 +-A INPUT -j limit-510 +-A INPUT -j limit-509 +-A INPUT -j limit-508 +-A INPUT -j limit-507 +-A INPUT -j limit-506 +-A INPUT -j limit-505 +-A INPUT -j limit-504 +-A INPUT -j limit-503 +-A INPUT -j limit-502 +-A INPUT -j limit-501 +-A INPUT -j limit-500 +-A INPUT -j limit-499 +-A INPUT -j limit-498 +-A INPUT -j limit-497 +-A INPUT -j limit-496 +-A INPUT -j limit-495 +-A INPUT -j limit-494 +-A INPUT -j limit-493 +-A INPUT -j limit-492 +-A INPUT -j limit-491 +-A INPUT -j limit-490 +-A INPUT -j limit-489 +-A INPUT -j limit-488 +-A INPUT -j limit-487 +-A INPUT -j limit-486 +-A INPUT -j limit-485 +-A INPUT -j limit-484 +-A INPUT -j limit-483 +-A INPUT -j limit-482 +-A INPUT -j limit-481 +-A INPUT -j limit-480 +-A INPUT -j limit-479 +-A INPUT -j limit-478 +-A INPUT -j limit-477 +-A INPUT -j limit-476 +-A INPUT -j limit-475 +-A INPUT -j limit-474 +-A INPUT -j limit-473 +-A INPUT -j limit-472 +-A INPUT -j limit-471 +-A INPUT -j limit-470 +-A INPUT -j limit-469 +-A INPUT -j limit-468 +-A INPUT -j limit-467 +-A INPUT -j limit-466 +-A INPUT -j limit-465 +-A INPUT -j limit-464 +-A INPUT -j limit-463 +-A INPUT -j limit-462 +-A INPUT -j limit-461 +-A INPUT -j limit-460 +-A INPUT -j limit-459 +-A INPUT -j limit-458 +-A INPUT -j limit-457 +-A INPUT -j limit-456 +-A INPUT -j limit-455 +-A INPUT -j limit-454 +-A INPUT -j limit-453 +-A INPUT -j limit-452 +-A INPUT -j limit-451 +-A INPUT -j limit-450 +-A INPUT -j limit-449 +-A INPUT -j limit-448 +-A INPUT -j limit-447 +-A INPUT -j limit-446 +-A INPUT -j limit-445 +-A INPUT -j limit-444 +-A INPUT -j limit-443 +-A INPUT -j limit-442 +-A INPUT -j limit-441 +-A INPUT -j limit-440 +-A INPUT -j limit-439 +-A INPUT -j limit-438 +-A INPUT -j limit-437 +-A INPUT -j limit-436 +-A INPUT -j limit-435 +-A INPUT -j limit-434 +-A INPUT -j limit-433 +-A INPUT -j limit-432 +-A INPUT -j limit-431 +-A INPUT -j limit-430 +-A INPUT -j limit-429 +-A INPUT -j limit-428 -A INPUT -j limit-427 -A INPUT -j limit-426 -A INPUT -j limit-425 @@ -1534,150 +2721,6 @@ -A INPUT -j limit-360 -A INPUT -j limit-359 -A INPUT -j limit-358 --A INPUT -j limit-357 --A INPUT -j limit-356 --A INPUT -j limit-355 --A INPUT -j limit-354 --A INPUT -j limit-353 --A INPUT -j limit-352 --A INPUT -j limit-351 --A INPUT -j limit-350 --A INPUT -j limit-349 --A INPUT -j limit-348 --A INPUT -j limit-347 --A INPUT -j limit-346 --A INPUT -j limit-345 --A INPUT -j limit-344 --A INPUT -j limit-343 --A INPUT -j limit-342 --A INPUT -j limit-341 --A INPUT -j limit-340 --A INPUT -j limit-339 --A INPUT -j limit-338 --A INPUT -j limit-337 --A INPUT -j limit-336 --A INPUT -j limit-335 --A INPUT -j limit-334 --A INPUT -j limit-333 --A INPUT -j limit-332 --A INPUT -j limit-331 --A INPUT -j limit-330 --A INPUT -j limit-329 --A INPUT -j limit-328 --A INPUT -j limit-327 --A INPUT -j limit-326 --A INPUT -j limit-325 --A INPUT -j limit-324 --A INPUT -j limit-323 --A INPUT -j limit-322 --A INPUT -j limit-321 --A INPUT -j limit-320 --A INPUT -j limit-319 --A INPUT -j limit-318 --A INPUT -j limit-317 --A INPUT -j limit-316 --A INPUT -j limit-315 --A INPUT -j limit-314 --A INPUT -j limit-313 --A INPUT -j limit-312 --A INPUT -j limit-311 --A INPUT -j limit-310 --A INPUT -j limit-309 --A INPUT -j limit-308 --A INPUT -j limit-307 --A INPUT -j limit-306 --A INPUT -j limit-305 --A INPUT -j limit-304 --A INPUT -j limit-303 --A INPUT -j limit-302 --A INPUT -j limit-301 --A INPUT -j limit-300 --A INPUT -j limit-299 --A INPUT -j limit-298 --A INPUT -j limit-297 --A INPUT -j limit-296 --A INPUT -j limit-295 --A INPUT -j limit-294 --A INPUT -j limit-293 --A INPUT -j limit-292 --A INPUT -j limit-291 --A INPUT -j limit-290 --A INPUT -j limit-289 --A INPUT -j limit-288 --A INPUT -j limit-287 --A INPUT -j limit-286 --A INPUT -j limit-285 --A INPUT -j limit-284 --A INPUT -j limit-283 --A INPUT -j limit-282 --A INPUT -j limit-281 --A INPUT -j limit-280 --A INPUT -j limit-279 --A INPUT -j limit-278 --A INPUT -j limit-277 --A INPUT -j limit-276 --A INPUT -j limit-275 --A INPUT -j limit-274 --A INPUT -j limit-273 --A INPUT -j limit-272 --A INPUT -j limit-271 --A INPUT -j limit-270 --A INPUT -j limit-269 --A INPUT -j limit-268 --A INPUT -j limit-267 --A INPUT -j limit-266 --A INPUT -j limit-265 --A INPUT -j limit-264 --A INPUT -j limit-263 --A INPUT -j limit-262 --A INPUT -j limit-261 --A INPUT -j limit-260 --A INPUT -j limit-259 --A INPUT -j limit-258 --A INPUT -j limit-257 --A INPUT -j limit-256 --A INPUT -j limit-255 --A INPUT -j limit-254 --A INPUT -j limit-253 --A INPUT -j limit-252 --A INPUT -j limit-251 --A INPUT -j limit-250 --A INPUT -j limit-249 --A INPUT -j limit-248 --A INPUT -j limit-247 --A INPUT -j limit-246 --A INPUT -j limit-245 --A INPUT -j limit-244 --A INPUT -j limit-243 --A INPUT -j limit-242 --A INPUT -j limit-241 --A INPUT -j limit-240 --A INPUT -j limit-239 --A INPUT -j limit-238 --A INPUT -j limit-237 --A INPUT -j limit-236 --A INPUT -j limit-235 --A INPUT -j limit-234 --A INPUT -j limit-233 --A INPUT -j limit-232 --A INPUT -j limit-231 --A INPUT -j limit-230 --A INPUT -j limit-229 --A INPUT -j limit-228 --A INPUT -j limit-227 --A INPUT -j limit-226 --A INPUT -j limit-225 --A INPUT -j limit-224 --A INPUT -j limit-223 --A INPUT -j limit-222 --A INPUT -j limit-221 --A INPUT -j limit-220 --A INPUT -j limit-219 --A INPUT -j limit-218 --A INPUT -j limit-217 --A INPUT -j limit-216 --A INPUT -j limit-215 --A INPUT -j limit-214 -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -j ACCEPT @@ -1800,231 +2843,450 @@ -A INPUT -j ACCEPT -A INPUT -j logaccept-final-37 -A INPUT -j ACCEPT --A INPUT -i eth0 -j limit-428 --A INPUT -i eth0 -j limit-429 --A INPUT -i eth0 -j limit-430 --A INPUT -i eth0 -j limit-431 --A INPUT -i eth0 -j limit-432 --A INPUT -i eth0 -j limit-433 --A INPUT -i eth0 -j limit-434 --A INPUT -i eth0 -j limit-435 --A INPUT -i eth0 -j limit-436 --A INPUT -i eth0 -j limit-437 --A INPUT -i eth0 -j limit-438 --A INPUT -i eth0 -j limit-439 --A INPUT -i eth0 -j limit-440 --A INPUT -i eth0 -j limit-441 --A INPUT -i eth0 -j limit-442 --A INPUT -i eth0 -j limit-443 --A INPUT -i eth0 -j limit-444 --A INPUT -i eth0 -j limit-445 --A INPUT -i eth0 -j limit-446 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-152 --A INPUT -i eth0 -j limit-448 --A INPUT -i eth0 -j limit-449 --A INPUT -i eth0 -j limit-450 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-156 --A INPUT -i eth0 -j limit-452 --A INPUT -i eth0 -j limit-453 --A INPUT -i eth0 -j limit-454 --A INPUT -i eth0 -j limit-455 --A INPUT -i eth0 -j limit-456 --A INPUT -i eth0 -j limit-457 --A INPUT -i eth0 -j limit-458 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-164 --A INPUT -i eth0 -j limit-460 --A INPUT -i eth0 -j limit-461 --A INPUT -i eth0 -j limit-462 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-168 --A INPUT -i eth0 -j limit-464 --A INPUT -i eth0 -j limit-465 --A INPUT -i eth0 -j limit-466 --A INPUT -i eth0 -j limit-467 --A INPUT -i eth0 -j limit-468 --A INPUT -i eth0 -j limit-469 --A INPUT -i eth0 -j limit-470 --A INPUT -i eth0 -j limit-471 --A INPUT -i eth0 -j limit-472 --A INPUT -i eth0 -j limit-473 --A INPUT -i eth0 -j limit-474 --A INPUT -i eth0 -j limit-475 --A INPUT -i eth0 -j limit-476 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-38 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-39 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-40 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-41 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-42 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-43 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-44 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-45 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-46 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-47 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-48 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-49 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-50 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-51 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-52 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-53 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-54 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-55 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-56 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-57 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-58 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-59 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-60 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-61 +-A INPUT -j ACCEPT +-A INPUT -i eth0 -j limit-716 +-A INPUT -i eth0 -j limit-717 +-A INPUT -i eth0 -j limit-718 +-A INPUT -i eth0 -j limit-719 +-A INPUT -i eth0 -j limit-720 +-A INPUT -i eth0 -j limit-721 +-A INPUT -i eth0 -j limit-722 +-A INPUT -i eth0 -j limit-723 +-A INPUT -i eth0 -j limit-724 +-A INPUT -i eth0 -j limit-725 +-A INPUT -i eth0 -j limit-726 +-A INPUT -i eth0 -j limit-727 +-A INPUT -i eth0 -j limit-728 +-A INPUT -i eth0 -j limit-729 +-A INPUT -i eth0 -j limit-730 +-A INPUT -i eth0 -j limit-731 +-A INPUT -i eth0 -j limit-732 +-A INPUT -i eth0 -j limit-733 +-A INPUT -i eth0 -j limit-734 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-248 +-A INPUT -i eth0 -j limit-736 +-A INPUT -i eth0 -j limit-737 +-A INPUT -i eth0 -j limit-738 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-252 +-A INPUT -i eth0 -j limit-740 +-A INPUT -i eth0 -j limit-741 +-A INPUT -i eth0 -j limit-742 +-A INPUT -i eth0 -j limit-743 +-A INPUT -i eth0 -j limit-744 +-A INPUT -i eth0 -j limit-745 +-A INPUT -i eth0 -j limit-746 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-260 +-A INPUT -i eth0 -j limit-748 +-A INPUT -i eth0 -j limit-749 +-A INPUT -i eth0 -j limit-750 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-264 +-A INPUT -i eth0 -j limit-752 +-A INPUT -i eth0 -j limit-753 +-A INPUT -i eth0 -j limit-754 +-A INPUT -i eth0 -j limit-755 +-A INPUT -i eth0 -j limit-756 +-A INPUT -i eth0 -j limit-757 +-A INPUT -i eth0 -j limit-758 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-272 +-A INPUT -i eth0 -j limit-760 +-A INPUT -i eth0 -j limit-761 +-A INPUT -i eth0 -j limit-762 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-276 +-A INPUT -i eth0 -j limit-764 +-A INPUT -i eth0 -j limit-765 +-A INPUT -i eth0 -j limit-766 +-A INPUT -i eth0 -j limit-767 +-A INPUT -i eth0 -j limit-768 +-A INPUT -i eth0 -j limit-769 +-A INPUT -i eth0 -j limit-770 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-284 +-A INPUT -i eth0 -j limit-772 +-A INPUT -i eth0 -j limit-773 +-A INPUT -i eth0 -j limit-774 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-288 +-A INPUT -i eth0 -j limit-776 +-A INPUT -i eth0 -j limit-777 +-A INPUT -i eth0 -j limit-778 +-A INPUT -i eth0 -j limit-779 +-A INPUT -i eth0 -j limit-780 +-A INPUT -i eth0 -j limit-781 +-A INPUT -i eth0 -j limit-782 +-A INPUT -i eth0 -j limit-783 +-A INPUT -i eth0 -j limit-784 +-A INPUT -i eth0 -j limit-785 +-A INPUT -i eth0 -j limit-786 +-A INPUT -i eth0 -j limit-787 +-A INPUT -i eth0 -j limit-788 -A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-478 --A INPUT -i eth0 -j limit-479 --A INPUT -i eth0 -j limit-480 +-A INPUT -i eth0 -j limit-790 +-A INPUT -i eth0 -j limit-791 +-A INPUT -i eth0 -j limit-792 -A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-482 --A INPUT -i eth0 -j limit-483 --A INPUT -i eth0 -j limit-484 --A INPUT -i eth0 -j limit-485 --A INPUT -i eth0 -j limit-486 --A INPUT -i eth0 -j limit-487 --A INPUT -i eth0 -j limit-488 +-A INPUT -i eth0 -j limit-794 +-A INPUT -i eth0 -j limit-795 +-A INPUT -i eth0 -j limit-796 +-A INPUT -i eth0 -j limit-797 +-A INPUT -i eth0 -j limit-798 +-A INPUT -i eth0 -j limit-799 +-A INPUT -i eth0 -j limit-800 -A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-490 --A INPUT -i eth0 -j limit-491 --A INPUT -i eth0 -j limit-492 +-A INPUT -i eth0 -j limit-802 +-A INPUT -i eth0 -j limit-803 +-A INPUT -i eth0 -j limit-804 -A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-494 --A INPUT -i eth0 -j limit-495 --A INPUT -i eth0 -j limit-496 --A INPUT -i eth0 -j limit-497 --A INPUT -i eth0 -j limit-498 --A INPUT -i eth0 -j limit-499 --A INPUT -i eth0 -j limit-500 --A INPUT -i eth0 -j limit-501 --A INPUT -i eth0 -j limit-502 --A INPUT -i eth0 -j limit-503 --A INPUT -i eth0 -j limit-504 --A INPUT -i eth0 -j limit-505 --A INPUT -i eth0 -j limit-506 +-A INPUT -i eth0 -j limit-806 +-A INPUT -i eth0 -j limit-807 +-A INPUT -i eth0 -j limit-808 +-A INPUT -i eth0 -j limit-809 +-A INPUT -i eth0 -j limit-810 +-A INPUT -i eth0 -j limit-811 +-A INPUT -i eth0 -j limit-812 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-814 +-A INPUT -i eth0 -j limit-815 +-A INPUT -i eth0 -j limit-816 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-818 +-A INPUT -i eth0 -j limit-819 +-A INPUT -i eth0 -j limit-820 +-A INPUT -i eth0 -j limit-821 +-A INPUT -i eth0 -j limit-822 +-A INPUT -i eth0 -j limit-823 +-A INPUT -i eth0 -j limit-824 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-826 +-A INPUT -i eth0 -j limit-827 +-A INPUT -i eth0 -j limit-828 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-830 +-A INPUT -i eth0 -j limit-831 +-A INPUT -i eth0 -j limit-832 +-A INPUT -i eth0 -j limit-833 +-A INPUT -i eth0 -j limit-834 +-A INPUT -i eth0 -j limit-835 +-A INPUT -i eth0 -j limit-836 +-A INPUT -i eth0 -j limit-837 +-A INPUT -i eth0 -j limit-838 +-A INPUT -i eth0 -j limit-839 +-A INPUT -i eth0 -j limit-840 +-A INPUT -i eth0 -j limit-841 +-A INPUT -i eth0 -j limit-842 -A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-508 --A INPUT -i eth0 -j limit-509 --A INPUT -i eth0 -j limit-510 +-A INPUT -i eth0 -j limit-844 +-A INPUT -i eth0 -j limit-845 +-A INPUT -i eth0 -j limit-846 -A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-512 --A INPUT -i eth0 -j limit-513 --A INPUT -i eth0 -j limit-514 --A INPUT -i eth0 -j limit-515 --A INPUT -i eth0 -j limit-516 --A INPUT -i eth0 -j limit-517 --A INPUT -i eth0 -j limit-518 +-A INPUT -i eth0 -j limit-848 +-A INPUT -i eth0 -j limit-849 +-A INPUT -i eth0 -j limit-850 +-A INPUT -i eth0 -j limit-851 +-A INPUT -i eth0 -j limit-852 +-A INPUT -i eth0 -j limit-853 +-A INPUT -i eth0 -j limit-854 -A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-520 --A INPUT -i eth0 -j limit-521 --A INPUT -i eth0 -j limit-522 +-A INPUT -i eth0 -j limit-856 +-A INPUT -i eth0 -j limit-857 +-A INPUT -i eth0 -j limit-858 -A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-524 --A INPUT -i eth0 -j limit-525 --A INPUT -i eth0 -j limit-526 --A INPUT -i eth0 -j limit-527 --A INPUT -i eth0 -j limit-528 --A INPUT -i eth0 -j limit-529 --A INPUT -i eth0 -j limit-530 --A INPUT -i eth0 -j limit-531 --A INPUT -i eth0 -j limit-532 --A INPUT -i eth0 -j limit-533 --A INPUT -i eth0 -j limit-534 --A INPUT -i eth0 -j limit-535 --A INPUT -i eth0 -j limit-536 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-182 --A INPUT -i eth0 -j limit-538 --A INPUT -i eth0 -j limit-539 --A INPUT -i eth0 -j limit-540 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-186 --A INPUT -i eth0 -j limit-542 --A INPUT -i eth0 -j limit-543 --A INPUT -i eth0 -j limit-544 --A INPUT -i eth0 -j limit-545 --A INPUT -i eth0 -j limit-546 --A INPUT -i eth0 -j limit-547 --A INPUT -i eth0 -j limit-548 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-194 --A INPUT -i eth0 -j limit-550 --A INPUT -i eth0 -j limit-551 --A INPUT -i eth0 -j limit-552 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-198 --A INPUT -i eth0 -j limit-554 --A INPUT -i eth0 -j limit-555 --A INPUT -i eth0 -j limit-556 --A INPUT -i eth0 -j limit-557 --A INPUT -i eth0 -j limit-558 --A INPUT -i eth0 -j limit-559 --A INPUT -i eth0 -j limit-560 --A INPUT -i eth0 -j limit-561 --A INPUT -i eth0 -j limit-562 --A INPUT -i eth0 -j limit-563 --A INPUT -i eth0 -j limit-564 --A INPUT -i eth0 -j limit-565 --A INPUT -i eth0 -j limit-566 +-A INPUT -i eth0 -j limit-860 +-A INPUT -i eth0 -j limit-861 +-A INPUT -i eth0 -j limit-862 +-A INPUT -i eth0 -j limit-863 +-A INPUT -i eth0 -j limit-864 +-A INPUT -i eth0 -j limit-865 +-A INPUT -i eth0 -j limit-866 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-868 +-A INPUT -i eth0 -j limit-869 +-A INPUT -i eth0 -j limit-870 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-872 +-A INPUT -i eth0 -j limit-873 +-A INPUT -i eth0 -j limit-874 +-A INPUT -i eth0 -j limit-875 +-A INPUT -i eth0 -j limit-876 +-A INPUT -i eth0 -j limit-877 +-A INPUT -i eth0 -j limit-878 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-880 +-A INPUT -i eth0 -j limit-881 +-A INPUT -i eth0 -j limit-882 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-884 +-A INPUT -i eth0 -j limit-885 +-A INPUT -i eth0 -j limit-886 +-A INPUT -i eth0 -j limit-887 +-A INPUT -i eth0 -j limit-888 +-A INPUT -i eth0 -j limit-889 +-A INPUT -i eth0 -j limit-890 +-A INPUT -i eth0 -j limit-891 +-A INPUT -i eth0 -j limit-892 +-A INPUT -i eth0 -j limit-893 +-A INPUT -i eth0 -j limit-894 +-A INPUT -i eth0 -j limit-895 +-A INPUT -i eth0 -j limit-896 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-302 +-A INPUT -i eth0 -j limit-898 +-A INPUT -i eth0 -j limit-899 +-A INPUT -i eth0 -j limit-900 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-306 +-A INPUT -i eth0 -j limit-902 +-A INPUT -i eth0 -j limit-903 +-A INPUT -i eth0 -j limit-904 +-A INPUT -i eth0 -j limit-905 +-A INPUT -i eth0 -j limit-906 +-A INPUT -i eth0 -j limit-907 +-A INPUT -i eth0 -j limit-908 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-314 +-A INPUT -i eth0 -j limit-910 +-A INPUT -i eth0 -j limit-911 +-A INPUT -i eth0 -j limit-912 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-318 +-A INPUT -i eth0 -j limit-914 +-A INPUT -i eth0 -j limit-915 +-A INPUT -i eth0 -j limit-916 +-A INPUT -i eth0 -j limit-917 +-A INPUT -i eth0 -j limit-918 +-A INPUT -i eth0 -j limit-919 +-A INPUT -i eth0 -j limit-920 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-326 +-A INPUT -i eth0 -j limit-922 +-A INPUT -i eth0 -j limit-923 +-A INPUT -i eth0 -j limit-924 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-330 +-A INPUT -i eth0 -j limit-926 +-A INPUT -i eth0 -j limit-927 +-A INPUT -i eth0 -j limit-928 +-A INPUT -i eth0 -j limit-929 +-A INPUT -i eth0 -j limit-930 +-A INPUT -i eth0 -j limit-931 +-A INPUT -i eth0 -j limit-932 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-338 +-A INPUT -i eth0 -j limit-934 +-A INPUT -i eth0 -j limit-935 +-A INPUT -i eth0 -j limit-936 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-342 +-A INPUT -i eth0 -j limit-938 +-A INPUT -i eth0 -j limit-939 +-A INPUT -i eth0 -j limit-940 +-A INPUT -i eth0 -j limit-941 +-A INPUT -i eth0 -j limit-942 +-A INPUT -i eth0 -j limit-943 +-A INPUT -i eth0 -j limit-944 +-A INPUT -i eth0 -j limit-945 +-A INPUT -i eth0 -j limit-946 +-A INPUT -i eth0 -j limit-947 +-A INPUT -i eth0 -j limit-948 +-A INPUT -i eth0 -j limit-949 +-A INPUT -i eth0 -j limit-950 -A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-568 --A INPUT -i eth0 -j limit-569 --A INPUT -i eth0 -j limit-570 +-A INPUT -i eth0 -j limit-952 +-A INPUT -i eth0 -j limit-953 +-A INPUT -i eth0 -j limit-954 -A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-572 --A INPUT -i eth0 -j limit-573 --A INPUT -i eth0 -j limit-574 --A INPUT -i eth0 -j limit-575 --A INPUT -i eth0 -j limit-576 --A INPUT -i eth0 -j limit-577 --A INPUT -i eth0 -j limit-578 +-A INPUT -i eth0 -j limit-956 +-A INPUT -i eth0 -j limit-957 +-A INPUT -i eth0 -j limit-958 +-A INPUT -i eth0 -j limit-959 +-A INPUT -i eth0 -j limit-960 +-A INPUT -i eth0 -j limit-961 +-A INPUT -i eth0 -j limit-962 -A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-580 --A INPUT -i eth0 -j limit-581 --A INPUT -i eth0 -j limit-582 +-A INPUT -i eth0 -j limit-964 +-A INPUT -i eth0 -j limit-965 +-A INPUT -i eth0 -j limit-966 -A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-584 --A INPUT -i eth0 -j limit-585 --A INPUT -i eth0 -j limit-586 --A INPUT -i eth0 -j limit-587 --A INPUT -i eth0 -j limit-588 --A INPUT -i eth0 -j limit-589 --A INPUT -i eth0 -j limit-590 --A INPUT -i eth0 -j limit-591 --A INPUT -i eth0 -j limit-592 --A INPUT -i eth0 -j limit-593 --A INPUT -i eth0 -j limit-594 --A INPUT -i eth0 -j limit-595 --A INPUT -i eth0 -j limit-596 +-A INPUT -i eth0 -j limit-968 +-A INPUT -i eth0 -j limit-969 +-A INPUT -i eth0 -j limit-970 +-A INPUT -i eth0 -j limit-971 +-A INPUT -i eth0 -j limit-972 +-A INPUT -i eth0 -j limit-973 +-A INPUT -i eth0 -j limit-974 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-976 +-A INPUT -i eth0 -j limit-977 +-A INPUT -i eth0 -j limit-978 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-980 +-A INPUT -i eth0 -j limit-981 +-A INPUT -i eth0 -j limit-982 +-A INPUT -i eth0 -j limit-983 +-A INPUT -i eth0 -j limit-984 +-A INPUT -i eth0 -j limit-985 +-A INPUT -i eth0 -j limit-986 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-988 +-A INPUT -i eth0 -j limit-989 +-A INPUT -i eth0 -j limit-990 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-992 +-A INPUT -i eth0 -j limit-993 +-A INPUT -i eth0 -j limit-994 +-A INPUT -i eth0 -j limit-995 +-A INPUT -i eth0 -j limit-996 +-A INPUT -i eth0 -j limit-997 +-A INPUT -i eth0 -j limit-998 +-A INPUT -i eth0 -j limit-999 +-A INPUT -i eth0 -j limit-1000 +-A INPUT -i eth0 -j limit-1001 +-A INPUT -i eth0 -j limit-1002 +-A INPUT -i eth0 -j limit-1003 +-A INPUT -i eth0 -j limit-1004 -A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-598 --A INPUT -i eth0 -j limit-599 --A INPUT -i eth0 -j limit-600 +-A INPUT -i eth0 -j limit-1006 +-A INPUT -i eth0 -j limit-1007 +-A INPUT -i eth0 -j limit-1008 -A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-602 --A INPUT -i eth0 -j limit-603 --A INPUT -i eth0 -j limit-604 --A INPUT -i eth0 -j limit-605 --A INPUT -i eth0 -j limit-606 --A INPUT -i eth0 -j limit-607 --A INPUT -i eth0 -j limit-608 +-A INPUT -i eth0 -j limit-1010 +-A INPUT -i eth0 -j limit-1011 +-A INPUT -i eth0 -j limit-1012 +-A INPUT -i eth0 -j limit-1013 +-A INPUT -i eth0 -j limit-1014 +-A INPUT -i eth0 -j limit-1015 +-A INPUT -i eth0 -j limit-1016 -A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-610 --A INPUT -i eth0 -j limit-611 --A INPUT -i eth0 -j limit-612 +-A INPUT -i eth0 -j limit-1018 +-A INPUT -i eth0 -j limit-1019 +-A INPUT -i eth0 -j limit-1020 -A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-614 --A INPUT -i eth0 -j limit-615 --A INPUT -i eth0 -j limit-616 --A INPUT -i eth0 -j limit-617 --A INPUT -i eth0 -j limit-618 --A INPUT -i eth0 -j limit-619 --A INPUT -i eth0 -j limit-620 --A INPUT -i eth0 -j limit-621 --A INPUT -i eth0 -j limit-622 --A INPUT -i eth0 -j limit-623 --A INPUT -i eth0 -j limit-624 --A INPUT -i eth0 -j limit-625 --A INPUT -i eth0 -j limit-626 --A INPUT -i eth0 -j limit-627 --A INPUT -i eth0 -j limit-628 --A INPUT -i eth0 -j limit-629 --A INPUT -i eth0 -j limit-630 --A INPUT -i eth0 -j limit-631 --A INPUT -i eth0 -j limit-632 --A INPUT -i eth0 -j limit-633 --A INPUT -i eth0 -j limit-634 --A INPUT -i eth0 -j limit-635 --A INPUT -i eth0 -j limit-636 --A INPUT -i eth0 -j limit-637 --A INPUT -i eth0 -j limit-638 --A INPUT -i eth0 -j limit-639 --A INPUT -i eth0 -j limit-640 --A INPUT -i eth0 -j limit-641 +-A INPUT -i eth0 -j limit-1022 +-A INPUT -i eth0 -j limit-1023 +-A INPUT -i eth0 -j limit-1024 +-A INPUT -i eth0 -j limit-1025 +-A INPUT -i eth0 -j limit-1026 +-A INPUT -i eth0 -j limit-1027 +-A INPUT -i eth0 -j limit-1028 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1030 +-A INPUT -i eth0 -j limit-1031 +-A INPUT -i eth0 -j limit-1032 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1034 +-A INPUT -i eth0 -j limit-1035 +-A INPUT -i eth0 -j limit-1036 +-A INPUT -i eth0 -j limit-1037 +-A INPUT -i eth0 -j limit-1038 +-A INPUT -i eth0 -j limit-1039 +-A INPUT -i eth0 -j limit-1040 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1042 +-A INPUT -i eth0 -j limit-1043 +-A INPUT -i eth0 -j limit-1044 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1046 +-A INPUT -i eth0 -j limit-1047 +-A INPUT -i eth0 -j limit-1048 +-A INPUT -i eth0 -j limit-1049 +-A INPUT -i eth0 -j limit-1050 +-A INPUT -i eth0 -j limit-1051 +-A INPUT -i eth0 -j limit-1052 +-A INPUT -i eth0 -j limit-1053 +-A INPUT -i eth0 -j limit-1054 +-A INPUT -i eth0 -j limit-1055 +-A INPUT -i eth0 -j limit-1056 +-A INPUT -i eth0 -j limit-1057 +-A INPUT -i eth0 -j limit-1058 +-A INPUT -i eth0 -j limit-1059 +-A INPUT -i eth0 -j limit-1060 +-A INPUT -i eth0 -j limit-1061 +-A INPUT -i eth0 -j limit-1062 +-A INPUT -i eth0 -j limit-1063 +-A INPUT -i eth0 -j limit-1064 +-A INPUT -i eth0 -j limit-1065 +-A INPUT -i eth0 -j limit-1066 +-A INPUT -i eth0 -j limit-1067 +-A INPUT -i eth0 -j limit-1068 +-A INPUT -i eth0 -j limit-1069 +-A INPUT -i eth0 -j limit-1070 +-A INPUT -i eth0 -j limit-1071 +-A INPUT -i eth0 -j limit-1072 +-A INPUT -i eth0 -j limit-1073 -A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A INPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set +-A INPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A INPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set -A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set -A INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set -A INPUT -j ACCEPT --A INPUT -j logdrop-199 +-A INPUT -j logdrop-343 -A INPUT -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT -A INPUT -j logaccept-14 --A INPUT -j logdrop-200 +-A INPUT -j logdrop-344 -A INPUT -j logpass-0 -A INPUT -j ACCEPT -A INPUT -j DROP @@ -2043,6 +3305,294 @@ -A INPUT -p icmp -j icmp-routing -A OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set -A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A OUTPUT -j limit-715 +-A OUTPUT -j limit-714 +-A OUTPUT -j limit-713 +-A OUTPUT -j limit-712 +-A OUTPUT -j limit-711 +-A OUTPUT -j limit-710 +-A OUTPUT -j limit-709 +-A OUTPUT -j limit-708 +-A OUTPUT -j limit-707 +-A OUTPUT -j limit-706 +-A OUTPUT -j limit-705 +-A OUTPUT -j limit-704 +-A OUTPUT -j limit-703 +-A OUTPUT -j limit-702 +-A OUTPUT -j limit-701 +-A OUTPUT -j limit-700 +-A OUTPUT -j limit-699 +-A OUTPUT -j limit-698 +-A OUTPUT -j limit-697 +-A OUTPUT -j limit-696 +-A OUTPUT -j limit-695 +-A OUTPUT -j limit-694 +-A OUTPUT -j limit-693 +-A OUTPUT -j limit-692 +-A OUTPUT -j limit-691 +-A OUTPUT -j limit-690 +-A OUTPUT -j limit-689 +-A OUTPUT -j limit-688 +-A OUTPUT -j limit-687 +-A OUTPUT -j limit-686 +-A OUTPUT -j limit-685 +-A OUTPUT -j limit-684 +-A OUTPUT -j limit-683 +-A OUTPUT -j limit-682 +-A OUTPUT -j limit-681 +-A OUTPUT -j limit-680 +-A OUTPUT -j limit-679 +-A OUTPUT -j limit-678 +-A OUTPUT -j limit-677 +-A OUTPUT -j limit-676 +-A OUTPUT -j limit-675 +-A OUTPUT -j limit-674 +-A OUTPUT -j limit-673 +-A OUTPUT -j limit-672 +-A OUTPUT -j limit-671 +-A OUTPUT -j limit-670 +-A OUTPUT -j limit-669 +-A OUTPUT -j limit-668 +-A OUTPUT -j limit-667 +-A OUTPUT -j limit-666 +-A OUTPUT -j limit-665 +-A OUTPUT -j limit-664 +-A OUTPUT -j limit-663 +-A OUTPUT -j limit-662 +-A OUTPUT -j limit-661 +-A OUTPUT -j limit-660 +-A OUTPUT -j limit-659 +-A OUTPUT -j limit-658 +-A OUTPUT -j limit-657 +-A OUTPUT -j limit-656 +-A OUTPUT -j limit-655 +-A OUTPUT -j limit-654 +-A OUTPUT -j limit-653 +-A OUTPUT -j limit-652 +-A OUTPUT -j limit-651 +-A OUTPUT -j limit-650 +-A OUTPUT -j limit-649 +-A OUTPUT -j limit-648 +-A OUTPUT -j limit-647 +-A OUTPUT -j limit-646 +-A OUTPUT -j limit-645 +-A OUTPUT -j limit-644 +-A OUTPUT -j limit-643 +-A OUTPUT -j limit-642 +-A OUTPUT -j limit-641 +-A OUTPUT -j limit-640 +-A OUTPUT -j limit-639 +-A OUTPUT -j limit-638 +-A OUTPUT -j limit-637 +-A OUTPUT -j limit-636 +-A OUTPUT -j limit-635 +-A OUTPUT -j limit-634 +-A OUTPUT -j limit-633 +-A OUTPUT -j limit-632 +-A OUTPUT -j limit-631 +-A OUTPUT -j limit-630 +-A OUTPUT -j limit-629 +-A OUTPUT -j limit-628 +-A OUTPUT -j limit-627 +-A OUTPUT -j limit-626 +-A OUTPUT -j limit-625 +-A OUTPUT -j limit-624 +-A OUTPUT -j limit-623 +-A OUTPUT -j limit-622 +-A OUTPUT -j limit-621 +-A OUTPUT -j limit-620 +-A OUTPUT -j limit-619 +-A OUTPUT -j limit-618 +-A OUTPUT -j limit-617 +-A OUTPUT -j limit-616 +-A OUTPUT -j limit-615 +-A OUTPUT -j limit-614 +-A OUTPUT -j limit-613 +-A OUTPUT -j limit-612 +-A OUTPUT -j limit-611 +-A OUTPUT -j limit-610 +-A OUTPUT -j limit-609 +-A OUTPUT -j limit-608 +-A OUTPUT -j limit-607 +-A OUTPUT -j limit-606 +-A OUTPUT -j limit-605 +-A OUTPUT -j limit-604 +-A OUTPUT -j limit-603 +-A OUTPUT -j limit-602 +-A OUTPUT -j limit-601 +-A OUTPUT -j limit-600 +-A OUTPUT -j limit-599 +-A OUTPUT -j limit-598 +-A OUTPUT -j limit-597 +-A OUTPUT -j limit-596 +-A OUTPUT -j limit-595 +-A OUTPUT -j limit-594 +-A OUTPUT -j limit-593 +-A OUTPUT -j limit-592 +-A OUTPUT -j limit-591 +-A OUTPUT -j limit-590 +-A OUTPUT -j limit-589 +-A OUTPUT -j limit-588 +-A OUTPUT -j limit-587 +-A OUTPUT -j limit-586 +-A OUTPUT -j limit-585 +-A OUTPUT -j limit-584 +-A OUTPUT -j limit-583 +-A OUTPUT -j limit-582 +-A OUTPUT -j limit-581 +-A OUTPUT -j limit-580 +-A OUTPUT -j limit-579 +-A OUTPUT -j limit-578 +-A OUTPUT -j limit-577 +-A OUTPUT -j limit-576 +-A OUTPUT -j limit-575 +-A OUTPUT -j limit-574 +-A OUTPUT -j limit-573 +-A OUTPUT -j limit-572 +-A OUTPUT -j limit-571 +-A OUTPUT -j limit-570 +-A OUTPUT -j limit-569 +-A OUTPUT -j limit-568 +-A OUTPUT -j limit-567 +-A OUTPUT -j limit-566 +-A OUTPUT -j limit-565 +-A OUTPUT -j limit-564 +-A OUTPUT -j limit-563 +-A OUTPUT -j limit-562 +-A OUTPUT -j limit-561 +-A OUTPUT -j limit-560 +-A OUTPUT -j limit-559 +-A OUTPUT -j limit-558 +-A OUTPUT -j limit-557 +-A OUTPUT -j limit-556 +-A OUTPUT -j limit-555 +-A OUTPUT -j limit-554 +-A OUTPUT -j limit-553 +-A OUTPUT -j limit-552 +-A OUTPUT -j limit-551 +-A OUTPUT -j limit-550 +-A OUTPUT -j limit-549 +-A OUTPUT -j limit-548 +-A OUTPUT -j limit-547 +-A OUTPUT -j limit-546 +-A OUTPUT -j limit-545 +-A OUTPUT -j limit-544 +-A OUTPUT -j limit-543 +-A OUTPUT -j limit-542 +-A OUTPUT -j limit-541 +-A OUTPUT -j limit-540 +-A OUTPUT -j limit-539 +-A OUTPUT -j limit-538 +-A OUTPUT -j limit-537 +-A OUTPUT -j limit-536 +-A OUTPUT -j limit-535 +-A OUTPUT -j limit-534 +-A OUTPUT -j limit-533 +-A OUTPUT -j limit-532 +-A OUTPUT -j limit-531 +-A OUTPUT -j limit-530 +-A OUTPUT -j limit-529 +-A OUTPUT -j limit-528 +-A OUTPUT -j limit-527 +-A OUTPUT -j limit-526 +-A OUTPUT -j limit-525 +-A OUTPUT -j limit-524 +-A OUTPUT -j limit-523 +-A OUTPUT -j limit-522 +-A OUTPUT -j limit-521 +-A OUTPUT -j limit-520 +-A OUTPUT -j limit-519 +-A OUTPUT -j limit-518 +-A OUTPUT -j limit-517 +-A OUTPUT -j limit-516 +-A OUTPUT -j limit-515 +-A OUTPUT -j limit-514 +-A OUTPUT -j limit-513 +-A OUTPUT -j limit-512 +-A OUTPUT -j limit-511 +-A OUTPUT -j limit-510 +-A OUTPUT -j limit-509 +-A OUTPUT -j limit-508 +-A OUTPUT -j limit-507 +-A OUTPUT -j limit-506 +-A OUTPUT -j limit-505 +-A OUTPUT -j limit-504 +-A OUTPUT -j limit-503 +-A OUTPUT -j limit-502 +-A OUTPUT -j limit-501 +-A OUTPUT -j limit-500 +-A OUTPUT -j limit-499 +-A OUTPUT -j limit-498 +-A OUTPUT -j limit-497 +-A OUTPUT -j limit-496 +-A OUTPUT -j limit-495 +-A OUTPUT -j limit-494 +-A OUTPUT -j limit-493 +-A OUTPUT -j limit-492 +-A OUTPUT -j limit-491 +-A OUTPUT -j limit-490 +-A OUTPUT -j limit-489 +-A OUTPUT -j limit-488 +-A OUTPUT -j limit-487 +-A OUTPUT -j limit-486 +-A OUTPUT -j limit-485 +-A OUTPUT -j limit-484 +-A OUTPUT -j limit-483 +-A OUTPUT -j limit-482 +-A OUTPUT -j limit-481 +-A OUTPUT -j limit-480 +-A OUTPUT -j limit-479 +-A OUTPUT -j limit-478 +-A OUTPUT -j limit-477 +-A OUTPUT -j limit-476 +-A OUTPUT -j limit-475 +-A OUTPUT -j limit-474 +-A OUTPUT -j limit-473 +-A OUTPUT -j limit-472 +-A OUTPUT -j limit-471 +-A OUTPUT -j limit-470 +-A OUTPUT -j limit-469 +-A OUTPUT -j limit-468 +-A OUTPUT -j limit-467 +-A OUTPUT -j limit-466 +-A OUTPUT -j limit-465 +-A OUTPUT -j limit-464 +-A OUTPUT -j limit-463 +-A OUTPUT -j limit-462 +-A OUTPUT -j limit-461 +-A OUTPUT -j limit-460 +-A OUTPUT -j limit-459 +-A OUTPUT -j limit-458 +-A OUTPUT -j limit-457 +-A OUTPUT -j limit-456 +-A OUTPUT -j limit-455 +-A OUTPUT -j limit-454 +-A OUTPUT -j limit-453 +-A OUTPUT -j limit-452 +-A OUTPUT -j limit-451 +-A OUTPUT -j limit-450 +-A OUTPUT -j limit-449 +-A OUTPUT -j limit-448 +-A OUTPUT -j limit-447 +-A OUTPUT -j limit-446 +-A OUTPUT -j limit-445 +-A OUTPUT -j limit-444 +-A OUTPUT -j limit-443 +-A OUTPUT -j limit-442 +-A OUTPUT -j limit-441 +-A OUTPUT -j limit-440 +-A OUTPUT -j limit-439 +-A OUTPUT -j limit-438 +-A OUTPUT -j limit-437 +-A OUTPUT -j limit-436 +-A OUTPUT -j limit-435 +-A OUTPUT -j limit-434 +-A OUTPUT -j limit-433 +-A OUTPUT -j limit-432 +-A OUTPUT -j limit-431 +-A OUTPUT -j limit-430 +-A OUTPUT -j limit-429 +-A OUTPUT -j limit-428 -A OUTPUT -j limit-427 -A OUTPUT -j limit-426 -A OUTPUT -j limit-425 @@ -2113,150 +3663,6 @@ -A OUTPUT -j limit-360 -A OUTPUT -j limit-359 -A OUTPUT -j limit-358 --A OUTPUT -j limit-357 --A OUTPUT -j limit-356 --A OUTPUT -j limit-355 --A OUTPUT -j limit-354 --A OUTPUT -j limit-353 --A OUTPUT -j limit-352 --A OUTPUT -j limit-351 --A OUTPUT -j limit-350 --A OUTPUT -j limit-349 --A OUTPUT -j limit-348 --A OUTPUT -j limit-347 --A OUTPUT -j limit-346 --A OUTPUT -j limit-345 --A OUTPUT -j limit-344 --A OUTPUT -j limit-343 --A OUTPUT -j limit-342 --A OUTPUT -j limit-341 --A OUTPUT -j limit-340 --A OUTPUT -j limit-339 --A OUTPUT -j limit-338 --A OUTPUT -j limit-337 --A OUTPUT -j limit-336 --A OUTPUT -j limit-335 --A OUTPUT -j limit-334 --A OUTPUT -j limit-333 --A OUTPUT -j limit-332 --A OUTPUT -j limit-331 --A OUTPUT -j limit-330 --A OUTPUT -j limit-329 --A OUTPUT -j limit-328 --A OUTPUT -j limit-327 --A OUTPUT -j limit-326 --A OUTPUT -j limit-325 --A OUTPUT -j limit-324 --A OUTPUT -j limit-323 --A OUTPUT -j limit-322 --A OUTPUT -j limit-321 --A OUTPUT -j limit-320 --A OUTPUT -j limit-319 --A OUTPUT -j limit-318 --A OUTPUT -j limit-317 --A OUTPUT -j limit-316 --A OUTPUT -j limit-315 --A OUTPUT -j limit-314 --A OUTPUT -j limit-313 --A OUTPUT -j limit-312 --A OUTPUT -j limit-311 --A OUTPUT -j limit-310 --A OUTPUT -j limit-309 --A OUTPUT -j limit-308 --A OUTPUT -j limit-307 --A OUTPUT -j limit-306 --A OUTPUT -j limit-305 --A OUTPUT -j limit-304 --A OUTPUT -j limit-303 --A OUTPUT -j limit-302 --A OUTPUT -j limit-301 --A OUTPUT -j limit-300 --A OUTPUT -j limit-299 --A OUTPUT -j limit-298 --A OUTPUT -j limit-297 --A OUTPUT -j limit-296 --A OUTPUT -j limit-295 --A OUTPUT -j limit-294 --A OUTPUT -j limit-293 --A OUTPUT -j limit-292 --A OUTPUT -j limit-291 --A OUTPUT -j limit-290 --A OUTPUT -j limit-289 --A OUTPUT -j limit-288 --A OUTPUT -j limit-287 --A OUTPUT -j limit-286 --A OUTPUT -j limit-285 --A OUTPUT -j limit-284 --A OUTPUT -j limit-283 --A OUTPUT -j limit-282 --A OUTPUT -j limit-281 --A OUTPUT -j limit-280 --A OUTPUT -j limit-279 --A OUTPUT -j limit-278 --A OUTPUT -j limit-277 --A OUTPUT -j limit-276 --A OUTPUT -j limit-275 --A OUTPUT -j limit-274 --A OUTPUT -j limit-273 --A OUTPUT -j limit-272 --A OUTPUT -j limit-271 --A OUTPUT -j limit-270 --A OUTPUT -j limit-269 --A OUTPUT -j limit-268 --A OUTPUT -j limit-267 --A OUTPUT -j limit-266 --A OUTPUT -j limit-265 --A OUTPUT -j limit-264 --A OUTPUT -j limit-263 --A OUTPUT -j limit-262 --A OUTPUT -j limit-261 --A OUTPUT -j limit-260 --A OUTPUT -j limit-259 --A OUTPUT -j limit-258 --A OUTPUT -j limit-257 --A OUTPUT -j limit-256 --A OUTPUT -j limit-255 --A OUTPUT -j limit-254 --A OUTPUT -j limit-253 --A OUTPUT -j limit-252 --A OUTPUT -j limit-251 --A OUTPUT -j limit-250 --A OUTPUT -j limit-249 --A OUTPUT -j limit-248 --A OUTPUT -j limit-247 --A OUTPUT -j limit-246 --A OUTPUT -j limit-245 --A OUTPUT -j limit-244 --A OUTPUT -j limit-243 --A OUTPUT -j limit-242 --A OUTPUT -j limit-241 --A OUTPUT -j limit-240 --A OUTPUT -j limit-239 --A OUTPUT -j limit-238 --A OUTPUT -j limit-237 --A OUTPUT -j limit-236 --A OUTPUT -j limit-235 --A OUTPUT -j limit-234 --A OUTPUT -j limit-233 --A OUTPUT -j limit-232 --A OUTPUT -j limit-231 --A OUTPUT -j limit-230 --A OUTPUT -j limit-229 --A OUTPUT -j limit-228 --A OUTPUT -j limit-227 --A OUTPUT -j limit-226 --A OUTPUT -j limit-225 --A OUTPUT -j limit-224 --A OUTPUT -j limit-223 --A OUTPUT -j limit-222 --A OUTPUT -j limit-221 --A OUTPUT -j limit-220 --A OUTPUT -j limit-219 --A OUTPUT -j limit-218 --A OUTPUT -j limit-217 --A OUTPUT -j limit-216 --A OUTPUT -j limit-215 --A OUTPUT -j limit-214 -A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A OUTPUT -o lo -j ACCEPT -A OUTPUT -j ACCEPT @@ -2308,29 +3714,29 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-40 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-41 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-42 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-43 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-44 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-45 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-46 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-47 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-48 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-48 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-49 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-50 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-51 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-52 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-53 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-54 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-55 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-56 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-57 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-58 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-59 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-60 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-60 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-61 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-62 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-63 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-64 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-65 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-66 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-67 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-68 @@ -2338,35 +3744,35 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-70 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-71 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-72 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-73 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-74 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-75 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-76 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-77 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-78 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-78 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-79 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-80 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-81 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-82 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-83 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-84 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-85 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-86 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-87 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-88 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-89 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-90 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-90 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-91 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-92 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-93 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-94 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-95 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-96 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-97 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-98 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-99 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-100 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-101 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-102 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-103 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-104 @@ -2374,11 +3780,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-106 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-107 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-108 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-50 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-110 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-111 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-112 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-54 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-114 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-115 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-116 @@ -2386,17 +3792,17 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-118 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-119 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-120 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-62 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-121 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-122 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-123 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-124 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-66 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-125 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-126 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-127 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-128 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-129 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-130 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-131 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-132 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-133 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-134 @@ -2404,11 +3810,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-136 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-137 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-138 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-140 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-141 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-142 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-144 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-145 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-146 @@ -2416,11 +3822,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-148 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-149 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-150 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-152 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-153 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-154 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-156 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-157 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-158 @@ -2428,17 +3834,17 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-160 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-161 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-162 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-163 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-164 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-165 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-166 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-167 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-168 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-169 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-170 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-171 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-172 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-173 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-174 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-175 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-176 @@ -2446,11 +3852,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-178 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-179 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-180 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-74 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-182 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-183 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-184 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-78 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-186 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-187 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-188 @@ -2458,11 +3864,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-190 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-191 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-192 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-193 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-86 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-194 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-195 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-196 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-197 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-90 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-198 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-199 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-200 @@ -2470,15 +3876,159 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-202 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-203 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-204 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-205 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-98 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-206 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-207 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-208 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-209 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-102 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-210 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-211 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-212 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-213 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-214 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-215 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-216 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-110 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-218 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-219 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-220 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-114 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-222 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-223 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-224 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-225 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-226 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-227 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-228 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-229 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-230 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-231 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-232 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-233 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-234 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-236 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-237 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-238 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-240 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-241 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-242 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-243 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-244 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-245 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-246 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-248 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-249 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-250 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-252 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-253 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-254 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-255 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-256 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-257 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-258 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-260 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-261 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-262 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-264 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-265 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-266 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-267 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-268 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-269 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-270 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-272 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-273 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-274 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-276 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-277 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-278 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-279 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-280 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-281 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-282 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-283 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-284 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-285 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-286 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-287 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-288 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-290 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-291 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-292 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-294 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-295 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-296 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-297 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-298 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-299 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-300 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-302 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-303 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-304 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-306 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-307 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-308 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-309 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-310 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-311 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-312 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-314 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-315 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-316 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-318 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-319 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-320 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-321 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-322 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-323 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-324 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-326 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-327 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-328 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-330 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-331 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-332 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-333 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-334 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-335 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-336 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-337 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-338 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-339 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-340 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-341 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-342 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-343 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-344 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-345 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-346 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-347 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-348 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-349 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-350 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-351 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-352 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-353 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-354 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-355 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-356 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-357 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-0 -A OUTPUT -j ACCEPT @@ -2593,6 +4143,150 @@ -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-37 -A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-38 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-39 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-40 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-41 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-42 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-43 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-44 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-45 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-46 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-47 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-48 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-49 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-50 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-51 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-52 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-53 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-54 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-55 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-56 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-57 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-58 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-59 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-60 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-61 +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT @@ -2708,16 +4402,19 @@ -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A OUTPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set +-A OUTPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A OUTPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set -A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set -A OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set -A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-199 +-A OUTPUT -j logdrop-343 -A OUTPUT -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT -A OUTPUT -j logaccept-14 --A OUTPUT -j logdrop-200 +-A OUTPUT -j logdrop-344 -A OUTPUT -j logpass-0 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP @@ -2743,1226 +4440,1982 @@ -A limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --set -A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-11 -A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-100 -m recent --name limit-100 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-41 --A limit-100 -m recent --name limit-100 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-101 -m recent --name limit-101 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-42 --A limit-101 -m recent --name limit-101 --rsource --mask 255.255.255.255 --set --A limit-102 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-43 --A limit-102 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-103 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-44 --A limit-103 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-104 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-45 +-A limit-100 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-100 -j ACCEPT +-A limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1000 -m limit --limit 1/second -j LOG +-A limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1004 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1004 -j ACCEPT +-A limit-1006 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1006 -m limit --limit 1/second -j LOG +-A limit-1006 -j ACCEPT +-A limit-1007 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1007 -m limit --limit 1/second -j LOG +-A limit-1008 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1008 -j ACCEPT +-A limit-1010 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1010 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1011 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1011 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1012 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1012 -m limit --limit 1/second -j LOG +-A limit-1012 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1013 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1013 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1014 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1014 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1015 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1015 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1016 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1016 -j ACCEPT +-A limit-1018 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1018 -m limit --limit 1/second -j LOG +-A limit-1018 -j ACCEPT +-A limit-1019 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1019 -m limit --limit 1/second -j LOG +-A limit-102 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-102 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1020 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1020 -j ACCEPT +-A limit-1022 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1022 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1023 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1023 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1024 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1024 -m limit --limit 1/second -j LOG +-A limit-1024 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1025 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1025 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1026 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1026 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1027 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1027 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1028 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1028 -j ACCEPT +-A limit-103 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-103 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1030 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1030 -m limit --limit 1/second -j LOG +-A limit-1030 -j ACCEPT +-A limit-1031 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1031 -m limit --limit 1/second -j LOG +-A limit-1032 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1032 -j ACCEPT +-A limit-1034 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1034 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1035 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1035 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1036 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1036 -m limit --limit 1/second -j LOG +-A limit-1036 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1037 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1037 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1038 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1038 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1039 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1039 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-104 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-104 -m limit --limit 1/second -j LOG --A limit-104 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-105 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-46 --A limit-105 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-106 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-47 --A limit-106 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-107 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-48 --A limit-107 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-108 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-49 +-A limit-104 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1040 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1040 -j ACCEPT +-A limit-1042 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1042 -m limit --limit 1/second -j LOG +-A limit-1042 -j ACCEPT +-A limit-1043 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1043 -m limit --limit 1/second -j LOG +-A limit-1044 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1044 -j ACCEPT +-A limit-1046 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1046 -j ACCEPT +-A limit-1046 -m limit --limit 1/second -j LOG +-A limit-1046 -j DROP +-A limit-1047 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1047 -j RETURN +-A limit-1047 -m limit --limit 1/second -j LOG +-A limit-1047 -j DROP +-A limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1048 -j logaccept-7 +-A limit-1048 -m limit --limit 1/second -j LOG +-A limit-1048 -j DROP +-A limit-1049 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1049 -j ACCEPT +-A limit-1049 -m limit --limit 1/second -j LOG +-A limit-1049 -j DROP +-A limit-105 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-105 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1050 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1050 -j ACCEPT +-A limit-1050 -m limit --limit 1/second -j LOG +-A limit-1050 -j DROP +-A limit-1051 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1051 -j RETURN +-A limit-1051 -m limit --limit 1/second -j LOG +-A limit-1051 -j DROP +-A limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1052 -j logaccept-8 +-A limit-1052 -m limit --limit 1/second -j LOG +-A limit-1052 -j DROP +-A limit-1053 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1053 -j ACCEPT +-A limit-1053 -m limit --limit 1/second -j LOG +-A limit-1053 -j DROP +-A limit-1054 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1054 -j ACCEPT +-A limit-1054 -j DROP +-A limit-1055 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1055 -j RETURN +-A limit-1055 -j DROP +-A limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1056 -j logaccept-9 +-A limit-1056 -j DROP +-A limit-1057 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1057 -j ACCEPT +-A limit-1057 -j DROP +-A limit-1058 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1058 -j ACCEPT +-A limit-1058 -j DROP +-A limit-1059 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1059 -j RETURN +-A limit-1059 -j DROP +-A limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1060 -j logaccept-10 +-A limit-1060 -j DROP +-A limit-1061 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1061 -j ACCEPT +-A limit-1061 -j DROP +-A limit-1062 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1062 -j ACCEPT +-A limit-1062 -m limit --limit 1/second -j LOG +-A limit-1062 -j DROP +-A limit-1063 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1063 -j RETURN +-A limit-1063 -m limit --limit 1/second -j LOG +-A limit-1063 -j DROP +-A limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1064 -j logaccept-11 +-A limit-1064 -m limit --limit 1/second -j LOG +-A limit-1064 -j DROP +-A limit-1065 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1065 -j ACCEPT +-A limit-1065 -m limit --limit 1/second -j LOG +-A limit-1065 -j DROP +-A limit-1066 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1066 -j ACCEPT +-A limit-1066 -j DROP +-A limit-1067 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1067 -j RETURN +-A limit-1067 -j DROP +-A limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1068 -j logaccept-12 +-A limit-1068 -j DROP +-A limit-1069 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1069 -j ACCEPT +-A limit-1069 -j DROP +-A limit-107 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-107 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1070 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1070 -j ACCEPT +-A limit-1070 -j DROP +-A limit-1071 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1071 -j RETURN +-A limit-1071 -j DROP +-A limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1072 -j logaccept-13 +-A limit-1072 -j DROP +-A limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1073 -j ACCEPT +-A limit-1073 -j DROP +-A limit-108 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-108 -j ACCEPT -A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-12 -A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --set --A limit-110 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-51 +-A limit-110 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-110 -m limit --limit 1/second -j LOG -A limit-110 -j ACCEPT --A limit-111 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-52 +-A limit-111 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-111 -m limit --limit 1/second -j LOG --A limit-112 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-53 +-A limit-112 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-112 -j ACCEPT --A limit-114 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-55 --A limit-114 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-115 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-56 --A limit-115 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-116 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-57 +-A limit-114 -m recent --name limit-114 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-114 -m recent --name limit-114 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-115 -m recent --name limit-115 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-115 -m recent --name limit-115 --rsource --mask 255.255.255.255 --set +-A limit-116 -m recent --name limit-116 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-116 -m limit --limit 1/second -j LOG --A limit-116 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-117 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-58 --A limit-117 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-118 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-59 --A limit-118 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-119 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-60 --A limit-119 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-116 -m recent --name limit-116 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-117 -m recent --name limit-117 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-117 -m recent --name limit-117 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-118 -m recent --name limit-118 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-118 -m recent --name limit-118 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-119 -m recent --name limit-119 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-119 -m recent --name limit-119 --rsource --mask 255.255.255.255 --set -A limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-13 -A limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-120 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-61 --A limit-120 -j ACCEPT --A limit-122 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-63 +-A limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-122 -m limit --limit 1/second -j LOG --A limit-122 -j ACCEPT --A limit-123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-64 --A limit-123 -m limit --limit 1/second -j LOG --A limit-124 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-65 --A limit-124 -j ACCEPT --A limit-126 -m recent --name limit-126 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-126 -m recent --name limit-126 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-127 -m recent --name limit-127 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-127 -m recent --name limit-127 --rsource --mask 255.255.255.255 --set --A limit-128 -m recent --name limit-128 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-126 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-126 -j ACCEPT +-A limit-128 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-128 -m limit --limit 1/second -j LOG --A limit-128 -m recent --name limit-128 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-129 -m recent --name limit-129 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-129 -m recent --name limit-129 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-128 -j ACCEPT +-A limit-129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-129 -m limit --limit 1/second -j LOG -A limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-14 -A limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-130 -m recent --name limit-130 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-130 -m recent --name limit-130 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-131 -m recent --name limit-131 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-131 -m recent --name limit-131 --rsource --mask 255.255.255.255 --set --A limit-132 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-132 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-133 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-133 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-134 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-130 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-130 -j ACCEPT +-A limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-134 -m limit --limit 1/second -j LOG --A limit-134 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-135 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-135 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-136 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-136 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-137 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-137 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-138 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-138 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-138 -j ACCEPT -A limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-15 -A limit-14 -m limit --limit 1/second -j LOG -A limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-140 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-140 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-140 -m limit --limit 1/second -j LOG -A limit-140 -j ACCEPT --A limit-141 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-141 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-141 -m limit --limit 1/second -j LOG --A limit-142 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-142 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-142 -j ACCEPT --A limit-144 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-144 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-145 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-145 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-146 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-144 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-144 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-145 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-145 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-146 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-146 -m limit --limit 1/second -j LOG --A limit-146 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-147 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-147 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-148 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-148 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-149 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-149 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-146 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-147 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-147 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-148 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-148 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-16 -A limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-150 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-150 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-150 -j ACCEPT --A limit-152 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-152 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-152 -m limit --limit 1/second -j LOG -A limit-152 -j ACCEPT --A limit-153 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-153 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-153 -m limit --limit 1/second -j LOG --A limit-154 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-154 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-154 -j ACCEPT --A limit-156 -m recent --name limit-156 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-156 -m recent --name limit-156 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-157 -m recent --name limit-157 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-157 -m recent --name limit-157 --rsource --mask 255.255.255.255 --set --A limit-158 -m recent --name limit-158 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-156 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-156 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-157 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-157 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-158 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-158 -m limit --limit 1/second -j LOG --A limit-158 -m recent --name limit-158 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-159 -m recent --name limit-159 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-159 -m recent --name limit-159 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-158 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-17 -A limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-160 -m recent --name limit-160 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-160 -m recent --name limit-160 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-161 -m recent --name limit-161 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-161 -m recent --name limit-161 --rsource --mask 255.255.255.255 --set --A limit-162 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-162 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-163 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-163 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-164 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-161 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-161 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-162 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-162 -j ACCEPT +-A limit-164 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-164 -m limit --limit 1/second -j LOG --A limit-164 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-165 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-165 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-166 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-166 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-167 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-167 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-168 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-168 -j ACCEPT +-A limit-164 -j ACCEPT +-A limit-165 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-165 -m limit --limit 1/second -j LOG +-A limit-166 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-166 -j ACCEPT +-A limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-61 +-A limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-62 +-A limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --set -A limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-18 -A limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-170 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-63 -A limit-170 -m limit --limit 1/second -j LOG --A limit-170 -j ACCEPT --A limit-171 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-171 -m limit --limit 1/second -j LOG --A limit-172 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-172 -j ACCEPT --A limit-174 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-174 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-175 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-175 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-176 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-64 +-A limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-65 +-A limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-66 +-A limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --set +-A limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-67 +-A limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-68 +-A limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-69 -A limit-176 -m limit --limit 1/second -j LOG --A limit-176 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-177 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-177 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-178 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-178 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-179 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-179 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-70 +-A limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-71 +-A limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-72 +-A limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-18 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-19 -A limit-18 -j ACCEPT --A limit-180 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-180 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-73 -A limit-180 -j ACCEPT --A limit-182 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-182 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-75 -A limit-182 -m limit --limit 1/second -j LOG -A limit-182 -j ACCEPT --A limit-183 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-183 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-76 -A limit-183 -m limit --limit 1/second -j LOG --A limit-184 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-184 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-77 -A limit-184 -j ACCEPT --A limit-186 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-186 -j ACCEPT --A limit-186 -m limit --limit 1/second -j LOG --A limit-186 -j DROP --A limit-187 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-187 -j RETURN --A limit-187 -m limit --limit 1/second -j LOG --A limit-187 -j DROP --A limit-188 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-188 -j logaccept-0 +-A limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-79 +-A limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-80 +-A limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-81 -A limit-188 -m limit --limit 1/second -j LOG --A limit-188 -j DROP --A limit-189 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-189 -j ACCEPT --A limit-189 -m limit --limit 1/second -j LOG --A limit-189 -j DROP --A limit-190 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-190 -j ACCEPT --A limit-190 -m limit --limit 1/second -j LOG --A limit-190 -j DROP --A limit-191 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-191 -j RETURN --A limit-191 -m limit --limit 1/second -j LOG --A limit-191 -j DROP --A limit-192 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-192 -j logaccept-1 --A limit-192 -m limit --limit 1/second -j LOG --A limit-192 -j DROP --A limit-193 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-193 -j ACCEPT --A limit-193 -m limit --limit 1/second -j LOG --A limit-193 -j DROP --A limit-194 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-194 -j ACCEPT --A limit-194 -j DROP --A limit-195 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-195 -j RETURN --A limit-195 -j DROP --A limit-196 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-196 -j logaccept-2 --A limit-196 -j DROP --A limit-197 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-197 -j ACCEPT --A limit-197 -j DROP --A limit-198 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-198 -j ACCEPT --A limit-198 -j DROP --A limit-199 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-199 -j RETURN --A limit-199 -j DROP +-A limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-82 +-A limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-83 +-A limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-84 +-A limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-192 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-85 +-A limit-192 -j ACCEPT +-A limit-194 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-87 +-A limit-194 -m limit --limit 1/second -j LOG +-A limit-194 -j ACCEPT +-A limit-195 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-88 +-A limit-195 -m limit --limit 1/second -j LOG +-A limit-196 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-89 +-A limit-196 -j ACCEPT +-A limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-91 +-A limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-92 +-A limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-3 -A limit-2 -m limit --limit 1/second -j LOG -A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-20 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-21 -A limit-20 -m limit --limit 1/second -j LOG -A limit-20 -j ACCEPT --A limit-200 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-200 -j logaccept-3 --A limit-200 -j DROP --A limit-201 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-201 -j ACCEPT --A limit-201 -j DROP --A limit-202 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-202 -j ACCEPT --A limit-202 -m limit --limit 1/second -j LOG --A limit-202 -j DROP --A limit-203 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-203 -j RETURN --A limit-203 -m limit --limit 1/second -j LOG --A limit-203 -j DROP --A limit-204 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-204 -j logaccept-4 --A limit-204 -m limit --limit 1/second -j LOG --A limit-204 -j DROP --A limit-205 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-205 -j ACCEPT --A limit-205 -m limit --limit 1/second -j LOG --A limit-205 -j DROP --A limit-206 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-206 -j ACCEPT --A limit-206 -j DROP --A limit-207 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-207 -j RETURN --A limit-207 -j DROP --A limit-208 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-208 -j logaccept-5 --A limit-208 -j DROP --A limit-209 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-209 -j ACCEPT --A limit-209 -j DROP +-A limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-93 +-A limit-200 -m limit --limit 1/second -j LOG +-A limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-94 +-A limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-95 +-A limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-96 +-A limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-204 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-97 +-A limit-204 -j ACCEPT +-A limit-206 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-99 +-A limit-206 -m limit --limit 1/second -j LOG +-A limit-206 -j ACCEPT +-A limit-207 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-100 +-A limit-207 -m limit --limit 1/second -j LOG +-A limit-208 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-101 +-A limit-208 -j ACCEPT -A limit-21 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-22 -A limit-21 -m limit --limit 1/second -j LOG --A limit-210 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-210 -j ACCEPT --A limit-210 -j DROP --A limit-211 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-211 -j RETURN --A limit-211 -j DROP --A limit-212 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-212 -j logaccept-6 --A limit-212 -j DROP --A limit-213 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-213 -j ACCEPT --A limit-213 -j DROP --A limit-214 -m recent --name limit-214 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-67 --A limit-214 -m recent --name limit-214 --rsource --mask 255.255.255.255 --set --A limit-215 -m recent --name limit-215 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-68 --A limit-215 -m recent --name limit-215 --rsource --mask 255.255.255.255 --set --A limit-216 -m recent --name limit-216 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-69 --A limit-216 -m recent --name limit-216 --rsource --mask 255.255.255.255 --set --A limit-217 -m recent --name limit-217 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-70 --A limit-217 -m recent --name limit-217 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-218 -m recent --name limit-218 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-71 --A limit-218 -m recent --name limit-218 --rsource --mask 255.255.255.255 --set --A limit-219 -m recent --name limit-219 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-72 --A limit-219 -m recent --name limit-219 --rsource --mask 255.255.255.255 --set +-A limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-103 +-A limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-104 +-A limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-105 +-A limit-212 -m limit --limit 1/second -j LOG +-A limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-106 +-A limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-107 +-A limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-108 +-A limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-216 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-109 +-A limit-216 -j ACCEPT +-A limit-218 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-111 +-A limit-218 -m limit --limit 1/second -j LOG +-A limit-218 -j ACCEPT +-A limit-219 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-112 +-A limit-219 -m limit --limit 1/second -j LOG -A limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-23 -A limit-22 -j ACCEPT --A limit-220 -m recent --name limit-220 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-73 --A limit-220 -m recent --name limit-220 --rsource --mask 255.255.255.255 --set --A limit-221 -m recent --name limit-221 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-74 --A limit-221 -m recent --name limit-221 --rsource --mask 255.255.255.255 --set --A limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-75 --A limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --set --A limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-76 --A limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-77 --A limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --set --A limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-78 --A limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --set --A limit-226 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-79 --A limit-226 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-227 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-80 --A limit-227 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-81 --A limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-82 --A limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-83 --A limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-84 --A limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-85 --A limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-86 --A limit-234 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-87 --A limit-235 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-88 --A limit-235 -m limit --limit 1/second -j LOG --A limit-236 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-89 --A limit-237 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-90 --A limit-238 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-91 --A limit-238 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-239 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-92 --A limit-239 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-220 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-113 +-A limit-220 -j ACCEPT +-A limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --set +-A limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-224 -m limit --limit 1/second -j LOG +-A limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --set +-A limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-230 -m limit --limit 1/second -j LOG +-A limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-234 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-234 -j ACCEPT +-A limit-236 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-236 -m limit --limit 1/second -j LOG +-A limit-236 -j ACCEPT +-A limit-237 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-237 -m limit --limit 1/second -j LOG +-A limit-238 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-238 -j ACCEPT -A limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-25 -A limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-93 --A limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-94 --A limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-95 --A limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-96 --A limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-97 --A limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-98 --A limit-246 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-99 --A limit-247 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-100 --A limit-247 -m limit --limit 1/second -j LOG --A limit-248 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-101 --A limit-249 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-102 +-A limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-242 -m limit --limit 1/second -j LOG +-A limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-246 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-246 -j ACCEPT +-A limit-248 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-248 -m limit --limit 1/second -j LOG +-A limit-248 -j ACCEPT +-A limit-249 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-249 -m limit --limit 1/second -j LOG -A limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-26 -A limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-250 -m recent --name limit-250 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-250 -m recent --name limit-250 --rsource --mask 255.255.255.255 --set --A limit-251 -m recent --name limit-251 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-251 -m recent --name limit-251 --rsource --mask 255.255.255.255 --set --A limit-252 -m recent --name limit-252 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-252 -m recent --name limit-252 --rsource --mask 255.255.255.255 --set --A limit-253 -m recent --name limit-253 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-253 -m recent --name limit-253 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-254 -m recent --name limit-254 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-254 -m recent --name limit-254 --rsource --mask 255.255.255.255 --set --A limit-255 -m recent --name limit-255 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-255 -m recent --name limit-255 --rsource --mask 255.255.255.255 --set --A limit-256 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-256 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-257 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-257 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-258 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-258 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-259 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-259 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-250 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-250 -j ACCEPT +-A limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-254 -m limit --limit 1/second -j LOG +-A limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-258 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-258 -j ACCEPT -A limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-27 -A limit-26 -m limit --limit 1/second -j LOG -A limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-260 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-260 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-261 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-261 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-262 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-263 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-264 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-265 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-265 -m limit --limit 1/second -j LOG --A limit-266 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-267 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-268 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-268 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-269 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-269 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-260 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-260 -m limit --limit 1/second -j LOG +-A limit-260 -j ACCEPT +-A limit-261 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-261 -m limit --limit 1/second -j LOG +-A limit-262 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-262 -j ACCEPT +-A limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-266 -m limit --limit 1/second -j LOG +-A limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-28 -A limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-270 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-270 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-271 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-271 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-272 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-272 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-273 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-273 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-274 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-275 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-276 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-277 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-277 -m limit --limit 1/second -j LOG --A limit-278 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-279 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-270 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-270 -j ACCEPT +-A limit-272 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-272 -m limit --limit 1/second -j LOG +-A limit-272 -j ACCEPT +-A limit-273 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-273 -m limit --limit 1/second -j LOG +-A limit-274 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-274 -j ACCEPT +-A limit-276 -m recent --name limit-276 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-276 -m recent --name limit-276 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-277 -m recent --name limit-277 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-277 -m recent --name limit-277 --rsource --mask 255.255.255.255 --set +-A limit-278 -m recent --name limit-278 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-278 -m limit --limit 1/second -j LOG +-A limit-278 -m recent --name limit-278 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-29 -A limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --set --A limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --set --A limit-282 -m recent --name limit-282 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-282 -m recent --name limit-282 --rsource --mask 255.255.255.255 --set --A limit-283 -m recent --name limit-283 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-283 -m recent --name limit-283 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-284 -m recent --name limit-284 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-284 -m recent --name limit-284 --rsource --mask 255.255.255.255 --set --A limit-285 -m recent --name limit-285 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-285 -m recent --name limit-285 --rsource --mask 255.255.255.255 --set --A limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-282 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-282 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-283 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-283 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-284 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-284 -m limit --limit 1/second -j LOG +-A limit-284 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-285 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-285 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-288 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-288 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-289 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-289 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-288 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-288 -j ACCEPT -A limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-30 -A limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-292 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-294 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-295 -m limit --limit 1/second -j LOG --A limit-296 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-297 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-290 -m limit --limit 1/second -j LOG +-A limit-290 -j ACCEPT +-A limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-291 -m limit --limit 1/second -j LOG +-A limit-292 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-292 -j ACCEPT +-A limit-294 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-294 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-295 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-295 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-296 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-296 -m limit --limit 1/second -j LOG +-A limit-296 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-297 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-297 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-4 -A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-30 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-31 -A limit-30 -j ACCEPT --A limit-300 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-300 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-301 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-301 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-302 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-302 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-303 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-303 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-304 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-305 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-306 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-307 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-307 -m limit --limit 1/second -j LOG --A limit-308 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-309 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-310 -m recent --name limit-310 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-103 --A limit-310 -m recent --name limit-310 --rsource --mask 255.255.255.255 --set --A limit-311 -m recent --name limit-311 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-104 --A limit-311 -m recent --name limit-311 --rsource --mask 255.255.255.255 --set --A limit-312 -m recent --name limit-312 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-105 --A limit-312 -m recent --name limit-312 --rsource --mask 255.255.255.255 --set --A limit-313 -m recent --name limit-313 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-106 --A limit-313 -m recent --name limit-313 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-314 -m recent --name limit-314 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-107 --A limit-314 -m recent --name limit-314 --rsource --mask 255.255.255.255 --set --A limit-315 -m recent --name limit-315 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-108 --A limit-315 -m recent --name limit-315 --rsource --mask 255.255.255.255 --set --A limit-316 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-109 --A limit-316 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-317 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-110 --A limit-317 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-318 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-111 --A limit-318 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-319 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-112 --A limit-319 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-300 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-300 -j ACCEPT +-A limit-302 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-302 -m limit --limit 1/second -j LOG +-A limit-302 -j ACCEPT +-A limit-303 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-303 -m limit --limit 1/second -j LOG +-A limit-304 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-304 -j ACCEPT +-A limit-306 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-306 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-307 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-307 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-308 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-308 -m limit --limit 1/second -j LOG +-A limit-308 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-311 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-311 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-312 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-312 -j ACCEPT +-A limit-314 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-314 -m limit --limit 1/second -j LOG +-A limit-314 -j ACCEPT +-A limit-315 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-315 -m limit --limit 1/second -j LOG +-A limit-316 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-316 -j ACCEPT +-A limit-318 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-318 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-32 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-33 -A limit-32 -m limit --limit 1/second -j LOG -A limit-32 -j ACCEPT --A limit-320 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-113 --A limit-320 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-321 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-114 --A limit-321 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-322 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-115 --A limit-323 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-116 --A limit-324 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-117 --A limit-325 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-118 --A limit-325 -m limit --limit 1/second -j LOG --A limit-326 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-119 --A limit-327 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-120 --A limit-328 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-121 --A limit-328 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-329 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-122 --A limit-329 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-320 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-320 -m limit --limit 1/second -j LOG +-A limit-320 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-321 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-321 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-322 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-322 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-323 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-323 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-324 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-324 -j ACCEPT +-A limit-326 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-326 -m limit --limit 1/second -j LOG +-A limit-326 -j ACCEPT +-A limit-327 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-327 -m limit --limit 1/second -j LOG +-A limit-328 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-328 -j ACCEPT -A limit-33 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-34 -A limit-33 -m limit --limit 1/second -j LOG --A limit-330 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-123 --A limit-330 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-331 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-124 --A limit-331 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-332 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-125 --A limit-332 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-333 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-126 --A limit-333 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-334 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-127 --A limit-335 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-128 --A limit-336 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-129 --A limit-337 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-130 +-A limit-330 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-330 -j ACCEPT +-A limit-330 -m limit --limit 1/second -j LOG +-A limit-330 -j DROP +-A limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-331 -j RETURN +-A limit-331 -m limit --limit 1/second -j LOG +-A limit-331 -j DROP +-A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-332 -j logaccept-0 +-A limit-332 -m limit --limit 1/second -j LOG +-A limit-332 -j DROP +-A limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-333 -j ACCEPT +-A limit-333 -m limit --limit 1/second -j LOG +-A limit-333 -j DROP +-A limit-334 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-334 -j ACCEPT +-A limit-334 -m limit --limit 1/second -j LOG +-A limit-334 -j DROP +-A limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-335 -j RETURN +-A limit-335 -m limit --limit 1/second -j LOG +-A limit-335 -j DROP +-A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-336 -j logaccept-1 +-A limit-336 -m limit --limit 1/second -j LOG +-A limit-336 -j DROP +-A limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-337 -j ACCEPT -A limit-337 -m limit --limit 1/second -j LOG --A limit-338 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-131 --A limit-339 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-132 +-A limit-337 -j DROP +-A limit-338 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-338 -j ACCEPT +-A limit-338 -j DROP +-A limit-339 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-339 -j RETURN +-A limit-339 -j DROP -A limit-34 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-35 -A limit-34 -j ACCEPT --A limit-340 -m recent --name limit-340 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-340 -m recent --name limit-340 --rsource --mask 255.255.255.255 --set --A limit-341 -m recent --name limit-341 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-341 -m recent --name limit-341 --rsource --mask 255.255.255.255 --set --A limit-342 -m recent --name limit-342 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-342 -m recent --name limit-342 --rsource --mask 255.255.255.255 --set --A limit-343 -m recent --name limit-343 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-343 -m recent --name limit-343 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-344 -m recent --name limit-344 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-344 -m recent --name limit-344 --rsource --mask 255.255.255.255 --set --A limit-345 -m recent --name limit-345 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-345 -m recent --name limit-345 --rsource --mask 255.255.255.255 --set --A limit-346 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-346 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-347 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-347 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-348 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-348 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-349 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-349 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-350 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-350 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-351 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-351 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-352 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-353 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-354 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-355 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-355 -m limit --limit 1/second -j LOG --A limit-356 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-357 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-358 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-358 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-359 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-359 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-36 -m recent --name limit-36 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-36 -m recent --name limit-36 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-360 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-360 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-361 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-361 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-362 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-362 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-363 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-363 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-364 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-365 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-366 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-367 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-367 -m limit --limit 1/second -j LOG --A limit-368 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-369 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-37 -m recent --name limit-37 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-37 -m recent --name limit-37 --rsource --mask 255.255.255.255 --set --A limit-370 -m recent --name limit-370 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-370 -m recent --name limit-370 --rsource --mask 255.255.255.255 --set --A limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --set --A limit-372 -m recent --name limit-372 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-372 -m recent --name limit-372 --rsource --mask 255.255.255.255 --set --A limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-374 -m recent --name limit-374 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-374 -m recent --name limit-374 --rsource --mask 255.255.255.255 --set --A limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --set --A limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-377 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-377 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-38 -m recent --name limit-38 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-340 -j logaccept-2 +-A limit-340 -j DROP +-A limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-341 -j ACCEPT +-A limit-341 -j DROP +-A limit-342 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-342 -j ACCEPT +-A limit-342 -j DROP +-A limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-343 -j RETURN +-A limit-343 -j DROP +-A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-344 -j logaccept-3 +-A limit-344 -j DROP +-A limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-345 -j ACCEPT +-A limit-345 -j DROP +-A limit-346 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-346 -j ACCEPT +-A limit-346 -m limit --limit 1/second -j LOG +-A limit-346 -j DROP +-A limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-347 -j RETURN +-A limit-347 -m limit --limit 1/second -j LOG +-A limit-347 -j DROP +-A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-348 -j logaccept-4 +-A limit-348 -m limit --limit 1/second -j LOG +-A limit-348 -j DROP +-A limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-349 -j ACCEPT +-A limit-349 -m limit --limit 1/second -j LOG +-A limit-349 -j DROP +-A limit-350 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-350 -j ACCEPT +-A limit-350 -j DROP +-A limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-351 -j RETURN +-A limit-351 -j DROP +-A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-352 -j logaccept-5 +-A limit-352 -j DROP +-A limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-353 -j ACCEPT +-A limit-353 -j DROP +-A limit-354 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-354 -j ACCEPT +-A limit-354 -j DROP +-A limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-355 -j RETURN +-A limit-355 -j DROP +-A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-356 -j logaccept-6 +-A limit-356 -j DROP +-A limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-357 -j ACCEPT +-A limit-357 -j DROP +-A limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-115 +-A limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --set +-A limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-116 +-A limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --set +-A limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-37 +-A limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-117 +-A limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --set +-A limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-118 +-A limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-119 +-A limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --set +-A limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-120 +-A limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --set +-A limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-121 +-A limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --set +-A limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-122 +-A limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --set +-A limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-123 +-A limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --set +-A limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-124 +-A limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-125 +-A limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --set +-A limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-126 +-A limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --set +-A limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-38 +-A limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-127 +-A limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-128 +-A limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-129 +-A limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-130 +-A limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-131 +-A limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-132 +-A limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-133 +-A limit-377 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-134 +-A limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-135 +-A limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-136 +-A limit-379 -m limit --limit 1/second -j LOG +-A limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-39 -A limit-38 -m limit --limit 1/second -j LOG --A limit-38 -m recent --name limit-38 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-382 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-383 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-384 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-385 -m limit --limit 1/second -j LOG --A limit-386 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-387 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-388 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-388 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-389 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-389 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-39 -m recent --name limit-39 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-39 -m recent --name limit-39 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-390 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-390 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-391 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-391 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-393 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-393 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-394 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-395 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-396 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-397 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-397 -m limit --limit 1/second -j LOG --A limit-398 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-399 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-137 +-A limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-138 +-A limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 +-A limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-140 +-A limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-141 +-A limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-142 +-A limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-143 +-A limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-144 +-A limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-388 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 +-A limit-389 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 +-A limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-40 +-A limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-390 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 +-A limit-391 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 +-A limit-391 -m limit --limit 1/second -j LOG +-A limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 +-A limit-393 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-150 +-A limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-151 +-A limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-152 +-A limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-153 +-A limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-154 +-A limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-155 +-A limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-156 +-A limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-5 -A limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-40 -m recent --name limit-40 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-40 -m recent --name limit-40 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-400 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-400 -j RETURN --A limit-400 -m limit --limit 1/second -j LOG --A limit-400 -j DROP --A limit-401 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-401 -j RETURN --A limit-401 -m limit --limit 1/second -j LOG --A limit-401 -j DROP --A limit-402 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-402 -j RETURN --A limit-402 -m limit --limit 1/second -j LOG --A limit-402 -j DROP --A limit-403 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-403 -j RETURN +-A limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-41 +-A limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-400 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-157 +-A limit-401 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-158 +-A limit-402 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-159 +-A limit-403 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-160 -A limit-403 -m limit --limit 1/second -j LOG --A limit-403 -j DROP --A limit-404 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-404 -j RETURN --A limit-404 -m limit --limit 1/second -j LOG --A limit-404 -j DROP --A limit-405 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-405 -j RETURN --A limit-405 -m limit --limit 1/second -j LOG --A limit-405 -j DROP --A limit-406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-406 -j RETURN --A limit-406 -m limit --limit 1/second -j LOG --A limit-406 -j DROP --A limit-407 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-407 -j RETURN --A limit-407 -m limit --limit 1/second -j LOG --A limit-407 -j DROP --A limit-408 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-408 -j RETURN --A limit-408 -j DROP --A limit-409 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-409 -j RETURN --A limit-409 -j DROP --A limit-41 -m recent --name limit-41 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-41 -m recent --name limit-41 --rsource --mask 255.255.255.255 --set --A limit-410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-410 -j RETURN --A limit-410 -j DROP --A limit-411 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-411 -j RETURN --A limit-411 -j DROP --A limit-412 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-412 -j RETURN --A limit-412 -j DROP --A limit-413 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-413 -j RETURN --A limit-413 -j DROP --A limit-414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-414 -j RETURN --A limit-414 -j DROP --A limit-415 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-415 -j RETURN --A limit-415 -j DROP --A limit-416 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-416 -j RETURN --A limit-416 -m limit --limit 1/second -j LOG --A limit-416 -j DROP --A limit-417 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-417 -j RETURN --A limit-417 -m limit --limit 1/second -j LOG --A limit-417 -j DROP --A limit-418 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-418 -j RETURN --A limit-418 -m limit --limit 1/second -j LOG --A limit-418 -j DROP --A limit-419 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-419 -j RETURN --A limit-419 -m limit --limit 1/second -j LOG --A limit-419 -j DROP --A limit-42 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-42 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-420 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-420 -j RETURN --A limit-420 -j DROP --A limit-421 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-421 -j RETURN --A limit-421 -j DROP --A limit-422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-422 -j RETURN --A limit-422 -j DROP --A limit-423 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-423 -j RETURN --A limit-423 -j DROP --A limit-424 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-424 -j RETURN --A limit-424 -j DROP --A limit-425 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-425 -j RETURN --A limit-425 -j DROP --A limit-426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-426 -j RETURN --A limit-426 -j DROP --A limit-427 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-427 -j RETURN --A limit-427 -j DROP --A limit-428 -m recent --name limit-428 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-133 --A limit-428 -m recent --name limit-428 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-429 -m recent --name limit-429 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-134 --A limit-429 -m recent --name limit-429 --rsource --mask 255.255.255.255 --set --A limit-43 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-43 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-430 -m recent --name limit-430 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-135 --A limit-430 -m limit --limit 1/second -j LOG --A limit-430 -m recent --name limit-430 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-431 -m recent --name limit-431 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-136 --A limit-431 -m recent --name limit-431 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-432 -m recent --name limit-432 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-137 --A limit-432 -m recent --name limit-432 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-433 -m recent --name limit-433 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-138 --A limit-433 -m recent --name limit-433 --rsource --mask 255.255.255.255 --set --A limit-434 -m recent --name limit-434 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 --A limit-434 -m recent --name limit-434 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-435 -m recent --name limit-435 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-140 --A limit-435 -m recent --name limit-435 --rsource --mask 255.255.255.255 --set --A limit-436 -m recent --name limit-436 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-141 --A limit-436 -m limit --limit 1/second -j LOG --A limit-436 -m recent --name limit-436 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-437 -m recent --name limit-437 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-142 --A limit-437 -m recent --name limit-437 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-438 -m recent --name limit-438 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-143 --A limit-438 -m recent --name limit-438 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-439 -m recent --name limit-439 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-144 --A limit-439 -m recent --name limit-439 --rsource --mask 255.255.255.255 --set --A limit-44 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-404 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-161 +-A limit-405 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-162 +-A limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-163 +-A limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-164 +-A limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-165 +-A limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-166 +-A limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-42 +-A limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-167 +-A limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-168 +-A limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-412 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-169 +-A limit-413 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-170 +-A limit-414 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-171 +-A limit-415 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-172 +-A limit-415 -m limit --limit 1/second -j LOG +-A limit-416 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-173 +-A limit-417 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-174 +-A limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --set +-A limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --set +-A limit-42 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-43 +-A limit-42 -j ACCEPT +-A limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --set +-A limit-421 -m recent --name limit-421 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-421 -m recent --name limit-421 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-422 -m recent --name limit-422 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-422 -m recent --name limit-422 --rsource --mask 255.255.255.255 --set +-A limit-423 -m recent --name limit-423 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-423 -m recent --name limit-423 --rsource --mask 255.255.255.255 --set +-A limit-424 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-424 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-425 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-425 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-426 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-426 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-427 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-427 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-430 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-431 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-432 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-433 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-433 -m limit --limit 1/second -j LOG +-A limit-434 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-435 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-436 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-436 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-437 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-437 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-44 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-45 -A limit-44 -m limit --limit 1/second -j LOG --A limit-44 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-440 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-145 --A limit-440 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-441 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-146 --A limit-441 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-442 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-147 --A limit-442 -m limit --limit 1/second -j LOG --A limit-442 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-443 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-148 --A limit-443 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-444 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-149 --A limit-444 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-445 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-150 --A limit-445 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-446 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-151 --A limit-446 -j ACCEPT --A limit-448 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-153 --A limit-448 -m limit --limit 1/second -j LOG --A limit-448 -j ACCEPT --A limit-449 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-154 --A limit-449 -m limit --limit 1/second -j LOG --A limit-45 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-45 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-450 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-155 --A limit-450 -j ACCEPT --A limit-452 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-157 --A limit-452 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-453 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-158 --A limit-453 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-454 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-159 --A limit-454 -m limit --limit 1/second -j LOG --A limit-454 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-455 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-160 --A limit-455 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-456 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-161 --A limit-456 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-457 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-162 --A limit-457 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-458 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-163 --A limit-458 -j ACCEPT --A limit-46 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-46 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-460 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-165 --A limit-460 -m limit --limit 1/second -j LOG --A limit-460 -j ACCEPT --A limit-461 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-166 --A limit-461 -m limit --limit 1/second -j LOG --A limit-462 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-167 --A limit-462 -j ACCEPT --A limit-464 -m recent --name limit-464 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-464 -m recent --name limit-464 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-465 -m recent --name limit-465 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-465 -m recent --name limit-465 --rsource --mask 255.255.255.255 --set --A limit-466 -m recent --name limit-466 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-466 -m limit --limit 1/second -j LOG --A limit-466 -m recent --name limit-466 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-467 -m recent --name limit-467 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-467 -m recent --name limit-467 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-468 -m recent --name limit-468 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-468 -m recent --name limit-468 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-469 -m recent --name limit-469 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-469 -m recent --name limit-469 --rsource --mask 255.255.255.255 --set --A limit-47 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-47 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-470 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-470 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-471 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-471 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-472 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-472 -m limit --limit 1/second -j LOG --A limit-472 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-473 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-473 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-474 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-474 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-475 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-475 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-476 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-476 -j ACCEPT --A limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-478 -m limit --limit 1/second -j LOG --A limit-478 -j ACCEPT --A limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-479 -m limit --limit 1/second -j LOG --A limit-48 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-48 -j ACCEPT --A limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-480 -j ACCEPT --A limit-482 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-482 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-483 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-483 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-484 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-484 -m limit --limit 1/second -j LOG --A limit-484 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-485 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-485 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-486 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-486 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-487 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-487 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-488 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-488 -j ACCEPT --A limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-490 -m limit --limit 1/second -j LOG --A limit-490 -j ACCEPT --A limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-491 -m limit --limit 1/second -j LOG --A limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-492 -j ACCEPT --A limit-494 -m recent --name limit-494 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-494 -m recent --name limit-494 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-495 -m recent --name limit-495 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-495 -m recent --name limit-495 --rsource --mask 255.255.255.255 --set --A limit-496 -m recent --name limit-496 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-496 -m limit --limit 1/second -j LOG --A limit-496 -m recent --name limit-496 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-497 -m recent --name limit-497 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-497 -m recent --name limit-497 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-498 -m recent --name limit-498 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-498 -m recent --name limit-498 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-499 -m recent --name limit-499 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-499 -m recent --name limit-499 --rsource --mask 255.255.255.255 --set +-A limit-44 -j ACCEPT +-A limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-441 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-441 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-442 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-443 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-444 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-445 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-445 -m limit --limit 1/second -j LOG +-A limit-446 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-447 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-45 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-46 +-A limit-45 -m limit --limit 1/second -j LOG +-A limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-451 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-451 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-452 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-452 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-453 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-453 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-454 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-455 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-456 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-457 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-457 -m limit --limit 1/second -j LOG +-A limit-458 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-459 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-46 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-47 +-A limit-46 -j ACCEPT +-A limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-461 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-461 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-462 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-462 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-463 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-464 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-464 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-465 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-465 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-466 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-467 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-468 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-469 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-469 -m limit --limit 1/second -j LOG +-A limit-470 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-471 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --set +-A limit-473 -m recent --name limit-473 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-473 -m recent --name limit-473 --rsource --mask 255.255.255.255 --set +-A limit-474 -m recent --name limit-474 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-474 -m recent --name limit-474 --rsource --mask 255.255.255.255 --set +-A limit-475 -m recent --name limit-475 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-475 -m recent --name limit-475 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-476 -m recent --name limit-476 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-476 -m recent --name limit-476 --rsource --mask 255.255.255.255 --set +-A limit-477 -m recent --name limit-477 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-477 -m recent --name limit-477 --rsource --mask 255.255.255.255 --set +-A limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-49 +-A limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-484 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-485 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-486 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-487 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-487 -m limit --limit 1/second -j LOG +-A limit-488 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-489 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-50 +-A limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-496 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-497 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-498 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-499 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-499 -m limit --limit 1/second -j LOG -A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-6 -A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set --A limit-50 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-51 -A limit-50 -m limit --limit 1/second -j LOG --A limit-50 -j ACCEPT --A limit-500 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-500 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-501 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-501 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-502 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-502 -m limit --limit 1/second -j LOG --A limit-502 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-503 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-503 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-504 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-504 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-505 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-505 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-506 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-506 -j ACCEPT --A limit-508 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-508 -m limit --limit 1/second -j LOG --A limit-508 -j ACCEPT --A limit-509 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-509 -m limit --limit 1/second -j LOG --A limit-51 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-51 -m limit --limit 1/second -j LOG --A limit-510 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-510 -j ACCEPT --A limit-512 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-512 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-513 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-513 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-514 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-514 -m limit --limit 1/second -j LOG --A limit-514 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-515 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-515 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-516 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-516 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-517 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-517 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-518 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-518 -j ACCEPT --A limit-52 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-52 -j ACCEPT --A limit-520 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-520 -m limit --limit 1/second -j LOG --A limit-520 -j ACCEPT --A limit-521 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-521 -m limit --limit 1/second -j LOG --A limit-522 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-522 -j ACCEPT --A limit-524 -m recent --name limit-524 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-169 --A limit-524 -m recent --name limit-524 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-525 -m recent --name limit-525 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-170 --A limit-525 -m recent --name limit-525 --rsource --mask 255.255.255.255 --set --A limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-171 --A limit-526 -m limit --limit 1/second -j LOG --A limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-172 --A limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-173 --A limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-174 --A limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --set --A limit-530 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-175 --A limit-530 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-531 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-176 --A limit-531 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-177 --A limit-532 -m limit --limit 1/second -j LOG --A limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-178 --A limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-179 --A limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-180 --A limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-181 --A limit-536 -j ACCEPT --A limit-538 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-183 --A limit-538 -m limit --limit 1/second -j LOG --A limit-538 -j ACCEPT --A limit-539 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-184 --A limit-539 -m limit --limit 1/second -j LOG --A limit-54 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-54 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-540 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-185 --A limit-540 -j ACCEPT --A limit-542 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-187 --A limit-542 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-543 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-188 --A limit-543 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-189 --A limit-544 -m limit --limit 1/second -j LOG --A limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-190 --A limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-191 --A limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-192 --A limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-193 --A limit-548 -j ACCEPT --A limit-55 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-55 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-195 --A limit-550 -m limit --limit 1/second -j LOG --A limit-550 -j ACCEPT --A limit-551 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-196 --A limit-551 -m limit --limit 1/second -j LOG --A limit-552 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-197 --A limit-552 -j ACCEPT --A limit-554 -m recent --name limit-554 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-554 -m recent --name limit-554 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-555 -m recent --name limit-555 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-555 -m recent --name limit-555 --rsource --mask 255.255.255.255 --set --A limit-556 -m recent --name limit-556 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-556 -m limit --limit 1/second -j LOG --A limit-556 -m recent --name limit-556 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-557 -m recent --name limit-557 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-557 -m recent --name limit-557 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-558 -m recent --name limit-558 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-558 -m recent --name limit-558 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-559 -m recent --name limit-559 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-559 -m recent --name limit-559 --rsource --mask 255.255.255.255 --set --A limit-56 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-500 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-501 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-502 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-502 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-503 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-503 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-504 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-504 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-505 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-505 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-506 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-506 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-508 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-509 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-52 +-A limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-510 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-511 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-511 -m limit --limit 1/second -j LOG +-A limit-512 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-513 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-514 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-514 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-515 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-515 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-516 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-516 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-517 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-517 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-53 +-A limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-520 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-521 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-522 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-523 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-523 -m limit --limit 1/second -j LOG +-A limit-524 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-525 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-175 +-A limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --set +-A limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-176 +-A limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --set +-A limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-177 +-A limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --set +-A limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-178 +-A limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-54 +-A limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-179 +-A limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --set +-A limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-180 +-A limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --set +-A limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-181 +-A limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-182 +-A limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-183 +-A limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-184 +-A limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-185 +-A limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-186 +-A limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-538 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-187 +-A limit-539 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-188 +-A limit-54 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-55 +-A limit-54 -j ACCEPT +-A limit-540 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-189 +-A limit-541 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-190 +-A limit-541 -m limit --limit 1/second -j LOG +-A limit-542 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-191 +-A limit-543 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-192 +-A limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-193 +-A limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-194 +-A limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-195 +-A limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-196 +-A limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-197 +-A limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-198 +-A limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-199 +-A limit-551 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-200 +-A limit-552 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-201 +-A limit-553 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-202 +-A limit-553 -m limit --limit 1/second -j LOG +-A limit-554 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-203 +-A limit-555 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-204 +-A limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-205 +-A limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-206 +-A limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-207 +-A limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-208 +-A limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-56 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-57 -A limit-56 -m limit --limit 1/second -j LOG --A limit-56 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-560 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-560 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-561 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-561 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-562 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-562 -m limit --limit 1/second -j LOG --A limit-562 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-563 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-563 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-564 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-564 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-565 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-565 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-566 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-566 -j ACCEPT --A limit-568 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-568 -m limit --limit 1/second -j LOG --A limit-568 -j ACCEPT --A limit-569 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-569 -m limit --limit 1/second -j LOG --A limit-57 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-57 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-570 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-570 -j ACCEPT --A limit-572 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-572 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-573 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-573 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-574 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-574 -m limit --limit 1/second -j LOG --A limit-574 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-575 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-575 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-576 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-576 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-577 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-577 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-578 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-578 -j ACCEPT --A limit-58 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-58 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-580 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-580 -m limit --limit 1/second -j LOG --A limit-580 -j ACCEPT --A limit-581 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-581 -m limit --limit 1/second -j LOG --A limit-582 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-582 -j ACCEPT +-A limit-56 -j ACCEPT +-A limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-209 +-A limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-210 +-A limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-211 +-A limit-563 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-212 +-A limit-564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-213 +-A limit-565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-214 +-A limit-565 -m limit --limit 1/second -j LOG +-A limit-566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-215 +-A limit-567 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-216 +-A limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-217 +-A limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-218 +-A limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-57 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-58 +-A limit-57 -m limit --limit 1/second -j LOG +-A limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-219 +-A limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-220 +-A limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-221 +-A limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-222 +-A limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-574 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-223 +-A limit-575 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-224 +-A limit-576 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-225 +-A limit-577 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-226 +-A limit-577 -m limit --limit 1/second -j LOG +-A limit-578 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-227 +-A limit-579 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-228 +-A limit-58 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-59 +-A limit-58 -j ACCEPT +-A limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --set +-A limit-581 -m recent --name limit-581 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-581 -m recent --name limit-581 --rsource --mask 255.255.255.255 --set +-A limit-582 -m recent --name limit-582 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-582 -m recent --name limit-582 --rsource --mask 255.255.255.255 --set +-A limit-583 -m recent --name limit-583 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-583 -m recent --name limit-583 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --set -A limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --set --A limit-586 -m recent --name limit-586 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-586 -m limit --limit 1/second -j LOG --A limit-586 -m recent --name limit-586 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-587 -m recent --name limit-587 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-587 -m recent --name limit-587 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-588 -m recent --name limit-588 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-588 -m recent --name limit-588 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-589 -m recent --name limit-589 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-589 -m recent --name limit-589 --rsource --mask 255.255.255.255 --set --A limit-59 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-59 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-586 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-586 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-587 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-587 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-592 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-592 -m limit --limit 1/second -j LOG --A limit-592 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-593 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-593 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-594 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-594 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-595 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-595 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-592 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-593 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-594 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-595 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-595 -m limit --limit 1/second -j LOG -A limit-596 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-596 -j ACCEPT --A limit-598 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-598 -m limit --limit 1/second -j LOG --A limit-598 -j ACCEPT --A limit-599 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-599 -m limit --limit 1/second -j LOG +-A limit-597 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-7 -A limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-60 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-60 -j ACCEPT --A limit-600 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-600 -j ACCEPT +-A limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-600 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-600 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-601 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-601 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-604 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-604 -m limit --limit 1/second -j LOG --A limit-604 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-605 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-605 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-606 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-606 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-607 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-607 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-604 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-605 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-606 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-607 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-607 -m limit --limit 1/second -j LOG -A limit-608 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-608 -j ACCEPT --A limit-610 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-610 -m limit --limit 1/second -j LOG --A limit-610 -j ACCEPT --A limit-611 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-611 -m limit --limit 1/second -j LOG --A limit-612 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-612 -j ACCEPT --A limit-614 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-614 -j ACCEPT --A limit-614 -m limit --limit 1/second -j LOG --A limit-614 -j DROP --A limit-615 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-615 -j RETURN --A limit-615 -m limit --limit 1/second -j LOG --A limit-615 -j DROP --A limit-616 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-616 -j logaccept-7 --A limit-616 -m limit --limit 1/second -j LOG --A limit-616 -j DROP --A limit-617 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-617 -j ACCEPT --A limit-617 -m limit --limit 1/second -j LOG --A limit-617 -j DROP --A limit-618 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-618 -j ACCEPT --A limit-618 -m limit --limit 1/second -j LOG --A limit-618 -j DROP --A limit-619 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-619 -j RETURN +-A limit-609 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-61 -m recent --name limit-61 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-61 -m recent --name limit-61 --rsource --mask 255.255.255.255 --set +-A limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-616 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-617 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-618 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-619 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-619 -m limit --limit 1/second -j LOG --A limit-619 -j DROP --A limit-62 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-62 -m recent --name limit-62 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-62 -m limit --limit 1/second -j LOG --A limit-62 -j ACCEPT --A limit-620 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-620 -j logaccept-8 --A limit-620 -m limit --limit 1/second -j LOG --A limit-620 -j DROP --A limit-621 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-621 -j ACCEPT --A limit-621 -m limit --limit 1/second -j LOG --A limit-621 -j DROP --A limit-622 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-622 -j ACCEPT --A limit-622 -j DROP --A limit-623 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-623 -j RETURN --A limit-623 -j DROP --A limit-624 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-624 -j logaccept-9 --A limit-624 -j DROP --A limit-625 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-625 -j ACCEPT --A limit-625 -j DROP --A limit-626 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-626 -j ACCEPT --A limit-626 -j DROP --A limit-627 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-627 -j RETURN --A limit-627 -j DROP --A limit-628 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-628 -j logaccept-10 --A limit-628 -j DROP --A limit-629 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-629 -j ACCEPT --A limit-629 -j DROP --A limit-63 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-63 -m limit --limit 1/second -j LOG --A limit-630 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-630 -j ACCEPT --A limit-630 -m limit --limit 1/second -j LOG --A limit-630 -j DROP --A limit-631 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-631 -j RETURN +-A limit-62 -m recent --name limit-62 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-620 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-621 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-628 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-629 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-63 -m recent --name limit-63 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-63 -m recent --name limit-63 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-630 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-631 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-631 -m limit --limit 1/second -j LOG --A limit-631 -j DROP --A limit-632 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-632 -j logaccept-11 --A limit-632 -m limit --limit 1/second -j LOG --A limit-632 -j DROP --A limit-633 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-633 -j ACCEPT --A limit-633 -m limit --limit 1/second -j LOG --A limit-633 -j DROP --A limit-634 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-634 -j ACCEPT --A limit-634 -j DROP --A limit-635 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-635 -j RETURN --A limit-635 -j DROP --A limit-636 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-636 -j logaccept-12 --A limit-636 -j DROP --A limit-637 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-637 -j ACCEPT --A limit-637 -j DROP --A limit-638 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-638 -j ACCEPT --A limit-638 -j DROP --A limit-639 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-639 -j RETURN --A limit-639 -j DROP --A limit-64 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-64 -j ACCEPT --A limit-640 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-640 -j logaccept-13 --A limit-640 -j DROP --A limit-641 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-641 -j ACCEPT --A limit-641 -j DROP --A limit-66 -m recent --name limit-66 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-66 -m recent --name limit-66 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-67 -m recent --name limit-67 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-67 -m recent --name limit-67 --rsource --mask 255.255.255.255 --set --A limit-68 -m recent --name limit-68 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-632 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-633 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --set +-A limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --set +-A limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --set +-A limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --set +-A limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --set +-A limit-64 -m recent --name limit-64 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-64 -m recent --name limit-64 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-640 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-640 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-641 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-641 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-642 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-642 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-643 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-643 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-644 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-644 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-646 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-647 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-648 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-649 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-649 -m limit --limit 1/second -j LOG +-A limit-65 -m recent --name limit-65 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-65 -m recent --name limit-65 --rsource --mask 255.255.255.255 --set +-A limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-651 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-652 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-652 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-653 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-653 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-654 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-654 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-655 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-655 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-656 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-656 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-657 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-657 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-658 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-659 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-66 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-66 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-660 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-661 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-661 -m limit --limit 1/second -j LOG +-A limit-662 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-663 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-664 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-664 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-665 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-665 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-666 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-666 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-667 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-667 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-668 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-668 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-669 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-669 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-67 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-67 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-670 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-671 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-672 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-673 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-673 -m limit --limit 1/second -j LOG +-A limit-674 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-675 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-676 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-676 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-677 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-677 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-678 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-678 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-679 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-679 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-68 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-68 -m limit --limit 1/second -j LOG --A limit-68 -m recent --name limit-68 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-69 -m recent --name limit-69 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-69 -m recent --name limit-69 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-68 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-680 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-680 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-681 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-681 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-682 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-683 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-684 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-685 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-685 -m limit --limit 1/second -j LOG +-A limit-686 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-687 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-688 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-688 -j RETURN +-A limit-688 -m limit --limit 1/second -j LOG +-A limit-688 -j DROP +-A limit-689 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-689 -j RETURN +-A limit-689 -m limit --limit 1/second -j LOG +-A limit-689 -j DROP +-A limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-690 -j RETURN +-A limit-690 -m limit --limit 1/second -j LOG +-A limit-690 -j DROP +-A limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-691 -j RETURN +-A limit-691 -m limit --limit 1/second -j LOG +-A limit-691 -j DROP +-A limit-692 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-692 -j RETURN +-A limit-692 -m limit --limit 1/second -j LOG +-A limit-692 -j DROP +-A limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-693 -j RETURN +-A limit-693 -m limit --limit 1/second -j LOG +-A limit-693 -j DROP +-A limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-694 -j RETURN +-A limit-694 -m limit --limit 1/second -j LOG +-A limit-694 -j DROP +-A limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-695 -j RETURN +-A limit-695 -m limit --limit 1/second -j LOG +-A limit-695 -j DROP +-A limit-696 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-696 -j RETURN +-A limit-696 -j DROP +-A limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-697 -j RETURN +-A limit-697 -j DROP +-A limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-698 -j RETURN +-A limit-698 -j DROP +-A limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-699 -j RETURN +-A limit-699 -j DROP -A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-8 -A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --set --A limit-70 -m recent --name limit-70 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-70 -m recent --name limit-70 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-71 -m recent --name limit-71 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-71 -m recent --name limit-71 --rsource --mask 255.255.255.255 --set --A limit-72 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-72 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-73 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-73 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-74 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-700 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-700 -j RETURN +-A limit-700 -j DROP +-A limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-701 -j RETURN +-A limit-701 -j DROP +-A limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-702 -j RETURN +-A limit-702 -j DROP +-A limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-703 -j RETURN +-A limit-703 -j DROP +-A limit-704 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-704 -j RETURN +-A limit-704 -m limit --limit 1/second -j LOG +-A limit-704 -j DROP +-A limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-705 -j RETURN +-A limit-705 -m limit --limit 1/second -j LOG +-A limit-705 -j DROP +-A limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-706 -j RETURN +-A limit-706 -m limit --limit 1/second -j LOG +-A limit-706 -j DROP +-A limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-707 -j RETURN +-A limit-707 -m limit --limit 1/second -j LOG +-A limit-707 -j DROP +-A limit-708 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-708 -j RETURN +-A limit-708 -j DROP +-A limit-709 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-709 -j RETURN +-A limit-709 -j DROP +-A limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-710 -j RETURN +-A limit-710 -j DROP +-A limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-711 -j RETURN +-A limit-711 -j DROP +-A limit-712 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-712 -j RETURN +-A limit-712 -j DROP +-A limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-713 -j RETURN +-A limit-713 -j DROP +-A limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-714 -j RETURN +-A limit-714 -j DROP +-A limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-715 -j RETURN +-A limit-715 -j DROP +-A limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-229 +-A limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-230 +-A limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --set +-A limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-231 +-A limit-718 -m limit --limit 1/second -j LOG +-A limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-232 +-A limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-72 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-72 -j ACCEPT +-A limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-233 +-A limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-234 +-A limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --set +-A limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-235 +-A limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-236 +-A limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --set +-A limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-237 +-A limit-724 -m limit --limit 1/second -j LOG +-A limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-238 +-A limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-239 +-A limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-240 +-A limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --set +-A limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-241 +-A limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-242 +-A limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-243 +-A limit-730 -m limit --limit 1/second -j LOG +-A limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-244 +-A limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-245 +-A limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-246 +-A limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-734 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-247 +-A limit-734 -j ACCEPT +-A limit-736 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-249 +-A limit-736 -m limit --limit 1/second -j LOG +-A limit-736 -j ACCEPT +-A limit-737 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-250 +-A limit-737 -m limit --limit 1/second -j LOG +-A limit-738 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-251 +-A limit-738 -j ACCEPT +-A limit-74 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-74 -m limit --limit 1/second -j LOG --A limit-74 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-75 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-75 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-76 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-76 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-77 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-77 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-78 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-78 -j ACCEPT +-A limit-74 -j ACCEPT +-A limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-253 +-A limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-254 +-A limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-255 +-A limit-742 -m limit --limit 1/second -j LOG +-A limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-256 +-A limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-257 +-A limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-258 +-A limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-746 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-259 +-A limit-746 -j ACCEPT +-A limit-748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-261 +-A limit-748 -m limit --limit 1/second -j LOG +-A limit-748 -j ACCEPT +-A limit-749 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-262 +-A limit-749 -m limit --limit 1/second -j LOG +-A limit-75 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-75 -m limit --limit 1/second -j LOG +-A limit-750 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-263 +-A limit-750 -j ACCEPT +-A limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-265 +-A limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-266 +-A limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-267 +-A limit-754 -m limit --limit 1/second -j LOG +-A limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-268 +-A limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-269 +-A limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-270 +-A limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-758 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-271 +-A limit-758 -j ACCEPT +-A limit-76 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-76 -j ACCEPT +-A limit-760 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-273 +-A limit-760 -m limit --limit 1/second -j LOG +-A limit-760 -j ACCEPT +-A limit-761 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-274 +-A limit-761 -m limit --limit 1/second -j LOG +-A limit-762 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-275 +-A limit-762 -j ACCEPT +-A limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-277 +-A limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-278 +-A limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-279 +-A limit-766 -m limit --limit 1/second -j LOG +-A limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-280 +-A limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-281 +-A limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-282 +-A limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-770 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-283 +-A limit-770 -j ACCEPT +-A limit-772 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-285 +-A limit-772 -m limit --limit 1/second -j LOG +-A limit-772 -j ACCEPT +-A limit-773 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-286 +-A limit-773 -m limit --limit 1/second -j LOG +-A limit-774 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-287 +-A limit-774 -j ACCEPT +-A limit-776 -m recent --name limit-776 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-776 -m recent --name limit-776 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-777 -m recent --name limit-777 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-777 -m recent --name limit-777 --rsource --mask 255.255.255.255 --set +-A limit-778 -m recent --name limit-778 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-778 -m limit --limit 1/second -j LOG +-A limit-778 -m recent --name limit-778 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-779 -m recent --name limit-779 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-779 -m recent --name limit-779 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-78 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-78 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-780 -m recent --name limit-780 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-780 -m recent --name limit-780 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --set +-A limit-782 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-782 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-783 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-783 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-784 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-784 -m limit --limit 1/second -j LOG +-A limit-784 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-785 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-785 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-786 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-786 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-787 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-787 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-788 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-788 -j ACCEPT +-A limit-79 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-79 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-790 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-790 -m limit --limit 1/second -j LOG +-A limit-790 -j ACCEPT +-A limit-791 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-791 -m limit --limit 1/second -j LOG +-A limit-792 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-792 -j ACCEPT +-A limit-794 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-794 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-795 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-795 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-796 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-796 -m limit --limit 1/second -j LOG +-A limit-796 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-797 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-797 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-798 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-798 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-9 -A limit-8 -m limit --limit 1/second -j LOG -A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-80 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-80 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-80 -m limit --limit 1/second -j LOG --A limit-80 -j ACCEPT --A limit-81 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-81 -m limit --limit 1/second -j LOG --A limit-82 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-82 -j ACCEPT --A limit-84 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-84 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-85 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-85 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-86 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-80 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-800 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-800 -j ACCEPT +-A limit-802 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-802 -m limit --limit 1/second -j LOG +-A limit-802 -j ACCEPT +-A limit-803 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-803 -m limit --limit 1/second -j LOG +-A limit-804 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-804 -j ACCEPT +-A limit-806 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-806 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-807 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-807 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-808 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-808 -m limit --limit 1/second -j LOG +-A limit-808 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-809 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-809 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-81 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-81 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-810 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-810 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-811 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-811 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-812 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-812 -j ACCEPT +-A limit-814 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-814 -m limit --limit 1/second -j LOG +-A limit-814 -j ACCEPT +-A limit-815 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-815 -m limit --limit 1/second -j LOG +-A limit-816 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-816 -j ACCEPT +-A limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-82 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-82 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-820 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-820 -m limit --limit 1/second -j LOG +-A limit-820 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-821 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-821 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-822 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-822 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-823 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-823 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-824 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-824 -j ACCEPT +-A limit-826 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-826 -m limit --limit 1/second -j LOG +-A limit-826 -j ACCEPT +-A limit-827 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-827 -m limit --limit 1/second -j LOG +-A limit-828 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-828 -j ACCEPT +-A limit-83 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-83 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-830 -m recent --name limit-830 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-830 -m recent --name limit-830 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-831 -m recent --name limit-831 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-831 -m recent --name limit-831 --rsource --mask 255.255.255.255 --set +-A limit-832 -m recent --name limit-832 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-832 -m limit --limit 1/second -j LOG +-A limit-832 -m recent --name limit-832 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-833 -m recent --name limit-833 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-833 -m recent --name limit-833 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-834 -m recent --name limit-834 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-834 -m recent --name limit-834 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-835 -m recent --name limit-835 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-835 -m recent --name limit-835 --rsource --mask 255.255.255.255 --set +-A limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-838 -m limit --limit 1/second -j LOG +-A limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-84 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-84 -j ACCEPT +-A limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-842 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-842 -j ACCEPT +-A limit-844 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-844 -m limit --limit 1/second -j LOG +-A limit-844 -j ACCEPT +-A limit-845 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-845 -m limit --limit 1/second -j LOG +-A limit-846 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-846 -j ACCEPT +-A limit-848 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-848 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-849 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-849 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-850 -m limit --limit 1/second -j LOG +-A limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-854 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-854 -j ACCEPT +-A limit-856 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-856 -m limit --limit 1/second -j LOG +-A limit-856 -j ACCEPT +-A limit-857 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-857 -m limit --limit 1/second -j LOG +-A limit-858 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-858 -j ACCEPT +-A limit-86 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-86 -m limit --limit 1/second -j LOG --A limit-86 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-87 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-87 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-88 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-88 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-89 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-89 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-86 -j ACCEPT +-A limit-860 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-860 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-861 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-861 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-862 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-862 -m limit --limit 1/second -j LOG +-A limit-862 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-863 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-863 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-864 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-864 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-865 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-865 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-866 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-866 -j ACCEPT +-A limit-868 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-868 -m limit --limit 1/second -j LOG +-A limit-868 -j ACCEPT +-A limit-869 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-869 -m limit --limit 1/second -j LOG +-A limit-87 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-87 -m limit --limit 1/second -j LOG +-A limit-870 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-870 -j ACCEPT +-A limit-872 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-872 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-873 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-873 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-874 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-874 -m limit --limit 1/second -j LOG +-A limit-874 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-875 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-875 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-876 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-876 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-877 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-877 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-878 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-878 -j ACCEPT +-A limit-88 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-88 -j ACCEPT +-A limit-880 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-880 -m limit --limit 1/second -j LOG +-A limit-880 -j ACCEPT +-A limit-881 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-881 -m limit --limit 1/second -j LOG +-A limit-882 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-882 -j ACCEPT +-A limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-289 +-A limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-290 +-A limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --set +-A limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-291 +-A limit-886 -m limit --limit 1/second -j LOG +-A limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-292 +-A limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-293 +-A limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-294 +-A limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --set +-A limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-295 +-A limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-296 +-A limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-297 +-A limit-892 -m limit --limit 1/second -j LOG +-A limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-298 +-A limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-299 +-A limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-300 +-A limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-896 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-301 +-A limit-896 -j ACCEPT +-A limit-898 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-303 +-A limit-898 -m limit --limit 1/second -j LOG +-A limit-898 -j ACCEPT +-A limit-899 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-304 +-A limit-899 -m limit --limit 1/second -j LOG -A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-10 -A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-90 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-90 -j ACCEPT --A limit-92 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-900 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-305 +-A limit-900 -j ACCEPT +-A limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-307 +-A limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-308 +-A limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-309 +-A limit-904 -m limit --limit 1/second -j LOG +-A limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-310 +-A limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-311 +-A limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-312 +-A limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-908 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-313 +-A limit-908 -j ACCEPT +-A limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-910 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-315 +-A limit-910 -m limit --limit 1/second -j LOG +-A limit-910 -j ACCEPT +-A limit-911 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-316 +-A limit-911 -m limit --limit 1/second -j LOG +-A limit-912 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-317 +-A limit-912 -j ACCEPT +-A limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-319 +-A limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-320 +-A limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-321 +-A limit-916 -m limit --limit 1/second -j LOG +-A limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-322 +-A limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-323 +-A limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-324 +-A limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-92 -m limit --limit 1/second -j LOG --A limit-92 -j ACCEPT --A limit-93 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-93 -m limit --limit 1/second -j LOG --A limit-94 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-94 -j ACCEPT --A limit-96 -m recent --name limit-96 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-37 --A limit-96 -m recent --name limit-96 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-97 -m recent --name limit-97 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-38 --A limit-97 -m recent --name limit-97 --rsource --mask 255.255.255.255 --set --A limit-98 -m recent --name limit-98 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-39 +-A limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-920 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-325 +-A limit-920 -j ACCEPT +-A limit-922 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-327 +-A limit-922 -m limit --limit 1/second -j LOG +-A limit-922 -j ACCEPT +-A limit-923 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-328 +-A limit-923 -m limit --limit 1/second -j LOG +-A limit-924 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-329 +-A limit-924 -j ACCEPT +-A limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-331 +-A limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-332 +-A limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-333 +-A limit-928 -m limit --limit 1/second -j LOG +-A limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-334 +-A limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-335 +-A limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-336 +-A limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-932 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-337 +-A limit-932 -j ACCEPT +-A limit-934 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-339 +-A limit-934 -m limit --limit 1/second -j LOG +-A limit-934 -j ACCEPT +-A limit-935 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-340 +-A limit-935 -m limit --limit 1/second -j LOG +-A limit-936 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-341 +-A limit-936 -j ACCEPT +-A limit-938 -m recent --name limit-938 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-938 -m recent --name limit-938 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-939 -m recent --name limit-939 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-939 -m recent --name limit-939 --rsource --mask 255.255.255.255 --set +-A limit-94 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-94 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-940 -m recent --name limit-940 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-940 -m limit --limit 1/second -j LOG +-A limit-940 -m recent --name limit-940 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-941 -m recent --name limit-941 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-941 -m recent --name limit-941 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-942 -m recent --name limit-942 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-942 -m recent --name limit-942 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-943 -m recent --name limit-943 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-943 -m recent --name limit-943 --rsource --mask 255.255.255.255 --set +-A limit-944 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-944 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-945 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-945 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-946 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-946 -m limit --limit 1/second -j LOG +-A limit-946 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-947 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-947 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-948 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-948 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-949 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-949 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-95 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-95 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-950 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-950 -j ACCEPT +-A limit-952 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-952 -m limit --limit 1/second -j LOG +-A limit-952 -j ACCEPT +-A limit-953 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-953 -m limit --limit 1/second -j LOG +-A limit-954 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-954 -j ACCEPT +-A limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-957 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-957 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-958 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-958 -m limit --limit 1/second -j LOG +-A limit-958 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-959 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-959 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-96 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-96 -j ACCEPT +-A limit-960 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-960 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-961 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-961 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-962 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-962 -j ACCEPT +-A limit-964 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-964 -m limit --limit 1/second -j LOG +-A limit-964 -j ACCEPT +-A limit-965 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-965 -m limit --limit 1/second -j LOG +-A limit-966 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-966 -j ACCEPT +-A limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-970 -m limit --limit 1/second -j LOG +-A limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-973 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-973 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-974 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-974 -j ACCEPT +-A limit-976 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-976 -m limit --limit 1/second -j LOG +-A limit-976 -j ACCEPT +-A limit-977 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-977 -m limit --limit 1/second -j LOG +-A limit-978 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-978 -j ACCEPT +-A limit-98 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-98 -m limit --limit 1/second -j LOG --A limit-98 -m recent --name limit-98 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-99 -m recent --name limit-99 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-40 --A limit-99 -m recent --name limit-99 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-98 -j ACCEPT +-A limit-980 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-980 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-982 -m limit --limit 1/second -j LOG +-A limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-986 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-986 -j ACCEPT +-A limit-988 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-988 -m limit --limit 1/second -j LOG +-A limit-988 -j ACCEPT +-A limit-989 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-989 -m limit --limit 1/second -j LOG +-A limit-99 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-99 -m limit --limit 1/second -j LOG +-A limit-990 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-990 -j ACCEPT +-A limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --set +-A limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-994 -m limit --limit 1/second -j LOG +-A limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-996 -m recent --name limit-996 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-996 -m recent --name limit-996 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --set +-A limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT -A logaccept-1 -m limit --limit 1/second -j LOG @@ -4057,12 +6510,60 @@ -A logaccept-final-36 -j ACCEPT -A logaccept-final-37 -m limit --limit 1/second -j LOG -A logaccept-final-37 -j ACCEPT +-A logaccept-final-38 -m limit --limit 1/second -j LOG +-A logaccept-final-38 -j ACCEPT +-A logaccept-final-39 -m limit --limit 1/second -j LOG +-A logaccept-final-39 -j ACCEPT -A logaccept-final-4 -m limit --limit 1/second -j LOG -A logaccept-final-4 -j ACCEPT +-A logaccept-final-40 -m limit --limit 1/second -j LOG +-A logaccept-final-40 -j ACCEPT +-A logaccept-final-41 -m limit --limit 1/second -j LOG +-A logaccept-final-41 -j ACCEPT +-A logaccept-final-42 -m limit --limit 1/second -j LOG +-A logaccept-final-42 -j ACCEPT +-A logaccept-final-43 -m limit --limit 1/second -j LOG +-A logaccept-final-43 -j ACCEPT +-A logaccept-final-44 -m limit --limit 1/second -j LOG +-A logaccept-final-44 -j ACCEPT +-A logaccept-final-45 -m limit --limit 1/second -j LOG +-A logaccept-final-45 -j ACCEPT +-A logaccept-final-46 -m limit --limit 1/second -j LOG +-A logaccept-final-46 -j ACCEPT +-A logaccept-final-47 -m limit --limit 1/second -j LOG +-A logaccept-final-47 -j ACCEPT +-A logaccept-final-48 -m limit --limit 1/second -j LOG +-A logaccept-final-48 -j ACCEPT +-A logaccept-final-49 -m limit --limit 1/second -j LOG +-A logaccept-final-49 -j ACCEPT -A logaccept-final-5 -m limit --limit 1/second -j LOG -A logaccept-final-5 -j ACCEPT +-A logaccept-final-50 -m limit --limit 1/second -j LOG +-A logaccept-final-50 -j ACCEPT +-A logaccept-final-51 -m limit --limit 1/second -j LOG +-A logaccept-final-51 -j ACCEPT +-A logaccept-final-52 -m limit --limit 1/second -j LOG +-A logaccept-final-52 -j ACCEPT +-A logaccept-final-53 -m limit --limit 1/second -j LOG +-A logaccept-final-53 -j ACCEPT +-A logaccept-final-54 -m limit --limit 1/second -j LOG +-A logaccept-final-54 -j ACCEPT +-A logaccept-final-55 -m limit --limit 1/second -j LOG +-A logaccept-final-55 -j ACCEPT +-A logaccept-final-56 -m limit --limit 1/second -j LOG +-A logaccept-final-56 -j ACCEPT +-A logaccept-final-57 -m limit --limit 1/second -j LOG +-A logaccept-final-57 -j ACCEPT +-A logaccept-final-58 -m limit --limit 1/second -j LOG +-A logaccept-final-58 -j ACCEPT +-A logaccept-final-59 -m limit --limit 1/second -j LOG +-A logaccept-final-59 -j ACCEPT -A logaccept-final-6 -m limit --limit 1/second -j LOG -A logaccept-final-6 -j ACCEPT +-A logaccept-final-60 -m limit --limit 1/second -j LOG +-A logaccept-final-60 -j ACCEPT +-A logaccept-final-61 -m limit --limit 1/second -j LOG +-A logaccept-final-61 -j ACCEPT -A logaccept-final-7 -m limit --limit 1/second -j LOG -A logaccept-final-7 -j ACCEPT -A logaccept-final-8 -m limit --limit 1/second -j LOG @@ -4079,8 +6580,6 @@ -A logdrop-100 -j DROP -A logdrop-101 -m limit --limit 1/second -j LOG -A logdrop-101 -j DROP --A logdrop-102 -m limit --limit 1/second -j LOG --A logdrop-102 -j DROP -A logdrop-103 -m limit --limit 1/second -j LOG -A logdrop-103 -j DROP -A logdrop-104 -m limit --limit 1/second -j LOG @@ -4097,16 +6596,12 @@ -A logdrop-109 -j DROP -A logdrop-11 -m limit --limit 1/second -j LOG -A logdrop-11 -j DROP --A logdrop-110 -m limit --limit 1/second -j LOG --A logdrop-110 -j DROP -A logdrop-111 -m limit --limit 1/second -j LOG -A logdrop-111 -j DROP -A logdrop-112 -m limit --limit 1/second -j LOG -A logdrop-112 -j DROP -A logdrop-113 -m limit --limit 1/second -j LOG -A logdrop-113 -j DROP --A logdrop-114 -m limit --limit 1/second -j LOG --A logdrop-114 -j DROP -A logdrop-115 -m limit --limit 1/second -j LOG -A logdrop-115 -j DROP -A logdrop-116 -m limit --limit 1/second -j LOG @@ -4189,12 +6684,16 @@ -A logdrop-150 -j DROP -A logdrop-151 -m limit --limit 1/second -j LOG -A logdrop-151 -j DROP +-A logdrop-152 -m limit --limit 1/second -j LOG +-A logdrop-152 -j DROP -A logdrop-153 -m limit --limit 1/second -j LOG -A logdrop-153 -j DROP -A logdrop-154 -m limit --limit 1/second -j LOG -A logdrop-154 -j DROP -A logdrop-155 -m limit --limit 1/second -j LOG -A logdrop-155 -j DROP +-A logdrop-156 -m limit --limit 1/second -j LOG +-A logdrop-156 -j DROP -A logdrop-157 -m limit --limit 1/second -j LOG -A logdrop-157 -j DROP -A logdrop-158 -m limit --limit 1/second -j LOG @@ -4211,12 +6710,16 @@ -A logdrop-162 -j DROP -A logdrop-163 -m limit --limit 1/second -j LOG -A logdrop-163 -j DROP +-A logdrop-164 -m limit --limit 1/second -j LOG +-A logdrop-164 -j DROP -A logdrop-165 -m limit --limit 1/second -j LOG -A logdrop-165 -j DROP -A logdrop-166 -m limit --limit 1/second -j LOG -A logdrop-166 -j DROP -A logdrop-167 -m limit --limit 1/second -j LOG -A logdrop-167 -j DROP +-A logdrop-168 -m limit --limit 1/second -j LOG +-A logdrop-168 -j DROP -A logdrop-169 -m limit --limit 1/second -j LOG -A logdrop-169 -j DROP -A logdrop-17 -m limit --limit 1/second -j LOG @@ -4247,12 +6750,16 @@ -A logdrop-180 -j DROP -A logdrop-181 -m limit --limit 1/second -j LOG -A logdrop-181 -j DROP +-A logdrop-182 -m limit --limit 1/second -j LOG +-A logdrop-182 -j DROP -A logdrop-183 -m limit --limit 1/second -j LOG -A logdrop-183 -j DROP -A logdrop-184 -m limit --limit 1/second -j LOG -A logdrop-184 -j DROP -A logdrop-185 -m limit --limit 1/second -j LOG -A logdrop-185 -j DROP +-A logdrop-186 -m limit --limit 1/second -j LOG +-A logdrop-186 -j DROP -A logdrop-187 -m limit --limit 1/second -j LOG -A logdrop-187 -j DROP -A logdrop-188 -m limit --limit 1/second -j LOG @@ -4269,44 +6776,304 @@ -A logdrop-192 -j DROP -A logdrop-193 -m limit --limit 1/second -j LOG -A logdrop-193 -j DROP +-A logdrop-194 -m limit --limit 1/second -j LOG +-A logdrop-194 -j DROP -A logdrop-195 -m limit --limit 1/second -j LOG -A logdrop-195 -j DROP -A logdrop-196 -m limit --limit 1/second -j LOG -A logdrop-196 -j DROP -A logdrop-197 -m limit --limit 1/second -j LOG -A logdrop-197 -j DROP +-A logdrop-198 -m limit --limit 1/second -j LOG +-A logdrop-198 -j DROP -A logdrop-199 -m limit --limit 1/second -j LOG -A logdrop-199 -j DROP -A logdrop-2 -m limit --limit 1/second -j LOG -A logdrop-2 -j DROP -A logdrop-200 -m limit --limit 1/second -j LOG -A logdrop-200 -j DROP +-A logdrop-201 -m limit --limit 1/second -j LOG +-A logdrop-201 -j DROP +-A logdrop-202 -m limit --limit 1/second -j LOG +-A logdrop-202 -j DROP +-A logdrop-203 -m limit --limit 1/second -j LOG +-A logdrop-203 -j DROP +-A logdrop-204 -m limit --limit 1/second -j LOG +-A logdrop-204 -j DROP +-A logdrop-205 -m limit --limit 1/second -j LOG +-A logdrop-205 -j DROP +-A logdrop-206 -m limit --limit 1/second -j LOG +-A logdrop-206 -j DROP +-A logdrop-207 -m limit --limit 1/second -j LOG +-A logdrop-207 -j DROP +-A logdrop-208 -m limit --limit 1/second -j LOG +-A logdrop-208 -j DROP +-A logdrop-209 -m limit --limit 1/second -j LOG +-A logdrop-209 -j DROP -A logdrop-21 -m limit --limit 1/second -j LOG -A logdrop-21 -j DROP +-A logdrop-210 -m limit --limit 1/second -j LOG +-A logdrop-210 -j DROP +-A logdrop-211 -m limit --limit 1/second -j LOG +-A logdrop-211 -j DROP +-A logdrop-212 -m limit --limit 1/second -j LOG +-A logdrop-212 -j DROP +-A logdrop-213 -m limit --limit 1/second -j LOG +-A logdrop-213 -j DROP +-A logdrop-214 -m limit --limit 1/second -j LOG +-A logdrop-214 -j DROP +-A logdrop-215 -m limit --limit 1/second -j LOG +-A logdrop-215 -j DROP +-A logdrop-216 -m limit --limit 1/second -j LOG +-A logdrop-216 -j DROP +-A logdrop-217 -m limit --limit 1/second -j LOG +-A logdrop-217 -j DROP +-A logdrop-218 -m limit --limit 1/second -j LOG +-A logdrop-218 -j DROP +-A logdrop-219 -m limit --limit 1/second -j LOG +-A logdrop-219 -j DROP -A logdrop-22 -m limit --limit 1/second -j LOG -A logdrop-22 -j DROP +-A logdrop-220 -m limit --limit 1/second -j LOG +-A logdrop-220 -j DROP +-A logdrop-221 -m limit --limit 1/second -j LOG +-A logdrop-221 -j DROP +-A logdrop-222 -m limit --limit 1/second -j LOG +-A logdrop-222 -j DROP +-A logdrop-223 -m limit --limit 1/second -j LOG +-A logdrop-223 -j DROP +-A logdrop-224 -m limit --limit 1/second -j LOG +-A logdrop-224 -j DROP +-A logdrop-225 -m limit --limit 1/second -j LOG +-A logdrop-225 -j DROP +-A logdrop-226 -m limit --limit 1/second -j LOG +-A logdrop-226 -j DROP +-A logdrop-227 -m limit --limit 1/second -j LOG +-A logdrop-227 -j DROP +-A logdrop-228 -m limit --limit 1/second -j LOG +-A logdrop-228 -j DROP +-A logdrop-229 -m limit --limit 1/second -j LOG +-A logdrop-229 -j DROP -A logdrop-23 -m limit --limit 1/second -j LOG -A logdrop-23 -j DROP +-A logdrop-230 -m limit --limit 1/second -j LOG +-A logdrop-230 -j DROP +-A logdrop-231 -m limit --limit 1/second -j LOG +-A logdrop-231 -j DROP +-A logdrop-232 -m limit --limit 1/second -j LOG +-A logdrop-232 -j DROP +-A logdrop-233 -m limit --limit 1/second -j LOG +-A logdrop-233 -j DROP +-A logdrop-234 -m limit --limit 1/second -j LOG +-A logdrop-234 -j DROP +-A logdrop-235 -m limit --limit 1/second -j LOG +-A logdrop-235 -j DROP +-A logdrop-236 -m limit --limit 1/second -j LOG +-A logdrop-236 -j DROP +-A logdrop-237 -m limit --limit 1/second -j LOG +-A logdrop-237 -j DROP +-A logdrop-238 -m limit --limit 1/second -j LOG +-A logdrop-238 -j DROP +-A logdrop-239 -m limit --limit 1/second -j LOG +-A logdrop-239 -j DROP +-A logdrop-240 -m limit --limit 1/second -j LOG +-A logdrop-240 -j DROP +-A logdrop-241 -m limit --limit 1/second -j LOG +-A logdrop-241 -j DROP +-A logdrop-242 -m limit --limit 1/second -j LOG +-A logdrop-242 -j DROP +-A logdrop-243 -m limit --limit 1/second -j LOG +-A logdrop-243 -j DROP +-A logdrop-244 -m limit --limit 1/second -j LOG +-A logdrop-244 -j DROP +-A logdrop-245 -m limit --limit 1/second -j LOG +-A logdrop-245 -j DROP +-A logdrop-246 -m limit --limit 1/second -j LOG +-A logdrop-246 -j DROP +-A logdrop-247 -m limit --limit 1/second -j LOG +-A logdrop-247 -j DROP +-A logdrop-249 -m limit --limit 1/second -j LOG +-A logdrop-249 -j DROP -A logdrop-25 -m limit --limit 1/second -j LOG -A logdrop-25 -j DROP +-A logdrop-250 -m limit --limit 1/second -j LOG +-A logdrop-250 -j DROP +-A logdrop-251 -m limit --limit 1/second -j LOG +-A logdrop-251 -j DROP +-A logdrop-253 -m limit --limit 1/second -j LOG +-A logdrop-253 -j DROP +-A logdrop-254 -m limit --limit 1/second -j LOG +-A logdrop-254 -j DROP +-A logdrop-255 -m limit --limit 1/second -j LOG +-A logdrop-255 -j DROP +-A logdrop-256 -m limit --limit 1/second -j LOG +-A logdrop-256 -j DROP +-A logdrop-257 -m limit --limit 1/second -j LOG +-A logdrop-257 -j DROP +-A logdrop-258 -m limit --limit 1/second -j LOG +-A logdrop-258 -j DROP +-A logdrop-259 -m limit --limit 1/second -j LOG +-A logdrop-259 -j DROP -A logdrop-26 -m limit --limit 1/second -j LOG -A logdrop-26 -j DROP +-A logdrop-261 -m limit --limit 1/second -j LOG +-A logdrop-261 -j DROP +-A logdrop-262 -m limit --limit 1/second -j LOG +-A logdrop-262 -j DROP +-A logdrop-263 -m limit --limit 1/second -j LOG +-A logdrop-263 -j DROP +-A logdrop-265 -m limit --limit 1/second -j LOG +-A logdrop-265 -j DROP +-A logdrop-266 -m limit --limit 1/second -j LOG +-A logdrop-266 -j DROP +-A logdrop-267 -m limit --limit 1/second -j LOG +-A logdrop-267 -j DROP +-A logdrop-268 -m limit --limit 1/second -j LOG +-A logdrop-268 -j DROP +-A logdrop-269 -m limit --limit 1/second -j LOG +-A logdrop-269 -j DROP -A logdrop-27 -m limit --limit 1/second -j LOG -A logdrop-27 -j DROP +-A logdrop-270 -m limit --limit 1/second -j LOG +-A logdrop-270 -j DROP +-A logdrop-271 -m limit --limit 1/second -j LOG +-A logdrop-271 -j DROP +-A logdrop-273 -m limit --limit 1/second -j LOG +-A logdrop-273 -j DROP +-A logdrop-274 -m limit --limit 1/second -j LOG +-A logdrop-274 -j DROP +-A logdrop-275 -m limit --limit 1/second -j LOG +-A logdrop-275 -j DROP +-A logdrop-277 -m limit --limit 1/second -j LOG +-A logdrop-277 -j DROP +-A logdrop-278 -m limit --limit 1/second -j LOG +-A logdrop-278 -j DROP +-A logdrop-279 -m limit --limit 1/second -j LOG +-A logdrop-279 -j DROP -A logdrop-28 -m limit --limit 1/second -j LOG -A logdrop-28 -j DROP +-A logdrop-280 -m limit --limit 1/second -j LOG +-A logdrop-280 -j DROP +-A logdrop-281 -m limit --limit 1/second -j LOG +-A logdrop-281 -j DROP +-A logdrop-282 -m limit --limit 1/second -j LOG +-A logdrop-282 -j DROP +-A logdrop-283 -m limit --limit 1/second -j LOG +-A logdrop-283 -j DROP +-A logdrop-285 -m limit --limit 1/second -j LOG +-A logdrop-285 -j DROP +-A logdrop-286 -m limit --limit 1/second -j LOG +-A logdrop-286 -j DROP +-A logdrop-287 -m limit --limit 1/second -j LOG +-A logdrop-287 -j DROP +-A logdrop-289 -m limit --limit 1/second -j LOG +-A logdrop-289 -j DROP -A logdrop-29 -m limit --limit 1/second -j LOG -A logdrop-29 -j DROP +-A logdrop-290 -m limit --limit 1/second -j LOG +-A logdrop-290 -j DROP +-A logdrop-291 -m limit --limit 1/second -j LOG +-A logdrop-291 -j DROP +-A logdrop-292 -m limit --limit 1/second -j LOG +-A logdrop-292 -j DROP +-A logdrop-293 -m limit --limit 1/second -j LOG +-A logdrop-293 -j DROP +-A logdrop-294 -m limit --limit 1/second -j LOG +-A logdrop-294 -j DROP +-A logdrop-295 -m limit --limit 1/second -j LOG +-A logdrop-295 -j DROP +-A logdrop-296 -m limit --limit 1/second -j LOG +-A logdrop-296 -j DROP +-A logdrop-297 -m limit --limit 1/second -j LOG +-A logdrop-297 -j DROP +-A logdrop-298 -m limit --limit 1/second -j LOG +-A logdrop-298 -j DROP +-A logdrop-299 -m limit --limit 1/second -j LOG +-A logdrop-299 -j DROP -A logdrop-3 -m limit --limit 1/second -j LOG -A logdrop-3 -j DROP -A logdrop-30 -m limit --limit 1/second -j LOG -A logdrop-30 -j DROP +-A logdrop-300 -m limit --limit 1/second -j LOG +-A logdrop-300 -j DROP +-A logdrop-301 -m limit --limit 1/second -j LOG +-A logdrop-301 -j DROP +-A logdrop-303 -m limit --limit 1/second -j LOG +-A logdrop-303 -j DROP +-A logdrop-304 -m limit --limit 1/second -j LOG +-A logdrop-304 -j DROP +-A logdrop-305 -m limit --limit 1/second -j LOG +-A logdrop-305 -j DROP +-A logdrop-307 -m limit --limit 1/second -j LOG +-A logdrop-307 -j DROP +-A logdrop-308 -m limit --limit 1/second -j LOG +-A logdrop-308 -j DROP +-A logdrop-309 -m limit --limit 1/second -j LOG +-A logdrop-309 -j DROP -A logdrop-31 -m limit --limit 1/second -j LOG -A logdrop-31 -j DROP +-A logdrop-310 -m limit --limit 1/second -j LOG +-A logdrop-310 -j DROP +-A logdrop-311 -m limit --limit 1/second -j LOG +-A logdrop-311 -j DROP +-A logdrop-312 -m limit --limit 1/second -j LOG +-A logdrop-312 -j DROP +-A logdrop-313 -m limit --limit 1/second -j LOG +-A logdrop-313 -j DROP +-A logdrop-315 -m limit --limit 1/second -j LOG +-A logdrop-315 -j DROP +-A logdrop-316 -m limit --limit 1/second -j LOG +-A logdrop-316 -j DROP +-A logdrop-317 -m limit --limit 1/second -j LOG +-A logdrop-317 -j DROP +-A logdrop-319 -m limit --limit 1/second -j LOG +-A logdrop-319 -j DROP +-A logdrop-320 -m limit --limit 1/second -j LOG +-A logdrop-320 -j DROP +-A logdrop-321 -m limit --limit 1/second -j LOG +-A logdrop-321 -j DROP +-A logdrop-322 -m limit --limit 1/second -j LOG +-A logdrop-322 -j DROP +-A logdrop-323 -m limit --limit 1/second -j LOG +-A logdrop-323 -j DROP +-A logdrop-324 -m limit --limit 1/second -j LOG +-A logdrop-324 -j DROP +-A logdrop-325 -m limit --limit 1/second -j LOG +-A logdrop-325 -j DROP +-A logdrop-327 -m limit --limit 1/second -j LOG +-A logdrop-327 -j DROP +-A logdrop-328 -m limit --limit 1/second -j LOG +-A logdrop-328 -j DROP +-A logdrop-329 -m limit --limit 1/second -j LOG +-A logdrop-329 -j DROP -A logdrop-33 -m limit --limit 1/second -j LOG -A logdrop-33 -j DROP +-A logdrop-331 -m limit --limit 1/second -j LOG +-A logdrop-331 -j DROP +-A logdrop-332 -m limit --limit 1/second -j LOG +-A logdrop-332 -j DROP +-A logdrop-333 -m limit --limit 1/second -j LOG +-A logdrop-333 -j DROP +-A logdrop-334 -m limit --limit 1/second -j LOG +-A logdrop-334 -j DROP +-A logdrop-335 -m limit --limit 1/second -j LOG +-A logdrop-335 -j DROP +-A logdrop-336 -m limit --limit 1/second -j LOG +-A logdrop-336 -j DROP +-A logdrop-337 -m limit --limit 1/second -j LOG +-A logdrop-337 -j DROP +-A logdrop-339 -m limit --limit 1/second -j LOG +-A logdrop-339 -j DROP -A logdrop-34 -m limit --limit 1/second -j LOG -A logdrop-34 -j DROP +-A logdrop-340 -m limit --limit 1/second -j LOG +-A logdrop-340 -j DROP +-A logdrop-341 -m limit --limit 1/second -j LOG +-A logdrop-341 -j DROP +-A logdrop-343 -m limit --limit 1/second -j LOG +-A logdrop-343 -j DROP +-A logdrop-344 -m limit --limit 1/second -j LOG +-A logdrop-344 -j DROP -A logdrop-35 -m limit --limit 1/second -j LOG -A logdrop-35 -j DROP -A logdrop-37 -m limit --limit 1/second -j LOG @@ -4325,30 +7092,28 @@ -A logdrop-42 -j DROP -A logdrop-43 -m limit --limit 1/second -j LOG -A logdrop-43 -j DROP --A logdrop-44 -m limit --limit 1/second -j LOG --A logdrop-44 -j DROP -A logdrop-45 -m limit --limit 1/second -j LOG -A logdrop-45 -j DROP -A logdrop-46 -m limit --limit 1/second -j LOG -A logdrop-46 -j DROP -A logdrop-47 -m limit --limit 1/second -j LOG -A logdrop-47 -j DROP --A logdrop-48 -m limit --limit 1/second -j LOG --A logdrop-48 -j DROP -A logdrop-49 -m limit --limit 1/second -j LOG -A logdrop-49 -j DROP -A logdrop-5 -m limit --limit 1/second -j LOG -A logdrop-5 -j DROP +-A logdrop-50 -m limit --limit 1/second -j LOG +-A logdrop-50 -j DROP -A logdrop-51 -m limit --limit 1/second -j LOG -A logdrop-51 -j DROP -A logdrop-52 -m limit --limit 1/second -j LOG -A logdrop-52 -j DROP -A logdrop-53 -m limit --limit 1/second -j LOG -A logdrop-53 -j DROP +-A logdrop-54 -m limit --limit 1/second -j LOG +-A logdrop-54 -j DROP -A logdrop-55 -m limit --limit 1/second -j LOG -A logdrop-55 -j DROP --A logdrop-56 -m limit --limit 1/second -j LOG --A logdrop-56 -j DROP -A logdrop-57 -m limit --limit 1/second -j LOG -A logdrop-57 -j DROP -A logdrop-58 -m limit --limit 1/second -j LOG @@ -4357,16 +7122,18 @@ -A logdrop-59 -j DROP -A logdrop-6 -m limit --limit 1/second -j LOG -A logdrop-6 -j DROP --A logdrop-60 -m limit --limit 1/second -j LOG --A logdrop-60 -j DROP -A logdrop-61 -m limit --limit 1/second -j LOG -A logdrop-61 -j DROP +-A logdrop-62 -m limit --limit 1/second -j LOG +-A logdrop-62 -j DROP -A logdrop-63 -m limit --limit 1/second -j LOG -A logdrop-63 -j DROP -A logdrop-64 -m limit --limit 1/second -j LOG -A logdrop-64 -j DROP -A logdrop-65 -m limit --limit 1/second -j LOG -A logdrop-65 -j DROP +-A logdrop-66 -m limit --limit 1/second -j LOG +-A logdrop-66 -j DROP -A logdrop-67 -m limit --limit 1/second -j LOG -A logdrop-67 -j DROP -A logdrop-68 -m limit --limit 1/second -j LOG @@ -4383,16 +7150,12 @@ -A logdrop-72 -j DROP -A logdrop-73 -m limit --limit 1/second -j LOG -A logdrop-73 -j DROP --A logdrop-74 -m limit --limit 1/second -j LOG --A logdrop-74 -j DROP -A logdrop-75 -m limit --limit 1/second -j LOG -A logdrop-75 -j DROP -A logdrop-76 -m limit --limit 1/second -j LOG -A logdrop-76 -j DROP -A logdrop-77 -m limit --limit 1/second -j LOG -A logdrop-77 -j DROP --A logdrop-78 -m limit --limit 1/second -j LOG --A logdrop-78 -j DROP -A logdrop-79 -m limit --limit 1/second -j LOG -A logdrop-79 -j DROP -A logdrop-8 -m limit --limit 1/second -j LOG @@ -4409,8 +7172,6 @@ -A logdrop-84 -j DROP -A logdrop-85 -m limit --limit 1/second -j LOG -A logdrop-85 -j DROP --A logdrop-86 -m limit --limit 1/second -j LOG --A logdrop-86 -j DROP -A logdrop-87 -m limit --limit 1/second -j LOG -A logdrop-87 -j DROP -A logdrop-88 -m limit --limit 1/second -j LOG @@ -4419,8 +7180,6 @@ -A logdrop-89 -j DROP -A logdrop-9 -m limit --limit 1/second -j LOG -A logdrop-9 -j DROP --A logdrop-90 -m limit --limit 1/second -j LOG --A logdrop-90 -j DROP -A logdrop-91 -m limit --limit 1/second -j LOG -A logdrop-91 -j DROP -A logdrop-92 -m limit --limit 1/second -j LOG @@ -4435,8 +7194,6 @@ -A logdrop-96 -j DROP -A logdrop-97 -m limit --limit 1/second -j LOG -A logdrop-97 -j DROP --A logdrop-98 -m limit --limit 1/second -j LOG --A logdrop-98 -j DROP -A logdrop-99 -m limit --limit 1/second -j LOG -A logdrop-99 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG @@ -4592,6 +7349,78 @@ COMMIT -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -p tcp --dport 80 -j CT --notrack -A OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack -A OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack @@ -4817,6 +7646,150 @@ COMMIT -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack -A PREROUTING -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack -A PREROUTING -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack diff --git a/test/output/rules6-save b/test/output/rules6-save index b9e1d5c..2718d7a 100644 --- a/test/output/rules6-save +++ b/test/output/rules6-save @@ -8,13 +8,78 @@ :limit-1 - [0:0] :limit-10 - [0:0] :limit-100 - [0:0] -:limit-101 - [0:0] +:limit-1000 - [0:0] +:limit-1001 - [0:0] +:limit-1002 - [0:0] +:limit-1003 - [0:0] +:limit-1004 - [0:0] +:limit-1006 - [0:0] +:limit-1007 - [0:0] +:limit-1008 - [0:0] +:limit-1010 - [0:0] +:limit-1011 - [0:0] +:limit-1012 - [0:0] +:limit-1013 - [0:0] +:limit-1014 - [0:0] +:limit-1015 - [0:0] +:limit-1016 - [0:0] +:limit-1018 - [0:0] +:limit-1019 - [0:0] :limit-102 - [0:0] +:limit-1020 - [0:0] +:limit-1022 - [0:0] +:limit-1023 - [0:0] +:limit-1024 - [0:0] +:limit-1025 - [0:0] +:limit-1026 - [0:0] +:limit-1027 - [0:0] +:limit-1028 - [0:0] :limit-103 - [0:0] +:limit-1030 - [0:0] +:limit-1031 - [0:0] +:limit-1032 - [0:0] +:limit-1034 - [0:0] +:limit-1035 - [0:0] +:limit-1036 - [0:0] +:limit-1037 - [0:0] +:limit-1038 - [0:0] +:limit-1039 - [0:0] :limit-104 - [0:0] +:limit-1040 - [0:0] +:limit-1042 - [0:0] +:limit-1043 - [0:0] +:limit-1044 - [0:0] +:limit-1046 - [0:0] +:limit-1047 - [0:0] +:limit-1048 - [0:0] +:limit-1049 - [0:0] :limit-105 - [0:0] +:limit-1050 - [0:0] +:limit-1051 - [0:0] +:limit-1052 - [0:0] +:limit-1053 - [0:0] +:limit-1054 - [0:0] +:limit-1055 - [0:0] +:limit-1056 - [0:0] +:limit-1057 - [0:0] +:limit-1058 - [0:0] +:limit-1059 - [0:0] :limit-106 - [0:0] +:limit-1060 - [0:0] +:limit-1061 - [0:0] +:limit-1062 - [0:0] +:limit-1063 - [0:0] +:limit-1064 - [0:0] +:limit-1065 - [0:0] +:limit-1066 - [0:0] +:limit-1067 - [0:0] +:limit-1068 - [0:0] +:limit-1069 - [0:0] :limit-107 - [0:0] +:limit-1070 - [0:0] +:limit-1071 - [0:0] +:limit-1072 - [0:0] +:limit-1073 - [0:0] :limit-108 - [0:0] :limit-11 - [0:0] :limit-110 - [0:0] @@ -28,16 +93,16 @@ :limit-119 - [0:0] :limit-12 - [0:0] :limit-120 - [0:0] +:limit-121 - [0:0] :limit-122 - [0:0] :limit-123 - [0:0] :limit-124 - [0:0] +:limit-125 - [0:0] :limit-126 - [0:0] -:limit-127 - [0:0] :limit-128 - [0:0] :limit-129 - [0:0] :limit-13 - [0:0] :limit-130 - [0:0] -:limit-131 - [0:0] :limit-132 - [0:0] :limit-133 - [0:0] :limit-134 - [0:0] @@ -68,16 +133,16 @@ :limit-160 - [0:0] :limit-161 - [0:0] :limit-162 - [0:0] -:limit-163 - [0:0] :limit-164 - [0:0] :limit-165 - [0:0] :limit-166 - [0:0] -:limit-167 - [0:0] :limit-168 - [0:0] +:limit-169 - [0:0] :limit-17 - [0:0] :limit-170 - [0:0] :limit-171 - [0:0] :limit-172 - [0:0] +:limit-173 - [0:0] :limit-174 - [0:0] :limit-175 - [0:0] :limit-176 - [0:0] @@ -96,11 +161,9 @@ :limit-190 - [0:0] :limit-191 - [0:0] :limit-192 - [0:0] -:limit-193 - [0:0] :limit-194 - [0:0] :limit-195 - [0:0] :limit-196 - [0:0] -:limit-197 - [0:0] :limit-198 - [0:0] :limit-199 - [0:0] :limit-2 - [0:0] @@ -110,11 +173,9 @@ :limit-202 - [0:0] :limit-203 - [0:0] :limit-204 - [0:0] -:limit-205 - [0:0] :limit-206 - [0:0] :limit-207 - [0:0] :limit-208 - [0:0] -:limit-209 - [0:0] :limit-21 - [0:0] :limit-210 - [0:0] :limit-211 - [0:0] @@ -123,12 +184,10 @@ :limit-214 - [0:0] :limit-215 - [0:0] :limit-216 - [0:0] -:limit-217 - [0:0] :limit-218 - [0:0] :limit-219 - [0:0] :limit-22 - [0:0] :limit-220 - [0:0] -:limit-221 - [0:0] :limit-222 - [0:0] :limit-223 - [0:0] :limit-224 - [0:0] @@ -142,11 +201,9 @@ :limit-232 - [0:0] :limit-233 - [0:0] :limit-234 - [0:0] -:limit-235 - [0:0] :limit-236 - [0:0] :limit-237 - [0:0] :limit-238 - [0:0] -:limit-239 - [0:0] :limit-24 - [0:0] :limit-240 - [0:0] :limit-241 - [0:0] @@ -155,12 +212,10 @@ :limit-244 - [0:0] :limit-245 - [0:0] :limit-246 - [0:0] -:limit-247 - [0:0] :limit-248 - [0:0] :limit-249 - [0:0] :limit-25 - [0:0] :limit-250 - [0:0] -:limit-251 - [0:0] :limit-252 - [0:0] :limit-253 - [0:0] :limit-254 - [0:0] @@ -168,12 +223,10 @@ :limit-256 - [0:0] :limit-257 - [0:0] :limit-258 - [0:0] -:limit-259 - [0:0] :limit-26 - [0:0] :limit-260 - [0:0] :limit-261 - [0:0] :limit-262 - [0:0] -:limit-263 - [0:0] :limit-264 - [0:0] :limit-265 - [0:0] :limit-266 - [0:0] @@ -182,11 +235,9 @@ :limit-269 - [0:0] :limit-27 - [0:0] :limit-270 - [0:0] -:limit-271 - [0:0] :limit-272 - [0:0] :limit-273 - [0:0] :limit-274 - [0:0] -:limit-275 - [0:0] :limit-276 - [0:0] :limit-277 - [0:0] :limit-278 - [0:0] @@ -201,12 +252,10 @@ :limit-286 - [0:0] :limit-287 - [0:0] :limit-288 - [0:0] -:limit-289 - [0:0] :limit-29 - [0:0] :limit-290 - [0:0] :limit-291 - [0:0] :limit-292 - [0:0] -:limit-293 - [0:0] :limit-294 - [0:0] :limit-295 - [0:0] :limit-296 - [0:0] @@ -216,11 +265,9 @@ :limit-3 - [0:0] :limit-30 - [0:0] :limit-300 - [0:0] -:limit-301 - [0:0] :limit-302 - [0:0] :limit-303 - [0:0] :limit-304 - [0:0] -:limit-305 - [0:0] :limit-306 - [0:0] :limit-307 - [0:0] :limit-308 - [0:0] @@ -228,11 +275,9 @@ :limit-310 - [0:0] :limit-311 - [0:0] :limit-312 - [0:0] -:limit-313 - [0:0] :limit-314 - [0:0] :limit-315 - [0:0] :limit-316 - [0:0] -:limit-317 - [0:0] :limit-318 - [0:0] :limit-319 - [0:0] :limit-32 - [0:0] @@ -241,11 +286,9 @@ :limit-322 - [0:0] :limit-323 - [0:0] :limit-324 - [0:0] -:limit-325 - [0:0] :limit-326 - [0:0] :limit-327 - [0:0] :limit-328 - [0:0] -:limit-329 - [0:0] :limit-33 - [0:0] :limit-330 - [0:0] :limit-331 - [0:0] @@ -356,7 +399,6 @@ :limit-427 - [0:0] :limit-428 - [0:0] :limit-429 - [0:0] -:limit-43 - [0:0] :limit-430 - [0:0] :limit-431 - [0:0] :limit-432 - [0:0] @@ -375,10 +417,12 @@ :limit-444 - [0:0] :limit-445 - [0:0] :limit-446 - [0:0] +:limit-447 - [0:0] :limit-448 - [0:0] :limit-449 - [0:0] :limit-45 - [0:0] :limit-450 - [0:0] +:limit-451 - [0:0] :limit-452 - [0:0] :limit-453 - [0:0] :limit-454 - [0:0] @@ -386,17 +430,18 @@ :limit-456 - [0:0] :limit-457 - [0:0] :limit-458 - [0:0] +:limit-459 - [0:0] :limit-46 - [0:0] :limit-460 - [0:0] :limit-461 - [0:0] :limit-462 - [0:0] +:limit-463 - [0:0] :limit-464 - [0:0] :limit-465 - [0:0] :limit-466 - [0:0] :limit-467 - [0:0] :limit-468 - [0:0] :limit-469 - [0:0] -:limit-47 - [0:0] :limit-470 - [0:0] :limit-471 - [0:0] :limit-472 - [0:0] @@ -404,10 +449,12 @@ :limit-474 - [0:0] :limit-475 - [0:0] :limit-476 - [0:0] +:limit-477 - [0:0] :limit-478 - [0:0] :limit-479 - [0:0] :limit-48 - [0:0] :limit-480 - [0:0] +:limit-481 - [0:0] :limit-482 - [0:0] :limit-483 - [0:0] :limit-484 - [0:0] @@ -415,9 +462,12 @@ :limit-486 - [0:0] :limit-487 - [0:0] :limit-488 - [0:0] +:limit-489 - [0:0] +:limit-49 - [0:0] :limit-490 - [0:0] :limit-491 - [0:0] :limit-492 - [0:0] +:limit-493 - [0:0] :limit-494 - [0:0] :limit-495 - [0:0] :limit-496 - [0:0] @@ -433,10 +483,12 @@ :limit-504 - [0:0] :limit-505 - [0:0] :limit-506 - [0:0] +:limit-507 - [0:0] :limit-508 - [0:0] :limit-509 - [0:0] :limit-51 - [0:0] :limit-510 - [0:0] +:limit-511 - [0:0] :limit-512 - [0:0] :limit-513 - [0:0] :limit-514 - [0:0] @@ -444,16 +496,19 @@ :limit-516 - [0:0] :limit-517 - [0:0] :limit-518 - [0:0] +:limit-519 - [0:0] :limit-52 - [0:0] :limit-520 - [0:0] :limit-521 - [0:0] :limit-522 - [0:0] +:limit-523 - [0:0] :limit-524 - [0:0] :limit-525 - [0:0] :limit-526 - [0:0] :limit-527 - [0:0] :limit-528 - [0:0] :limit-529 - [0:0] +:limit-53 - [0:0] :limit-530 - [0:0] :limit-531 - [0:0] :limit-532 - [0:0] @@ -461,10 +516,12 @@ :limit-534 - [0:0] :limit-535 - [0:0] :limit-536 - [0:0] +:limit-537 - [0:0] :limit-538 - [0:0] :limit-539 - [0:0] :limit-54 - [0:0] :limit-540 - [0:0] +:limit-541 - [0:0] :limit-542 - [0:0] :limit-543 - [0:0] :limit-544 - [0:0] @@ -472,10 +529,11 @@ :limit-546 - [0:0] :limit-547 - [0:0] :limit-548 - [0:0] -:limit-55 - [0:0] +:limit-549 - [0:0] :limit-550 - [0:0] :limit-551 - [0:0] :limit-552 - [0:0] +:limit-553 - [0:0] :limit-554 - [0:0] :limit-555 - [0:0] :limit-556 - [0:0] @@ -490,10 +548,12 @@ :limit-564 - [0:0] :limit-565 - [0:0] :limit-566 - [0:0] +:limit-567 - [0:0] :limit-568 - [0:0] :limit-569 - [0:0] :limit-57 - [0:0] :limit-570 - [0:0] +:limit-571 - [0:0] :limit-572 - [0:0] :limit-573 - [0:0] :limit-574 - [0:0] @@ -501,17 +561,18 @@ :limit-576 - [0:0] :limit-577 - [0:0] :limit-578 - [0:0] +:limit-579 - [0:0] :limit-58 - [0:0] :limit-580 - [0:0] :limit-581 - [0:0] :limit-582 - [0:0] +:limit-583 - [0:0] :limit-584 - [0:0] :limit-585 - [0:0] :limit-586 - [0:0] :limit-587 - [0:0] :limit-588 - [0:0] :limit-589 - [0:0] -:limit-59 - [0:0] :limit-590 - [0:0] :limit-591 - [0:0] :limit-592 - [0:0] @@ -519,11 +580,13 @@ :limit-594 - [0:0] :limit-595 - [0:0] :limit-596 - [0:0] +:limit-597 - [0:0] :limit-598 - [0:0] :limit-599 - [0:0] :limit-6 - [0:0] :limit-60 - [0:0] :limit-600 - [0:0] +:limit-601 - [0:0] :limit-602 - [0:0] :limit-603 - [0:0] :limit-604 - [0:0] @@ -531,9 +594,12 @@ :limit-606 - [0:0] :limit-607 - [0:0] :limit-608 - [0:0] +:limit-609 - [0:0] +:limit-61 - [0:0] :limit-610 - [0:0] :limit-611 - [0:0] :limit-612 - [0:0] +:limit-613 - [0:0] :limit-614 - [0:0] :limit-615 - [0:0] :limit-616 - [0:0] @@ -565,39 +631,357 @@ :limit-64 - [0:0] :limit-640 - [0:0] :limit-641 - [0:0] +:limit-642 - [0:0] +:limit-643 - [0:0] +:limit-644 - [0:0] +:limit-645 - [0:0] +:limit-646 - [0:0] +:limit-647 - [0:0] +:limit-648 - [0:0] +:limit-649 - [0:0] +:limit-65 - [0:0] +:limit-650 - [0:0] +:limit-651 - [0:0] +:limit-652 - [0:0] +:limit-653 - [0:0] +:limit-654 - [0:0] +:limit-655 - [0:0] +:limit-656 - [0:0] +:limit-657 - [0:0] +:limit-658 - [0:0] +:limit-659 - [0:0] :limit-66 - [0:0] +:limit-660 - [0:0] +:limit-661 - [0:0] +:limit-662 - [0:0] +:limit-663 - [0:0] +:limit-664 - [0:0] +:limit-665 - [0:0] +:limit-666 - [0:0] +:limit-667 - [0:0] +:limit-668 - [0:0] +:limit-669 - [0:0] :limit-67 - [0:0] +:limit-670 - [0:0] +:limit-671 - [0:0] +:limit-672 - [0:0] +:limit-673 - [0:0] +:limit-674 - [0:0] +:limit-675 - [0:0] +:limit-676 - [0:0] +:limit-677 - [0:0] +:limit-678 - [0:0] +:limit-679 - [0:0] :limit-68 - [0:0] +:limit-680 - [0:0] +:limit-681 - [0:0] +:limit-682 - [0:0] +:limit-683 - [0:0] +:limit-684 - [0:0] +:limit-685 - [0:0] +:limit-686 - [0:0] +:limit-687 - [0:0] +:limit-688 - [0:0] +:limit-689 - [0:0] :limit-69 - [0:0] +:limit-690 - [0:0] +:limit-691 - [0:0] +:limit-692 - [0:0] +:limit-693 - [0:0] +:limit-694 - [0:0] +:limit-695 - [0:0] +:limit-696 - [0:0] +:limit-697 - [0:0] +:limit-698 - [0:0] +:limit-699 - [0:0] :limit-7 - [0:0] :limit-70 - [0:0] +:limit-700 - [0:0] +:limit-701 - [0:0] +:limit-702 - [0:0] +:limit-703 - [0:0] +:limit-704 - [0:0] +:limit-705 - [0:0] +:limit-706 - [0:0] +:limit-707 - [0:0] +:limit-708 - [0:0] +:limit-709 - [0:0] :limit-71 - [0:0] +:limit-710 - [0:0] +:limit-711 - [0:0] +:limit-712 - [0:0] +:limit-713 - [0:0] +:limit-714 - [0:0] +:limit-715 - [0:0] +:limit-716 - [0:0] +:limit-717 - [0:0] +:limit-718 - [0:0] +:limit-719 - [0:0] :limit-72 - [0:0] -:limit-73 - [0:0] +:limit-720 - [0:0] +:limit-721 - [0:0] +:limit-722 - [0:0] +:limit-723 - [0:0] +:limit-724 - [0:0] +:limit-725 - [0:0] +:limit-726 - [0:0] +:limit-727 - [0:0] +:limit-728 - [0:0] +:limit-729 - [0:0] +:limit-730 - [0:0] +:limit-731 - [0:0] +:limit-732 - [0:0] +:limit-733 - [0:0] +:limit-734 - [0:0] +:limit-736 - [0:0] +:limit-737 - [0:0] +:limit-738 - [0:0] :limit-74 - [0:0] +:limit-740 - [0:0] +:limit-741 - [0:0] +:limit-742 - [0:0] +:limit-743 - [0:0] +:limit-744 - [0:0] +:limit-745 - [0:0] +:limit-746 - [0:0] +:limit-748 - [0:0] +:limit-749 - [0:0] :limit-75 - [0:0] +:limit-750 - [0:0] +:limit-752 - [0:0] +:limit-753 - [0:0] +:limit-754 - [0:0] +:limit-755 - [0:0] +:limit-756 - [0:0] +:limit-757 - [0:0] +:limit-758 - [0:0] :limit-76 - [0:0] -:limit-77 - [0:0] +:limit-760 - [0:0] +:limit-761 - [0:0] +:limit-762 - [0:0] +:limit-764 - [0:0] +:limit-765 - [0:0] +:limit-766 - [0:0] +:limit-767 - [0:0] +:limit-768 - [0:0] +:limit-769 - [0:0] +:limit-770 - [0:0] +:limit-772 - [0:0] +:limit-773 - [0:0] +:limit-774 - [0:0] +:limit-776 - [0:0] +:limit-777 - [0:0] +:limit-778 - [0:0] +:limit-779 - [0:0] :limit-78 - [0:0] +:limit-780 - [0:0] +:limit-781 - [0:0] +:limit-782 - [0:0] +:limit-783 - [0:0] +:limit-784 - [0:0] +:limit-785 - [0:0] +:limit-786 - [0:0] +:limit-787 - [0:0] +:limit-788 - [0:0] +:limit-79 - [0:0] +:limit-790 - [0:0] +:limit-791 - [0:0] +:limit-792 - [0:0] +:limit-794 - [0:0] +:limit-795 - [0:0] +:limit-796 - [0:0] +:limit-797 - [0:0] +:limit-798 - [0:0] +:limit-799 - [0:0] :limit-8 - [0:0] :limit-80 - [0:0] +:limit-800 - [0:0] +:limit-802 - [0:0] +:limit-803 - [0:0] +:limit-804 - [0:0] +:limit-806 - [0:0] +:limit-807 - [0:0] +:limit-808 - [0:0] +:limit-809 - [0:0] :limit-81 - [0:0] +:limit-810 - [0:0] +:limit-811 - [0:0] +:limit-812 - [0:0] +:limit-814 - [0:0] +:limit-815 - [0:0] +:limit-816 - [0:0] +:limit-818 - [0:0] +:limit-819 - [0:0] :limit-82 - [0:0] +:limit-820 - [0:0] +:limit-821 - [0:0] +:limit-822 - [0:0] +:limit-823 - [0:0] +:limit-824 - [0:0] +:limit-826 - [0:0] +:limit-827 - [0:0] +:limit-828 - [0:0] +:limit-83 - [0:0] +:limit-830 - [0:0] +:limit-831 - [0:0] +:limit-832 - [0:0] +:limit-833 - [0:0] +:limit-834 - [0:0] +:limit-835 - [0:0] +:limit-836 - [0:0] +:limit-837 - [0:0] +:limit-838 - [0:0] +:limit-839 - [0:0] :limit-84 - [0:0] -:limit-85 - [0:0] +:limit-840 - [0:0] +:limit-841 - [0:0] +:limit-842 - [0:0] +:limit-844 - [0:0] +:limit-845 - [0:0] +:limit-846 - [0:0] +:limit-848 - [0:0] +:limit-849 - [0:0] +:limit-850 - [0:0] +:limit-851 - [0:0] +:limit-852 - [0:0] +:limit-853 - [0:0] +:limit-854 - [0:0] +:limit-856 - [0:0] +:limit-857 - [0:0] +:limit-858 - [0:0] :limit-86 - [0:0] +:limit-860 - [0:0] +:limit-861 - [0:0] +:limit-862 - [0:0] +:limit-863 - [0:0] +:limit-864 - [0:0] +:limit-865 - [0:0] +:limit-866 - [0:0] +:limit-868 - [0:0] +:limit-869 - [0:0] :limit-87 - [0:0] +:limit-870 - [0:0] +:limit-872 - [0:0] +:limit-873 - [0:0] +:limit-874 - [0:0] +:limit-875 - [0:0] +:limit-876 - [0:0] +:limit-877 - [0:0] +:limit-878 - [0:0] :limit-88 - [0:0] -:limit-89 - [0:0] +:limit-880 - [0:0] +:limit-881 - [0:0] +:limit-882 - [0:0] +:limit-884 - [0:0] +:limit-885 - [0:0] +:limit-886 - [0:0] +:limit-887 - [0:0] +:limit-888 - [0:0] +:limit-889 - [0:0] +:limit-890 - [0:0] +:limit-891 - [0:0] +:limit-892 - [0:0] +:limit-893 - [0:0] +:limit-894 - [0:0] +:limit-895 - [0:0] +:limit-896 - [0:0] +:limit-898 - [0:0] +:limit-899 - [0:0] :limit-9 - [0:0] :limit-90 - [0:0] +:limit-900 - [0:0] +:limit-902 - [0:0] +:limit-903 - [0:0] +:limit-904 - [0:0] +:limit-905 - [0:0] +:limit-906 - [0:0] +:limit-907 - [0:0] +:limit-908 - [0:0] +:limit-91 - [0:0] +:limit-910 - [0:0] +:limit-911 - [0:0] +:limit-912 - [0:0] +:limit-914 - [0:0] +:limit-915 - [0:0] +:limit-916 - [0:0] +:limit-917 - [0:0] +:limit-918 - [0:0] +:limit-919 - [0:0] :limit-92 - [0:0] +:limit-920 - [0:0] +:limit-922 - [0:0] +:limit-923 - [0:0] +:limit-924 - [0:0] +:limit-926 - [0:0] +:limit-927 - [0:0] +:limit-928 - [0:0] +:limit-929 - [0:0] :limit-93 - [0:0] +:limit-930 - [0:0] +:limit-931 - [0:0] +:limit-932 - [0:0] +:limit-934 - [0:0] +:limit-935 - [0:0] +:limit-936 - [0:0] +:limit-938 - [0:0] +:limit-939 - [0:0] :limit-94 - [0:0] +:limit-940 - [0:0] +:limit-941 - [0:0] +:limit-942 - [0:0] +:limit-943 - [0:0] +:limit-944 - [0:0] +:limit-945 - [0:0] +:limit-946 - [0:0] +:limit-947 - [0:0] +:limit-948 - [0:0] +:limit-949 - [0:0] +:limit-95 - [0:0] +:limit-950 - [0:0] +:limit-952 - [0:0] +:limit-953 - [0:0] +:limit-954 - [0:0] +:limit-956 - [0:0] +:limit-957 - [0:0] +:limit-958 - [0:0] +:limit-959 - [0:0] :limit-96 - [0:0] -:limit-97 - [0:0] +:limit-960 - [0:0] +:limit-961 - [0:0] +:limit-962 - [0:0] +:limit-964 - [0:0] +:limit-965 - [0:0] +:limit-966 - [0:0] +:limit-968 - [0:0] +:limit-969 - [0:0] +:limit-970 - [0:0] +:limit-971 - [0:0] +:limit-972 - [0:0] +:limit-973 - [0:0] +:limit-974 - [0:0] +:limit-976 - [0:0] +:limit-977 - [0:0] +:limit-978 - [0:0] :limit-98 - [0:0] +:limit-980 - [0:0] +:limit-981 - [0:0] +:limit-982 - [0:0] +:limit-983 - [0:0] +:limit-984 - [0:0] +:limit-985 - [0:0] +:limit-986 - [0:0] +:limit-988 - [0:0] +:limit-989 - [0:0] :limit-99 - [0:0] +:limit-990 - [0:0] +:limit-992 - [0:0] +:limit-993 - [0:0] +:limit-994 - [0:0] +:limit-995 - [0:0] +:limit-996 - [0:0] +:limit-997 - [0:0] +:limit-998 - [0:0] +:limit-999 - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] :logaccept-10 - [0:0] @@ -645,9 +1029,33 @@ :logaccept-final-35 - [0:0] :logaccept-final-36 - [0:0] :logaccept-final-37 - [0:0] +:logaccept-final-38 - [0:0] +:logaccept-final-39 - [0:0] :logaccept-final-4 - [0:0] +:logaccept-final-40 - [0:0] +:logaccept-final-41 - [0:0] +:logaccept-final-42 - [0:0] +:logaccept-final-43 - [0:0] +:logaccept-final-44 - [0:0] +:logaccept-final-45 - [0:0] +:logaccept-final-46 - [0:0] +:logaccept-final-47 - [0:0] +:logaccept-final-48 - [0:0] +:logaccept-final-49 - [0:0] :logaccept-final-5 - [0:0] +:logaccept-final-50 - [0:0] +:logaccept-final-51 - [0:0] +:logaccept-final-52 - [0:0] +:logaccept-final-53 - [0:0] +:logaccept-final-54 - [0:0] +:logaccept-final-55 - [0:0] +:logaccept-final-56 - [0:0] +:logaccept-final-57 - [0:0] +:logaccept-final-58 - [0:0] +:logaccept-final-59 - [0:0] :logaccept-final-6 - [0:0] +:logaccept-final-60 - [0:0] +:logaccept-final-61 - [0:0] :logaccept-final-7 - [0:0] :logaccept-final-8 - [0:0] :logaccept-final-9 - [0:0] @@ -656,7 +1064,6 @@ :logdrop-10 - [0:0] :logdrop-100 - [0:0] :logdrop-101 - [0:0] -:logdrop-102 - [0:0] :logdrop-103 - [0:0] :logdrop-104 - [0:0] :logdrop-105 - [0:0] @@ -665,11 +1072,9 @@ :logdrop-108 - [0:0] :logdrop-109 - [0:0] :logdrop-11 - [0:0] -:logdrop-110 - [0:0] :logdrop-111 - [0:0] :logdrop-112 - [0:0] :logdrop-113 - [0:0] -:logdrop-114 - [0:0] :logdrop-115 - [0:0] :logdrop-116 - [0:0] :logdrop-117 - [0:0] @@ -711,9 +1116,11 @@ :logdrop-15 - [0:0] :logdrop-150 - [0:0] :logdrop-151 - [0:0] +:logdrop-152 - [0:0] :logdrop-153 - [0:0] :logdrop-154 - [0:0] :logdrop-155 - [0:0] +:logdrop-156 - [0:0] :logdrop-157 - [0:0] :logdrop-158 - [0:0] :logdrop-159 - [0:0] @@ -722,9 +1129,11 @@ :logdrop-161 - [0:0] :logdrop-162 - [0:0] :logdrop-163 - [0:0] +:logdrop-164 - [0:0] :logdrop-165 - [0:0] :logdrop-166 - [0:0] :logdrop-167 - [0:0] +:logdrop-168 - [0:0] :logdrop-169 - [0:0] :logdrop-17 - [0:0] :logdrop-170 - [0:0] @@ -740,9 +1149,11 @@ :logdrop-18 - [0:0] :logdrop-180 - [0:0] :logdrop-181 - [0:0] +:logdrop-182 - [0:0] :logdrop-183 - [0:0] :logdrop-184 - [0:0] :logdrop-185 - [0:0] +:logdrop-186 - [0:0] :logdrop-187 - [0:0] :logdrop-188 - [0:0] :logdrop-189 - [0:0] @@ -751,25 +1162,155 @@ :logdrop-191 - [0:0] :logdrop-192 - [0:0] :logdrop-193 - [0:0] +:logdrop-194 - [0:0] :logdrop-195 - [0:0] :logdrop-196 - [0:0] :logdrop-197 - [0:0] +:logdrop-198 - [0:0] :logdrop-199 - [0:0] :logdrop-2 - [0:0] :logdrop-200 - [0:0] +:logdrop-201 - [0:0] +:logdrop-202 - [0:0] +:logdrop-203 - [0:0] +:logdrop-204 - [0:0] +:logdrop-205 - [0:0] +:logdrop-206 - [0:0] +:logdrop-207 - [0:0] +:logdrop-208 - [0:0] +:logdrop-209 - [0:0] :logdrop-21 - [0:0] +:logdrop-210 - [0:0] +:logdrop-211 - [0:0] +:logdrop-212 - [0:0] +:logdrop-213 - [0:0] +:logdrop-214 - [0:0] +:logdrop-215 - [0:0] +:logdrop-216 - [0:0] +:logdrop-217 - [0:0] +:logdrop-218 - [0:0] +:logdrop-219 - [0:0] :logdrop-22 - [0:0] +:logdrop-220 - [0:0] +:logdrop-221 - [0:0] +:logdrop-222 - [0:0] +:logdrop-223 - [0:0] +:logdrop-224 - [0:0] +:logdrop-225 - [0:0] +:logdrop-226 - [0:0] +:logdrop-227 - [0:0] +:logdrop-228 - [0:0] +:logdrop-229 - [0:0] :logdrop-23 - [0:0] +:logdrop-230 - [0:0] +:logdrop-231 - [0:0] +:logdrop-232 - [0:0] +:logdrop-233 - [0:0] +:logdrop-234 - [0:0] +:logdrop-235 - [0:0] +:logdrop-236 - [0:0] +:logdrop-237 - [0:0] +:logdrop-238 - [0:0] +:logdrop-239 - [0:0] +:logdrop-240 - [0:0] +:logdrop-241 - [0:0] +:logdrop-242 - [0:0] +:logdrop-243 - [0:0] +:logdrop-244 - [0:0] +:logdrop-245 - [0:0] +:logdrop-246 - [0:0] +:logdrop-247 - [0:0] +:logdrop-249 - [0:0] :logdrop-25 - [0:0] +:logdrop-250 - [0:0] +:logdrop-251 - [0:0] +:logdrop-253 - [0:0] +:logdrop-254 - [0:0] +:logdrop-255 - [0:0] +:logdrop-256 - [0:0] +:logdrop-257 - [0:0] +:logdrop-258 - [0:0] +:logdrop-259 - [0:0] :logdrop-26 - [0:0] +:logdrop-261 - [0:0] +:logdrop-262 - [0:0] +:logdrop-263 - [0:0] +:logdrop-265 - [0:0] +:logdrop-266 - [0:0] +:logdrop-267 - [0:0] +:logdrop-268 - [0:0] +:logdrop-269 - [0:0] :logdrop-27 - [0:0] +:logdrop-270 - [0:0] +:logdrop-271 - [0:0] +:logdrop-273 - [0:0] +:logdrop-274 - [0:0] +:logdrop-275 - [0:0] +:logdrop-277 - [0:0] +:logdrop-278 - [0:0] +:logdrop-279 - [0:0] :logdrop-28 - [0:0] +:logdrop-280 - [0:0] +:logdrop-281 - [0:0] +:logdrop-282 - [0:0] +:logdrop-283 - [0:0] +:logdrop-285 - [0:0] +:logdrop-286 - [0:0] +:logdrop-287 - [0:0] +:logdrop-289 - [0:0] :logdrop-29 - [0:0] +:logdrop-290 - [0:0] +:logdrop-291 - [0:0] +:logdrop-292 - [0:0] +:logdrop-293 - [0:0] +:logdrop-294 - [0:0] +:logdrop-295 - [0:0] +:logdrop-296 - [0:0] +:logdrop-297 - [0:0] +:logdrop-298 - [0:0] +:logdrop-299 - [0:0] :logdrop-3 - [0:0] :logdrop-30 - [0:0] +:logdrop-300 - [0:0] +:logdrop-301 - [0:0] +:logdrop-303 - [0:0] +:logdrop-304 - [0:0] +:logdrop-305 - [0:0] +:logdrop-307 - [0:0] +:logdrop-308 - [0:0] +:logdrop-309 - [0:0] :logdrop-31 - [0:0] +:logdrop-310 - [0:0] +:logdrop-311 - [0:0] +:logdrop-312 - [0:0] +:logdrop-313 - [0:0] +:logdrop-315 - [0:0] +:logdrop-316 - [0:0] +:logdrop-317 - [0:0] +:logdrop-319 - [0:0] +:logdrop-320 - [0:0] +:logdrop-321 - [0:0] +:logdrop-322 - [0:0] +:logdrop-323 - [0:0] +:logdrop-324 - [0:0] +:logdrop-325 - [0:0] +:logdrop-327 - [0:0] +:logdrop-328 - [0:0] +:logdrop-329 - [0:0] :logdrop-33 - [0:0] +:logdrop-331 - [0:0] +:logdrop-332 - [0:0] +:logdrop-333 - [0:0] +:logdrop-334 - [0:0] +:logdrop-335 - [0:0] +:logdrop-336 - [0:0] +:logdrop-337 - [0:0] +:logdrop-339 - [0:0] :logdrop-34 - [0:0] +:logdrop-340 - [0:0] +:logdrop-341 - [0:0] +:logdrop-343 - [0:0] +:logdrop-344 - [0:0] :logdrop-35 - [0:0] :logdrop-37 - [0:0] :logdrop-38 - [0:0] @@ -779,27 +1320,27 @@ :logdrop-41 - [0:0] :logdrop-42 - [0:0] :logdrop-43 - [0:0] -:logdrop-44 - [0:0] :logdrop-45 - [0:0] :logdrop-46 - [0:0] :logdrop-47 - [0:0] -:logdrop-48 - [0:0] :logdrop-49 - [0:0] :logdrop-5 - [0:0] +:logdrop-50 - [0:0] :logdrop-51 - [0:0] :logdrop-52 - [0:0] :logdrop-53 - [0:0] +:logdrop-54 - [0:0] :logdrop-55 - [0:0] -:logdrop-56 - [0:0] :logdrop-57 - [0:0] :logdrop-58 - [0:0] :logdrop-59 - [0:0] :logdrop-6 - [0:0] -:logdrop-60 - [0:0] :logdrop-61 - [0:0] +:logdrop-62 - [0:0] :logdrop-63 - [0:0] :logdrop-64 - [0:0] :logdrop-65 - [0:0] +:logdrop-66 - [0:0] :logdrop-67 - [0:0] :logdrop-68 - [0:0] :logdrop-69 - [0:0] @@ -808,11 +1349,9 @@ :logdrop-71 - [0:0] :logdrop-72 - [0:0] :logdrop-73 - [0:0] -:logdrop-74 - [0:0] :logdrop-75 - [0:0] :logdrop-76 - [0:0] :logdrop-77 - [0:0] -:logdrop-78 - [0:0] :logdrop-79 - [0:0] :logdrop-8 - [0:0] :logdrop-80 - [0:0] @@ -821,12 +1360,10 @@ :logdrop-83 - [0:0] :logdrop-84 - [0:0] :logdrop-85 - [0:0] -:logdrop-86 - [0:0] :logdrop-87 - [0:0] :logdrop-88 - [0:0] :logdrop-89 - [0:0] :logdrop-9 - [0:0] -:logdrop-90 - [0:0] :logdrop-91 - [0:0] :logdrop-92 - [0:0] :logdrop-93 - [0:0] @@ -834,7 +1371,6 @@ :logdrop-95 - [0:0] :logdrop-96 - [0:0] :logdrop-97 - [0:0] -:logdrop-98 - [0:0] :logdrop-99 - [0:0] :logpass-0 - [0:0] :logreject-0 - [0:0] @@ -842,6 +1378,294 @@ :tarpit - [0:0] -A FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A FORWARD -j limit-715 +-A FORWARD -j limit-714 +-A FORWARD -j limit-713 +-A FORWARD -j limit-712 +-A FORWARD -j limit-711 +-A FORWARD -j limit-710 +-A FORWARD -j limit-709 +-A FORWARD -j limit-708 +-A FORWARD -j limit-707 +-A FORWARD -j limit-706 +-A FORWARD -j limit-705 +-A FORWARD -j limit-704 +-A FORWARD -j limit-703 +-A FORWARD -j limit-702 +-A FORWARD -j limit-701 +-A FORWARD -j limit-700 +-A FORWARD -j limit-699 +-A FORWARD -j limit-698 +-A FORWARD -j limit-697 +-A FORWARD -j limit-696 +-A FORWARD -j limit-695 +-A FORWARD -j limit-694 +-A FORWARD -j limit-693 +-A FORWARD -j limit-692 +-A FORWARD -j limit-691 +-A FORWARD -j limit-690 +-A FORWARD -j limit-689 +-A FORWARD -j limit-688 +-A FORWARD -j limit-687 +-A FORWARD -j limit-686 +-A FORWARD -j limit-685 +-A FORWARD -j limit-684 +-A FORWARD -j limit-683 +-A FORWARD -j limit-682 +-A FORWARD -j limit-681 +-A FORWARD -j limit-680 +-A FORWARD -j limit-679 +-A FORWARD -j limit-678 +-A FORWARD -j limit-677 +-A FORWARD -j limit-676 +-A FORWARD -j limit-675 +-A FORWARD -j limit-674 +-A FORWARD -j limit-673 +-A FORWARD -j limit-672 +-A FORWARD -j limit-671 +-A FORWARD -j limit-670 +-A FORWARD -j limit-669 +-A FORWARD -j limit-668 +-A FORWARD -j limit-667 +-A FORWARD -j limit-666 +-A FORWARD -j limit-665 +-A FORWARD -j limit-664 +-A FORWARD -j limit-663 +-A FORWARD -j limit-662 +-A FORWARD -j limit-661 +-A FORWARD -j limit-660 +-A FORWARD -j limit-659 +-A FORWARD -j limit-658 +-A FORWARD -j limit-657 +-A FORWARD -j limit-656 +-A FORWARD -j limit-655 +-A FORWARD -j limit-654 +-A FORWARD -j limit-653 +-A FORWARD -j limit-652 +-A FORWARD -j limit-651 +-A FORWARD -j limit-650 +-A FORWARD -j limit-649 +-A FORWARD -j limit-648 +-A FORWARD -j limit-647 +-A FORWARD -j limit-646 +-A FORWARD -j limit-645 +-A FORWARD -j limit-644 +-A FORWARD -j limit-643 +-A FORWARD -j limit-642 +-A FORWARD -j limit-641 +-A FORWARD -j limit-640 +-A FORWARD -j limit-639 +-A FORWARD -j limit-638 +-A FORWARD -j limit-637 +-A FORWARD -j limit-636 +-A FORWARD -j limit-635 +-A FORWARD -j limit-634 +-A FORWARD -j limit-633 +-A FORWARD -j limit-632 +-A FORWARD -j limit-631 +-A FORWARD -j limit-630 +-A FORWARD -j limit-629 +-A FORWARD -j limit-628 +-A FORWARD -j limit-627 +-A FORWARD -j limit-626 +-A FORWARD -j limit-625 +-A FORWARD -j limit-624 +-A FORWARD -j limit-623 +-A FORWARD -j limit-622 +-A FORWARD -j limit-621 +-A FORWARD -j limit-620 +-A FORWARD -j limit-619 +-A FORWARD -j limit-618 +-A FORWARD -j limit-617 +-A FORWARD -j limit-616 +-A FORWARD -j limit-615 +-A FORWARD -j limit-614 +-A FORWARD -j limit-613 +-A FORWARD -j limit-612 +-A FORWARD -j limit-611 +-A FORWARD -j limit-610 +-A FORWARD -j limit-609 +-A FORWARD -j limit-608 +-A FORWARD -j limit-607 +-A FORWARD -j limit-606 +-A FORWARD -j limit-605 +-A FORWARD -j limit-604 +-A FORWARD -j limit-603 +-A FORWARD -j limit-602 +-A FORWARD -j limit-601 +-A FORWARD -j limit-600 +-A FORWARD -j limit-599 +-A FORWARD -j limit-598 +-A FORWARD -j limit-597 +-A FORWARD -j limit-596 +-A FORWARD -j limit-595 +-A FORWARD -j limit-594 +-A FORWARD -j limit-593 +-A FORWARD -j limit-592 +-A FORWARD -j limit-591 +-A FORWARD -j limit-590 +-A FORWARD -j limit-589 +-A FORWARD -j limit-588 +-A FORWARD -j limit-587 +-A FORWARD -j limit-586 +-A FORWARD -j limit-585 +-A FORWARD -j limit-584 +-A FORWARD -j limit-583 +-A FORWARD -j limit-582 +-A FORWARD -j limit-581 +-A FORWARD -j limit-580 +-A FORWARD -j limit-579 +-A FORWARD -j limit-578 +-A FORWARD -j limit-577 +-A FORWARD -j limit-576 +-A FORWARD -j limit-575 +-A FORWARD -j limit-574 +-A FORWARD -j limit-573 +-A FORWARD -j limit-572 +-A FORWARD -j limit-571 +-A FORWARD -j limit-570 +-A FORWARD -j limit-569 +-A FORWARD -j limit-568 +-A FORWARD -j limit-567 +-A FORWARD -j limit-566 +-A FORWARD -j limit-565 +-A FORWARD -j limit-564 +-A FORWARD -j limit-563 +-A FORWARD -j limit-562 +-A FORWARD -j limit-561 +-A FORWARD -j limit-560 +-A FORWARD -j limit-559 +-A FORWARD -j limit-558 +-A FORWARD -j limit-557 +-A FORWARD -j limit-556 +-A FORWARD -j limit-555 +-A FORWARD -j limit-554 +-A FORWARD -j limit-553 +-A FORWARD -j limit-552 +-A FORWARD -j limit-551 +-A FORWARD -j limit-550 +-A FORWARD -j limit-549 +-A FORWARD -j limit-548 +-A FORWARD -j limit-547 +-A FORWARD -j limit-546 +-A FORWARD -j limit-545 +-A FORWARD -j limit-544 +-A FORWARD -j limit-543 +-A FORWARD -j limit-542 +-A FORWARD -j limit-541 +-A FORWARD -j limit-540 +-A FORWARD -j limit-539 +-A FORWARD -j limit-538 +-A FORWARD -j limit-537 +-A FORWARD -j limit-536 +-A FORWARD -j limit-535 +-A FORWARD -j limit-534 +-A FORWARD -j limit-533 +-A FORWARD -j limit-532 +-A FORWARD -j limit-531 +-A FORWARD -j limit-530 +-A FORWARD -j limit-529 +-A FORWARD -j limit-528 +-A FORWARD -j limit-527 +-A FORWARD -j limit-526 +-A FORWARD -j limit-525 +-A FORWARD -j limit-524 +-A FORWARD -j limit-523 +-A FORWARD -j limit-522 +-A FORWARD -j limit-521 +-A FORWARD -j limit-520 +-A FORWARD -j limit-519 +-A FORWARD -j limit-518 +-A FORWARD -j limit-517 +-A FORWARD -j limit-516 +-A FORWARD -j limit-515 +-A FORWARD -j limit-514 +-A FORWARD -j limit-513 +-A FORWARD -j limit-512 +-A FORWARD -j limit-511 +-A FORWARD -j limit-510 +-A FORWARD -j limit-509 +-A FORWARD -j limit-508 +-A FORWARD -j limit-507 +-A FORWARD -j limit-506 +-A FORWARD -j limit-505 +-A FORWARD -j limit-504 +-A FORWARD -j limit-503 +-A FORWARD -j limit-502 +-A FORWARD -j limit-501 +-A FORWARD -j limit-500 +-A FORWARD -j limit-499 +-A FORWARD -j limit-498 +-A FORWARD -j limit-497 +-A FORWARD -j limit-496 +-A FORWARD -j limit-495 +-A FORWARD -j limit-494 +-A FORWARD -j limit-493 +-A FORWARD -j limit-492 +-A FORWARD -j limit-491 +-A FORWARD -j limit-490 +-A FORWARD -j limit-489 +-A FORWARD -j limit-488 +-A FORWARD -j limit-487 +-A FORWARD -j limit-486 +-A FORWARD -j limit-485 +-A FORWARD -j limit-484 +-A FORWARD -j limit-483 +-A FORWARD -j limit-482 +-A FORWARD -j limit-481 +-A FORWARD -j limit-480 +-A FORWARD -j limit-479 +-A FORWARD -j limit-478 +-A FORWARD -j limit-477 +-A FORWARD -j limit-476 +-A FORWARD -j limit-475 +-A FORWARD -j limit-474 +-A FORWARD -j limit-473 +-A FORWARD -j limit-472 +-A FORWARD -j limit-471 +-A FORWARD -j limit-470 +-A FORWARD -j limit-469 +-A FORWARD -j limit-468 +-A FORWARD -j limit-467 +-A FORWARD -j limit-466 +-A FORWARD -j limit-465 +-A FORWARD -j limit-464 +-A FORWARD -j limit-463 +-A FORWARD -j limit-462 +-A FORWARD -j limit-461 +-A FORWARD -j limit-460 +-A FORWARD -j limit-459 +-A FORWARD -j limit-458 +-A FORWARD -j limit-457 +-A FORWARD -j limit-456 +-A FORWARD -j limit-455 +-A FORWARD -j limit-454 +-A FORWARD -j limit-453 +-A FORWARD -j limit-452 +-A FORWARD -j limit-451 +-A FORWARD -j limit-450 +-A FORWARD -j limit-449 +-A FORWARD -j limit-448 +-A FORWARD -j limit-447 +-A FORWARD -j limit-446 +-A FORWARD -j limit-445 +-A FORWARD -j limit-444 +-A FORWARD -j limit-443 +-A FORWARD -j limit-442 +-A FORWARD -j limit-441 +-A FORWARD -j limit-440 +-A FORWARD -j limit-439 +-A FORWARD -j limit-438 +-A FORWARD -j limit-437 +-A FORWARD -j limit-436 +-A FORWARD -j limit-435 +-A FORWARD -j limit-434 +-A FORWARD -j limit-433 +-A FORWARD -j limit-432 +-A FORWARD -j limit-431 +-A FORWARD -j limit-430 +-A FORWARD -j limit-429 +-A FORWARD -j limit-428 -A FORWARD -j limit-427 -A FORWARD -j limit-426 -A FORWARD -j limit-425 @@ -912,150 +1736,6 @@ -A FORWARD -j limit-360 -A FORWARD -j limit-359 -A FORWARD -j limit-358 --A FORWARD -j limit-357 --A FORWARD -j limit-356 --A FORWARD -j limit-355 --A FORWARD -j limit-354 --A FORWARD -j limit-353 --A FORWARD -j limit-352 --A FORWARD -j limit-351 --A FORWARD -j limit-350 --A FORWARD -j limit-349 --A FORWARD -j limit-348 --A FORWARD -j limit-347 --A FORWARD -j limit-346 --A FORWARD -j limit-345 --A FORWARD -j limit-344 --A FORWARD -j limit-343 --A FORWARD -j limit-342 --A FORWARD -j limit-341 --A FORWARD -j limit-340 --A FORWARD -j limit-339 --A FORWARD -j limit-338 --A FORWARD -j limit-337 --A FORWARD -j limit-336 --A FORWARD -j limit-335 --A FORWARD -j limit-334 --A FORWARD -j limit-333 --A FORWARD -j limit-332 --A FORWARD -j limit-331 --A FORWARD -j limit-330 --A FORWARD -j limit-329 --A FORWARD -j limit-328 --A FORWARD -j limit-327 --A FORWARD -j limit-326 --A FORWARD -j limit-325 --A FORWARD -j limit-324 --A FORWARD -j limit-323 --A FORWARD -j limit-322 --A FORWARD -j limit-321 --A FORWARD -j limit-320 --A FORWARD -j limit-319 --A FORWARD -j limit-318 --A FORWARD -j limit-317 --A FORWARD -j limit-316 --A FORWARD -j limit-315 --A FORWARD -j limit-314 --A FORWARD -j limit-313 --A FORWARD -j limit-312 --A FORWARD -j limit-311 --A FORWARD -j limit-310 --A FORWARD -j limit-309 --A FORWARD -j limit-308 --A FORWARD -j limit-307 --A FORWARD -j limit-306 --A FORWARD -j limit-305 --A FORWARD -j limit-304 --A FORWARD -j limit-303 --A FORWARD -j limit-302 --A FORWARD -j limit-301 --A FORWARD -j limit-300 --A FORWARD -j limit-299 --A FORWARD -j limit-298 --A FORWARD -j limit-297 --A FORWARD -j limit-296 --A FORWARD -j limit-295 --A FORWARD -j limit-294 --A FORWARD -j limit-293 --A FORWARD -j limit-292 --A FORWARD -j limit-291 --A FORWARD -j limit-290 --A FORWARD -j limit-289 --A FORWARD -j limit-288 --A FORWARD -j limit-287 --A FORWARD -j limit-286 --A FORWARD -j limit-285 --A FORWARD -j limit-284 --A FORWARD -j limit-283 --A FORWARD -j limit-282 --A FORWARD -j limit-281 --A FORWARD -j limit-280 --A FORWARD -j limit-279 --A FORWARD -j limit-278 --A FORWARD -j limit-277 --A FORWARD -j limit-276 --A FORWARD -j limit-275 --A FORWARD -j limit-274 --A FORWARD -j limit-273 --A FORWARD -j limit-272 --A FORWARD -j limit-271 --A FORWARD -j limit-270 --A FORWARD -j limit-269 --A FORWARD -j limit-268 --A FORWARD -j limit-267 --A FORWARD -j limit-266 --A FORWARD -j limit-265 --A FORWARD -j limit-264 --A FORWARD -j limit-263 --A FORWARD -j limit-262 --A FORWARD -j limit-261 --A FORWARD -j limit-260 --A FORWARD -j limit-259 --A FORWARD -j limit-258 --A FORWARD -j limit-257 --A FORWARD -j limit-256 --A FORWARD -j limit-255 --A FORWARD -j limit-254 --A FORWARD -j limit-253 --A FORWARD -j limit-252 --A FORWARD -j limit-251 --A FORWARD -j limit-250 --A FORWARD -j limit-249 --A FORWARD -j limit-248 --A FORWARD -j limit-247 --A FORWARD -j limit-246 --A FORWARD -j limit-245 --A FORWARD -j limit-244 --A FORWARD -j limit-243 --A FORWARD -j limit-242 --A FORWARD -j limit-241 --A FORWARD -j limit-240 --A FORWARD -j limit-239 --A FORWARD -j limit-238 --A FORWARD -j limit-237 --A FORWARD -j limit-236 --A FORWARD -j limit-235 --A FORWARD -j limit-234 --A FORWARD -j limit-233 --A FORWARD -j limit-232 --A FORWARD -j limit-231 --A FORWARD -j limit-230 --A FORWARD -j limit-229 --A FORWARD -j limit-228 --A FORWARD -j limit-227 --A FORWARD -j limit-226 --A FORWARD -j limit-225 --A FORWARD -j limit-224 --A FORWARD -j limit-223 --A FORWARD -j limit-222 --A FORWARD -j limit-221 --A FORWARD -j limit-220 --A FORWARD -j limit-219 --A FORWARD -j limit-218 --A FORWARD -j limit-217 --A FORWARD -j limit-216 --A FORWARD -j limit-215 --A FORWARD -j limit-214 -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -j ACCEPT -A FORWARD -j ACCEPT @@ -1106,29 +1786,29 @@ -A FORWARD -o eth1 -d fc00::/7 -j limit-40 -A FORWARD -o eth1 -d fc00::/7 -j limit-41 -A FORWARD -o eth1 -d fc00::/7 -j limit-42 --A FORWARD -o eth1 -d fc00::/7 -j limit-43 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-44 -A FORWARD -o eth1 -d fc00::/7 -j limit-44 -A FORWARD -o eth1 -d fc00::/7 -j limit-45 -A FORWARD -o eth1 -d fc00::/7 -j limit-46 --A FORWARD -o eth1 -d fc00::/7 -j limit-47 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-48 -A FORWARD -o eth1 -d fc00::/7 -j limit-48 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-49 -A FORWARD -o eth1 -d fc00::/7 -j limit-50 -A FORWARD -o eth1 -d fc00::/7 -j limit-51 -A FORWARD -o eth1 -d fc00::/7 -j limit-52 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-53 -A FORWARD -o eth1 -d fc00::/7 -j limit-54 --A FORWARD -o eth1 -d fc00::/7 -j limit-55 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56 -A FORWARD -o eth1 -d fc00::/7 -j limit-56 -A FORWARD -o eth1 -d fc00::/7 -j limit-57 -A FORWARD -o eth1 -d fc00::/7 -j limit-58 --A FORWARD -o eth1 -d fc00::/7 -j limit-59 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-60 -A FORWARD -o eth1 -d fc00::/7 -j limit-60 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-61 -A FORWARD -o eth1 -d fc00::/7 -j limit-62 -A FORWARD -o eth1 -d fc00::/7 -j limit-63 -A FORWARD -o eth1 -d fc00::/7 -j limit-64 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-65 -A FORWARD -o eth1 -d fc00::/7 -j limit-66 -A FORWARD -o eth1 -d fc00::/7 -j limit-67 -A FORWARD -o eth1 -d fc00::/7 -j limit-68 @@ -1136,35 +1816,35 @@ -A FORWARD -o eth1 -d fc00::/7 -j limit-70 -A FORWARD -o eth1 -d fc00::/7 -j limit-71 -A FORWARD -o eth1 -d fc00::/7 -j limit-72 --A FORWARD -o eth1 -d fc00::/7 -j limit-73 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-74 -A FORWARD -o eth1 -d fc00::/7 -j limit-75 -A FORWARD -o eth1 -d fc00::/7 -j limit-76 --A FORWARD -o eth1 -d fc00::/7 -j limit-77 --A FORWARD -o eth1 -d fc00::/7 -j limit-78 -A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-78 +-A FORWARD -o eth1 -d fc00::/7 -j limit-79 -A FORWARD -o eth1 -d fc00::/7 -j limit-80 -A FORWARD -o eth1 -d fc00::/7 -j limit-81 -A FORWARD -o eth1 -d fc00::/7 -j limit-82 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-83 -A FORWARD -o eth1 -d fc00::/7 -j limit-84 --A FORWARD -o eth1 -d fc00::/7 -j limit-85 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-86 -A FORWARD -o eth1 -d fc00::/7 -j limit-87 -A FORWARD -o eth1 -d fc00::/7 -j limit-88 --A FORWARD -o eth1 -d fc00::/7 -j limit-89 --A FORWARD -o eth1 -d fc00::/7 -j limit-90 -A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-90 +-A FORWARD -o eth1 -d fc00::/7 -j limit-91 -A FORWARD -o eth1 -d fc00::/7 -j limit-92 -A FORWARD -o eth1 -d fc00::/7 -j limit-93 -A FORWARD -o eth1 -d fc00::/7 -j limit-94 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-95 -A FORWARD -o eth1 -d fc00::/7 -j limit-96 --A FORWARD -o eth1 -d fc00::/7 -j limit-97 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-98 -A FORWARD -o eth1 -d fc00::/7 -j limit-99 -A FORWARD -o eth1 -d fc00::/7 -j limit-100 --A FORWARD -o eth1 -d fc00::/7 -j limit-101 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-102 -A FORWARD -o eth1 -d fc00::/7 -j limit-103 -A FORWARD -o eth1 -d fc00::/7 -j limit-104 @@ -1172,11 +1852,11 @@ -A FORWARD -o eth1 -d fc00::/7 -j limit-106 -A FORWARD -o eth1 -d fc00::/7 -j limit-107 -A FORWARD -o eth1 -d fc00::/7 -j limit-108 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-50 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-110 -A FORWARD -o eth1 -d fc00::/7 -j limit-111 -A FORWARD -o eth1 -d fc00::/7 -j limit-112 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-54 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-114 -A FORWARD -o eth1 -d fc00::/7 -j limit-115 -A FORWARD -o eth1 -d fc00::/7 -j limit-116 @@ -1184,17 +1864,17 @@ -A FORWARD -o eth1 -d fc00::/7 -j limit-118 -A FORWARD -o eth1 -d fc00::/7 -j limit-119 -A FORWARD -o eth1 -d fc00::/7 -j limit-120 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-62 +-A FORWARD -o eth1 -d fc00::/7 -j limit-121 -A FORWARD -o eth1 -d fc00::/7 -j limit-122 -A FORWARD -o eth1 -d fc00::/7 -j limit-123 -A FORWARD -o eth1 -d fc00::/7 -j limit-124 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-66 +-A FORWARD -o eth1 -d fc00::/7 -j limit-125 -A FORWARD -o eth1 -d fc00::/7 -j limit-126 --A FORWARD -o eth1 -d fc00::/7 -j limit-127 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-128 -A FORWARD -o eth1 -d fc00::/7 -j limit-129 -A FORWARD -o eth1 -d fc00::/7 -j limit-130 --A FORWARD -o eth1 -d fc00::/7 -j limit-131 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-132 -A FORWARD -o eth1 -d fc00::/7 -j limit-133 -A FORWARD -o eth1 -d fc00::/7 -j limit-134 @@ -1202,11 +1882,11 @@ -A FORWARD -o eth1 -d fc00::/7 -j limit-136 -A FORWARD -o eth1 -d fc00::/7 -j limit-137 -A FORWARD -o eth1 -d fc00::/7 -j limit-138 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-140 -A FORWARD -o eth1 -d fc00::/7 -j limit-141 -A FORWARD -o eth1 -d fc00::/7 -j limit-142 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-144 -A FORWARD -o eth1 -d fc00::/7 -j limit-145 -A FORWARD -o eth1 -d fc00::/7 -j limit-146 @@ -1214,11 +1894,11 @@ -A FORWARD -o eth1 -d fc00::/7 -j limit-148 -A FORWARD -o eth1 -d fc00::/7 -j limit-149 -A FORWARD -o eth1 -d fc00::/7 -j limit-150 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-152 -A FORWARD -o eth1 -d fc00::/7 -j limit-153 -A FORWARD -o eth1 -d fc00::/7 -j limit-154 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-156 -A FORWARD -o eth1 -d fc00::/7 -j limit-157 -A FORWARD -o eth1 -d fc00::/7 -j limit-158 @@ -1226,17 +1906,17 @@ -A FORWARD -o eth1 -d fc00::/7 -j limit-160 -A FORWARD -o eth1 -d fc00::/7 -j limit-161 -A FORWARD -o eth1 -d fc00::/7 -j limit-162 --A FORWARD -o eth1 -d fc00::/7 -j limit-163 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-164 -A FORWARD -o eth1 -d fc00::/7 -j limit-165 -A FORWARD -o eth1 -d fc00::/7 -j limit-166 --A FORWARD -o eth1 -d fc00::/7 -j limit-167 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-168 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-169 -A FORWARD -o eth1 -d fc00::/7 -j limit-170 -A FORWARD -o eth1 -d fc00::/7 -j limit-171 -A FORWARD -o eth1 -d fc00::/7 -j limit-172 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-173 -A FORWARD -o eth1 -d fc00::/7 -j limit-174 -A FORWARD -o eth1 -d fc00::/7 -j limit-175 -A FORWARD -o eth1 -d fc00::/7 -j limit-176 @@ -1244,11 +1924,11 @@ -A FORWARD -o eth1 -d fc00::/7 -j limit-178 -A FORWARD -o eth1 -d fc00::/7 -j limit-179 -A FORWARD -o eth1 -d fc00::/7 -j limit-180 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-74 -A FORWARD -o eth1 -d fc00::/7 -j limit-182 -A FORWARD -o eth1 -d fc00::/7 -j limit-183 -A FORWARD -o eth1 -d fc00::/7 -j limit-184 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-78 -A FORWARD -o eth1 -d fc00::/7 -j limit-186 -A FORWARD -o eth1 -d fc00::/7 -j limit-187 -A FORWARD -o eth1 -d fc00::/7 -j limit-188 @@ -1256,11 +1936,11 @@ -A FORWARD -o eth1 -d fc00::/7 -j limit-190 -A FORWARD -o eth1 -d fc00::/7 -j limit-191 -A FORWARD -o eth1 -d fc00::/7 -j limit-192 --A FORWARD -o eth1 -d fc00::/7 -j limit-193 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-86 -A FORWARD -o eth1 -d fc00::/7 -j limit-194 -A FORWARD -o eth1 -d fc00::/7 -j limit-195 -A FORWARD -o eth1 -d fc00::/7 -j limit-196 --A FORWARD -o eth1 -d fc00::/7 -j limit-197 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-90 -A FORWARD -o eth1 -d fc00::/7 -j limit-198 -A FORWARD -o eth1 -d fc00::/7 -j limit-199 -A FORWARD -o eth1 -d fc00::/7 -j limit-200 @@ -1268,15 +1948,159 @@ -A FORWARD -o eth1 -d fc00::/7 -j limit-202 -A FORWARD -o eth1 -d fc00::/7 -j limit-203 -A FORWARD -o eth1 -d fc00::/7 -j limit-204 --A FORWARD -o eth1 -d fc00::/7 -j limit-205 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-98 -A FORWARD -o eth1 -d fc00::/7 -j limit-206 -A FORWARD -o eth1 -d fc00::/7 -j limit-207 -A FORWARD -o eth1 -d fc00::/7 -j limit-208 --A FORWARD -o eth1 -d fc00::/7 -j limit-209 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-102 -A FORWARD -o eth1 -d fc00::/7 -j limit-210 -A FORWARD -o eth1 -d fc00::/7 -j limit-211 -A FORWARD -o eth1 -d fc00::/7 -j limit-212 -A FORWARD -o eth1 -d fc00::/7 -j limit-213 +-A FORWARD -o eth1 -d fc00::/7 -j limit-214 +-A FORWARD -o eth1 -d fc00::/7 -j limit-215 +-A FORWARD -o eth1 -d fc00::/7 -j limit-216 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-110 +-A FORWARD -o eth1 -d fc00::/7 -j limit-218 +-A FORWARD -o eth1 -d fc00::/7 -j limit-219 +-A FORWARD -o eth1 -d fc00::/7 -j limit-220 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-114 +-A FORWARD -o eth1 -d fc00::/7 -j limit-222 +-A FORWARD -o eth1 -d fc00::/7 -j limit-223 +-A FORWARD -o eth1 -d fc00::/7 -j limit-224 +-A FORWARD -o eth1 -d fc00::/7 -j limit-225 +-A FORWARD -o eth1 -d fc00::/7 -j limit-226 +-A FORWARD -o eth1 -d fc00::/7 -j limit-227 +-A FORWARD -o eth1 -d fc00::/7 -j limit-228 +-A FORWARD -o eth1 -d fc00::/7 -j limit-229 +-A FORWARD -o eth1 -d fc00::/7 -j limit-230 +-A FORWARD -o eth1 -d fc00::/7 -j limit-231 +-A FORWARD -o eth1 -d fc00::/7 -j limit-232 +-A FORWARD -o eth1 -d fc00::/7 -j limit-233 +-A FORWARD -o eth1 -d fc00::/7 -j limit-234 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-236 +-A FORWARD -o eth1 -d fc00::/7 -j limit-237 +-A FORWARD -o eth1 -d fc00::/7 -j limit-238 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-240 +-A FORWARD -o eth1 -d fc00::/7 -j limit-241 +-A FORWARD -o eth1 -d fc00::/7 -j limit-242 +-A FORWARD -o eth1 -d fc00::/7 -j limit-243 +-A FORWARD -o eth1 -d fc00::/7 -j limit-244 +-A FORWARD -o eth1 -d fc00::/7 -j limit-245 +-A FORWARD -o eth1 -d fc00::/7 -j limit-246 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-248 +-A FORWARD -o eth1 -d fc00::/7 -j limit-249 +-A FORWARD -o eth1 -d fc00::/7 -j limit-250 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-252 +-A FORWARD -o eth1 -d fc00::/7 -j limit-253 +-A FORWARD -o eth1 -d fc00::/7 -j limit-254 +-A FORWARD -o eth1 -d fc00::/7 -j limit-255 +-A FORWARD -o eth1 -d fc00::/7 -j limit-256 +-A FORWARD -o eth1 -d fc00::/7 -j limit-257 +-A FORWARD -o eth1 -d fc00::/7 -j limit-258 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-260 +-A FORWARD -o eth1 -d fc00::/7 -j limit-261 +-A FORWARD -o eth1 -d fc00::/7 -j limit-262 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-264 +-A FORWARD -o eth1 -d fc00::/7 -j limit-265 +-A FORWARD -o eth1 -d fc00::/7 -j limit-266 +-A FORWARD -o eth1 -d fc00::/7 -j limit-267 +-A FORWARD -o eth1 -d fc00::/7 -j limit-268 +-A FORWARD -o eth1 -d fc00::/7 -j limit-269 +-A FORWARD -o eth1 -d fc00::/7 -j limit-270 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-272 +-A FORWARD -o eth1 -d fc00::/7 -j limit-273 +-A FORWARD -o eth1 -d fc00::/7 -j limit-274 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-276 +-A FORWARD -o eth1 -d fc00::/7 -j limit-277 +-A FORWARD -o eth1 -d fc00::/7 -j limit-278 +-A FORWARD -o eth1 -d fc00::/7 -j limit-279 +-A FORWARD -o eth1 -d fc00::/7 -j limit-280 +-A FORWARD -o eth1 -d fc00::/7 -j limit-281 +-A FORWARD -o eth1 -d fc00::/7 -j limit-282 +-A FORWARD -o eth1 -d fc00::/7 -j limit-283 +-A FORWARD -o eth1 -d fc00::/7 -j limit-284 +-A FORWARD -o eth1 -d fc00::/7 -j limit-285 +-A FORWARD -o eth1 -d fc00::/7 -j limit-286 +-A FORWARD -o eth1 -d fc00::/7 -j limit-287 +-A FORWARD -o eth1 -d fc00::/7 -j limit-288 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-290 +-A FORWARD -o eth1 -d fc00::/7 -j limit-291 +-A FORWARD -o eth1 -d fc00::/7 -j limit-292 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-294 +-A FORWARD -o eth1 -d fc00::/7 -j limit-295 +-A FORWARD -o eth1 -d fc00::/7 -j limit-296 +-A FORWARD -o eth1 -d fc00::/7 -j limit-297 +-A FORWARD -o eth1 -d fc00::/7 -j limit-298 +-A FORWARD -o eth1 -d fc00::/7 -j limit-299 +-A FORWARD -o eth1 -d fc00::/7 -j limit-300 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-302 +-A FORWARD -o eth1 -d fc00::/7 -j limit-303 +-A FORWARD -o eth1 -d fc00::/7 -j limit-304 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-306 +-A FORWARD -o eth1 -d fc00::/7 -j limit-307 +-A FORWARD -o eth1 -d fc00::/7 -j limit-308 +-A FORWARD -o eth1 -d fc00::/7 -j limit-309 +-A FORWARD -o eth1 -d fc00::/7 -j limit-310 +-A FORWARD -o eth1 -d fc00::/7 -j limit-311 +-A FORWARD -o eth1 -d fc00::/7 -j limit-312 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-314 +-A FORWARD -o eth1 -d fc00::/7 -j limit-315 +-A FORWARD -o eth1 -d fc00::/7 -j limit-316 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-318 +-A FORWARD -o eth1 -d fc00::/7 -j limit-319 +-A FORWARD -o eth1 -d fc00::/7 -j limit-320 +-A FORWARD -o eth1 -d fc00::/7 -j limit-321 +-A FORWARD -o eth1 -d fc00::/7 -j limit-322 +-A FORWARD -o eth1 -d fc00::/7 -j limit-323 +-A FORWARD -o eth1 -d fc00::/7 -j limit-324 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-326 +-A FORWARD -o eth1 -d fc00::/7 -j limit-327 +-A FORWARD -o eth1 -d fc00::/7 -j limit-328 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-330 +-A FORWARD -o eth1 -d fc00::/7 -j limit-331 +-A FORWARD -o eth1 -d fc00::/7 -j limit-332 +-A FORWARD -o eth1 -d fc00::/7 -j limit-333 +-A FORWARD -o eth1 -d fc00::/7 -j limit-334 +-A FORWARD -o eth1 -d fc00::/7 -j limit-335 +-A FORWARD -o eth1 -d fc00::/7 -j limit-336 +-A FORWARD -o eth1 -d fc00::/7 -j limit-337 +-A FORWARD -o eth1 -d fc00::/7 -j limit-338 +-A FORWARD -o eth1 -d fc00::/7 -j limit-339 +-A FORWARD -o eth1 -d fc00::/7 -j limit-340 +-A FORWARD -o eth1 -d fc00::/7 -j limit-341 +-A FORWARD -o eth1 -d fc00::/7 -j limit-342 +-A FORWARD -o eth1 -d fc00::/7 -j limit-343 +-A FORWARD -o eth1 -d fc00::/7 -j limit-344 +-A FORWARD -o eth1 -d fc00::/7 -j limit-345 +-A FORWARD -o eth1 -d fc00::/7 -j limit-346 +-A FORWARD -o eth1 -d fc00::/7 -j limit-347 +-A FORWARD -o eth1 -d fc00::/7 -j limit-348 +-A FORWARD -o eth1 -d fc00::/7 -j limit-349 +-A FORWARD -o eth1 -d fc00::/7 -j limit-350 +-A FORWARD -o eth1 -d fc00::/7 -j limit-351 +-A FORWARD -o eth1 -d fc00::/7 -j limit-352 +-A FORWARD -o eth1 -d fc00::/7 -j limit-353 +-A FORWARD -o eth1 -d fc00::/7 -j limit-354 +-A FORWARD -o eth1 -d fc00::/7 -j limit-355 +-A FORWARD -o eth1 -d fc00::/7 -j limit-356 +-A FORWARD -o eth1 -d fc00::/7 -j limit-357 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-0 -A FORWARD -j ACCEPT @@ -1391,17 +2215,92 @@ -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-37 -A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-38 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-39 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-40 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-41 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-42 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-43 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-44 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-45 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-46 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-47 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-48 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-49 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-50 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-51 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-52 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-53 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-54 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-55 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-56 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-57 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-58 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-59 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-60 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-61 +-A FORWARD -j ACCEPT -A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A FORWARD -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A FORWARD -m recent --name user:C --rsource --mask fe00:: --set +-A FORWARD -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set -A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -j ACCEPT --A FORWARD -j logdrop-199 +-A FORWARD -j logdrop-343 -A FORWARD -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD -A FORWARD -j logaccept-14 --A FORWARD -j logdrop-200 +-A FORWARD -j logdrop-344 -A FORWARD -j logpass-0 -A FORWARD -j ACCEPT -A FORWARD -j DROP @@ -1434,6 +2333,294 @@ -A FORWARD -p icmpv6 -j icmp-routing -A INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A INPUT -j limit-715 +-A INPUT -j limit-714 +-A INPUT -j limit-713 +-A INPUT -j limit-712 +-A INPUT -j limit-711 +-A INPUT -j limit-710 +-A INPUT -j limit-709 +-A INPUT -j limit-708 +-A INPUT -j limit-707 +-A INPUT -j limit-706 +-A INPUT -j limit-705 +-A INPUT -j limit-704 +-A INPUT -j limit-703 +-A INPUT -j limit-702 +-A INPUT -j limit-701 +-A INPUT -j limit-700 +-A INPUT -j limit-699 +-A INPUT -j limit-698 +-A INPUT -j limit-697 +-A INPUT -j limit-696 +-A INPUT -j limit-695 +-A INPUT -j limit-694 +-A INPUT -j limit-693 +-A INPUT -j limit-692 +-A INPUT -j limit-691 +-A INPUT -j limit-690 +-A INPUT -j limit-689 +-A INPUT -j limit-688 +-A INPUT -j limit-687 +-A INPUT -j limit-686 +-A INPUT -j limit-685 +-A INPUT -j limit-684 +-A INPUT -j limit-683 +-A INPUT -j limit-682 +-A INPUT -j limit-681 +-A INPUT -j limit-680 +-A INPUT -j limit-679 +-A INPUT -j limit-678 +-A INPUT -j limit-677 +-A INPUT -j limit-676 +-A INPUT -j limit-675 +-A INPUT -j limit-674 +-A INPUT -j limit-673 +-A INPUT -j limit-672 +-A INPUT -j limit-671 +-A INPUT -j limit-670 +-A INPUT -j limit-669 +-A INPUT -j limit-668 +-A INPUT -j limit-667 +-A INPUT -j limit-666 +-A INPUT -j limit-665 +-A INPUT -j limit-664 +-A INPUT -j limit-663 +-A INPUT -j limit-662 +-A INPUT -j limit-661 +-A INPUT -j limit-660 +-A INPUT -j limit-659 +-A INPUT -j limit-658 +-A INPUT -j limit-657 +-A INPUT -j limit-656 +-A INPUT -j limit-655 +-A INPUT -j limit-654 +-A INPUT -j limit-653 +-A INPUT -j limit-652 +-A INPUT -j limit-651 +-A INPUT -j limit-650 +-A INPUT -j limit-649 +-A INPUT -j limit-648 +-A INPUT -j limit-647 +-A INPUT -j limit-646 +-A INPUT -j limit-645 +-A INPUT -j limit-644 +-A INPUT -j limit-643 +-A INPUT -j limit-642 +-A INPUT -j limit-641 +-A INPUT -j limit-640 +-A INPUT -j limit-639 +-A INPUT -j limit-638 +-A INPUT -j limit-637 +-A INPUT -j limit-636 +-A INPUT -j limit-635 +-A INPUT -j limit-634 +-A INPUT -j limit-633 +-A INPUT -j limit-632 +-A INPUT -j limit-631 +-A INPUT -j limit-630 +-A INPUT -j limit-629 +-A INPUT -j limit-628 +-A INPUT -j limit-627 +-A INPUT -j limit-626 +-A INPUT -j limit-625 +-A INPUT -j limit-624 +-A INPUT -j limit-623 +-A INPUT -j limit-622 +-A INPUT -j limit-621 +-A INPUT -j limit-620 +-A INPUT -j limit-619 +-A INPUT -j limit-618 +-A INPUT -j limit-617 +-A INPUT -j limit-616 +-A INPUT -j limit-615 +-A INPUT -j limit-614 +-A INPUT -j limit-613 +-A INPUT -j limit-612 +-A INPUT -j limit-611 +-A INPUT -j limit-610 +-A INPUT -j limit-609 +-A INPUT -j limit-608 +-A INPUT -j limit-607 +-A INPUT -j limit-606 +-A INPUT -j limit-605 +-A INPUT -j limit-604 +-A INPUT -j limit-603 +-A INPUT -j limit-602 +-A INPUT -j limit-601 +-A INPUT -j limit-600 +-A INPUT -j limit-599 +-A INPUT -j limit-598 +-A INPUT -j limit-597 +-A INPUT -j limit-596 +-A INPUT -j limit-595 +-A INPUT -j limit-594 +-A INPUT -j limit-593 +-A INPUT -j limit-592 +-A INPUT -j limit-591 +-A INPUT -j limit-590 +-A INPUT -j limit-589 +-A INPUT -j limit-588 +-A INPUT -j limit-587 +-A INPUT -j limit-586 +-A INPUT -j limit-585 +-A INPUT -j limit-584 +-A INPUT -j limit-583 +-A INPUT -j limit-582 +-A INPUT -j limit-581 +-A INPUT -j limit-580 +-A INPUT -j limit-579 +-A INPUT -j limit-578 +-A INPUT -j limit-577 +-A INPUT -j limit-576 +-A INPUT -j limit-575 +-A INPUT -j limit-574 +-A INPUT -j limit-573 +-A INPUT -j limit-572 +-A INPUT -j limit-571 +-A INPUT -j limit-570 +-A INPUT -j limit-569 +-A INPUT -j limit-568 +-A INPUT -j limit-567 +-A INPUT -j limit-566 +-A INPUT -j limit-565 +-A INPUT -j limit-564 +-A INPUT -j limit-563 +-A INPUT -j limit-562 +-A INPUT -j limit-561 +-A INPUT -j limit-560 +-A INPUT -j limit-559 +-A INPUT -j limit-558 +-A INPUT -j limit-557 +-A INPUT -j limit-556 +-A INPUT -j limit-555 +-A INPUT -j limit-554 +-A INPUT -j limit-553 +-A INPUT -j limit-552 +-A INPUT -j limit-551 +-A INPUT -j limit-550 +-A INPUT -j limit-549 +-A INPUT -j limit-548 +-A INPUT -j limit-547 +-A INPUT -j limit-546 +-A INPUT -j limit-545 +-A INPUT -j limit-544 +-A INPUT -j limit-543 +-A INPUT -j limit-542 +-A INPUT -j limit-541 +-A INPUT -j limit-540 +-A INPUT -j limit-539 +-A INPUT -j limit-538 +-A INPUT -j limit-537 +-A INPUT -j limit-536 +-A INPUT -j limit-535 +-A INPUT -j limit-534 +-A INPUT -j limit-533 +-A INPUT -j limit-532 +-A INPUT -j limit-531 +-A INPUT -j limit-530 +-A INPUT -j limit-529 +-A INPUT -j limit-528 +-A INPUT -j limit-527 +-A INPUT -j limit-526 +-A INPUT -j limit-525 +-A INPUT -j limit-524 +-A INPUT -j limit-523 +-A INPUT -j limit-522 +-A INPUT -j limit-521 +-A INPUT -j limit-520 +-A INPUT -j limit-519 +-A INPUT -j limit-518 +-A INPUT -j limit-517 +-A INPUT -j limit-516 +-A INPUT -j limit-515 +-A INPUT -j limit-514 +-A INPUT -j limit-513 +-A INPUT -j limit-512 +-A INPUT -j limit-511 +-A INPUT -j limit-510 +-A INPUT -j limit-509 +-A INPUT -j limit-508 +-A INPUT -j limit-507 +-A INPUT -j limit-506 +-A INPUT -j limit-505 +-A INPUT -j limit-504 +-A INPUT -j limit-503 +-A INPUT -j limit-502 +-A INPUT -j limit-501 +-A INPUT -j limit-500 +-A INPUT -j limit-499 +-A INPUT -j limit-498 +-A INPUT -j limit-497 +-A INPUT -j limit-496 +-A INPUT -j limit-495 +-A INPUT -j limit-494 +-A INPUT -j limit-493 +-A INPUT -j limit-492 +-A INPUT -j limit-491 +-A INPUT -j limit-490 +-A INPUT -j limit-489 +-A INPUT -j limit-488 +-A INPUT -j limit-487 +-A INPUT -j limit-486 +-A INPUT -j limit-485 +-A INPUT -j limit-484 +-A INPUT -j limit-483 +-A INPUT -j limit-482 +-A INPUT -j limit-481 +-A INPUT -j limit-480 +-A INPUT -j limit-479 +-A INPUT -j limit-478 +-A INPUT -j limit-477 +-A INPUT -j limit-476 +-A INPUT -j limit-475 +-A INPUT -j limit-474 +-A INPUT -j limit-473 +-A INPUT -j limit-472 +-A INPUT -j limit-471 +-A INPUT -j limit-470 +-A INPUT -j limit-469 +-A INPUT -j limit-468 +-A INPUT -j limit-467 +-A INPUT -j limit-466 +-A INPUT -j limit-465 +-A INPUT -j limit-464 +-A INPUT -j limit-463 +-A INPUT -j limit-462 +-A INPUT -j limit-461 +-A INPUT -j limit-460 +-A INPUT -j limit-459 +-A INPUT -j limit-458 +-A INPUT -j limit-457 +-A INPUT -j limit-456 +-A INPUT -j limit-455 +-A INPUT -j limit-454 +-A INPUT -j limit-453 +-A INPUT -j limit-452 +-A INPUT -j limit-451 +-A INPUT -j limit-450 +-A INPUT -j limit-449 +-A INPUT -j limit-448 +-A INPUT -j limit-447 +-A INPUT -j limit-446 +-A INPUT -j limit-445 +-A INPUT -j limit-444 +-A INPUT -j limit-443 +-A INPUT -j limit-442 +-A INPUT -j limit-441 +-A INPUT -j limit-440 +-A INPUT -j limit-439 +-A INPUT -j limit-438 +-A INPUT -j limit-437 +-A INPUT -j limit-436 +-A INPUT -j limit-435 +-A INPUT -j limit-434 +-A INPUT -j limit-433 +-A INPUT -j limit-432 +-A INPUT -j limit-431 +-A INPUT -j limit-430 +-A INPUT -j limit-429 +-A INPUT -j limit-428 -A INPUT -j limit-427 -A INPUT -j limit-426 -A INPUT -j limit-425 @@ -1504,150 +2691,6 @@ -A INPUT -j limit-360 -A INPUT -j limit-359 -A INPUT -j limit-358 --A INPUT -j limit-357 --A INPUT -j limit-356 --A INPUT -j limit-355 --A INPUT -j limit-354 --A INPUT -j limit-353 --A INPUT -j limit-352 --A INPUT -j limit-351 --A INPUT -j limit-350 --A INPUT -j limit-349 --A INPUT -j limit-348 --A INPUT -j limit-347 --A INPUT -j limit-346 --A INPUT -j limit-345 --A INPUT -j limit-344 --A INPUT -j limit-343 --A INPUT -j limit-342 --A INPUT -j limit-341 --A INPUT -j limit-340 --A INPUT -j limit-339 --A INPUT -j limit-338 --A INPUT -j limit-337 --A INPUT -j limit-336 --A INPUT -j limit-335 --A INPUT -j limit-334 --A INPUT -j limit-333 --A INPUT -j limit-332 --A INPUT -j limit-331 --A INPUT -j limit-330 --A INPUT -j limit-329 --A INPUT -j limit-328 --A INPUT -j limit-327 --A INPUT -j limit-326 --A INPUT -j limit-325 --A INPUT -j limit-324 --A INPUT -j limit-323 --A INPUT -j limit-322 --A INPUT -j limit-321 --A INPUT -j limit-320 --A INPUT -j limit-319 --A INPUT -j limit-318 --A INPUT -j limit-317 --A INPUT -j limit-316 --A INPUT -j limit-315 --A INPUT -j limit-314 --A INPUT -j limit-313 --A INPUT -j limit-312 --A INPUT -j limit-311 --A INPUT -j limit-310 --A INPUT -j limit-309 --A INPUT -j limit-308 --A INPUT -j limit-307 --A INPUT -j limit-306 --A INPUT -j limit-305 --A INPUT -j limit-304 --A INPUT -j limit-303 --A INPUT -j limit-302 --A INPUT -j limit-301 --A INPUT -j limit-300 --A INPUT -j limit-299 --A INPUT -j limit-298 --A INPUT -j limit-297 --A INPUT -j limit-296 --A INPUT -j limit-295 --A INPUT -j limit-294 --A INPUT -j limit-293 --A INPUT -j limit-292 --A INPUT -j limit-291 --A INPUT -j limit-290 --A INPUT -j limit-289 --A INPUT -j limit-288 --A INPUT -j limit-287 --A INPUT -j limit-286 --A INPUT -j limit-285 --A INPUT -j limit-284 --A INPUT -j limit-283 --A INPUT -j limit-282 --A INPUT -j limit-281 --A INPUT -j limit-280 --A INPUT -j limit-279 --A INPUT -j limit-278 --A INPUT -j limit-277 --A INPUT -j limit-276 --A INPUT -j limit-275 --A INPUT -j limit-274 --A INPUT -j limit-273 --A INPUT -j limit-272 --A INPUT -j limit-271 --A INPUT -j limit-270 --A INPUT -j limit-269 --A INPUT -j limit-268 --A INPUT -j limit-267 --A INPUT -j limit-266 --A INPUT -j limit-265 --A INPUT -j limit-264 --A INPUT -j limit-263 --A INPUT -j limit-262 --A INPUT -j limit-261 --A INPUT -j limit-260 --A INPUT -j limit-259 --A INPUT -j limit-258 --A INPUT -j limit-257 --A INPUT -j limit-256 --A INPUT -j limit-255 --A INPUT -j limit-254 --A INPUT -j limit-253 --A INPUT -j limit-252 --A INPUT -j limit-251 --A INPUT -j limit-250 --A INPUT -j limit-249 --A INPUT -j limit-248 --A INPUT -j limit-247 --A INPUT -j limit-246 --A INPUT -j limit-245 --A INPUT -j limit-244 --A INPUT -j limit-243 --A INPUT -j limit-242 --A INPUT -j limit-241 --A INPUT -j limit-240 --A INPUT -j limit-239 --A INPUT -j limit-238 --A INPUT -j limit-237 --A INPUT -j limit-236 --A INPUT -j limit-235 --A INPUT -j limit-234 --A INPUT -j limit-233 --A INPUT -j limit-232 --A INPUT -j limit-231 --A INPUT -j limit-230 --A INPUT -j limit-229 --A INPUT -j limit-228 --A INPUT -j limit-227 --A INPUT -j limit-226 --A INPUT -j limit-225 --A INPUT -j limit-224 --A INPUT -j limit-223 --A INPUT -j limit-222 --A INPUT -j limit-221 --A INPUT -j limit-220 --A INPUT -j limit-219 --A INPUT -j limit-218 --A INPUT -j limit-217 --A INPUT -j limit-216 --A INPUT -j limit-215 --A INPUT -j limit-214 -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -j ACCEPT @@ -1770,231 +2813,450 @@ -A INPUT -j ACCEPT -A INPUT -j logaccept-final-37 -A INPUT -j ACCEPT --A INPUT -i eth0 -j limit-428 --A INPUT -i eth0 -j limit-429 --A INPUT -i eth0 -j limit-430 --A INPUT -i eth0 -j limit-431 --A INPUT -i eth0 -j limit-432 --A INPUT -i eth0 -j limit-433 --A INPUT -i eth0 -j limit-434 --A INPUT -i eth0 -j limit-435 --A INPUT -i eth0 -j limit-436 --A INPUT -i eth0 -j limit-437 --A INPUT -i eth0 -j limit-438 --A INPUT -i eth0 -j limit-439 --A INPUT -i eth0 -j limit-440 --A INPUT -i eth0 -j limit-441 --A INPUT -i eth0 -j limit-442 --A INPUT -i eth0 -j limit-443 --A INPUT -i eth0 -j limit-444 --A INPUT -i eth0 -j limit-445 --A INPUT -i eth0 -j limit-446 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-152 --A INPUT -i eth0 -j limit-448 --A INPUT -i eth0 -j limit-449 --A INPUT -i eth0 -j limit-450 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-156 --A INPUT -i eth0 -j limit-452 --A INPUT -i eth0 -j limit-453 --A INPUT -i eth0 -j limit-454 --A INPUT -i eth0 -j limit-455 --A INPUT -i eth0 -j limit-456 --A INPUT -i eth0 -j limit-457 --A INPUT -i eth0 -j limit-458 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-164 --A INPUT -i eth0 -j limit-460 --A INPUT -i eth0 -j limit-461 --A INPUT -i eth0 -j limit-462 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-168 --A INPUT -i eth0 -j limit-464 --A INPUT -i eth0 -j limit-465 --A INPUT -i eth0 -j limit-466 --A INPUT -i eth0 -j limit-467 --A INPUT -i eth0 -j limit-468 --A INPUT -i eth0 -j limit-469 --A INPUT -i eth0 -j limit-470 --A INPUT -i eth0 -j limit-471 --A INPUT -i eth0 -j limit-472 --A INPUT -i eth0 -j limit-473 --A INPUT -i eth0 -j limit-474 --A INPUT -i eth0 -j limit-475 --A INPUT -i eth0 -j limit-476 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-38 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-39 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-40 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-41 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-42 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-43 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-44 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-45 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-46 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-47 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-48 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-49 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-50 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-51 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-52 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-53 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-54 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-55 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-56 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-57 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-58 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-59 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-60 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-61 +-A INPUT -j ACCEPT +-A INPUT -i eth0 -j limit-716 +-A INPUT -i eth0 -j limit-717 +-A INPUT -i eth0 -j limit-718 +-A INPUT -i eth0 -j limit-719 +-A INPUT -i eth0 -j limit-720 +-A INPUT -i eth0 -j limit-721 +-A INPUT -i eth0 -j limit-722 +-A INPUT -i eth0 -j limit-723 +-A INPUT -i eth0 -j limit-724 +-A INPUT -i eth0 -j limit-725 +-A INPUT -i eth0 -j limit-726 +-A INPUT -i eth0 -j limit-727 +-A INPUT -i eth0 -j limit-728 +-A INPUT -i eth0 -j limit-729 +-A INPUT -i eth0 -j limit-730 +-A INPUT -i eth0 -j limit-731 +-A INPUT -i eth0 -j limit-732 +-A INPUT -i eth0 -j limit-733 +-A INPUT -i eth0 -j limit-734 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-248 +-A INPUT -i eth0 -j limit-736 +-A INPUT -i eth0 -j limit-737 +-A INPUT -i eth0 -j limit-738 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-252 +-A INPUT -i eth0 -j limit-740 +-A INPUT -i eth0 -j limit-741 +-A INPUT -i eth0 -j limit-742 +-A INPUT -i eth0 -j limit-743 +-A INPUT -i eth0 -j limit-744 +-A INPUT -i eth0 -j limit-745 +-A INPUT -i eth0 -j limit-746 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-260 +-A INPUT -i eth0 -j limit-748 +-A INPUT -i eth0 -j limit-749 +-A INPUT -i eth0 -j limit-750 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-264 +-A INPUT -i eth0 -j limit-752 +-A INPUT -i eth0 -j limit-753 +-A INPUT -i eth0 -j limit-754 +-A INPUT -i eth0 -j limit-755 +-A INPUT -i eth0 -j limit-756 +-A INPUT -i eth0 -j limit-757 +-A INPUT -i eth0 -j limit-758 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-272 +-A INPUT -i eth0 -j limit-760 +-A INPUT -i eth0 -j limit-761 +-A INPUT -i eth0 -j limit-762 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-276 +-A INPUT -i eth0 -j limit-764 +-A INPUT -i eth0 -j limit-765 +-A INPUT -i eth0 -j limit-766 +-A INPUT -i eth0 -j limit-767 +-A INPUT -i eth0 -j limit-768 +-A INPUT -i eth0 -j limit-769 +-A INPUT -i eth0 -j limit-770 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-284 +-A INPUT -i eth0 -j limit-772 +-A INPUT -i eth0 -j limit-773 +-A INPUT -i eth0 -j limit-774 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-288 +-A INPUT -i eth0 -j limit-776 +-A INPUT -i eth0 -j limit-777 +-A INPUT -i eth0 -j limit-778 +-A INPUT -i eth0 -j limit-779 +-A INPUT -i eth0 -j limit-780 +-A INPUT -i eth0 -j limit-781 +-A INPUT -i eth0 -j limit-782 +-A INPUT -i eth0 -j limit-783 +-A INPUT -i eth0 -j limit-784 +-A INPUT -i eth0 -j limit-785 +-A INPUT -i eth0 -j limit-786 +-A INPUT -i eth0 -j limit-787 +-A INPUT -i eth0 -j limit-788 -A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-478 --A INPUT -i eth0 -j limit-479 --A INPUT -i eth0 -j limit-480 +-A INPUT -i eth0 -j limit-790 +-A INPUT -i eth0 -j limit-791 +-A INPUT -i eth0 -j limit-792 -A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-482 --A INPUT -i eth0 -j limit-483 --A INPUT -i eth0 -j limit-484 --A INPUT -i eth0 -j limit-485 --A INPUT -i eth0 -j limit-486 --A INPUT -i eth0 -j limit-487 --A INPUT -i eth0 -j limit-488 +-A INPUT -i eth0 -j limit-794 +-A INPUT -i eth0 -j limit-795 +-A INPUT -i eth0 -j limit-796 +-A INPUT -i eth0 -j limit-797 +-A INPUT -i eth0 -j limit-798 +-A INPUT -i eth0 -j limit-799 +-A INPUT -i eth0 -j limit-800 -A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-490 --A INPUT -i eth0 -j limit-491 --A INPUT -i eth0 -j limit-492 +-A INPUT -i eth0 -j limit-802 +-A INPUT -i eth0 -j limit-803 +-A INPUT -i eth0 -j limit-804 -A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-494 --A INPUT -i eth0 -j limit-495 --A INPUT -i eth0 -j limit-496 --A INPUT -i eth0 -j limit-497 --A INPUT -i eth0 -j limit-498 --A INPUT -i eth0 -j limit-499 --A INPUT -i eth0 -j limit-500 --A INPUT -i eth0 -j limit-501 --A INPUT -i eth0 -j limit-502 --A INPUT -i eth0 -j limit-503 --A INPUT -i eth0 -j limit-504 --A INPUT -i eth0 -j limit-505 --A INPUT -i eth0 -j limit-506 +-A INPUT -i eth0 -j limit-806 +-A INPUT -i eth0 -j limit-807 +-A INPUT -i eth0 -j limit-808 +-A INPUT -i eth0 -j limit-809 +-A INPUT -i eth0 -j limit-810 +-A INPUT -i eth0 -j limit-811 +-A INPUT -i eth0 -j limit-812 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-814 +-A INPUT -i eth0 -j limit-815 +-A INPUT -i eth0 -j limit-816 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-818 +-A INPUT -i eth0 -j limit-819 +-A INPUT -i eth0 -j limit-820 +-A INPUT -i eth0 -j limit-821 +-A INPUT -i eth0 -j limit-822 +-A INPUT -i eth0 -j limit-823 +-A INPUT -i eth0 -j limit-824 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-826 +-A INPUT -i eth0 -j limit-827 +-A INPUT -i eth0 -j limit-828 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-830 +-A INPUT -i eth0 -j limit-831 +-A INPUT -i eth0 -j limit-832 +-A INPUT -i eth0 -j limit-833 +-A INPUT -i eth0 -j limit-834 +-A INPUT -i eth0 -j limit-835 +-A INPUT -i eth0 -j limit-836 +-A INPUT -i eth0 -j limit-837 +-A INPUT -i eth0 -j limit-838 +-A INPUT -i eth0 -j limit-839 +-A INPUT -i eth0 -j limit-840 +-A INPUT -i eth0 -j limit-841 +-A INPUT -i eth0 -j limit-842 -A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-508 --A INPUT -i eth0 -j limit-509 --A INPUT -i eth0 -j limit-510 +-A INPUT -i eth0 -j limit-844 +-A INPUT -i eth0 -j limit-845 +-A INPUT -i eth0 -j limit-846 -A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-512 --A INPUT -i eth0 -j limit-513 --A INPUT -i eth0 -j limit-514 --A INPUT -i eth0 -j limit-515 --A INPUT -i eth0 -j limit-516 --A INPUT -i eth0 -j limit-517 --A INPUT -i eth0 -j limit-518 +-A INPUT -i eth0 -j limit-848 +-A INPUT -i eth0 -j limit-849 +-A INPUT -i eth0 -j limit-850 +-A INPUT -i eth0 -j limit-851 +-A INPUT -i eth0 -j limit-852 +-A INPUT -i eth0 -j limit-853 +-A INPUT -i eth0 -j limit-854 -A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-520 --A INPUT -i eth0 -j limit-521 --A INPUT -i eth0 -j limit-522 +-A INPUT -i eth0 -j limit-856 +-A INPUT -i eth0 -j limit-857 +-A INPUT -i eth0 -j limit-858 -A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-524 --A INPUT -i eth0 -j limit-525 --A INPUT -i eth0 -j limit-526 --A INPUT -i eth0 -j limit-527 --A INPUT -i eth0 -j limit-528 --A INPUT -i eth0 -j limit-529 --A INPUT -i eth0 -j limit-530 --A INPUT -i eth0 -j limit-531 --A INPUT -i eth0 -j limit-532 --A INPUT -i eth0 -j limit-533 --A INPUT -i eth0 -j limit-534 --A INPUT -i eth0 -j limit-535 --A INPUT -i eth0 -j limit-536 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-182 --A INPUT -i eth0 -j limit-538 --A INPUT -i eth0 -j limit-539 --A INPUT -i eth0 -j limit-540 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-186 --A INPUT -i eth0 -j limit-542 --A INPUT -i eth0 -j limit-543 --A INPUT -i eth0 -j limit-544 --A INPUT -i eth0 -j limit-545 --A INPUT -i eth0 -j limit-546 --A INPUT -i eth0 -j limit-547 --A INPUT -i eth0 -j limit-548 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-194 --A INPUT -i eth0 -j limit-550 --A INPUT -i eth0 -j limit-551 --A INPUT -i eth0 -j limit-552 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-198 --A INPUT -i eth0 -j limit-554 --A INPUT -i eth0 -j limit-555 --A INPUT -i eth0 -j limit-556 --A INPUT -i eth0 -j limit-557 --A INPUT -i eth0 -j limit-558 --A INPUT -i eth0 -j limit-559 --A INPUT -i eth0 -j limit-560 --A INPUT -i eth0 -j limit-561 --A INPUT -i eth0 -j limit-562 --A INPUT -i eth0 -j limit-563 --A INPUT -i eth0 -j limit-564 --A INPUT -i eth0 -j limit-565 --A INPUT -i eth0 -j limit-566 +-A INPUT -i eth0 -j limit-860 +-A INPUT -i eth0 -j limit-861 +-A INPUT -i eth0 -j limit-862 +-A INPUT -i eth0 -j limit-863 +-A INPUT -i eth0 -j limit-864 +-A INPUT -i eth0 -j limit-865 +-A INPUT -i eth0 -j limit-866 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-868 +-A INPUT -i eth0 -j limit-869 +-A INPUT -i eth0 -j limit-870 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-872 +-A INPUT -i eth0 -j limit-873 +-A INPUT -i eth0 -j limit-874 +-A INPUT -i eth0 -j limit-875 +-A INPUT -i eth0 -j limit-876 +-A INPUT -i eth0 -j limit-877 +-A INPUT -i eth0 -j limit-878 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-880 +-A INPUT -i eth0 -j limit-881 +-A INPUT -i eth0 -j limit-882 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-884 +-A INPUT -i eth0 -j limit-885 +-A INPUT -i eth0 -j limit-886 +-A INPUT -i eth0 -j limit-887 +-A INPUT -i eth0 -j limit-888 +-A INPUT -i eth0 -j limit-889 +-A INPUT -i eth0 -j limit-890 +-A INPUT -i eth0 -j limit-891 +-A INPUT -i eth0 -j limit-892 +-A INPUT -i eth0 -j limit-893 +-A INPUT -i eth0 -j limit-894 +-A INPUT -i eth0 -j limit-895 +-A INPUT -i eth0 -j limit-896 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-302 +-A INPUT -i eth0 -j limit-898 +-A INPUT -i eth0 -j limit-899 +-A INPUT -i eth0 -j limit-900 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-306 +-A INPUT -i eth0 -j limit-902 +-A INPUT -i eth0 -j limit-903 +-A INPUT -i eth0 -j limit-904 +-A INPUT -i eth0 -j limit-905 +-A INPUT -i eth0 -j limit-906 +-A INPUT -i eth0 -j limit-907 +-A INPUT -i eth0 -j limit-908 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-314 +-A INPUT -i eth0 -j limit-910 +-A INPUT -i eth0 -j limit-911 +-A INPUT -i eth0 -j limit-912 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-318 +-A INPUT -i eth0 -j limit-914 +-A INPUT -i eth0 -j limit-915 +-A INPUT -i eth0 -j limit-916 +-A INPUT -i eth0 -j limit-917 +-A INPUT -i eth0 -j limit-918 +-A INPUT -i eth0 -j limit-919 +-A INPUT -i eth0 -j limit-920 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-326 +-A INPUT -i eth0 -j limit-922 +-A INPUT -i eth0 -j limit-923 +-A INPUT -i eth0 -j limit-924 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-330 +-A INPUT -i eth0 -j limit-926 +-A INPUT -i eth0 -j limit-927 +-A INPUT -i eth0 -j limit-928 +-A INPUT -i eth0 -j limit-929 +-A INPUT -i eth0 -j limit-930 +-A INPUT -i eth0 -j limit-931 +-A INPUT -i eth0 -j limit-932 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-338 +-A INPUT -i eth0 -j limit-934 +-A INPUT -i eth0 -j limit-935 +-A INPUT -i eth0 -j limit-936 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-342 +-A INPUT -i eth0 -j limit-938 +-A INPUT -i eth0 -j limit-939 +-A INPUT -i eth0 -j limit-940 +-A INPUT -i eth0 -j limit-941 +-A INPUT -i eth0 -j limit-942 +-A INPUT -i eth0 -j limit-943 +-A INPUT -i eth0 -j limit-944 +-A INPUT -i eth0 -j limit-945 +-A INPUT -i eth0 -j limit-946 +-A INPUT -i eth0 -j limit-947 +-A INPUT -i eth0 -j limit-948 +-A INPUT -i eth0 -j limit-949 +-A INPUT -i eth0 -j limit-950 -A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-568 --A INPUT -i eth0 -j limit-569 --A INPUT -i eth0 -j limit-570 +-A INPUT -i eth0 -j limit-952 +-A INPUT -i eth0 -j limit-953 +-A INPUT -i eth0 -j limit-954 -A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-572 --A INPUT -i eth0 -j limit-573 --A INPUT -i eth0 -j limit-574 --A INPUT -i eth0 -j limit-575 --A INPUT -i eth0 -j limit-576 --A INPUT -i eth0 -j limit-577 --A INPUT -i eth0 -j limit-578 +-A INPUT -i eth0 -j limit-956 +-A INPUT -i eth0 -j limit-957 +-A INPUT -i eth0 -j limit-958 +-A INPUT -i eth0 -j limit-959 +-A INPUT -i eth0 -j limit-960 +-A INPUT -i eth0 -j limit-961 +-A INPUT -i eth0 -j limit-962 -A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-580 --A INPUT -i eth0 -j limit-581 --A INPUT -i eth0 -j limit-582 +-A INPUT -i eth0 -j limit-964 +-A INPUT -i eth0 -j limit-965 +-A INPUT -i eth0 -j limit-966 -A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-584 --A INPUT -i eth0 -j limit-585 --A INPUT -i eth0 -j limit-586 --A INPUT -i eth0 -j limit-587 --A INPUT -i eth0 -j limit-588 --A INPUT -i eth0 -j limit-589 --A INPUT -i eth0 -j limit-590 --A INPUT -i eth0 -j limit-591 --A INPUT -i eth0 -j limit-592 --A INPUT -i eth0 -j limit-593 --A INPUT -i eth0 -j limit-594 --A INPUT -i eth0 -j limit-595 --A INPUT -i eth0 -j limit-596 +-A INPUT -i eth0 -j limit-968 +-A INPUT -i eth0 -j limit-969 +-A INPUT -i eth0 -j limit-970 +-A INPUT -i eth0 -j limit-971 +-A INPUT -i eth0 -j limit-972 +-A INPUT -i eth0 -j limit-973 +-A INPUT -i eth0 -j limit-974 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-976 +-A INPUT -i eth0 -j limit-977 +-A INPUT -i eth0 -j limit-978 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-980 +-A INPUT -i eth0 -j limit-981 +-A INPUT -i eth0 -j limit-982 +-A INPUT -i eth0 -j limit-983 +-A INPUT -i eth0 -j limit-984 +-A INPUT -i eth0 -j limit-985 +-A INPUT -i eth0 -j limit-986 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-988 +-A INPUT -i eth0 -j limit-989 +-A INPUT -i eth0 -j limit-990 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-992 +-A INPUT -i eth0 -j limit-993 +-A INPUT -i eth0 -j limit-994 +-A INPUT -i eth0 -j limit-995 +-A INPUT -i eth0 -j limit-996 +-A INPUT -i eth0 -j limit-997 +-A INPUT -i eth0 -j limit-998 +-A INPUT -i eth0 -j limit-999 +-A INPUT -i eth0 -j limit-1000 +-A INPUT -i eth0 -j limit-1001 +-A INPUT -i eth0 -j limit-1002 +-A INPUT -i eth0 -j limit-1003 +-A INPUT -i eth0 -j limit-1004 -A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-598 --A INPUT -i eth0 -j limit-599 --A INPUT -i eth0 -j limit-600 +-A INPUT -i eth0 -j limit-1006 +-A INPUT -i eth0 -j limit-1007 +-A INPUT -i eth0 -j limit-1008 -A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-602 --A INPUT -i eth0 -j limit-603 --A INPUT -i eth0 -j limit-604 --A INPUT -i eth0 -j limit-605 --A INPUT -i eth0 -j limit-606 --A INPUT -i eth0 -j limit-607 --A INPUT -i eth0 -j limit-608 +-A INPUT -i eth0 -j limit-1010 +-A INPUT -i eth0 -j limit-1011 +-A INPUT -i eth0 -j limit-1012 +-A INPUT -i eth0 -j limit-1013 +-A INPUT -i eth0 -j limit-1014 +-A INPUT -i eth0 -j limit-1015 +-A INPUT -i eth0 -j limit-1016 -A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-610 --A INPUT -i eth0 -j limit-611 --A INPUT -i eth0 -j limit-612 +-A INPUT -i eth0 -j limit-1018 +-A INPUT -i eth0 -j limit-1019 +-A INPUT -i eth0 -j limit-1020 -A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-614 --A INPUT -i eth0 -j limit-615 --A INPUT -i eth0 -j limit-616 --A INPUT -i eth0 -j limit-617 --A INPUT -i eth0 -j limit-618 --A INPUT -i eth0 -j limit-619 --A INPUT -i eth0 -j limit-620 --A INPUT -i eth0 -j limit-621 --A INPUT -i eth0 -j limit-622 --A INPUT -i eth0 -j limit-623 --A INPUT -i eth0 -j limit-624 --A INPUT -i eth0 -j limit-625 --A INPUT -i eth0 -j limit-626 --A INPUT -i eth0 -j limit-627 --A INPUT -i eth0 -j limit-628 --A INPUT -i eth0 -j limit-629 --A INPUT -i eth0 -j limit-630 --A INPUT -i eth0 -j limit-631 --A INPUT -i eth0 -j limit-632 --A INPUT -i eth0 -j limit-633 --A INPUT -i eth0 -j limit-634 --A INPUT -i eth0 -j limit-635 --A INPUT -i eth0 -j limit-636 --A INPUT -i eth0 -j limit-637 --A INPUT -i eth0 -j limit-638 --A INPUT -i eth0 -j limit-639 --A INPUT -i eth0 -j limit-640 --A INPUT -i eth0 -j limit-641 +-A INPUT -i eth0 -j limit-1022 +-A INPUT -i eth0 -j limit-1023 +-A INPUT -i eth0 -j limit-1024 +-A INPUT -i eth0 -j limit-1025 +-A INPUT -i eth0 -j limit-1026 +-A INPUT -i eth0 -j limit-1027 +-A INPUT -i eth0 -j limit-1028 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1030 +-A INPUT -i eth0 -j limit-1031 +-A INPUT -i eth0 -j limit-1032 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1034 +-A INPUT -i eth0 -j limit-1035 +-A INPUT -i eth0 -j limit-1036 +-A INPUT -i eth0 -j limit-1037 +-A INPUT -i eth0 -j limit-1038 +-A INPUT -i eth0 -j limit-1039 +-A INPUT -i eth0 -j limit-1040 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1042 +-A INPUT -i eth0 -j limit-1043 +-A INPUT -i eth0 -j limit-1044 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-1046 +-A INPUT -i eth0 -j limit-1047 +-A INPUT -i eth0 -j limit-1048 +-A INPUT -i eth0 -j limit-1049 +-A INPUT -i eth0 -j limit-1050 +-A INPUT -i eth0 -j limit-1051 +-A INPUT -i eth0 -j limit-1052 +-A INPUT -i eth0 -j limit-1053 +-A INPUT -i eth0 -j limit-1054 +-A INPUT -i eth0 -j limit-1055 +-A INPUT -i eth0 -j limit-1056 +-A INPUT -i eth0 -j limit-1057 +-A INPUT -i eth0 -j limit-1058 +-A INPUT -i eth0 -j limit-1059 +-A INPUT -i eth0 -j limit-1060 +-A INPUT -i eth0 -j limit-1061 +-A INPUT -i eth0 -j limit-1062 +-A INPUT -i eth0 -j limit-1063 +-A INPUT -i eth0 -j limit-1064 +-A INPUT -i eth0 -j limit-1065 +-A INPUT -i eth0 -j limit-1066 +-A INPUT -i eth0 -j limit-1067 +-A INPUT -i eth0 -j limit-1068 +-A INPUT -i eth0 -j limit-1069 +-A INPUT -i eth0 -j limit-1070 +-A INPUT -i eth0 -j limit-1071 +-A INPUT -i eth0 -j limit-1072 +-A INPUT -i eth0 -j limit-1073 -A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A INPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A INPUT -m recent --name user:C --rsource --mask fe00:: --set +-A INPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set -A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -j ACCEPT --A INPUT -j logdrop-199 +-A INPUT -j logdrop-343 -A INPUT -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT -A INPUT -j logaccept-14 --A INPUT -j logdrop-200 +-A INPUT -j logdrop-344 -A INPUT -j logpass-0 -A INPUT -j ACCEPT -A INPUT -j DROP @@ -2007,6 +3269,294 @@ -A INPUT -p icmpv6 -j ACCEPT -A OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -j limit-715 +-A OUTPUT -j limit-714 +-A OUTPUT -j limit-713 +-A OUTPUT -j limit-712 +-A OUTPUT -j limit-711 +-A OUTPUT -j limit-710 +-A OUTPUT -j limit-709 +-A OUTPUT -j limit-708 +-A OUTPUT -j limit-707 +-A OUTPUT -j limit-706 +-A OUTPUT -j limit-705 +-A OUTPUT -j limit-704 +-A OUTPUT -j limit-703 +-A OUTPUT -j limit-702 +-A OUTPUT -j limit-701 +-A OUTPUT -j limit-700 +-A OUTPUT -j limit-699 +-A OUTPUT -j limit-698 +-A OUTPUT -j limit-697 +-A OUTPUT -j limit-696 +-A OUTPUT -j limit-695 +-A OUTPUT -j limit-694 +-A OUTPUT -j limit-693 +-A OUTPUT -j limit-692 +-A OUTPUT -j limit-691 +-A OUTPUT -j limit-690 +-A OUTPUT -j limit-689 +-A OUTPUT -j limit-688 +-A OUTPUT -j limit-687 +-A OUTPUT -j limit-686 +-A OUTPUT -j limit-685 +-A OUTPUT -j limit-684 +-A OUTPUT -j limit-683 +-A OUTPUT -j limit-682 +-A OUTPUT -j limit-681 +-A OUTPUT -j limit-680 +-A OUTPUT -j limit-679 +-A OUTPUT -j limit-678 +-A OUTPUT -j limit-677 +-A OUTPUT -j limit-676 +-A OUTPUT -j limit-675 +-A OUTPUT -j limit-674 +-A OUTPUT -j limit-673 +-A OUTPUT -j limit-672 +-A OUTPUT -j limit-671 +-A OUTPUT -j limit-670 +-A OUTPUT -j limit-669 +-A OUTPUT -j limit-668 +-A OUTPUT -j limit-667 +-A OUTPUT -j limit-666 +-A OUTPUT -j limit-665 +-A OUTPUT -j limit-664 +-A OUTPUT -j limit-663 +-A OUTPUT -j limit-662 +-A OUTPUT -j limit-661 +-A OUTPUT -j limit-660 +-A OUTPUT -j limit-659 +-A OUTPUT -j limit-658 +-A OUTPUT -j limit-657 +-A OUTPUT -j limit-656 +-A OUTPUT -j limit-655 +-A OUTPUT -j limit-654 +-A OUTPUT -j limit-653 +-A OUTPUT -j limit-652 +-A OUTPUT -j limit-651 +-A OUTPUT -j limit-650 +-A OUTPUT -j limit-649 +-A OUTPUT -j limit-648 +-A OUTPUT -j limit-647 +-A OUTPUT -j limit-646 +-A OUTPUT -j limit-645 +-A OUTPUT -j limit-644 +-A OUTPUT -j limit-643 +-A OUTPUT -j limit-642 +-A OUTPUT -j limit-641 +-A OUTPUT -j limit-640 +-A OUTPUT -j limit-639 +-A OUTPUT -j limit-638 +-A OUTPUT -j limit-637 +-A OUTPUT -j limit-636 +-A OUTPUT -j limit-635 +-A OUTPUT -j limit-634 +-A OUTPUT -j limit-633 +-A OUTPUT -j limit-632 +-A OUTPUT -j limit-631 +-A OUTPUT -j limit-630 +-A OUTPUT -j limit-629 +-A OUTPUT -j limit-628 +-A OUTPUT -j limit-627 +-A OUTPUT -j limit-626 +-A OUTPUT -j limit-625 +-A OUTPUT -j limit-624 +-A OUTPUT -j limit-623 +-A OUTPUT -j limit-622 +-A OUTPUT -j limit-621 +-A OUTPUT -j limit-620 +-A OUTPUT -j limit-619 +-A OUTPUT -j limit-618 +-A OUTPUT -j limit-617 +-A OUTPUT -j limit-616 +-A OUTPUT -j limit-615 +-A OUTPUT -j limit-614 +-A OUTPUT -j limit-613 +-A OUTPUT -j limit-612 +-A OUTPUT -j limit-611 +-A OUTPUT -j limit-610 +-A OUTPUT -j limit-609 +-A OUTPUT -j limit-608 +-A OUTPUT -j limit-607 +-A OUTPUT -j limit-606 +-A OUTPUT -j limit-605 +-A OUTPUT -j limit-604 +-A OUTPUT -j limit-603 +-A OUTPUT -j limit-602 +-A OUTPUT -j limit-601 +-A OUTPUT -j limit-600 +-A OUTPUT -j limit-599 +-A OUTPUT -j limit-598 +-A OUTPUT -j limit-597 +-A OUTPUT -j limit-596 +-A OUTPUT -j limit-595 +-A OUTPUT -j limit-594 +-A OUTPUT -j limit-593 +-A OUTPUT -j limit-592 +-A OUTPUT -j limit-591 +-A OUTPUT -j limit-590 +-A OUTPUT -j limit-589 +-A OUTPUT -j limit-588 +-A OUTPUT -j limit-587 +-A OUTPUT -j limit-586 +-A OUTPUT -j limit-585 +-A OUTPUT -j limit-584 +-A OUTPUT -j limit-583 +-A OUTPUT -j limit-582 +-A OUTPUT -j limit-581 +-A OUTPUT -j limit-580 +-A OUTPUT -j limit-579 +-A OUTPUT -j limit-578 +-A OUTPUT -j limit-577 +-A OUTPUT -j limit-576 +-A OUTPUT -j limit-575 +-A OUTPUT -j limit-574 +-A OUTPUT -j limit-573 +-A OUTPUT -j limit-572 +-A OUTPUT -j limit-571 +-A OUTPUT -j limit-570 +-A OUTPUT -j limit-569 +-A OUTPUT -j limit-568 +-A OUTPUT -j limit-567 +-A OUTPUT -j limit-566 +-A OUTPUT -j limit-565 +-A OUTPUT -j limit-564 +-A OUTPUT -j limit-563 +-A OUTPUT -j limit-562 +-A OUTPUT -j limit-561 +-A OUTPUT -j limit-560 +-A OUTPUT -j limit-559 +-A OUTPUT -j limit-558 +-A OUTPUT -j limit-557 +-A OUTPUT -j limit-556 +-A OUTPUT -j limit-555 +-A OUTPUT -j limit-554 +-A OUTPUT -j limit-553 +-A OUTPUT -j limit-552 +-A OUTPUT -j limit-551 +-A OUTPUT -j limit-550 +-A OUTPUT -j limit-549 +-A OUTPUT -j limit-548 +-A OUTPUT -j limit-547 +-A OUTPUT -j limit-546 +-A OUTPUT -j limit-545 +-A OUTPUT -j limit-544 +-A OUTPUT -j limit-543 +-A OUTPUT -j limit-542 +-A OUTPUT -j limit-541 +-A OUTPUT -j limit-540 +-A OUTPUT -j limit-539 +-A OUTPUT -j limit-538 +-A OUTPUT -j limit-537 +-A OUTPUT -j limit-536 +-A OUTPUT -j limit-535 +-A OUTPUT -j limit-534 +-A OUTPUT -j limit-533 +-A OUTPUT -j limit-532 +-A OUTPUT -j limit-531 +-A OUTPUT -j limit-530 +-A OUTPUT -j limit-529 +-A OUTPUT -j limit-528 +-A OUTPUT -j limit-527 +-A OUTPUT -j limit-526 +-A OUTPUT -j limit-525 +-A OUTPUT -j limit-524 +-A OUTPUT -j limit-523 +-A OUTPUT -j limit-522 +-A OUTPUT -j limit-521 +-A OUTPUT -j limit-520 +-A OUTPUT -j limit-519 +-A OUTPUT -j limit-518 +-A OUTPUT -j limit-517 +-A OUTPUT -j limit-516 +-A OUTPUT -j limit-515 +-A OUTPUT -j limit-514 +-A OUTPUT -j limit-513 +-A OUTPUT -j limit-512 +-A OUTPUT -j limit-511 +-A OUTPUT -j limit-510 +-A OUTPUT -j limit-509 +-A OUTPUT -j limit-508 +-A OUTPUT -j limit-507 +-A OUTPUT -j limit-506 +-A OUTPUT -j limit-505 +-A OUTPUT -j limit-504 +-A OUTPUT -j limit-503 +-A OUTPUT -j limit-502 +-A OUTPUT -j limit-501 +-A OUTPUT -j limit-500 +-A OUTPUT -j limit-499 +-A OUTPUT -j limit-498 +-A OUTPUT -j limit-497 +-A OUTPUT -j limit-496 +-A OUTPUT -j limit-495 +-A OUTPUT -j limit-494 +-A OUTPUT -j limit-493 +-A OUTPUT -j limit-492 +-A OUTPUT -j limit-491 +-A OUTPUT -j limit-490 +-A OUTPUT -j limit-489 +-A OUTPUT -j limit-488 +-A OUTPUT -j limit-487 +-A OUTPUT -j limit-486 +-A OUTPUT -j limit-485 +-A OUTPUT -j limit-484 +-A OUTPUT -j limit-483 +-A OUTPUT -j limit-482 +-A OUTPUT -j limit-481 +-A OUTPUT -j limit-480 +-A OUTPUT -j limit-479 +-A OUTPUT -j limit-478 +-A OUTPUT -j limit-477 +-A OUTPUT -j limit-476 +-A OUTPUT -j limit-475 +-A OUTPUT -j limit-474 +-A OUTPUT -j limit-473 +-A OUTPUT -j limit-472 +-A OUTPUT -j limit-471 +-A OUTPUT -j limit-470 +-A OUTPUT -j limit-469 +-A OUTPUT -j limit-468 +-A OUTPUT -j limit-467 +-A OUTPUT -j limit-466 +-A OUTPUT -j limit-465 +-A OUTPUT -j limit-464 +-A OUTPUT -j limit-463 +-A OUTPUT -j limit-462 +-A OUTPUT -j limit-461 +-A OUTPUT -j limit-460 +-A OUTPUT -j limit-459 +-A OUTPUT -j limit-458 +-A OUTPUT -j limit-457 +-A OUTPUT -j limit-456 +-A OUTPUT -j limit-455 +-A OUTPUT -j limit-454 +-A OUTPUT -j limit-453 +-A OUTPUT -j limit-452 +-A OUTPUT -j limit-451 +-A OUTPUT -j limit-450 +-A OUTPUT -j limit-449 +-A OUTPUT -j limit-448 +-A OUTPUT -j limit-447 +-A OUTPUT -j limit-446 +-A OUTPUT -j limit-445 +-A OUTPUT -j limit-444 +-A OUTPUT -j limit-443 +-A OUTPUT -j limit-442 +-A OUTPUT -j limit-441 +-A OUTPUT -j limit-440 +-A OUTPUT -j limit-439 +-A OUTPUT -j limit-438 +-A OUTPUT -j limit-437 +-A OUTPUT -j limit-436 +-A OUTPUT -j limit-435 +-A OUTPUT -j limit-434 +-A OUTPUT -j limit-433 +-A OUTPUT -j limit-432 +-A OUTPUT -j limit-431 +-A OUTPUT -j limit-430 +-A OUTPUT -j limit-429 +-A OUTPUT -j limit-428 -A OUTPUT -j limit-427 -A OUTPUT -j limit-426 -A OUTPUT -j limit-425 @@ -2077,150 +3627,6 @@ -A OUTPUT -j limit-360 -A OUTPUT -j limit-359 -A OUTPUT -j limit-358 --A OUTPUT -j limit-357 --A OUTPUT -j limit-356 --A OUTPUT -j limit-355 --A OUTPUT -j limit-354 --A OUTPUT -j limit-353 --A OUTPUT -j limit-352 --A OUTPUT -j limit-351 --A OUTPUT -j limit-350 --A OUTPUT -j limit-349 --A OUTPUT -j limit-348 --A OUTPUT -j limit-347 --A OUTPUT -j limit-346 --A OUTPUT -j limit-345 --A OUTPUT -j limit-344 --A OUTPUT -j limit-343 --A OUTPUT -j limit-342 --A OUTPUT -j limit-341 --A OUTPUT -j limit-340 --A OUTPUT -j limit-339 --A OUTPUT -j limit-338 --A OUTPUT -j limit-337 --A OUTPUT -j limit-336 --A OUTPUT -j limit-335 --A OUTPUT -j limit-334 --A OUTPUT -j limit-333 --A OUTPUT -j limit-332 --A OUTPUT -j limit-331 --A OUTPUT -j limit-330 --A OUTPUT -j limit-329 --A OUTPUT -j limit-328 --A OUTPUT -j limit-327 --A OUTPUT -j limit-326 --A OUTPUT -j limit-325 --A OUTPUT -j limit-324 --A OUTPUT -j limit-323 --A OUTPUT -j limit-322 --A OUTPUT -j limit-321 --A OUTPUT -j limit-320 --A OUTPUT -j limit-319 --A OUTPUT -j limit-318 --A OUTPUT -j limit-317 --A OUTPUT -j limit-316 --A OUTPUT -j limit-315 --A OUTPUT -j limit-314 --A OUTPUT -j limit-313 --A OUTPUT -j limit-312 --A OUTPUT -j limit-311 --A OUTPUT -j limit-310 --A OUTPUT -j limit-309 --A OUTPUT -j limit-308 --A OUTPUT -j limit-307 --A OUTPUT -j limit-306 --A OUTPUT -j limit-305 --A OUTPUT -j limit-304 --A OUTPUT -j limit-303 --A OUTPUT -j limit-302 --A OUTPUT -j limit-301 --A OUTPUT -j limit-300 --A OUTPUT -j limit-299 --A OUTPUT -j limit-298 --A OUTPUT -j limit-297 --A OUTPUT -j limit-296 --A OUTPUT -j limit-295 --A OUTPUT -j limit-294 --A OUTPUT -j limit-293 --A OUTPUT -j limit-292 --A OUTPUT -j limit-291 --A OUTPUT -j limit-290 --A OUTPUT -j limit-289 --A OUTPUT -j limit-288 --A OUTPUT -j limit-287 --A OUTPUT -j limit-286 --A OUTPUT -j limit-285 --A OUTPUT -j limit-284 --A OUTPUT -j limit-283 --A OUTPUT -j limit-282 --A OUTPUT -j limit-281 --A OUTPUT -j limit-280 --A OUTPUT -j limit-279 --A OUTPUT -j limit-278 --A OUTPUT -j limit-277 --A OUTPUT -j limit-276 --A OUTPUT -j limit-275 --A OUTPUT -j limit-274 --A OUTPUT -j limit-273 --A OUTPUT -j limit-272 --A OUTPUT -j limit-271 --A OUTPUT -j limit-270 --A OUTPUT -j limit-269 --A OUTPUT -j limit-268 --A OUTPUT -j limit-267 --A OUTPUT -j limit-266 --A OUTPUT -j limit-265 --A OUTPUT -j limit-264 --A OUTPUT -j limit-263 --A OUTPUT -j limit-262 --A OUTPUT -j limit-261 --A OUTPUT -j limit-260 --A OUTPUT -j limit-259 --A OUTPUT -j limit-258 --A OUTPUT -j limit-257 --A OUTPUT -j limit-256 --A OUTPUT -j limit-255 --A OUTPUT -j limit-254 --A OUTPUT -j limit-253 --A OUTPUT -j limit-252 --A OUTPUT -j limit-251 --A OUTPUT -j limit-250 --A OUTPUT -j limit-249 --A OUTPUT -j limit-248 --A OUTPUT -j limit-247 --A OUTPUT -j limit-246 --A OUTPUT -j limit-245 --A OUTPUT -j limit-244 --A OUTPUT -j limit-243 --A OUTPUT -j limit-242 --A OUTPUT -j limit-241 --A OUTPUT -j limit-240 --A OUTPUT -j limit-239 --A OUTPUT -j limit-238 --A OUTPUT -j limit-237 --A OUTPUT -j limit-236 --A OUTPUT -j limit-235 --A OUTPUT -j limit-234 --A OUTPUT -j limit-233 --A OUTPUT -j limit-232 --A OUTPUT -j limit-231 --A OUTPUT -j limit-230 --A OUTPUT -j limit-229 --A OUTPUT -j limit-228 --A OUTPUT -j limit-227 --A OUTPUT -j limit-226 --A OUTPUT -j limit-225 --A OUTPUT -j limit-224 --A OUTPUT -j limit-223 --A OUTPUT -j limit-222 --A OUTPUT -j limit-221 --A OUTPUT -j limit-220 --A OUTPUT -j limit-219 --A OUTPUT -j limit-218 --A OUTPUT -j limit-217 --A OUTPUT -j limit-216 --A OUTPUT -j limit-215 --A OUTPUT -j limit-214 -A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A OUTPUT -o lo -j ACCEPT -A OUTPUT -j ACCEPT @@ -2272,29 +3678,29 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-40 -A OUTPUT -o eth1 -d fc00::/7 -j limit-41 -A OUTPUT -o eth1 -d fc00::/7 -j limit-42 --A OUTPUT -o eth1 -d fc00::/7 -j limit-43 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-44 -A OUTPUT -o eth1 -d fc00::/7 -j limit-44 -A OUTPUT -o eth1 -d fc00::/7 -j limit-45 -A OUTPUT -o eth1 -d fc00::/7 -j limit-46 --A OUTPUT -o eth1 -d fc00::/7 -j limit-47 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-48 -A OUTPUT -o eth1 -d fc00::/7 -j limit-48 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-49 -A OUTPUT -o eth1 -d fc00::/7 -j limit-50 -A OUTPUT -o eth1 -d fc00::/7 -j limit-51 -A OUTPUT -o eth1 -d fc00::/7 -j limit-52 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-53 -A OUTPUT -o eth1 -d fc00::/7 -j limit-54 --A OUTPUT -o eth1 -d fc00::/7 -j limit-55 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56 -A OUTPUT -o eth1 -d fc00::/7 -j limit-56 -A OUTPUT -o eth1 -d fc00::/7 -j limit-57 -A OUTPUT -o eth1 -d fc00::/7 -j limit-58 --A OUTPUT -o eth1 -d fc00::/7 -j limit-59 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-60 -A OUTPUT -o eth1 -d fc00::/7 -j limit-60 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-61 -A OUTPUT -o eth1 -d fc00::/7 -j limit-62 -A OUTPUT -o eth1 -d fc00::/7 -j limit-63 -A OUTPUT -o eth1 -d fc00::/7 -j limit-64 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-65 -A OUTPUT -o eth1 -d fc00::/7 -j limit-66 -A OUTPUT -o eth1 -d fc00::/7 -j limit-67 -A OUTPUT -o eth1 -d fc00::/7 -j limit-68 @@ -2302,35 +3708,35 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-70 -A OUTPUT -o eth1 -d fc00::/7 -j limit-71 -A OUTPUT -o eth1 -d fc00::/7 -j limit-72 --A OUTPUT -o eth1 -d fc00::/7 -j limit-73 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-74 -A OUTPUT -o eth1 -d fc00::/7 -j limit-75 -A OUTPUT -o eth1 -d fc00::/7 -j limit-76 --A OUTPUT -o eth1 -d fc00::/7 -j limit-77 --A OUTPUT -o eth1 -d fc00::/7 -j limit-78 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-78 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-79 -A OUTPUT -o eth1 -d fc00::/7 -j limit-80 -A OUTPUT -o eth1 -d fc00::/7 -j limit-81 -A OUTPUT -o eth1 -d fc00::/7 -j limit-82 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-83 -A OUTPUT -o eth1 -d fc00::/7 -j limit-84 --A OUTPUT -o eth1 -d fc00::/7 -j limit-85 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-86 -A OUTPUT -o eth1 -d fc00::/7 -j limit-87 -A OUTPUT -o eth1 -d fc00::/7 -j limit-88 --A OUTPUT -o eth1 -d fc00::/7 -j limit-89 --A OUTPUT -o eth1 -d fc00::/7 -j limit-90 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-90 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-91 -A OUTPUT -o eth1 -d fc00::/7 -j limit-92 -A OUTPUT -o eth1 -d fc00::/7 -j limit-93 -A OUTPUT -o eth1 -d fc00::/7 -j limit-94 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-95 -A OUTPUT -o eth1 -d fc00::/7 -j limit-96 --A OUTPUT -o eth1 -d fc00::/7 -j limit-97 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-98 -A OUTPUT -o eth1 -d fc00::/7 -j limit-99 -A OUTPUT -o eth1 -d fc00::/7 -j limit-100 --A OUTPUT -o eth1 -d fc00::/7 -j limit-101 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-102 -A OUTPUT -o eth1 -d fc00::/7 -j limit-103 -A OUTPUT -o eth1 -d fc00::/7 -j limit-104 @@ -2338,11 +3744,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-106 -A OUTPUT -o eth1 -d fc00::/7 -j limit-107 -A OUTPUT -o eth1 -d fc00::/7 -j limit-108 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-50 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-110 -A OUTPUT -o eth1 -d fc00::/7 -j limit-111 -A OUTPUT -o eth1 -d fc00::/7 -j limit-112 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-54 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-114 -A OUTPUT -o eth1 -d fc00::/7 -j limit-115 -A OUTPUT -o eth1 -d fc00::/7 -j limit-116 @@ -2350,17 +3756,17 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-118 -A OUTPUT -o eth1 -d fc00::/7 -j limit-119 -A OUTPUT -o eth1 -d fc00::/7 -j limit-120 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-62 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-121 -A OUTPUT -o eth1 -d fc00::/7 -j limit-122 -A OUTPUT -o eth1 -d fc00::/7 -j limit-123 -A OUTPUT -o eth1 -d fc00::/7 -j limit-124 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-66 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-125 -A OUTPUT -o eth1 -d fc00::/7 -j limit-126 --A OUTPUT -o eth1 -d fc00::/7 -j limit-127 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-128 -A OUTPUT -o eth1 -d fc00::/7 -j limit-129 -A OUTPUT -o eth1 -d fc00::/7 -j limit-130 --A OUTPUT -o eth1 -d fc00::/7 -j limit-131 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-132 -A OUTPUT -o eth1 -d fc00::/7 -j limit-133 -A OUTPUT -o eth1 -d fc00::/7 -j limit-134 @@ -2368,11 +3774,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-136 -A OUTPUT -o eth1 -d fc00::/7 -j limit-137 -A OUTPUT -o eth1 -d fc00::/7 -j limit-138 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-140 -A OUTPUT -o eth1 -d fc00::/7 -j limit-141 -A OUTPUT -o eth1 -d fc00::/7 -j limit-142 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-144 -A OUTPUT -o eth1 -d fc00::/7 -j limit-145 -A OUTPUT -o eth1 -d fc00::/7 -j limit-146 @@ -2380,11 +3786,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-148 -A OUTPUT -o eth1 -d fc00::/7 -j limit-149 -A OUTPUT -o eth1 -d fc00::/7 -j limit-150 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-152 -A OUTPUT -o eth1 -d fc00::/7 -j limit-153 -A OUTPUT -o eth1 -d fc00::/7 -j limit-154 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-156 -A OUTPUT -o eth1 -d fc00::/7 -j limit-157 -A OUTPUT -o eth1 -d fc00::/7 -j limit-158 @@ -2392,17 +3798,17 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-160 -A OUTPUT -o eth1 -d fc00::/7 -j limit-161 -A OUTPUT -o eth1 -d fc00::/7 -j limit-162 --A OUTPUT -o eth1 -d fc00::/7 -j limit-163 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-164 -A OUTPUT -o eth1 -d fc00::/7 -j limit-165 -A OUTPUT -o eth1 -d fc00::/7 -j limit-166 --A OUTPUT -o eth1 -d fc00::/7 -j limit-167 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-168 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-169 -A OUTPUT -o eth1 -d fc00::/7 -j limit-170 -A OUTPUT -o eth1 -d fc00::/7 -j limit-171 -A OUTPUT -o eth1 -d fc00::/7 -j limit-172 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-173 -A OUTPUT -o eth1 -d fc00::/7 -j limit-174 -A OUTPUT -o eth1 -d fc00::/7 -j limit-175 -A OUTPUT -o eth1 -d fc00::/7 -j limit-176 @@ -2410,11 +3816,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-178 -A OUTPUT -o eth1 -d fc00::/7 -j limit-179 -A OUTPUT -o eth1 -d fc00::/7 -j limit-180 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-74 -A OUTPUT -o eth1 -d fc00::/7 -j limit-182 -A OUTPUT -o eth1 -d fc00::/7 -j limit-183 -A OUTPUT -o eth1 -d fc00::/7 -j limit-184 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-78 -A OUTPUT -o eth1 -d fc00::/7 -j limit-186 -A OUTPUT -o eth1 -d fc00::/7 -j limit-187 -A OUTPUT -o eth1 -d fc00::/7 -j limit-188 @@ -2422,11 +3828,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-190 -A OUTPUT -o eth1 -d fc00::/7 -j limit-191 -A OUTPUT -o eth1 -d fc00::/7 -j limit-192 --A OUTPUT -o eth1 -d fc00::/7 -j limit-193 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-86 -A OUTPUT -o eth1 -d fc00::/7 -j limit-194 -A OUTPUT -o eth1 -d fc00::/7 -j limit-195 -A OUTPUT -o eth1 -d fc00::/7 -j limit-196 --A OUTPUT -o eth1 -d fc00::/7 -j limit-197 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-90 -A OUTPUT -o eth1 -d fc00::/7 -j limit-198 -A OUTPUT -o eth1 -d fc00::/7 -j limit-199 -A OUTPUT -o eth1 -d fc00::/7 -j limit-200 @@ -2434,15 +3840,159 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-202 -A OUTPUT -o eth1 -d fc00::/7 -j limit-203 -A OUTPUT -o eth1 -d fc00::/7 -j limit-204 --A OUTPUT -o eth1 -d fc00::/7 -j limit-205 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-98 -A OUTPUT -o eth1 -d fc00::/7 -j limit-206 -A OUTPUT -o eth1 -d fc00::/7 -j limit-207 -A OUTPUT -o eth1 -d fc00::/7 -j limit-208 --A OUTPUT -o eth1 -d fc00::/7 -j limit-209 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-102 -A OUTPUT -o eth1 -d fc00::/7 -j limit-210 -A OUTPUT -o eth1 -d fc00::/7 -j limit-211 -A OUTPUT -o eth1 -d fc00::/7 -j limit-212 -A OUTPUT -o eth1 -d fc00::/7 -j limit-213 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-214 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-215 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-216 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-110 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-218 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-219 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-220 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-114 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-222 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-223 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-224 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-225 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-226 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-227 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-228 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-229 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-230 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-231 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-232 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-233 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-234 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-236 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-237 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-238 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-240 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-241 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-242 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-243 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-244 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-245 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-246 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-248 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-249 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-250 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-252 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-253 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-254 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-255 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-256 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-257 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-258 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-260 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-261 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-262 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-264 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-265 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-266 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-267 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-268 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-269 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-270 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-272 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-273 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-274 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-276 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-277 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-278 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-279 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-280 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-281 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-282 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-283 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-284 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-285 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-286 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-287 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-288 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-290 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-291 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-292 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-294 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-295 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-296 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-297 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-298 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-299 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-300 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-302 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-303 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-304 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-306 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-307 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-308 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-309 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-310 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-311 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-312 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-314 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-315 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-316 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-318 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-319 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-320 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-321 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-322 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-323 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-324 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-326 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-327 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-328 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-330 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-331 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-332 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-333 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-334 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-335 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-336 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-337 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-338 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-339 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-340 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-341 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-342 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-343 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-344 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-345 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-346 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-347 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-348 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-349 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-350 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-351 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-352 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-353 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-354 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-355 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-356 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-357 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-0 -A OUTPUT -j ACCEPT @@ -2557,6 +4107,150 @@ -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-37 -A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-38 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-39 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-40 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-41 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-42 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-43 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-44 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-45 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-46 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-47 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-48 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-49 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-50 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-51 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-52 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-53 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-54 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-55 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-56 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-57 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-58 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-59 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-60 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-61 +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT @@ -2672,16 +4366,19 @@ -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -m recent --name user:C --rsource --mask fe00:: --set +-A OUTPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set -A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-199 +-A OUTPUT -j logdrop-343 -A OUTPUT -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT -A OUTPUT -j logaccept-14 --A OUTPUT -j logdrop-200 +-A OUTPUT -j logdrop-344 -A OUTPUT -j logpass-0 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP @@ -2702,1226 +4399,1982 @@ -A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-11 -A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-100 -m recent --name limit-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-41 --A limit-100 -m recent --name limit-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-101 -m recent --name limit-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-42 --A limit-101 -m recent --name limit-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-102 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-43 --A limit-102 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-103 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-44 --A limit-103 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-104 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-45 +-A limit-100 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-100 -j ACCEPT +-A limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1000 -m limit --limit 1/second -j LOG +-A limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1004 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1004 -j ACCEPT +-A limit-1006 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1006 -m limit --limit 1/second -j LOG +-A limit-1006 -j ACCEPT +-A limit-1007 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1007 -m limit --limit 1/second -j LOG +-A limit-1008 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1008 -j ACCEPT +-A limit-1010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1012 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1012 -m limit --limit 1/second -j LOG +-A limit-1012 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1013 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1013 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1014 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1014 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1015 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1015 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1016 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1016 -j ACCEPT +-A limit-1018 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1018 -m limit --limit 1/second -j LOG +-A limit-1018 -j ACCEPT +-A limit-1019 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1019 -m limit --limit 1/second -j LOG +-A limit-102 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-102 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1020 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1020 -j ACCEPT +-A limit-1022 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1022 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1023 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1023 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1024 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1024 -m limit --limit 1/second -j LOG +-A limit-1024 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1025 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1025 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1026 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1026 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1027 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1027 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1028 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1028 -j ACCEPT +-A limit-103 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-103 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1030 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1030 -m limit --limit 1/second -j LOG +-A limit-1030 -j ACCEPT +-A limit-1031 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1031 -m limit --limit 1/second -j LOG +-A limit-1032 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1032 -j ACCEPT +-A limit-1034 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1034 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1035 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1035 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1036 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1036 -m limit --limit 1/second -j LOG +-A limit-1036 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1037 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1037 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1038 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1038 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1039 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1039 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-104 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-104 -m limit --limit 1/second -j LOG --A limit-104 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-105 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-46 --A limit-105 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-106 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-47 --A limit-106 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-107 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-48 --A limit-107 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-108 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-49 +-A limit-104 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1040 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1040 -j ACCEPT +-A limit-1042 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1042 -m limit --limit 1/second -j LOG +-A limit-1042 -j ACCEPT +-A limit-1043 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1043 -m limit --limit 1/second -j LOG +-A limit-1044 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1044 -j ACCEPT +-A limit-1046 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1046 -j ACCEPT +-A limit-1046 -m limit --limit 1/second -j LOG +-A limit-1046 -j DROP +-A limit-1047 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1047 -j RETURN +-A limit-1047 -m limit --limit 1/second -j LOG +-A limit-1047 -j DROP +-A limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1048 -j logaccept-7 +-A limit-1048 -m limit --limit 1/second -j LOG +-A limit-1048 -j DROP +-A limit-1049 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1049 -j ACCEPT +-A limit-1049 -m limit --limit 1/second -j LOG +-A limit-1049 -j DROP +-A limit-105 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-105 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1050 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1050 -j ACCEPT +-A limit-1050 -m limit --limit 1/second -j LOG +-A limit-1050 -j DROP +-A limit-1051 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1051 -j RETURN +-A limit-1051 -m limit --limit 1/second -j LOG +-A limit-1051 -j DROP +-A limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1052 -j logaccept-8 +-A limit-1052 -m limit --limit 1/second -j LOG +-A limit-1052 -j DROP +-A limit-1053 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1053 -j ACCEPT +-A limit-1053 -m limit --limit 1/second -j LOG +-A limit-1053 -j DROP +-A limit-1054 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1054 -j ACCEPT +-A limit-1054 -j DROP +-A limit-1055 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1055 -j RETURN +-A limit-1055 -j DROP +-A limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1056 -j logaccept-9 +-A limit-1056 -j DROP +-A limit-1057 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1057 -j ACCEPT +-A limit-1057 -j DROP +-A limit-1058 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1058 -j ACCEPT +-A limit-1058 -j DROP +-A limit-1059 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1059 -j RETURN +-A limit-1059 -j DROP +-A limit-106 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-106 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1060 -j logaccept-10 +-A limit-1060 -j DROP +-A limit-1061 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1061 -j ACCEPT +-A limit-1061 -j DROP +-A limit-1062 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1062 -j ACCEPT +-A limit-1062 -m limit --limit 1/second -j LOG +-A limit-1062 -j DROP +-A limit-1063 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1063 -j RETURN +-A limit-1063 -m limit --limit 1/second -j LOG +-A limit-1063 -j DROP +-A limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1064 -j logaccept-11 +-A limit-1064 -m limit --limit 1/second -j LOG +-A limit-1064 -j DROP +-A limit-1065 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1065 -j ACCEPT +-A limit-1065 -m limit --limit 1/second -j LOG +-A limit-1065 -j DROP +-A limit-1066 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1066 -j ACCEPT +-A limit-1066 -j DROP +-A limit-1067 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1067 -j RETURN +-A limit-1067 -j DROP +-A limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1068 -j logaccept-12 +-A limit-1068 -j DROP +-A limit-1069 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1069 -j ACCEPT +-A limit-1069 -j DROP +-A limit-107 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-107 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1070 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1070 -j ACCEPT +-A limit-1070 -j DROP +-A limit-1071 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1071 -j RETURN +-A limit-1071 -j DROP +-A limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1072 -j logaccept-13 +-A limit-1072 -j DROP +-A limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1073 -j ACCEPT +-A limit-1073 -j DROP +-A limit-108 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-108 -j ACCEPT -A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-12 -A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-110 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-51 +-A limit-110 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-110 -m limit --limit 1/second -j LOG -A limit-110 -j ACCEPT --A limit-111 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-52 +-A limit-111 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-111 -m limit --limit 1/second -j LOG --A limit-112 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-53 +-A limit-112 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-112 -j ACCEPT --A limit-114 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-55 --A limit-114 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-115 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-56 --A limit-115 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-116 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-57 +-A limit-114 -m recent --name limit-114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-114 -m recent --name limit-114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-115 -m recent --name limit-115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-115 -m recent --name limit-115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-116 -m recent --name limit-116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-116 -m limit --limit 1/second -j LOG --A limit-116 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-117 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-58 --A limit-117 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-118 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-59 --A limit-118 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-119 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-60 --A limit-119 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-116 -m recent --name limit-116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-117 -m recent --name limit-117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-117 -m recent --name limit-117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-13 -A limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-120 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-61 --A limit-120 -j ACCEPT --A limit-122 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-63 +-A limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-122 -m limit --limit 1/second -j LOG --A limit-122 -j ACCEPT --A limit-123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-64 --A limit-123 -m limit --limit 1/second -j LOG --A limit-124 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-65 --A limit-124 -j ACCEPT --A limit-126 -m recent --name limit-126 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-126 -m recent --name limit-126 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-127 -m recent --name limit-127 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-127 -m recent --name limit-127 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-128 -m recent --name limit-128 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-126 -j ACCEPT +-A limit-128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-128 -m limit --limit 1/second -j LOG --A limit-128 -m recent --name limit-128 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-129 -m recent --name limit-129 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-129 -m recent --name limit-129 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-128 -j ACCEPT +-A limit-129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-129 -m limit --limit 1/second -j LOG -A limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-14 -A limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-130 -m recent --name limit-130 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-130 -m recent --name limit-130 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-131 -m recent --name limit-131 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-131 -m recent --name limit-131 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-132 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-132 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-133 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-133 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-134 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-130 -j ACCEPT +-A limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-134 -m limit --limit 1/second -j LOG --A limit-134 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-135 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-135 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-136 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-136 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-137 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-137 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-138 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-138 -j ACCEPT -A limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-15 -A limit-14 -m limit --limit 1/second -j LOG -A limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-140 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-140 -m limit --limit 1/second -j LOG -A limit-140 -j ACCEPT --A limit-141 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-141 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-141 -m limit --limit 1/second -j LOG --A limit-142 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-142 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-142 -j ACCEPT --A limit-144 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-144 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-145 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-145 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-146 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-144 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-144 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-145 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-145 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-146 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-146 -m limit --limit 1/second -j LOG --A limit-146 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-147 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-147 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-146 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-147 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-147 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-148 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-148 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-149 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-149 -m recent --name user:C --rsource --mask fe00:: --set -A limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-16 -A limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-150 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-150 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-150 -j ACCEPT --A limit-152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-152 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-152 -m limit --limit 1/second -j LOG -A limit-152 -j ACCEPT --A limit-153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-153 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-153 -m limit --limit 1/second -j LOG --A limit-154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-154 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-154 -j ACCEPT --A limit-156 -m recent --name limit-156 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-156 -m recent --name limit-156 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-157 -m recent --name limit-157 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-157 -m recent --name limit-157 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-158 -m recent --name limit-158 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-156 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-156 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-157 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-157 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-158 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-158 -m limit --limit 1/second -j LOG --A limit-158 -m recent --name limit-158 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-159 -m recent --name limit-159 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-159 -m recent --name limit-159 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-158 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-159 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-159 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-17 -A limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-160 -m recent --name limit-160 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-160 -m recent --name limit-160 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-161 -m recent --name limit-161 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-161 -m recent --name limit-161 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-162 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-162 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-163 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-163 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-164 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-160 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-160 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-161 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-161 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-162 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-162 -j ACCEPT +-A limit-164 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-164 -m limit --limit 1/second -j LOG --A limit-164 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-165 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-165 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-166 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-166 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-167 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-167 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-168 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-168 -j ACCEPT +-A limit-164 -j ACCEPT +-A limit-165 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-165 -m limit --limit 1/second -j LOG +-A limit-166 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-166 -j ACCEPT +-A limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-61 +-A limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-62 +-A limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-18 -A limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-170 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-63 -A limit-170 -m limit --limit 1/second -j LOG --A limit-170 -j ACCEPT --A limit-171 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-171 -m limit --limit 1/second -j LOG --A limit-172 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-172 -j ACCEPT --A limit-174 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-174 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-175 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-175 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-64 +-A limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-65 +-A limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-66 +-A limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-67 +-A limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-68 +-A limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-69 -A limit-176 -m limit --limit 1/second -j LOG --A limit-176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-178 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-178 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-70 +-A limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-71 +-A limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-72 +-A limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-18 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-19 -A limit-18 -j ACCEPT --A limit-180 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-73 -A limit-180 -j ACCEPT --A limit-182 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-75 -A limit-182 -m limit --limit 1/second -j LOG -A limit-182 -j ACCEPT --A limit-183 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-76 -A limit-183 -m limit --limit 1/second -j LOG --A limit-184 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-77 -A limit-184 -j ACCEPT --A limit-186 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-186 -j ACCEPT --A limit-186 -m limit --limit 1/second -j LOG --A limit-186 -j DROP --A limit-187 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-187 -j RETURN --A limit-187 -m limit --limit 1/second -j LOG --A limit-187 -j DROP --A limit-188 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-188 -j logaccept-0 +-A limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-79 +-A limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-80 +-A limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-81 -A limit-188 -m limit --limit 1/second -j LOG --A limit-188 -j DROP --A limit-189 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-189 -j ACCEPT --A limit-189 -m limit --limit 1/second -j LOG --A limit-189 -j DROP --A limit-190 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-190 -j ACCEPT --A limit-190 -m limit --limit 1/second -j LOG --A limit-190 -j DROP --A limit-191 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-191 -j RETURN --A limit-191 -m limit --limit 1/second -j LOG --A limit-191 -j DROP --A limit-192 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-192 -j logaccept-1 --A limit-192 -m limit --limit 1/second -j LOG --A limit-192 -j DROP --A limit-193 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-193 -j ACCEPT --A limit-193 -m limit --limit 1/second -j LOG --A limit-193 -j DROP --A limit-194 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-194 -j ACCEPT --A limit-194 -j DROP --A limit-195 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-195 -j RETURN --A limit-195 -j DROP --A limit-196 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-196 -j logaccept-2 --A limit-196 -j DROP --A limit-197 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-197 -j ACCEPT --A limit-197 -j DROP --A limit-198 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-198 -j ACCEPT --A limit-198 -j DROP --A limit-199 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-199 -j RETURN --A limit-199 -j DROP +-A limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-82 +-A limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-83 +-A limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-84 +-A limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-192 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-85 +-A limit-192 -j ACCEPT +-A limit-194 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-87 +-A limit-194 -m limit --limit 1/second -j LOG +-A limit-194 -j ACCEPT +-A limit-195 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-88 +-A limit-195 -m limit --limit 1/second -j LOG +-A limit-196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-89 +-A limit-196 -j ACCEPT +-A limit-198 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-91 +-A limit-198 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-199 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-92 +-A limit-199 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-3 -A limit-2 -m limit --limit 1/second -j LOG -A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-21 -A limit-20 -m limit --limit 1/second -j LOG -A limit-20 -j ACCEPT --A limit-200 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-200 -j logaccept-3 --A limit-200 -j DROP --A limit-201 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-201 -j ACCEPT --A limit-201 -j DROP --A limit-202 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-202 -j ACCEPT --A limit-202 -m limit --limit 1/second -j LOG --A limit-202 -j DROP --A limit-203 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-203 -j RETURN --A limit-203 -m limit --limit 1/second -j LOG --A limit-203 -j DROP --A limit-204 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-204 -j logaccept-4 --A limit-204 -m limit --limit 1/second -j LOG --A limit-204 -j DROP --A limit-205 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-205 -j ACCEPT --A limit-205 -m limit --limit 1/second -j LOG --A limit-205 -j DROP --A limit-206 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-206 -j ACCEPT --A limit-206 -j DROP --A limit-207 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-207 -j RETURN --A limit-207 -j DROP --A limit-208 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-208 -j logaccept-5 --A limit-208 -j DROP --A limit-209 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-209 -j ACCEPT --A limit-209 -j DROP +-A limit-200 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-93 +-A limit-200 -m limit --limit 1/second -j LOG +-A limit-200 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-201 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-94 +-A limit-201 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-202 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-95 +-A limit-202 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-203 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-96 +-A limit-203 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-204 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-97 +-A limit-204 -j ACCEPT +-A limit-206 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-99 +-A limit-206 -m limit --limit 1/second -j LOG +-A limit-206 -j ACCEPT +-A limit-207 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-100 +-A limit-207 -m limit --limit 1/second -j LOG +-A limit-208 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-101 +-A limit-208 -j ACCEPT -A limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-22 -A limit-21 -m limit --limit 1/second -j LOG --A limit-210 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-210 -j ACCEPT --A limit-210 -j DROP --A limit-211 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-211 -j RETURN --A limit-211 -j DROP --A limit-212 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-212 -j logaccept-6 --A limit-212 -j DROP --A limit-213 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-213 -j ACCEPT --A limit-213 -j DROP --A limit-214 -m recent --name limit-214 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-67 --A limit-214 -m recent --name limit-214 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-215 -m recent --name limit-215 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-68 --A limit-215 -m recent --name limit-215 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-216 -m recent --name limit-216 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-69 --A limit-216 -m recent --name limit-216 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-217 -m recent --name limit-217 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-70 --A limit-217 -m recent --name limit-217 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-218 -m recent --name limit-218 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-71 --A limit-218 -m recent --name limit-218 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-219 -m recent --name limit-219 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-72 --A limit-219 -m recent --name limit-219 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-210 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-103 +-A limit-210 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-211 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-104 +-A limit-211 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-212 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-105 +-A limit-212 -m limit --limit 1/second -j LOG +-A limit-212 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-213 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-106 +-A limit-213 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-214 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-107 +-A limit-214 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-215 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-108 +-A limit-215 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-216 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-109 +-A limit-216 -j ACCEPT +-A limit-218 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-111 +-A limit-218 -m limit --limit 1/second -j LOG +-A limit-218 -j ACCEPT +-A limit-219 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-112 +-A limit-219 -m limit --limit 1/second -j LOG -A limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-23 -A limit-22 -j ACCEPT --A limit-220 -m recent --name limit-220 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-73 --A limit-220 -m recent --name limit-220 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-221 -m recent --name limit-221 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-74 --A limit-221 -m recent --name limit-221 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-75 --A limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-76 --A limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-77 --A limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-78 --A limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-226 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-79 --A limit-226 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-227 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-80 --A limit-227 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-81 --A limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-82 --A limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-83 --A limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-84 --A limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-85 --A limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-86 --A limit-234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-87 --A limit-235 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-88 --A limit-235 -m limit --limit 1/second -j LOG --A limit-236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-89 --A limit-237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-90 --A limit-238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-91 --A limit-238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-92 --A limit-239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-220 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-113 +-A limit-220 -j ACCEPT +-A limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-224 -m limit --limit 1/second -j LOG +-A limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-230 -m limit --limit 1/second -j LOG +-A limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-234 -j ACCEPT +-A limit-236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-236 -m limit --limit 1/second -j LOG +-A limit-236 -j ACCEPT +-A limit-237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-237 -m limit --limit 1/second -j LOG +-A limit-238 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-238 -j ACCEPT -A limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-25 -A limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-93 --A limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-94 --A limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-95 --A limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-96 --A limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-97 --A limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-98 --A limit-246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-99 --A limit-247 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-100 --A limit-247 -m limit --limit 1/second -j LOG --A limit-248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-101 --A limit-249 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-102 +-A limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-242 -m limit --limit 1/second -j LOG +-A limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-246 -j ACCEPT +-A limit-248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-248 -m limit --limit 1/second -j LOG +-A limit-248 -j ACCEPT +-A limit-249 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-249 -m limit --limit 1/second -j LOG -A limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-26 -A limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-250 -m recent --name limit-250 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-250 -m recent --name limit-250 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-251 -m recent --name limit-251 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-251 -m recent --name limit-251 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-252 -m recent --name limit-252 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-252 -m recent --name limit-252 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-253 -m recent --name limit-253 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-253 -m recent --name limit-253 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-254 -m recent --name limit-254 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-254 -m recent --name limit-254 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-255 -m recent --name limit-255 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-255 -m recent --name limit-255 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-259 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-259 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-250 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-250 -j ACCEPT +-A limit-252 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-252 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-253 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-253 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-254 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-254 -m limit --limit 1/second -j LOG +-A limit-254 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-255 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-255 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-256 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-256 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-257 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-257 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-258 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-258 -j ACCEPT -A limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-27 -A limit-26 -m limit --limit 1/second -j LOG -A limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-260 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-260 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-261 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-261 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-262 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-263 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-264 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-265 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-265 -m limit --limit 1/second -j LOG --A limit-266 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-267 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-260 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-260 -m limit --limit 1/second -j LOG +-A limit-260 -j ACCEPT +-A limit-261 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-261 -m limit --limit 1/second -j LOG +-A limit-262 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-262 -j ACCEPT +-A limit-264 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-264 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-265 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-265 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-266 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-266 -m limit --limit 1/second -j LOG +-A limit-266 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-267 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-267 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-268 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-268 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-269 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-269 -m recent --name user:C --rdest --mask fe00:: --set -A limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-28 -A limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-271 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-271 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-272 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-272 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-273 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-273 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-274 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-275 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-276 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-277 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-277 -m limit --limit 1/second -j LOG --A limit-278 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-279 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-270 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-270 -j ACCEPT +-A limit-272 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-272 -m limit --limit 1/second -j LOG +-A limit-272 -j ACCEPT +-A limit-273 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-273 -m limit --limit 1/second -j LOG +-A limit-274 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-274 -j ACCEPT +-A limit-276 -m recent --name limit-276 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-276 -m recent --name limit-276 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-277 -m recent --name limit-277 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-277 -m recent --name limit-277 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-278 -m recent --name limit-278 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-278 -m limit --limit 1/second -j LOG +-A limit-278 -m recent --name limit-278 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-29 -A limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-282 -m recent --name limit-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-282 -m recent --name limit-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-283 -m recent --name limit-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-283 -m recent --name limit-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-284 -m recent --name limit-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-284 -m recent --name limit-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-285 -m recent --name limit-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-285 -m recent --name limit-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-284 -m limit --limit 1/second -j LOG +-A limit-284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-288 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-288 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-289 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-289 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-288 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-288 -j ACCEPT -A limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-30 -A limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-295 -m limit --limit 1/second -j LOG --A limit-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-290 -m limit --limit 1/second -j LOG +-A limit-290 -j ACCEPT +-A limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-291 -m limit --limit 1/second -j LOG +-A limit-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-292 -j ACCEPT +-A limit-294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-296 -m limit --limit 1/second -j LOG +-A limit-296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-4 -A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-30 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-31 -A limit-30 -j ACCEPT --A limit-300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-301 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-301 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-302 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-302 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-303 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-303 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-304 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-305 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-306 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-307 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-307 -m limit --limit 1/second -j LOG --A limit-308 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-309 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-310 -m recent --name limit-310 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-103 --A limit-310 -m recent --name limit-310 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-311 -m recent --name limit-311 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-104 --A limit-311 -m recent --name limit-311 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-312 -m recent --name limit-312 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-105 --A limit-312 -m recent --name limit-312 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-313 -m recent --name limit-313 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-106 --A limit-313 -m recent --name limit-313 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-314 -m recent --name limit-314 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-107 --A limit-314 -m recent --name limit-314 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-315 -m recent --name limit-315 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-108 --A limit-315 -m recent --name limit-315 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-316 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-109 --A limit-316 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-317 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-110 --A limit-317 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-318 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-111 --A limit-318 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-319 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-112 --A limit-319 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-300 -j ACCEPT +-A limit-302 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-302 -m limit --limit 1/second -j LOG +-A limit-302 -j ACCEPT +-A limit-303 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-303 -m limit --limit 1/second -j LOG +-A limit-304 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-304 -j ACCEPT +-A limit-306 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-306 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-307 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-307 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-308 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-308 -m limit --limit 1/second -j LOG +-A limit-308 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-309 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-309 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-310 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-310 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-311 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-311 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-312 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-312 -j ACCEPT +-A limit-314 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-314 -m limit --limit 1/second -j LOG +-A limit-314 -j ACCEPT +-A limit-315 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-315 -m limit --limit 1/second -j LOG +-A limit-316 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-316 -j ACCEPT +-A limit-318 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-318 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-319 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-319 -m recent --name user:C --rdest --mask fe00:: --set -A limit-32 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-33 -A limit-32 -m limit --limit 1/second -j LOG -A limit-32 -j ACCEPT --A limit-320 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-113 --A limit-320 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-321 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-114 --A limit-321 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-322 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-115 --A limit-323 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-116 --A limit-324 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-117 --A limit-325 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-118 --A limit-325 -m limit --limit 1/second -j LOG --A limit-326 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-119 --A limit-327 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-120 --A limit-328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-121 --A limit-328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-122 --A limit-329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-320 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-320 -m limit --limit 1/second -j LOG +-A limit-320 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-321 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-321 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-322 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-322 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-323 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-323 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-324 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-324 -j ACCEPT +-A limit-326 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-326 -m limit --limit 1/second -j LOG +-A limit-326 -j ACCEPT +-A limit-327 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-327 -m limit --limit 1/second -j LOG +-A limit-328 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-328 -j ACCEPT -A limit-33 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-34 -A limit-33 -m limit --limit 1/second -j LOG --A limit-330 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-123 --A limit-330 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-331 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-124 --A limit-331 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-332 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-125 --A limit-332 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-333 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-126 --A limit-333 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-334 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-127 --A limit-335 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-128 --A limit-336 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-129 --A limit-337 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-130 +-A limit-330 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-330 -j ACCEPT +-A limit-330 -m limit --limit 1/second -j LOG +-A limit-330 -j DROP +-A limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-331 -j RETURN +-A limit-331 -m limit --limit 1/second -j LOG +-A limit-331 -j DROP +-A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-332 -j logaccept-0 +-A limit-332 -m limit --limit 1/second -j LOG +-A limit-332 -j DROP +-A limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-333 -j ACCEPT +-A limit-333 -m limit --limit 1/second -j LOG +-A limit-333 -j DROP +-A limit-334 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-334 -j ACCEPT +-A limit-334 -m limit --limit 1/second -j LOG +-A limit-334 -j DROP +-A limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-335 -j RETURN +-A limit-335 -m limit --limit 1/second -j LOG +-A limit-335 -j DROP +-A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-336 -j logaccept-1 +-A limit-336 -m limit --limit 1/second -j LOG +-A limit-336 -j DROP +-A limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-337 -j ACCEPT -A limit-337 -m limit --limit 1/second -j LOG --A limit-338 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-131 --A limit-339 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-132 +-A limit-337 -j DROP +-A limit-338 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-338 -j ACCEPT +-A limit-338 -j DROP +-A limit-339 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-339 -j RETURN +-A limit-339 -j DROP -A limit-34 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-35 -A limit-34 -j ACCEPT --A limit-340 -m recent --name limit-340 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-340 -m recent --name limit-340 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-341 -m recent --name limit-341 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-341 -m recent --name limit-341 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-342 -m recent --name limit-342 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-342 -m recent --name limit-342 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-343 -m recent --name limit-343 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-343 -m recent --name limit-343 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-344 -m recent --name limit-344 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-344 -m recent --name limit-344 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-345 -m recent --name limit-345 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-345 -m recent --name limit-345 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-346 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-346 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-347 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-347 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-348 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-348 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-349 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-349 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-350 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-350 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-351 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-351 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-352 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-353 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-354 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-355 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-355 -m limit --limit 1/second -j LOG --A limit-356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-358 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-358 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-359 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-359 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-36 -m recent --name limit-36 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-36 -m recent --name limit-36 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-360 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-360 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-361 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-361 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-362 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-362 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-363 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-363 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-364 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-365 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-366 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-367 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-367 -m limit --limit 1/second -j LOG --A limit-368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-369 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-37 -m recent --name limit-37 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-37 -m recent --name limit-37 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-370 -m recent --name limit-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-370 -m recent --name limit-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-372 -m recent --name limit-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-372 -m recent --name limit-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-374 -m recent --name limit-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-374 -m recent --name limit-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-375 -m recent --name limit-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-375 -m recent --name limit-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-377 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-377 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-38 -m recent --name limit-38 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-340 -j logaccept-2 +-A limit-340 -j DROP +-A limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-341 -j ACCEPT +-A limit-341 -j DROP +-A limit-342 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-342 -j ACCEPT +-A limit-342 -j DROP +-A limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-343 -j RETURN +-A limit-343 -j DROP +-A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-344 -j logaccept-3 +-A limit-344 -j DROP +-A limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-345 -j ACCEPT +-A limit-345 -j DROP +-A limit-346 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-346 -j ACCEPT +-A limit-346 -m limit --limit 1/second -j LOG +-A limit-346 -j DROP +-A limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-347 -j RETURN +-A limit-347 -m limit --limit 1/second -j LOG +-A limit-347 -j DROP +-A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-348 -j logaccept-4 +-A limit-348 -m limit --limit 1/second -j LOG +-A limit-348 -j DROP +-A limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-349 -j ACCEPT +-A limit-349 -m limit --limit 1/second -j LOG +-A limit-349 -j DROP +-A limit-350 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-350 -j ACCEPT +-A limit-350 -j DROP +-A limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-351 -j RETURN +-A limit-351 -j DROP +-A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-352 -j logaccept-5 +-A limit-352 -j DROP +-A limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-353 -j ACCEPT +-A limit-353 -j DROP +-A limit-354 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-354 -j ACCEPT +-A limit-354 -j DROP +-A limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-355 -j RETURN +-A limit-355 -j DROP +-A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-356 -j logaccept-6 +-A limit-356 -j DROP +-A limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-357 -j ACCEPT +-A limit-357 -j DROP +-A limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-115 +-A limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-116 +-A limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-36 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-37 +-A limit-36 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-117 +-A limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-118 +-A limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-119 +-A limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-120 +-A limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-121 +-A limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-122 +-A limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-123 +-A limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-124 +-A limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-125 +-A limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-126 +-A limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-37 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-38 +-A limit-37 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-127 +-A limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-128 +-A limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-129 +-A limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-130 +-A limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-131 +-A limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-132 +-A limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-133 +-A limit-377 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-134 +-A limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-135 +-A limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-136 +-A limit-379 -m limit --limit 1/second -j LOG +-A limit-38 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-39 -A limit-38 -m limit --limit 1/second -j LOG --A limit-38 -m recent --name limit-38 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-385 -m limit --limit 1/second -j LOG --A limit-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-389 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-389 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-39 -m recent --name limit-39 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-39 -m recent --name limit-39 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-393 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-393 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-394 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-395 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-396 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-397 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-397 -m limit --limit 1/second -j LOG --A limit-398 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-399 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-38 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-137 +-A limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-138 +-A limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 +-A limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-140 +-A limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-141 +-A limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-142 +-A limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-143 +-A limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-144 +-A limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-145 +-A limit-389 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-146 +-A limit-39 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-40 +-A limit-39 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-147 +-A limit-391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-148 +-A limit-391 -m limit --limit 1/second -j LOG +-A limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-149 +-A limit-393 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-150 +-A limit-394 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-151 +-A limit-394 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-395 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-152 +-A limit-395 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-396 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-153 +-A limit-396 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-397 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-154 +-A limit-397 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-398 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-155 +-A limit-398 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-399 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-156 +-A limit-399 -m recent --name user:C --rsource --mask fe00:: --set -A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-5 -A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-40 -m recent --name limit-40 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-40 -m recent --name limit-40 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-400 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-400 -j RETURN --A limit-400 -m limit --limit 1/second -j LOG --A limit-400 -j DROP --A limit-401 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-401 -j RETURN --A limit-401 -m limit --limit 1/second -j LOG --A limit-401 -j DROP --A limit-402 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-402 -j RETURN --A limit-402 -m limit --limit 1/second -j LOG --A limit-402 -j DROP --A limit-403 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-403 -j RETURN +-A limit-40 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-41 +-A limit-40 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-400 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-157 +-A limit-401 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-158 +-A limit-402 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-159 +-A limit-403 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-160 -A limit-403 -m limit --limit 1/second -j LOG --A limit-403 -j DROP --A limit-404 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-404 -j RETURN --A limit-404 -m limit --limit 1/second -j LOG --A limit-404 -j DROP --A limit-405 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-405 -j RETURN --A limit-405 -m limit --limit 1/second -j LOG --A limit-405 -j DROP --A limit-406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-406 -j RETURN --A limit-406 -m limit --limit 1/second -j LOG --A limit-406 -j DROP --A limit-407 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-407 -j RETURN --A limit-407 -m limit --limit 1/second -j LOG --A limit-407 -j DROP --A limit-408 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-408 -j RETURN --A limit-408 -j DROP --A limit-409 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-409 -j RETURN --A limit-409 -j DROP --A limit-41 -m recent --name limit-41 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-41 -m recent --name limit-41 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-410 -j RETURN --A limit-410 -j DROP --A limit-411 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-411 -j RETURN --A limit-411 -j DROP --A limit-412 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-412 -j RETURN --A limit-412 -j DROP --A limit-413 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-413 -j RETURN --A limit-413 -j DROP --A limit-414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-414 -j RETURN --A limit-414 -j DROP --A limit-415 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-415 -j RETURN --A limit-415 -j DROP --A limit-416 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-416 -j RETURN --A limit-416 -m limit --limit 1/second -j LOG --A limit-416 -j DROP --A limit-417 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-417 -j RETURN --A limit-417 -m limit --limit 1/second -j LOG --A limit-417 -j DROP --A limit-418 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-418 -j RETURN --A limit-418 -m limit --limit 1/second -j LOG --A limit-418 -j DROP --A limit-419 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-419 -j RETURN --A limit-419 -m limit --limit 1/second -j LOG --A limit-419 -j DROP --A limit-42 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-42 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-420 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-420 -j RETURN --A limit-420 -j DROP --A limit-421 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-421 -j RETURN --A limit-421 -j DROP --A limit-422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-422 -j RETURN --A limit-422 -j DROP --A limit-423 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-423 -j RETURN --A limit-423 -j DROP --A limit-424 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-424 -j RETURN --A limit-424 -j DROP --A limit-425 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-425 -j RETURN --A limit-425 -j DROP --A limit-426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-426 -j RETURN --A limit-426 -j DROP --A limit-427 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-427 -j RETURN --A limit-427 -j DROP --A limit-428 -m recent --name limit-428 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-133 --A limit-428 -m recent --name limit-428 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-429 -m recent --name limit-429 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-134 --A limit-429 -m recent --name limit-429 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-43 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-43 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-430 -m recent --name limit-430 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-135 --A limit-430 -m limit --limit 1/second -j LOG --A limit-430 -m recent --name limit-430 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-431 -m recent --name limit-431 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-136 --A limit-431 -m recent --name limit-431 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-432 -m recent --name limit-432 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-137 --A limit-432 -m recent --name limit-432 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-433 -m recent --name limit-433 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-138 --A limit-433 -m recent --name limit-433 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-434 -m recent --name limit-434 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 --A limit-434 -m recent --name limit-434 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-435 -m recent --name limit-435 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-140 --A limit-435 -m recent --name limit-435 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-436 -m recent --name limit-436 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-141 --A limit-436 -m limit --limit 1/second -j LOG --A limit-436 -m recent --name limit-436 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-437 -m recent --name limit-437 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-142 --A limit-437 -m recent --name limit-437 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-438 -m recent --name limit-438 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-143 --A limit-438 -m recent --name limit-438 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-439 -m recent --name limit-439 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-144 --A limit-439 -m recent --name limit-439 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-44 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-404 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-161 +-A limit-405 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-162 +-A limit-406 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-163 +-A limit-406 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-407 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-164 +-A limit-407 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-408 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-165 +-A limit-408 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-409 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-166 +-A limit-409 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-41 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-42 +-A limit-41 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-410 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-167 +-A limit-410 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-411 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-168 +-A limit-411 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-412 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-169 +-A limit-413 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-170 +-A limit-414 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-171 +-A limit-415 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-172 +-A limit-415 -m limit --limit 1/second -j LOG +-A limit-416 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-173 +-A limit-417 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-174 +-A limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-42 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-43 +-A limit-42 -j ACCEPT +-A limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-421 -m recent --name limit-421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-421 -m recent --name limit-421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-422 -m recent --name limit-422 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-422 -m recent --name limit-422 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-423 -m recent --name limit-423 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-423 -m recent --name limit-423 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-431 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-432 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-433 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-433 -m limit --limit 1/second -j LOG +-A limit-434 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-435 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-44 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-45 -A limit-44 -m limit --limit 1/second -j LOG --A limit-44 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-440 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-145 --A limit-440 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-441 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-146 --A limit-441 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-442 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-147 --A limit-442 -m limit --limit 1/second -j LOG --A limit-442 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-443 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-148 --A limit-443 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-444 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-149 --A limit-444 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-445 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-150 --A limit-445 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-446 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-151 --A limit-446 -j ACCEPT --A limit-448 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-153 --A limit-448 -m limit --limit 1/second -j LOG --A limit-448 -j ACCEPT --A limit-449 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-154 --A limit-449 -m limit --limit 1/second -j LOG --A limit-45 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-45 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-450 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-155 --A limit-450 -j ACCEPT --A limit-452 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-157 --A limit-452 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-453 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-158 --A limit-453 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-454 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-159 --A limit-454 -m limit --limit 1/second -j LOG --A limit-454 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-455 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-160 --A limit-455 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-456 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-161 --A limit-456 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-457 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-162 --A limit-457 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-458 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-163 --A limit-458 -j ACCEPT --A limit-46 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-46 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-460 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-165 --A limit-460 -m limit --limit 1/second -j LOG --A limit-460 -j ACCEPT --A limit-461 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-166 --A limit-461 -m limit --limit 1/second -j LOG --A limit-462 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-167 --A limit-462 -j ACCEPT --A limit-464 -m recent --name limit-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-464 -m recent --name limit-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-465 -m recent --name limit-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-465 -m recent --name limit-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-466 -m recent --name limit-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-466 -m limit --limit 1/second -j LOG --A limit-466 -m recent --name limit-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-467 -m recent --name limit-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-467 -m recent --name limit-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-468 -m recent --name limit-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-468 -m recent --name limit-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-469 -m recent --name limit-469 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-469 -m recent --name limit-469 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-47 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-47 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-472 -m limit --limit 1/second -j LOG --A limit-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-476 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-476 -j ACCEPT --A limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-478 -m limit --limit 1/second -j LOG --A limit-478 -j ACCEPT --A limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-479 -m limit --limit 1/second -j LOG --A limit-48 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-48 -j ACCEPT --A limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-480 -j ACCEPT --A limit-482 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-482 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-483 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-483 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-484 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-484 -m limit --limit 1/second -j LOG --A limit-484 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-485 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-485 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-486 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-486 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-487 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-487 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-488 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-488 -j ACCEPT --A limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-490 -m limit --limit 1/second -j LOG --A limit-490 -j ACCEPT --A limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-491 -m limit --limit 1/second -j LOG --A limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-492 -j ACCEPT --A limit-494 -m recent --name limit-494 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-494 -m recent --name limit-494 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-495 -m recent --name limit-495 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-495 -m recent --name limit-495 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-496 -m recent --name limit-496 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-496 -m limit --limit 1/second -j LOG --A limit-496 -m recent --name limit-496 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-497 -m recent --name limit-497 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-497 -m recent --name limit-497 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-498 -m recent --name limit-498 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-498 -m recent --name limit-498 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-499 -m recent --name limit-499 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-499 -m recent --name limit-499 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-44 -j ACCEPT +-A limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-442 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-443 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-444 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-445 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-445 -m limit --limit 1/second -j LOG +-A limit-446 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-447 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-448 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-448 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-449 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-449 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-45 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-46 +-A limit-45 -m limit --limit 1/second -j LOG +-A limit-450 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-450 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-451 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-451 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-452 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-452 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-453 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-453 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-454 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-455 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-456 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-457 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-457 -m limit --limit 1/second -j LOG +-A limit-458 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-459 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-46 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-47 +-A limit-46 -j ACCEPT +-A limit-460 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-460 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-461 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-461 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-462 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-462 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-463 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-463 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-464 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-464 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-465 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-465 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-466 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-467 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-468 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-469 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-469 -m limit --limit 1/second -j LOG +-A limit-470 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-471 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-473 -m recent --name limit-473 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-473 -m recent --name limit-473 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-474 -m recent --name limit-474 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-474 -m recent --name limit-474 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-475 -m recent --name limit-475 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-475 -m recent --name limit-475 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-476 -m recent --name limit-476 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-476 -m recent --name limit-476 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-477 -m recent --name limit-477 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-477 -m recent --name limit-477 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-48 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-49 +-A limit-48 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-484 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-485 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-486 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-487 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-487 -m limit --limit 1/second -j LOG +-A limit-488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-49 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-50 +-A limit-49 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-499 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-499 -m limit --limit 1/second -j LOG -A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-6 -A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-50 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-50 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-51 -A limit-50 -m limit --limit 1/second -j LOG --A limit-50 -j ACCEPT --A limit-500 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-500 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-501 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-501 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-502 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-502 -m limit --limit 1/second -j LOG --A limit-502 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-503 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-503 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-504 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-504 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-505 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-505 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-506 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-506 -j ACCEPT --A limit-508 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-508 -m limit --limit 1/second -j LOG --A limit-508 -j ACCEPT --A limit-509 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-509 -m limit --limit 1/second -j LOG --A limit-51 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-51 -m limit --limit 1/second -j LOG --A limit-510 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-510 -j ACCEPT --A limit-512 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-512 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-513 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-513 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-514 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-514 -m limit --limit 1/second -j LOG --A limit-514 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-515 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-515 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-516 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-516 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-517 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-517 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-518 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-518 -j ACCEPT --A limit-52 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-52 -j ACCEPT --A limit-520 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-520 -m limit --limit 1/second -j LOG --A limit-520 -j ACCEPT --A limit-521 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-521 -m limit --limit 1/second -j LOG --A limit-522 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-522 -j ACCEPT --A limit-524 -m recent --name limit-524 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-169 --A limit-524 -m recent --name limit-524 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-525 -m recent --name limit-525 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-170 --A limit-525 -m recent --name limit-525 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-171 --A limit-526 -m limit --limit 1/second -j LOG --A limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-172 --A limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-173 --A limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-174 --A limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-530 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-175 --A limit-530 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-531 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-176 --A limit-531 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-177 --A limit-532 -m limit --limit 1/second -j LOG --A limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-178 --A limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-179 --A limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-180 --A limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-181 --A limit-536 -j ACCEPT --A limit-538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-183 --A limit-538 -m limit --limit 1/second -j LOG --A limit-538 -j ACCEPT --A limit-539 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-184 --A limit-539 -m limit --limit 1/second -j LOG --A limit-54 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-54 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-185 --A limit-540 -j ACCEPT --A limit-542 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-187 --A limit-542 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-543 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-188 --A limit-543 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-189 --A limit-544 -m limit --limit 1/second -j LOG --A limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-190 --A limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-191 --A limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-192 --A limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-193 --A limit-548 -j ACCEPT --A limit-55 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-55 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-195 --A limit-550 -m limit --limit 1/second -j LOG --A limit-550 -j ACCEPT --A limit-551 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-196 --A limit-551 -m limit --limit 1/second -j LOG --A limit-552 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-197 --A limit-552 -j ACCEPT --A limit-554 -m recent --name limit-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-554 -m recent --name limit-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-555 -m recent --name limit-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-555 -m recent --name limit-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-556 -m recent --name limit-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-556 -m limit --limit 1/second -j LOG --A limit-556 -m recent --name limit-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-557 -m recent --name limit-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-557 -m recent --name limit-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-558 -m recent --name limit-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-558 -m recent --name limit-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-559 -m recent --name limit-559 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-559 -m recent --name limit-559 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-56 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-50 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-500 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-501 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-502 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-502 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-503 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-503 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-504 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-504 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-505 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-505 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-506 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-506 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-507 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-507 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-508 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-509 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-51 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-52 +-A limit-51 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-510 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-511 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-511 -m limit --limit 1/second -j LOG +-A limit-512 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-513 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-514 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-514 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-515 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-515 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-516 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-516 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-517 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-517 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-518 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-518 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-519 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-519 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-52 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-53 +-A limit-52 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-520 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-521 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-522 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-523 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-523 -m limit --limit 1/second -j LOG +-A limit-524 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-525 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-175 +-A limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-176 +-A limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-177 +-A limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-178 +-A limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-53 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-54 +-A limit-53 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-179 +-A limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-180 +-A limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-181 +-A limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-182 +-A limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-183 +-A limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-184 +-A limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-185 +-A limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-186 +-A limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-187 +-A limit-539 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-188 +-A limit-54 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-55 +-A limit-54 -j ACCEPT +-A limit-540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-189 +-A limit-541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-190 +-A limit-541 -m limit --limit 1/second -j LOG +-A limit-542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-191 +-A limit-543 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-192 +-A limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-193 +-A limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-194 +-A limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-195 +-A limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-196 +-A limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-197 +-A limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-198 +-A limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-199 +-A limit-551 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-200 +-A limit-552 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-201 +-A limit-553 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-202 +-A limit-553 -m limit --limit 1/second -j LOG +-A limit-554 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-203 +-A limit-555 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-204 +-A limit-556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-205 +-A limit-556 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-206 +-A limit-557 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-207 +-A limit-558 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-208 +-A limit-559 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-56 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-57 -A limit-56 -m limit --limit 1/second -j LOG --A limit-56 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-562 -m limit --limit 1/second -j LOG --A limit-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-566 -j ACCEPT --A limit-568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-568 -m limit --limit 1/second -j LOG --A limit-568 -j ACCEPT --A limit-569 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-569 -m limit --limit 1/second -j LOG --A limit-57 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-57 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-570 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-570 -j ACCEPT --A limit-572 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-572 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-573 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-573 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-574 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-574 -m limit --limit 1/second -j LOG --A limit-574 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-575 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-575 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-576 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-576 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-577 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-577 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-578 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-578 -j ACCEPT --A limit-58 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-58 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-580 -m limit --limit 1/second -j LOG --A limit-580 -j ACCEPT --A limit-581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-581 -m limit --limit 1/second -j LOG --A limit-582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-582 -j ACCEPT +-A limit-56 -j ACCEPT +-A limit-560 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-209 +-A limit-560 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-561 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-210 +-A limit-561 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-211 +-A limit-563 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-212 +-A limit-564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-213 +-A limit-565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-214 +-A limit-565 -m limit --limit 1/second -j LOG +-A limit-566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-215 +-A limit-567 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-216 +-A limit-568 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-217 +-A limit-568 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-569 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-218 +-A limit-569 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-57 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-58 +-A limit-57 -m limit --limit 1/second -j LOG +-A limit-570 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-219 +-A limit-570 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-571 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-220 +-A limit-571 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-221 +-A limit-572 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-222 +-A limit-573 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-574 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-223 +-A limit-575 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-224 +-A limit-576 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-225 +-A limit-577 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-226 +-A limit-577 -m limit --limit 1/second -j LOG +-A limit-578 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-227 +-A limit-579 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-228 +-A limit-58 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-59 +-A limit-58 -j ACCEPT +-A limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-581 -m recent --name limit-581 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-581 -m recent --name limit-581 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-582 -m recent --name limit-582 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-582 -m recent --name limit-582 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-583 -m recent --name limit-583 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-583 -m recent --name limit-583 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-586 -m recent --name limit-586 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-586 -m limit --limit 1/second -j LOG --A limit-586 -m recent --name limit-586 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-587 -m recent --name limit-587 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-587 -m recent --name limit-587 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-588 -m recent --name limit-588 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-588 -m recent --name limit-588 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-589 -m recent --name limit-589 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-589 -m recent --name limit-589 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-59 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-59 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-592 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-592 -m limit --limit 1/second -j LOG --A limit-592 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-593 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-593 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-594 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-594 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-595 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-595 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-592 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-593 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-594 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-595 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-595 -m limit --limit 1/second -j LOG -A limit-596 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-596 -j ACCEPT --A limit-598 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-598 -m limit --limit 1/second -j LOG --A limit-598 -j ACCEPT --A limit-599 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-599 -m limit --limit 1/second -j LOG +-A limit-597 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-7 -A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-60 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-60 -j ACCEPT --A limit-600 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-600 -j ACCEPT +-A limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-604 -m limit --limit 1/second -j LOG --A limit-604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-605 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-605 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-607 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-607 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-605 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-607 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-607 -m limit --limit 1/second -j LOG -A limit-608 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-608 -j ACCEPT --A limit-610 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-610 -m limit --limit 1/second -j LOG --A limit-610 -j ACCEPT --A limit-611 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-611 -m limit --limit 1/second -j LOG --A limit-612 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-612 -j ACCEPT --A limit-614 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-614 -j ACCEPT --A limit-614 -m limit --limit 1/second -j LOG --A limit-614 -j DROP --A limit-615 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-615 -j RETURN --A limit-615 -m limit --limit 1/second -j LOG --A limit-615 -j DROP --A limit-616 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-616 -j logaccept-7 --A limit-616 -m limit --limit 1/second -j LOG --A limit-616 -j DROP --A limit-617 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-617 -j ACCEPT --A limit-617 -m limit --limit 1/second -j LOG --A limit-617 -j DROP --A limit-618 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-618 -j ACCEPT --A limit-618 -m limit --limit 1/second -j LOG --A limit-618 -j DROP --A limit-619 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-619 -j RETURN +-A limit-609 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-61 -m recent --name limit-61 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-61 -m recent --name limit-61 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-610 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-610 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-611 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-611 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-612 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-612 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-613 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-613 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-614 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-614 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-615 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-615 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-616 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-617 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-618 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-619 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-619 -m limit --limit 1/second -j LOG --A limit-619 -j DROP --A limit-62 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-62 -m recent --name limit-62 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-62 -m limit --limit 1/second -j LOG --A limit-62 -j ACCEPT --A limit-620 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-620 -j logaccept-8 --A limit-620 -m limit --limit 1/second -j LOG --A limit-620 -j DROP --A limit-621 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-621 -j ACCEPT --A limit-621 -m limit --limit 1/second -j LOG --A limit-621 -j DROP --A limit-622 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-622 -j ACCEPT --A limit-622 -j DROP --A limit-623 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-623 -j RETURN --A limit-623 -j DROP --A limit-624 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-624 -j logaccept-9 --A limit-624 -j DROP --A limit-625 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-625 -j ACCEPT --A limit-625 -j DROP --A limit-626 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-626 -j ACCEPT --A limit-626 -j DROP --A limit-627 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-627 -j RETURN --A limit-627 -j DROP --A limit-628 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-628 -j logaccept-10 --A limit-628 -j DROP --A limit-629 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-629 -j ACCEPT --A limit-629 -j DROP --A limit-63 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-63 -m limit --limit 1/second -j LOG --A limit-630 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-630 -j ACCEPT --A limit-630 -m limit --limit 1/second -j LOG --A limit-630 -j DROP --A limit-631 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-631 -j RETURN +-A limit-62 -m recent --name limit-62 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-620 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-621 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-622 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-622 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-623 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-623 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-624 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-624 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-625 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-625 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-626 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-626 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-627 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-627 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-628 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-629 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-63 -m recent --name limit-63 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-63 -m recent --name limit-63 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-630 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-631 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-631 -m limit --limit 1/second -j LOG --A limit-631 -j DROP --A limit-632 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-632 -j logaccept-11 --A limit-632 -m limit --limit 1/second -j LOG --A limit-632 -j DROP --A limit-633 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-633 -j ACCEPT --A limit-633 -m limit --limit 1/second -j LOG --A limit-633 -j DROP --A limit-634 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-634 -j ACCEPT --A limit-634 -j DROP --A limit-635 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-635 -j RETURN --A limit-635 -j DROP --A limit-636 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-636 -j logaccept-12 --A limit-636 -j DROP --A limit-637 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-637 -j ACCEPT --A limit-637 -j DROP --A limit-638 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-638 -j ACCEPT --A limit-638 -j DROP --A limit-639 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-639 -j RETURN --A limit-639 -j DROP --A limit-64 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-64 -j ACCEPT --A limit-640 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-640 -j logaccept-13 --A limit-640 -j DROP --A limit-641 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-641 -j ACCEPT --A limit-641 -j DROP --A limit-66 -m recent --name limit-66 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-66 -m recent --name limit-66 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-67 -m recent --name limit-67 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-67 -m recent --name limit-67 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-68 -m recent --name limit-68 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-632 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-633 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-64 -m recent --name limit-64 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-64 -m recent --name limit-64 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-646 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-647 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-648 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-649 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-649 -m limit --limit 1/second -j LOG +-A limit-65 -m recent --name limit-65 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-65 -m recent --name limit-65 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-658 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-659 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-66 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-66 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-660 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-661 -m limit --limit 1/second -j LOG +-A limit-662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-663 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-664 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-664 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-665 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-665 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-666 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-666 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-667 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-667 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-668 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-668 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-669 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-669 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-67 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-67 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-670 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-671 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-672 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-673 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-673 -m limit --limit 1/second -j LOG +-A limit-674 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-675 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-676 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-676 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-677 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-677 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-678 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-678 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-679 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-679 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-68 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-68 -m limit --limit 1/second -j LOG --A limit-68 -m recent --name limit-68 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-69 -m recent --name limit-69 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-69 -m recent --name limit-69 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-68 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-680 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-680 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-681 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-681 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-682 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-683 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-684 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-685 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-685 -m limit --limit 1/second -j LOG +-A limit-686 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-687 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-688 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-688 -j RETURN +-A limit-688 -m limit --limit 1/second -j LOG +-A limit-688 -j DROP +-A limit-689 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-689 -j RETURN +-A limit-689 -m limit --limit 1/second -j LOG +-A limit-689 -j DROP +-A limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-690 -j RETURN +-A limit-690 -m limit --limit 1/second -j LOG +-A limit-690 -j DROP +-A limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-691 -j RETURN +-A limit-691 -m limit --limit 1/second -j LOG +-A limit-691 -j DROP +-A limit-692 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-692 -j RETURN +-A limit-692 -m limit --limit 1/second -j LOG +-A limit-692 -j DROP +-A limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-693 -j RETURN +-A limit-693 -m limit --limit 1/second -j LOG +-A limit-693 -j DROP +-A limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-694 -j RETURN +-A limit-694 -m limit --limit 1/second -j LOG +-A limit-694 -j DROP +-A limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-695 -j RETURN +-A limit-695 -m limit --limit 1/second -j LOG +-A limit-695 -j DROP +-A limit-696 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-696 -j RETURN +-A limit-696 -j DROP +-A limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-697 -j RETURN +-A limit-697 -j DROP +-A limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-698 -j RETURN +-A limit-698 -j DROP +-A limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-699 -j RETURN +-A limit-699 -j DROP -A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-8 -A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-70 -m recent --name limit-70 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-70 -m recent --name limit-70 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-71 -m recent --name limit-71 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-71 -m recent --name limit-71 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-72 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-72 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-73 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-73 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-74 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-700 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-700 -j RETURN +-A limit-700 -j DROP +-A limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-701 -j RETURN +-A limit-701 -j DROP +-A limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-702 -j RETURN +-A limit-702 -j DROP +-A limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-703 -j RETURN +-A limit-703 -j DROP +-A limit-704 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-704 -j RETURN +-A limit-704 -m limit --limit 1/second -j LOG +-A limit-704 -j DROP +-A limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-705 -j RETURN +-A limit-705 -m limit --limit 1/second -j LOG +-A limit-705 -j DROP +-A limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-706 -j RETURN +-A limit-706 -m limit --limit 1/second -j LOG +-A limit-706 -j DROP +-A limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-707 -j RETURN +-A limit-707 -m limit --limit 1/second -j LOG +-A limit-707 -j DROP +-A limit-708 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-708 -j RETURN +-A limit-708 -j DROP +-A limit-709 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-709 -j RETURN +-A limit-709 -j DROP +-A limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-710 -j RETURN +-A limit-710 -j DROP +-A limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-711 -j RETURN +-A limit-711 -j DROP +-A limit-712 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-712 -j RETURN +-A limit-712 -j DROP +-A limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-713 -j RETURN +-A limit-713 -j DROP +-A limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-714 -j RETURN +-A limit-714 -j DROP +-A limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-715 -j RETURN +-A limit-715 -j DROP +-A limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-229 +-A limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-230 +-A limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-231 +-A limit-718 -m limit --limit 1/second -j LOG +-A limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-232 +-A limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-72 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-72 -j ACCEPT +-A limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-233 +-A limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-234 +-A limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-235 +-A limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-236 +-A limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-237 +-A limit-724 -m limit --limit 1/second -j LOG +-A limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-238 +-A limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-239 +-A limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-240 +-A limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-241 +-A limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-242 +-A limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-243 +-A limit-730 -m limit --limit 1/second -j LOG +-A limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-244 +-A limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-245 +-A limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-246 +-A limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-734 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-247 +-A limit-734 -j ACCEPT +-A limit-736 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-249 +-A limit-736 -m limit --limit 1/second -j LOG +-A limit-736 -j ACCEPT +-A limit-737 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-250 +-A limit-737 -m limit --limit 1/second -j LOG +-A limit-738 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-251 +-A limit-738 -j ACCEPT +-A limit-74 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-74 -m limit --limit 1/second -j LOG --A limit-74 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-75 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-75 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-76 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-76 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-77 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-77 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-78 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-78 -j ACCEPT +-A limit-74 -j ACCEPT +-A limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-253 +-A limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-254 +-A limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-255 +-A limit-742 -m limit --limit 1/second -j LOG +-A limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-256 +-A limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-257 +-A limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-258 +-A limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-746 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-259 +-A limit-746 -j ACCEPT +-A limit-748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-261 +-A limit-748 -m limit --limit 1/second -j LOG +-A limit-748 -j ACCEPT +-A limit-749 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-262 +-A limit-749 -m limit --limit 1/second -j LOG +-A limit-75 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-75 -m limit --limit 1/second -j LOG +-A limit-750 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-263 +-A limit-750 -j ACCEPT +-A limit-752 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-265 +-A limit-752 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-753 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-266 +-A limit-753 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-754 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-267 +-A limit-754 -m limit --limit 1/second -j LOG +-A limit-754 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-755 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-268 +-A limit-755 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-269 +-A limit-756 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-757 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-270 +-A limit-757 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-758 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-271 +-A limit-758 -j ACCEPT +-A limit-76 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-76 -j ACCEPT +-A limit-760 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-273 +-A limit-760 -m limit --limit 1/second -j LOG +-A limit-760 -j ACCEPT +-A limit-761 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-274 +-A limit-761 -m limit --limit 1/second -j LOG +-A limit-762 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-275 +-A limit-762 -j ACCEPT +-A limit-764 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-277 +-A limit-764 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-765 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-278 +-A limit-765 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-766 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-279 +-A limit-766 -m limit --limit 1/second -j LOG +-A limit-766 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-767 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-280 +-A limit-767 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-768 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-281 +-A limit-768 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-769 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-282 +-A limit-769 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-770 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-283 +-A limit-770 -j ACCEPT +-A limit-772 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-285 +-A limit-772 -m limit --limit 1/second -j LOG +-A limit-772 -j ACCEPT +-A limit-773 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-286 +-A limit-773 -m limit --limit 1/second -j LOG +-A limit-774 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-287 +-A limit-774 -j ACCEPT +-A limit-776 -m recent --name limit-776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-776 -m recent --name limit-776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-777 -m recent --name limit-777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-777 -m recent --name limit-777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-778 -m recent --name limit-778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-778 -m limit --limit 1/second -j LOG +-A limit-778 -m recent --name limit-778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-779 -m recent --name limit-779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-779 -m recent --name limit-779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-78 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-78 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-780 -m recent --name limit-780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-780 -m recent --name limit-780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-784 -m limit --limit 1/second -j LOG +-A limit-784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-788 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-788 -j ACCEPT +-A limit-79 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-79 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-790 -m limit --limit 1/second -j LOG +-A limit-790 -j ACCEPT +-A limit-791 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-791 -m limit --limit 1/second -j LOG +-A limit-792 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-792 -j ACCEPT +-A limit-794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-796 -m limit --limit 1/second -j LOG +-A limit-796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-9 -A limit-8 -m limit --limit 1/second -j LOG -A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-80 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-80 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-80 -m limit --limit 1/second -j LOG --A limit-80 -j ACCEPT --A limit-81 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-81 -m limit --limit 1/second -j LOG --A limit-82 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-82 -j ACCEPT --A limit-84 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-84 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-85 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-85 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-86 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-80 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-800 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-800 -j ACCEPT +-A limit-802 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-802 -m limit --limit 1/second -j LOG +-A limit-802 -j ACCEPT +-A limit-803 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-803 -m limit --limit 1/second -j LOG +-A limit-804 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-804 -j ACCEPT +-A limit-806 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-806 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-807 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-807 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-808 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-808 -m limit --limit 1/second -j LOG +-A limit-808 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-809 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-809 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-81 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-81 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-810 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-810 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-811 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-811 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-812 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-812 -j ACCEPT +-A limit-814 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-814 -m limit --limit 1/second -j LOG +-A limit-814 -j ACCEPT +-A limit-815 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-815 -m limit --limit 1/second -j LOG +-A limit-816 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-816 -j ACCEPT +-A limit-818 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-818 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-819 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-819 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-82 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-82 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-820 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-820 -m limit --limit 1/second -j LOG +-A limit-820 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-821 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-821 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-822 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-822 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-823 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-823 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-824 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-824 -j ACCEPT +-A limit-826 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-826 -m limit --limit 1/second -j LOG +-A limit-826 -j ACCEPT +-A limit-827 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-827 -m limit --limit 1/second -j LOG +-A limit-828 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-828 -j ACCEPT +-A limit-83 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-83 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-830 -m recent --name limit-830 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-830 -m recent --name limit-830 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-831 -m recent --name limit-831 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-831 -m recent --name limit-831 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-832 -m recent --name limit-832 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-832 -m limit --limit 1/second -j LOG +-A limit-832 -m recent --name limit-832 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-833 -m recent --name limit-833 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-833 -m recent --name limit-833 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-834 -m recent --name limit-834 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-834 -m recent --name limit-834 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-835 -m recent --name limit-835 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-835 -m recent --name limit-835 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-838 -m limit --limit 1/second -j LOG +-A limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-84 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-84 -j ACCEPT +-A limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-842 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-842 -j ACCEPT +-A limit-844 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-844 -m limit --limit 1/second -j LOG +-A limit-844 -j ACCEPT +-A limit-845 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-845 -m limit --limit 1/second -j LOG +-A limit-846 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-846 -j ACCEPT +-A limit-848 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-848 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-849 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-849 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-850 -m limit --limit 1/second -j LOG +-A limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-854 -j ACCEPT +-A limit-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-856 -m limit --limit 1/second -j LOG +-A limit-856 -j ACCEPT +-A limit-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-857 -m limit --limit 1/second -j LOG +-A limit-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-858 -j ACCEPT +-A limit-86 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-86 -m limit --limit 1/second -j LOG --A limit-86 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-87 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-87 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-88 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-88 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-89 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-89 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-86 -j ACCEPT +-A limit-860 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-860 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-861 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-861 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-862 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-862 -m limit --limit 1/second -j LOG +-A limit-862 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-863 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-863 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-864 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-864 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-865 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-865 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-866 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-866 -j ACCEPT +-A limit-868 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-868 -m limit --limit 1/second -j LOG +-A limit-868 -j ACCEPT +-A limit-869 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-869 -m limit --limit 1/second -j LOG +-A limit-87 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-87 -m limit --limit 1/second -j LOG +-A limit-870 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-870 -j ACCEPT +-A limit-872 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-872 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-873 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-873 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-874 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-874 -m limit --limit 1/second -j LOG +-A limit-874 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-875 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-875 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-876 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-876 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-877 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-877 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-878 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-878 -j ACCEPT +-A limit-88 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-88 -j ACCEPT +-A limit-880 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-880 -m limit --limit 1/second -j LOG +-A limit-880 -j ACCEPT +-A limit-881 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-881 -m limit --limit 1/second -j LOG +-A limit-882 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-882 -j ACCEPT +-A limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-289 +-A limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-290 +-A limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-291 +-A limit-886 -m limit --limit 1/second -j LOG +-A limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-292 +-A limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-293 +-A limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-294 +-A limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-295 +-A limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-296 +-A limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-297 +-A limit-892 -m limit --limit 1/second -j LOG +-A limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-298 +-A limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-299 +-A limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-300 +-A limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-896 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-301 +-A limit-896 -j ACCEPT +-A limit-898 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-303 +-A limit-898 -m limit --limit 1/second -j LOG +-A limit-898 -j ACCEPT +-A limit-899 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-304 +-A limit-899 -m limit --limit 1/second -j LOG -A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-10 -A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-90 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-90 -j ACCEPT --A limit-92 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-90 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-90 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-900 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-305 +-A limit-900 -j ACCEPT +-A limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-307 +-A limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-308 +-A limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-309 +-A limit-904 -m limit --limit 1/second -j LOG +-A limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-310 +-A limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-311 +-A limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-312 +-A limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-908 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-313 +-A limit-908 -j ACCEPT +-A limit-91 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-91 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-910 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-315 +-A limit-910 -m limit --limit 1/second -j LOG +-A limit-910 -j ACCEPT +-A limit-911 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-316 +-A limit-911 -m limit --limit 1/second -j LOG +-A limit-912 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-317 +-A limit-912 -j ACCEPT +-A limit-914 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-319 +-A limit-914 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-915 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-320 +-A limit-915 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-916 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-321 +-A limit-916 -m limit --limit 1/second -j LOG +-A limit-916 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-917 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-322 +-A limit-917 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-918 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-323 +-A limit-918 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-919 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-324 +-A limit-919 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-92 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-92 -m limit --limit 1/second -j LOG --A limit-92 -j ACCEPT --A limit-93 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-93 -m limit --limit 1/second -j LOG --A limit-94 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-94 -j ACCEPT --A limit-96 -m recent --name limit-96 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-37 --A limit-96 -m recent --name limit-96 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-97 -m recent --name limit-97 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-38 --A limit-97 -m recent --name limit-97 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-98 -m recent --name limit-98 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-39 +-A limit-92 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-920 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-325 +-A limit-920 -j ACCEPT +-A limit-922 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-327 +-A limit-922 -m limit --limit 1/second -j LOG +-A limit-922 -j ACCEPT +-A limit-923 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-328 +-A limit-923 -m limit --limit 1/second -j LOG +-A limit-924 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-329 +-A limit-924 -j ACCEPT +-A limit-926 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-331 +-A limit-926 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-927 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-332 +-A limit-927 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-928 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-333 +-A limit-928 -m limit --limit 1/second -j LOG +-A limit-928 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-929 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-334 +-A limit-929 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-93 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-93 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-930 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-335 +-A limit-930 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-931 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-336 +-A limit-931 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-932 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-337 +-A limit-932 -j ACCEPT +-A limit-934 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-339 +-A limit-934 -m limit --limit 1/second -j LOG +-A limit-934 -j ACCEPT +-A limit-935 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-340 +-A limit-935 -m limit --limit 1/second -j LOG +-A limit-936 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-341 +-A limit-936 -j ACCEPT +-A limit-938 -m recent --name limit-938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-938 -m recent --name limit-938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-939 -m recent --name limit-939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-939 -m recent --name limit-939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-94 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-94 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-940 -m recent --name limit-940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-940 -m limit --limit 1/second -j LOG +-A limit-940 -m recent --name limit-940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-941 -m recent --name limit-941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-941 -m recent --name limit-941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-942 -m recent --name limit-942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-942 -m recent --name limit-942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-943 -m recent --name limit-943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-943 -m recent --name limit-943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-944 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-944 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-945 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-945 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-946 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-946 -m limit --limit 1/second -j LOG +-A limit-946 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-947 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-947 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-95 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-95 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-950 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-950 -j ACCEPT +-A limit-952 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-952 -m limit --limit 1/second -j LOG +-A limit-952 -j ACCEPT +-A limit-953 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-953 -m limit --limit 1/second -j LOG +-A limit-954 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-954 -j ACCEPT +-A limit-956 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-956 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-957 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-957 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-958 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-958 -m limit --limit 1/second -j LOG +-A limit-958 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-959 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-959 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-96 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-96 -j ACCEPT +-A limit-960 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-960 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-961 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-961 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-962 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-962 -j ACCEPT +-A limit-964 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-964 -m limit --limit 1/second -j LOG +-A limit-964 -j ACCEPT +-A limit-965 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-965 -m limit --limit 1/second -j LOG +-A limit-966 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-966 -j ACCEPT +-A limit-968 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-968 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-969 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-969 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-970 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-970 -m limit --limit 1/second -j LOG +-A limit-970 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-971 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-971 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-972 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-972 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-973 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-973 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-974 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-974 -j ACCEPT +-A limit-976 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-976 -m limit --limit 1/second -j LOG +-A limit-976 -j ACCEPT +-A limit-977 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-977 -m limit --limit 1/second -j LOG +-A limit-978 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-978 -j ACCEPT +-A limit-98 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-98 -m limit --limit 1/second -j LOG --A limit-98 -m recent --name limit-98 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-99 -m recent --name limit-99 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-40 --A limit-99 -m recent --name limit-99 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-98 -j ACCEPT +-A limit-980 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-980 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-981 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-981 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-982 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-982 -m limit --limit 1/second -j LOG +-A limit-982 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-983 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-983 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-984 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-984 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-985 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-985 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-986 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-986 -j ACCEPT +-A limit-988 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-988 -m limit --limit 1/second -j LOG +-A limit-988 -j ACCEPT +-A limit-989 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-989 -m limit --limit 1/second -j LOG +-A limit-99 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-99 -m limit --limit 1/second -j LOG +-A limit-990 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-990 -j ACCEPT +-A limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-994 -m limit --limit 1/second -j LOG +-A limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-996 -m recent --name limit-996 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-996 -m recent --name limit-996 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT -A logaccept-1 -m limit --limit 1/second -j LOG @@ -4016,12 +6469,60 @@ -A logaccept-final-36 -j ACCEPT -A logaccept-final-37 -m limit --limit 1/second -j LOG -A logaccept-final-37 -j ACCEPT +-A logaccept-final-38 -m limit --limit 1/second -j LOG +-A logaccept-final-38 -j ACCEPT +-A logaccept-final-39 -m limit --limit 1/second -j LOG +-A logaccept-final-39 -j ACCEPT -A logaccept-final-4 -m limit --limit 1/second -j LOG -A logaccept-final-4 -j ACCEPT +-A logaccept-final-40 -m limit --limit 1/second -j LOG +-A logaccept-final-40 -j ACCEPT +-A logaccept-final-41 -m limit --limit 1/second -j LOG +-A logaccept-final-41 -j ACCEPT +-A logaccept-final-42 -m limit --limit 1/second -j LOG +-A logaccept-final-42 -j ACCEPT +-A logaccept-final-43 -m limit --limit 1/second -j LOG +-A logaccept-final-43 -j ACCEPT +-A logaccept-final-44 -m limit --limit 1/second -j LOG +-A logaccept-final-44 -j ACCEPT +-A logaccept-final-45 -m limit --limit 1/second -j LOG +-A logaccept-final-45 -j ACCEPT +-A logaccept-final-46 -m limit --limit 1/second -j LOG +-A logaccept-final-46 -j ACCEPT +-A logaccept-final-47 -m limit --limit 1/second -j LOG +-A logaccept-final-47 -j ACCEPT +-A logaccept-final-48 -m limit --limit 1/second -j LOG +-A logaccept-final-48 -j ACCEPT +-A logaccept-final-49 -m limit --limit 1/second -j LOG +-A logaccept-final-49 -j ACCEPT -A logaccept-final-5 -m limit --limit 1/second -j LOG -A logaccept-final-5 -j ACCEPT +-A logaccept-final-50 -m limit --limit 1/second -j LOG +-A logaccept-final-50 -j ACCEPT +-A logaccept-final-51 -m limit --limit 1/second -j LOG +-A logaccept-final-51 -j ACCEPT +-A logaccept-final-52 -m limit --limit 1/second -j LOG +-A logaccept-final-52 -j ACCEPT +-A logaccept-final-53 -m limit --limit 1/second -j LOG +-A logaccept-final-53 -j ACCEPT +-A logaccept-final-54 -m limit --limit 1/second -j LOG +-A logaccept-final-54 -j ACCEPT +-A logaccept-final-55 -m limit --limit 1/second -j LOG +-A logaccept-final-55 -j ACCEPT +-A logaccept-final-56 -m limit --limit 1/second -j LOG +-A logaccept-final-56 -j ACCEPT +-A logaccept-final-57 -m limit --limit 1/second -j LOG +-A logaccept-final-57 -j ACCEPT +-A logaccept-final-58 -m limit --limit 1/second -j LOG +-A logaccept-final-58 -j ACCEPT +-A logaccept-final-59 -m limit --limit 1/second -j LOG +-A logaccept-final-59 -j ACCEPT -A logaccept-final-6 -m limit --limit 1/second -j LOG -A logaccept-final-6 -j ACCEPT +-A logaccept-final-60 -m limit --limit 1/second -j LOG +-A logaccept-final-60 -j ACCEPT +-A logaccept-final-61 -m limit --limit 1/second -j LOG +-A logaccept-final-61 -j ACCEPT -A logaccept-final-7 -m limit --limit 1/second -j LOG -A logaccept-final-7 -j ACCEPT -A logaccept-final-8 -m limit --limit 1/second -j LOG @@ -4038,8 +6539,6 @@ -A logdrop-100 -j DROP -A logdrop-101 -m limit --limit 1/second -j LOG -A logdrop-101 -j DROP --A logdrop-102 -m limit --limit 1/second -j LOG --A logdrop-102 -j DROP -A logdrop-103 -m limit --limit 1/second -j LOG -A logdrop-103 -j DROP -A logdrop-104 -m limit --limit 1/second -j LOG @@ -4056,16 +6555,12 @@ -A logdrop-109 -j DROP -A logdrop-11 -m limit --limit 1/second -j LOG -A logdrop-11 -j DROP --A logdrop-110 -m limit --limit 1/second -j LOG --A logdrop-110 -j DROP -A logdrop-111 -m limit --limit 1/second -j LOG -A logdrop-111 -j DROP -A logdrop-112 -m limit --limit 1/second -j LOG -A logdrop-112 -j DROP -A logdrop-113 -m limit --limit 1/second -j LOG -A logdrop-113 -j DROP --A logdrop-114 -m limit --limit 1/second -j LOG --A logdrop-114 -j DROP -A logdrop-115 -m limit --limit 1/second -j LOG -A logdrop-115 -j DROP -A logdrop-116 -m limit --limit 1/second -j LOG @@ -4148,12 +6643,16 @@ -A logdrop-150 -j DROP -A logdrop-151 -m limit --limit 1/second -j LOG -A logdrop-151 -j DROP +-A logdrop-152 -m limit --limit 1/second -j LOG +-A logdrop-152 -j DROP -A logdrop-153 -m limit --limit 1/second -j LOG -A logdrop-153 -j DROP -A logdrop-154 -m limit --limit 1/second -j LOG -A logdrop-154 -j DROP -A logdrop-155 -m limit --limit 1/second -j LOG -A logdrop-155 -j DROP +-A logdrop-156 -m limit --limit 1/second -j LOG +-A logdrop-156 -j DROP -A logdrop-157 -m limit --limit 1/second -j LOG -A logdrop-157 -j DROP -A logdrop-158 -m limit --limit 1/second -j LOG @@ -4170,12 +6669,16 @@ -A logdrop-162 -j DROP -A logdrop-163 -m limit --limit 1/second -j LOG -A logdrop-163 -j DROP +-A logdrop-164 -m limit --limit 1/second -j LOG +-A logdrop-164 -j DROP -A logdrop-165 -m limit --limit 1/second -j LOG -A logdrop-165 -j DROP -A logdrop-166 -m limit --limit 1/second -j LOG -A logdrop-166 -j DROP -A logdrop-167 -m limit --limit 1/second -j LOG -A logdrop-167 -j DROP +-A logdrop-168 -m limit --limit 1/second -j LOG +-A logdrop-168 -j DROP -A logdrop-169 -m limit --limit 1/second -j LOG -A logdrop-169 -j DROP -A logdrop-17 -m limit --limit 1/second -j LOG @@ -4206,12 +6709,16 @@ -A logdrop-180 -j DROP -A logdrop-181 -m limit --limit 1/second -j LOG -A logdrop-181 -j DROP +-A logdrop-182 -m limit --limit 1/second -j LOG +-A logdrop-182 -j DROP -A logdrop-183 -m limit --limit 1/second -j LOG -A logdrop-183 -j DROP -A logdrop-184 -m limit --limit 1/second -j LOG -A logdrop-184 -j DROP -A logdrop-185 -m limit --limit 1/second -j LOG -A logdrop-185 -j DROP +-A logdrop-186 -m limit --limit 1/second -j LOG +-A logdrop-186 -j DROP -A logdrop-187 -m limit --limit 1/second -j LOG -A logdrop-187 -j DROP -A logdrop-188 -m limit --limit 1/second -j LOG @@ -4228,44 +6735,304 @@ -A logdrop-192 -j DROP -A logdrop-193 -m limit --limit 1/second -j LOG -A logdrop-193 -j DROP +-A logdrop-194 -m limit --limit 1/second -j LOG +-A logdrop-194 -j DROP -A logdrop-195 -m limit --limit 1/second -j LOG -A logdrop-195 -j DROP -A logdrop-196 -m limit --limit 1/second -j LOG -A logdrop-196 -j DROP -A logdrop-197 -m limit --limit 1/second -j LOG -A logdrop-197 -j DROP +-A logdrop-198 -m limit --limit 1/second -j LOG +-A logdrop-198 -j DROP -A logdrop-199 -m limit --limit 1/second -j LOG -A logdrop-199 -j DROP -A logdrop-2 -m limit --limit 1/second -j LOG -A logdrop-2 -j DROP -A logdrop-200 -m limit --limit 1/second -j LOG -A logdrop-200 -j DROP +-A logdrop-201 -m limit --limit 1/second -j LOG +-A logdrop-201 -j DROP +-A logdrop-202 -m limit --limit 1/second -j LOG +-A logdrop-202 -j DROP +-A logdrop-203 -m limit --limit 1/second -j LOG +-A logdrop-203 -j DROP +-A logdrop-204 -m limit --limit 1/second -j LOG +-A logdrop-204 -j DROP +-A logdrop-205 -m limit --limit 1/second -j LOG +-A logdrop-205 -j DROP +-A logdrop-206 -m limit --limit 1/second -j LOG +-A logdrop-206 -j DROP +-A logdrop-207 -m limit --limit 1/second -j LOG +-A logdrop-207 -j DROP +-A logdrop-208 -m limit --limit 1/second -j LOG +-A logdrop-208 -j DROP +-A logdrop-209 -m limit --limit 1/second -j LOG +-A logdrop-209 -j DROP -A logdrop-21 -m limit --limit 1/second -j LOG -A logdrop-21 -j DROP +-A logdrop-210 -m limit --limit 1/second -j LOG +-A logdrop-210 -j DROP +-A logdrop-211 -m limit --limit 1/second -j LOG +-A logdrop-211 -j DROP +-A logdrop-212 -m limit --limit 1/second -j LOG +-A logdrop-212 -j DROP +-A logdrop-213 -m limit --limit 1/second -j LOG +-A logdrop-213 -j DROP +-A logdrop-214 -m limit --limit 1/second -j LOG +-A logdrop-214 -j DROP +-A logdrop-215 -m limit --limit 1/second -j LOG +-A logdrop-215 -j DROP +-A logdrop-216 -m limit --limit 1/second -j LOG +-A logdrop-216 -j DROP +-A logdrop-217 -m limit --limit 1/second -j LOG +-A logdrop-217 -j DROP +-A logdrop-218 -m limit --limit 1/second -j LOG +-A logdrop-218 -j DROP +-A logdrop-219 -m limit --limit 1/second -j LOG +-A logdrop-219 -j DROP -A logdrop-22 -m limit --limit 1/second -j LOG -A logdrop-22 -j DROP +-A logdrop-220 -m limit --limit 1/second -j LOG +-A logdrop-220 -j DROP +-A logdrop-221 -m limit --limit 1/second -j LOG +-A logdrop-221 -j DROP +-A logdrop-222 -m limit --limit 1/second -j LOG +-A logdrop-222 -j DROP +-A logdrop-223 -m limit --limit 1/second -j LOG +-A logdrop-223 -j DROP +-A logdrop-224 -m limit --limit 1/second -j LOG +-A logdrop-224 -j DROP +-A logdrop-225 -m limit --limit 1/second -j LOG +-A logdrop-225 -j DROP +-A logdrop-226 -m limit --limit 1/second -j LOG +-A logdrop-226 -j DROP +-A logdrop-227 -m limit --limit 1/second -j LOG +-A logdrop-227 -j DROP +-A logdrop-228 -m limit --limit 1/second -j LOG +-A logdrop-228 -j DROP +-A logdrop-229 -m limit --limit 1/second -j LOG +-A logdrop-229 -j DROP -A logdrop-23 -m limit --limit 1/second -j LOG -A logdrop-23 -j DROP +-A logdrop-230 -m limit --limit 1/second -j LOG +-A logdrop-230 -j DROP +-A logdrop-231 -m limit --limit 1/second -j LOG +-A logdrop-231 -j DROP +-A logdrop-232 -m limit --limit 1/second -j LOG +-A logdrop-232 -j DROP +-A logdrop-233 -m limit --limit 1/second -j LOG +-A logdrop-233 -j DROP +-A logdrop-234 -m limit --limit 1/second -j LOG +-A logdrop-234 -j DROP +-A logdrop-235 -m limit --limit 1/second -j LOG +-A logdrop-235 -j DROP +-A logdrop-236 -m limit --limit 1/second -j LOG +-A logdrop-236 -j DROP +-A logdrop-237 -m limit --limit 1/second -j LOG +-A logdrop-237 -j DROP +-A logdrop-238 -m limit --limit 1/second -j LOG +-A logdrop-238 -j DROP +-A logdrop-239 -m limit --limit 1/second -j LOG +-A logdrop-239 -j DROP +-A logdrop-240 -m limit --limit 1/second -j LOG +-A logdrop-240 -j DROP +-A logdrop-241 -m limit --limit 1/second -j LOG +-A logdrop-241 -j DROP +-A logdrop-242 -m limit --limit 1/second -j LOG +-A logdrop-242 -j DROP +-A logdrop-243 -m limit --limit 1/second -j LOG +-A logdrop-243 -j DROP +-A logdrop-244 -m limit --limit 1/second -j LOG +-A logdrop-244 -j DROP +-A logdrop-245 -m limit --limit 1/second -j LOG +-A logdrop-245 -j DROP +-A logdrop-246 -m limit --limit 1/second -j LOG +-A logdrop-246 -j DROP +-A logdrop-247 -m limit --limit 1/second -j LOG +-A logdrop-247 -j DROP +-A logdrop-249 -m limit --limit 1/second -j LOG +-A logdrop-249 -j DROP -A logdrop-25 -m limit --limit 1/second -j LOG -A logdrop-25 -j DROP +-A logdrop-250 -m limit --limit 1/second -j LOG +-A logdrop-250 -j DROP +-A logdrop-251 -m limit --limit 1/second -j LOG +-A logdrop-251 -j DROP +-A logdrop-253 -m limit --limit 1/second -j LOG +-A logdrop-253 -j DROP +-A logdrop-254 -m limit --limit 1/second -j LOG +-A logdrop-254 -j DROP +-A logdrop-255 -m limit --limit 1/second -j LOG +-A logdrop-255 -j DROP +-A logdrop-256 -m limit --limit 1/second -j LOG +-A logdrop-256 -j DROP +-A logdrop-257 -m limit --limit 1/second -j LOG +-A logdrop-257 -j DROP +-A logdrop-258 -m limit --limit 1/second -j LOG +-A logdrop-258 -j DROP +-A logdrop-259 -m limit --limit 1/second -j LOG +-A logdrop-259 -j DROP -A logdrop-26 -m limit --limit 1/second -j LOG -A logdrop-26 -j DROP +-A logdrop-261 -m limit --limit 1/second -j LOG +-A logdrop-261 -j DROP +-A logdrop-262 -m limit --limit 1/second -j LOG +-A logdrop-262 -j DROP +-A logdrop-263 -m limit --limit 1/second -j LOG +-A logdrop-263 -j DROP +-A logdrop-265 -m limit --limit 1/second -j LOG +-A logdrop-265 -j DROP +-A logdrop-266 -m limit --limit 1/second -j LOG +-A logdrop-266 -j DROP +-A logdrop-267 -m limit --limit 1/second -j LOG +-A logdrop-267 -j DROP +-A logdrop-268 -m limit --limit 1/second -j LOG +-A logdrop-268 -j DROP +-A logdrop-269 -m limit --limit 1/second -j LOG +-A logdrop-269 -j DROP -A logdrop-27 -m limit --limit 1/second -j LOG -A logdrop-27 -j DROP +-A logdrop-270 -m limit --limit 1/second -j LOG +-A logdrop-270 -j DROP +-A logdrop-271 -m limit --limit 1/second -j LOG +-A logdrop-271 -j DROP +-A logdrop-273 -m limit --limit 1/second -j LOG +-A logdrop-273 -j DROP +-A logdrop-274 -m limit --limit 1/second -j LOG +-A logdrop-274 -j DROP +-A logdrop-275 -m limit --limit 1/second -j LOG +-A logdrop-275 -j DROP +-A logdrop-277 -m limit --limit 1/second -j LOG +-A logdrop-277 -j DROP +-A logdrop-278 -m limit --limit 1/second -j LOG +-A logdrop-278 -j DROP +-A logdrop-279 -m limit --limit 1/second -j LOG +-A logdrop-279 -j DROP -A logdrop-28 -m limit --limit 1/second -j LOG -A logdrop-28 -j DROP +-A logdrop-280 -m limit --limit 1/second -j LOG +-A logdrop-280 -j DROP +-A logdrop-281 -m limit --limit 1/second -j LOG +-A logdrop-281 -j DROP +-A logdrop-282 -m limit --limit 1/second -j LOG +-A logdrop-282 -j DROP +-A logdrop-283 -m limit --limit 1/second -j LOG +-A logdrop-283 -j DROP +-A logdrop-285 -m limit --limit 1/second -j LOG +-A logdrop-285 -j DROP +-A logdrop-286 -m limit --limit 1/second -j LOG +-A logdrop-286 -j DROP +-A logdrop-287 -m limit --limit 1/second -j LOG +-A logdrop-287 -j DROP +-A logdrop-289 -m limit --limit 1/second -j LOG +-A logdrop-289 -j DROP -A logdrop-29 -m limit --limit 1/second -j LOG -A logdrop-29 -j DROP +-A logdrop-290 -m limit --limit 1/second -j LOG +-A logdrop-290 -j DROP +-A logdrop-291 -m limit --limit 1/second -j LOG +-A logdrop-291 -j DROP +-A logdrop-292 -m limit --limit 1/second -j LOG +-A logdrop-292 -j DROP +-A logdrop-293 -m limit --limit 1/second -j LOG +-A logdrop-293 -j DROP +-A logdrop-294 -m limit --limit 1/second -j LOG +-A logdrop-294 -j DROP +-A logdrop-295 -m limit --limit 1/second -j LOG +-A logdrop-295 -j DROP +-A logdrop-296 -m limit --limit 1/second -j LOG +-A logdrop-296 -j DROP +-A logdrop-297 -m limit --limit 1/second -j LOG +-A logdrop-297 -j DROP +-A logdrop-298 -m limit --limit 1/second -j LOG +-A logdrop-298 -j DROP +-A logdrop-299 -m limit --limit 1/second -j LOG +-A logdrop-299 -j DROP -A logdrop-3 -m limit --limit 1/second -j LOG -A logdrop-3 -j DROP -A logdrop-30 -m limit --limit 1/second -j LOG -A logdrop-30 -j DROP +-A logdrop-300 -m limit --limit 1/second -j LOG +-A logdrop-300 -j DROP +-A logdrop-301 -m limit --limit 1/second -j LOG +-A logdrop-301 -j DROP +-A logdrop-303 -m limit --limit 1/second -j LOG +-A logdrop-303 -j DROP +-A logdrop-304 -m limit --limit 1/second -j LOG +-A logdrop-304 -j DROP +-A logdrop-305 -m limit --limit 1/second -j LOG +-A logdrop-305 -j DROP +-A logdrop-307 -m limit --limit 1/second -j LOG +-A logdrop-307 -j DROP +-A logdrop-308 -m limit --limit 1/second -j LOG +-A logdrop-308 -j DROP +-A logdrop-309 -m limit --limit 1/second -j LOG +-A logdrop-309 -j DROP -A logdrop-31 -m limit --limit 1/second -j LOG -A logdrop-31 -j DROP +-A logdrop-310 -m limit --limit 1/second -j LOG +-A logdrop-310 -j DROP +-A logdrop-311 -m limit --limit 1/second -j LOG +-A logdrop-311 -j DROP +-A logdrop-312 -m limit --limit 1/second -j LOG +-A logdrop-312 -j DROP +-A logdrop-313 -m limit --limit 1/second -j LOG +-A logdrop-313 -j DROP +-A logdrop-315 -m limit --limit 1/second -j LOG +-A logdrop-315 -j DROP +-A logdrop-316 -m limit --limit 1/second -j LOG +-A logdrop-316 -j DROP +-A logdrop-317 -m limit --limit 1/second -j LOG +-A logdrop-317 -j DROP +-A logdrop-319 -m limit --limit 1/second -j LOG +-A logdrop-319 -j DROP +-A logdrop-320 -m limit --limit 1/second -j LOG +-A logdrop-320 -j DROP +-A logdrop-321 -m limit --limit 1/second -j LOG +-A logdrop-321 -j DROP +-A logdrop-322 -m limit --limit 1/second -j LOG +-A logdrop-322 -j DROP +-A logdrop-323 -m limit --limit 1/second -j LOG +-A logdrop-323 -j DROP +-A logdrop-324 -m limit --limit 1/second -j LOG +-A logdrop-324 -j DROP +-A logdrop-325 -m limit --limit 1/second -j LOG +-A logdrop-325 -j DROP +-A logdrop-327 -m limit --limit 1/second -j LOG +-A logdrop-327 -j DROP +-A logdrop-328 -m limit --limit 1/second -j LOG +-A logdrop-328 -j DROP +-A logdrop-329 -m limit --limit 1/second -j LOG +-A logdrop-329 -j DROP -A logdrop-33 -m limit --limit 1/second -j LOG -A logdrop-33 -j DROP +-A logdrop-331 -m limit --limit 1/second -j LOG +-A logdrop-331 -j DROP +-A logdrop-332 -m limit --limit 1/second -j LOG +-A logdrop-332 -j DROP +-A logdrop-333 -m limit --limit 1/second -j LOG +-A logdrop-333 -j DROP +-A logdrop-334 -m limit --limit 1/second -j LOG +-A logdrop-334 -j DROP +-A logdrop-335 -m limit --limit 1/second -j LOG +-A logdrop-335 -j DROP +-A logdrop-336 -m limit --limit 1/second -j LOG +-A logdrop-336 -j DROP +-A logdrop-337 -m limit --limit 1/second -j LOG +-A logdrop-337 -j DROP +-A logdrop-339 -m limit --limit 1/second -j LOG +-A logdrop-339 -j DROP -A logdrop-34 -m limit --limit 1/second -j LOG -A logdrop-34 -j DROP +-A logdrop-340 -m limit --limit 1/second -j LOG +-A logdrop-340 -j DROP +-A logdrop-341 -m limit --limit 1/second -j LOG +-A logdrop-341 -j DROP +-A logdrop-343 -m limit --limit 1/second -j LOG +-A logdrop-343 -j DROP +-A logdrop-344 -m limit --limit 1/second -j LOG +-A logdrop-344 -j DROP -A logdrop-35 -m limit --limit 1/second -j LOG -A logdrop-35 -j DROP -A logdrop-37 -m limit --limit 1/second -j LOG @@ -4284,30 +7051,28 @@ -A logdrop-42 -j DROP -A logdrop-43 -m limit --limit 1/second -j LOG -A logdrop-43 -j DROP --A logdrop-44 -m limit --limit 1/second -j LOG --A logdrop-44 -j DROP -A logdrop-45 -m limit --limit 1/second -j LOG -A logdrop-45 -j DROP -A logdrop-46 -m limit --limit 1/second -j LOG -A logdrop-46 -j DROP -A logdrop-47 -m limit --limit 1/second -j LOG -A logdrop-47 -j DROP --A logdrop-48 -m limit --limit 1/second -j LOG --A logdrop-48 -j DROP -A logdrop-49 -m limit --limit 1/second -j LOG -A logdrop-49 -j DROP -A logdrop-5 -m limit --limit 1/second -j LOG -A logdrop-5 -j DROP +-A logdrop-50 -m limit --limit 1/second -j LOG +-A logdrop-50 -j DROP -A logdrop-51 -m limit --limit 1/second -j LOG -A logdrop-51 -j DROP -A logdrop-52 -m limit --limit 1/second -j LOG -A logdrop-52 -j DROP -A logdrop-53 -m limit --limit 1/second -j LOG -A logdrop-53 -j DROP +-A logdrop-54 -m limit --limit 1/second -j LOG +-A logdrop-54 -j DROP -A logdrop-55 -m limit --limit 1/second -j LOG -A logdrop-55 -j DROP --A logdrop-56 -m limit --limit 1/second -j LOG --A logdrop-56 -j DROP -A logdrop-57 -m limit --limit 1/second -j LOG -A logdrop-57 -j DROP -A logdrop-58 -m limit --limit 1/second -j LOG @@ -4316,16 +7081,18 @@ -A logdrop-59 -j DROP -A logdrop-6 -m limit --limit 1/second -j LOG -A logdrop-6 -j DROP --A logdrop-60 -m limit --limit 1/second -j LOG --A logdrop-60 -j DROP -A logdrop-61 -m limit --limit 1/second -j LOG -A logdrop-61 -j DROP +-A logdrop-62 -m limit --limit 1/second -j LOG +-A logdrop-62 -j DROP -A logdrop-63 -m limit --limit 1/second -j LOG -A logdrop-63 -j DROP -A logdrop-64 -m limit --limit 1/second -j LOG -A logdrop-64 -j DROP -A logdrop-65 -m limit --limit 1/second -j LOG -A logdrop-65 -j DROP +-A logdrop-66 -m limit --limit 1/second -j LOG +-A logdrop-66 -j DROP -A logdrop-67 -m limit --limit 1/second -j LOG -A logdrop-67 -j DROP -A logdrop-68 -m limit --limit 1/second -j LOG @@ -4342,16 +7109,12 @@ -A logdrop-72 -j DROP -A logdrop-73 -m limit --limit 1/second -j LOG -A logdrop-73 -j DROP --A logdrop-74 -m limit --limit 1/second -j LOG --A logdrop-74 -j DROP -A logdrop-75 -m limit --limit 1/second -j LOG -A logdrop-75 -j DROP -A logdrop-76 -m limit --limit 1/second -j LOG -A logdrop-76 -j DROP -A logdrop-77 -m limit --limit 1/second -j LOG -A logdrop-77 -j DROP --A logdrop-78 -m limit --limit 1/second -j LOG --A logdrop-78 -j DROP -A logdrop-79 -m limit --limit 1/second -j LOG -A logdrop-79 -j DROP -A logdrop-8 -m limit --limit 1/second -j LOG @@ -4368,8 +7131,6 @@ -A logdrop-84 -j DROP -A logdrop-85 -m limit --limit 1/second -j LOG -A logdrop-85 -j DROP --A logdrop-86 -m limit --limit 1/second -j LOG --A logdrop-86 -j DROP -A logdrop-87 -m limit --limit 1/second -j LOG -A logdrop-87 -j DROP -A logdrop-88 -m limit --limit 1/second -j LOG @@ -4378,8 +7139,6 @@ -A logdrop-89 -j DROP -A logdrop-9 -m limit --limit 1/second -j LOG -A logdrop-9 -j DROP --A logdrop-90 -m limit --limit 1/second -j LOG --A logdrop-90 -j DROP -A logdrop-91 -m limit --limit 1/second -j LOG -A logdrop-91 -j DROP -A logdrop-92 -m limit --limit 1/second -j LOG @@ -4394,8 +7153,6 @@ -A logdrop-96 -j DROP -A logdrop-97 -m limit --limit 1/second -j LOG -A logdrop-97 -j DROP --A logdrop-98 -m limit --limit 1/second -j LOG --A logdrop-98 -j DROP -A logdrop-99 -m limit --limit 1/second -j LOG -A logdrop-99 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG @@ -4534,6 +7291,78 @@ COMMIT -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -p tcp --dport 80 -j CT --notrack -A OUTPUT -p esp -j CT --notrack -A OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack @@ -4753,6 +7582,150 @@ COMMIT -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack |