diff options
| author | Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi> | 2017-11-03 20:36:14 +0200 |
|---|---|---|
| committer | Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi> | 2017-11-03 20:44:06 +0200 |
| commit | 70aeb9f1c5261da53f7b1f0408760d62afd47b26 (patch) | |
| tree | a6ab7cb55790fb87555d30a7696ba77bd19183b2 /test | |
| parent | 31f0319bd2e10f556f24cf025478c68fd0d48a00 (diff) | |
| download | awall-70aeb9f1c5261da53f7b1f0408760d62afd47b26.tar.bz2 awall-70aeb9f1c5261da53f7b1f0408760d62afd47b26.tar.xz | |
test: filter-limit: service with no-track
Diffstat (limited to 'test')
| -rw-r--r-- | test/optional/filter-limit.lua | 2 | ||||
| -rw-r--r-- | test/output/filter-limit/dump | 62050 | ||||
| -rw-r--r-- | test/output/filter-limit/rules-save | 16288 | ||||
| -rw-r--r-- | test/output/filter-limit/rules6-save | 14744 |
4 files changed, 46542 insertions, 46542 deletions
diff --git a/test/optional/filter-limit.lua b/test/optional/filter-limit.lua index 3a58228..f424485 100644 --- a/test/optional/filter-limit.lua +++ b/test/optional/filter-limit.lua @@ -69,7 +69,7 @@ end add('conn', {out='B'}) add('conn', {['in']='_fw', out='B'}) add('flow') -add('flow', {['in']='A', out='_fw', ['no-track']=true}) +add('flow', {['in']='A', out='_fw', service='ntp', ['no-track']=true}) for _, name in ipairs{'A', 'B', 'C', 'D'} do table.insert(res, {['update-limit']=name}) diff --git a/test/output/filter-limit/dump b/test/output/filter-limit/dump index 812d489..6802fd6 100644 --- a/test/output/filter-limit/dump +++ b/test/output/filter-limit/dump @@ -43668,15423 +43668,15423 @@ Filter 2928 {"flow-limit":{"count":150,"interval":5,"log inet6/filter/limit-2927 -j DROP inet6/filter/logaccept-final-305 -j ACCEPT -Filter 2929 {"flow-limit":1,"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2928 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2928 -m recent --name limit-2928 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1650 - inet/filter/limit-2928 -m recent --name limit-2928 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1650 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1650 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2928 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2928 -m recent --name limit-2928 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1650 - inet6/filter/limit-2928 -m recent --name limit-2928 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1650 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1650 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2930 {"action":"pass","flow-limit":1,"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2929 - inet/filter/limit-2929 -m recent --name limit-2929 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1651 - inet/filter/limit-2929 -m recent --name limit-2929 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1651 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1651 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2929 - inet6/filter/limit-2929 -m recent --name limit-2929 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1651 - inet6/filter/limit-2929 -m recent --name limit-2929 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1651 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1651 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2931 {"flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2930 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2930 -m recent --name limit-2930 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1652 - inet/filter/limit-2930 -m limit --limit 1/second -j LOG - inet/filter/limit-2930 -m recent --name limit-2930 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1652 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1652 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2930 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2930 -m recent --name limit-2930 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1652 - inet6/filter/limit-2930 -m limit --limit 1/second -j LOG - inet6/filter/limit-2930 -m recent --name limit-2930 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1652 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1652 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2932 {"action":"pass","flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2931 - inet/filter/limit-2931 -m recent --name limit-2931 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1653 - inet/filter/limit-2931 -m recent --name limit-2931 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1653 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1653 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2931 - inet6/filter/limit-2931 -m recent --name limit-2931 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1653 - inet6/filter/limit-2931 -m recent --name limit-2931 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1653 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1653 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2933 {"flow-limit":1,"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2932 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2932 -m recent --name limit-2932 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1654 - inet/filter/limit-2932 -j TEE --gateway 10.0.0.1 - inet/filter/limit-2932 -j TEE --gateway 10.0.0.2 - inet/filter/limit-2932 -m recent --name limit-2932 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1654 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1654 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2932 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2932 -m recent --name limit-2932 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1654 - inet6/filter/limit-2932 -j TEE --gateway fc00::2 - inet6/filter/limit-2932 -m recent --name limit-2932 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1654 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1654 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2934 {"action":"pass","flow-limit":1,"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2933 - inet/filter/limit-2933 -m recent --name limit-2933 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1655 - inet/filter/limit-2933 -m recent --name limit-2933 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-2933 -m recent --name limit-2933 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1655 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1655 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2933 - inet6/filter/limit-2933 -m recent --name limit-2933 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1655 - inet6/filter/limit-2933 -m recent --name limit-2933 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-1655 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1655 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2935 {"flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2934 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2934 -m recent --name limit-2934 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1656 - inet/filter/limit-2934 -m recent --name limit-2934 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1656 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1656 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2934 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2934 -m recent --name limit-2934 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1656 - inet6/filter/limit-2934 -m recent --name limit-2934 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1656 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1656 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2936 {"action":"pass","flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2935 - inet/filter/limit-2935 -m recent --name limit-2935 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1657 - inet/filter/limit-2935 -m recent --name limit-2935 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1657 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1657 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2935 - inet6/filter/limit-2935 -m recent --name limit-2935 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1657 - inet6/filter/limit-2935 -m recent --name limit-2935 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1657 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1657 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2937 {"flow-limit":1,"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2936 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2936 -m recent --name limit-2936 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1658 - inet/filter/limit-2936 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2936 -m recent --name limit-2936 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1658 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1658 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2936 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2936 -m recent --name limit-2936 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1658 - inet6/filter/limit-2936 -m recent --name limit-2936 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1658 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1658 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2938 {"action":"pass","flow-limit":1,"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2937 - inet/filter/limit-2937 -m recent --name limit-2937 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1659 - inet/filter/limit-2937 -m recent --name limit-2937 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1659 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1659 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2937 - inet6/filter/limit-2937 -m recent --name limit-2937 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1659 - inet6/filter/logdrop-1659 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1659 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2939 {"flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2938 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2938 -m recent --name limit-2938 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2938 -m recent --name limit-2938 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2938 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2938 -m recent --name limit-2938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2938 -m recent --name limit-2938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2940 {"action":"pass","flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2939 - inet/filter/limit-2939 -m recent --name limit-2939 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2939 -m recent --name limit-2939 --rsource --mask 255.255.255.255 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2939 - inet6/filter/limit-2939 -m recent --name limit-2939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2939 -m recent --name limit-2939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2941 {"flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2940 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2940 -m recent --name limit-2940 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2940 -m limit --limit 1/second -j LOG - inet/filter/limit-2940 -m recent --name limit-2940 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2940 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2940 -m recent --name limit-2940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2940 -m limit --limit 1/second -j LOG - inet6/filter/limit-2940 -m recent --name limit-2940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2942 {"action":"pass","flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2941 - inet/filter/limit-2941 -m recent --name limit-2941 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2941 -m recent --name limit-2941 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2941 - inet6/filter/limit-2941 -m recent --name limit-2941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2941 -m recent --name limit-2941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2943 {"flow-limit":{"log":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2942 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2942 -m recent --name limit-2942 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2942 -j TEE --gateway 10.0.0.1 - inet/filter/limit-2942 -j TEE --gateway 10.0.0.2 - inet/filter/limit-2942 -m recent --name limit-2942 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2942 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2942 -m recent --name limit-2942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2942 -j TEE --gateway fc00::2 - inet6/filter/limit-2942 -m recent --name limit-2942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2944 {"action":"pass","flow-limit":{"log":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2943 - inet/filter/limit-2943 -m recent --name limit-2943 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2943 -m recent --name limit-2943 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-2943 -m recent --name limit-2943 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2943 - inet6/filter/limit-2943 -m recent --name limit-2943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2943 -m recent --name limit-2943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2945 {"flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2944 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2944 -m recent --name limit-2944 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2944 -m recent --name limit-2944 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2944 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2944 -m recent --name limit-2944 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2944 -m recent --name limit-2944 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2946 {"action":"pass","flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2945 - inet/filter/limit-2945 -m recent --name limit-2945 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2945 -m recent --name limit-2945 --rsource --mask 255.255.255.255 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2945 - inet6/filter/limit-2945 -m recent --name limit-2945 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2945 -m recent --name limit-2945 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2947 {"flow-limit":{"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2946 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2946 -m recent --name limit-2946 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2946 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2946 -m recent --name limit-2946 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2946 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2946 -m recent --name limit-2946 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2946 -m recent --name limit-2946 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2948 {"action":"pass","flow-limit":{"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2947 - inet/filter/limit-2947 -m recent --name limit-2947 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2947 -m recent --name limit-2947 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2947 - inet6/filter/limit-2947 -m recent --name limit-2947 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2949 {"flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2948 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2948 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2948 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2948 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2950 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2949 - inet/filter/limit-2949 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2949 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2949 - inet6/filter/limit-2949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2951 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2950 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2950 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2950 -m limit --limit 1/second -j LOG - inet/filter/limit-2950 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2950 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2950 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2950 -m limit --limit 1/second -j LOG - inet6/filter/limit-2950 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2952 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2951 - inet/filter/limit-2951 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2951 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2951 - inet6/filter/limit-2951 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2951 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2953 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2952 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2952 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2952 -j TEE --gateway 10.0.0.1 - inet/filter/limit-2952 -j TEE --gateway 10.0.0.2 - inet/filter/limit-2952 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2952 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2952 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2952 -j TEE --gateway fc00::2 - inet6/filter/limit-2952 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2954 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2953 - inet/filter/limit-2953 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2953 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-2953 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2953 - inet6/filter/limit-2953 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2953 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2955 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2954 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2954 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2954 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2954 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2954 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2954 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2956 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2955 - inet/filter/limit-2955 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2955 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2955 - inet6/filter/limit-2955 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2955 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2957 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2956 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2956 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2956 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2956 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2956 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2956 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2956 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2958 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2957 - inet/filter/limit-2957 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2957 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2957 - inet6/filter/limit-2957 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2959 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2958 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2958 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2958 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2958 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2958 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2958 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2960 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2961 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2960 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2960 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2960 -m limit --limit 1/second -j LOG - inet/filter/limit-2960 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2960 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2960 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2960 -m limit --limit 1/second -j LOG - inet6/filter/limit-2960 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2962 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2961 - inet/filter/limit-2961 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2961 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2961 - inet6/filter/limit-2961 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2961 -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2963 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2962 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2962 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2962 -j TEE --gateway 10.0.0.1 - inet/filter/limit-2962 -j TEE --gateway 10.0.0.2 - inet/filter/limit-2962 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2962 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2962 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2962 -j TEE --gateway fc00::2 - inet6/filter/limit-2962 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2964 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2963 - inet/filter/limit-2963 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2963 -j TEE --gateway 10.0.0.1 - inet/filter/limit-2963 -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2963 - inet6/filter/limit-2963 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2963 -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2965 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2964 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2964 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2964 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2964 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2964 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2964 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2966 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2967 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2966 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2966 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2966 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2966 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2966 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2966 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2966 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2968 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2967 - inet/filter/limit-2967 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2967 -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2967 - inet6/filter/limit-2967 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2969 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2968 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2968 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2968 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2968 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2968 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2968 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2970 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2969 - inet/filter/limit-2969 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2969 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2969 - inet6/filter/limit-2969 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2969 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2971 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2970 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2970 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2970 -m limit --limit 1/second -j LOG - inet/filter/limit-2970 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2970 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2970 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2970 -m limit --limit 1/second -j LOG - inet6/filter/limit-2970 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2972 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2971 - inet/filter/limit-2971 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2971 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2971 - inet6/filter/limit-2971 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2971 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2973 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2972 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2972 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2972 -j TEE --gateway 10.0.0.1 - inet/filter/limit-2972 -j TEE --gateway 10.0.0.2 - inet/filter/limit-2972 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2972 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2972 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2972 -j TEE --gateway fc00::2 - inet6/filter/limit-2972 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2974 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2973 - inet/filter/limit-2973 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2973 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-2973 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2973 - inet6/filter/limit-2973 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2973 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2975 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2974 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2974 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2974 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2974 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2974 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2974 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2976 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2975 - inet/filter/limit-2975 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2975 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2975 - inet6/filter/limit-2975 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2975 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2977 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2976 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2976 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2976 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2976 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2976 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2976 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2976 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2978 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2977 - inet/filter/limit-2977 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2977 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2977 - inet6/filter/limit-2977 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2979 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2978 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2978 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2978 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2978 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2978 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2978 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2980 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2981 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2980 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2980 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2980 -m limit --limit 1/second -j LOG - inet/filter/limit-2980 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2980 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2980 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2980 -m limit --limit 1/second -j LOG - inet6/filter/limit-2980 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2982 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2981 - inet/filter/limit-2981 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2981 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2981 - inet6/filter/limit-2981 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2981 -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2983 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2982 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2982 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2982 -j TEE --gateway 10.0.0.1 - inet/filter/limit-2982 -j TEE --gateway 10.0.0.2 - inet/filter/limit-2982 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2982 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2982 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2982 -j TEE --gateway fc00::2 - inet6/filter/limit-2982 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2984 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2983 - inet/filter/limit-2983 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2983 -j TEE --gateway 10.0.0.1 - inet/filter/limit-2983 -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2983 - inet6/filter/limit-2983 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2983 -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2985 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2984 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2984 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2984 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2984 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2984 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2984 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2986 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2987 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2986 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2986 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2986 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2986 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2986 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2986 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2986 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2988 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2987 - inet/filter/limit-2987 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2987 -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2987 - inet6/filter/limit-2987 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2989 {"flow-limit":{"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2988 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2988 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2988 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2988 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2988 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2988 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2990 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2989 - inet/filter/limit-2989 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2989 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2989 - inet6/filter/limit-2989 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2989 -m recent --name user:C --rsource --mask fe00:: --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2991 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2990 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2990 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2990 -m limit --limit 1/second -j LOG - inet/filter/limit-2990 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2990 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2990 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2990 -m limit --limit 1/second -j LOG - inet6/filter/limit-2990 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2992 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2991 - inet/filter/limit-2991 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2991 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2991 - inet6/filter/limit-2991 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2991 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2993 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2992 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2992 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2992 -j TEE --gateway 10.0.0.1 - inet/filter/limit-2992 -j TEE --gateway 10.0.0.2 - inet/filter/limit-2992 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2992 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2992 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2992 -j TEE --gateway fc00::2 - inet6/filter/limit-2992 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2994 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2993 - inet/filter/limit-2993 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2993 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-2993 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2993 - inet6/filter/limit-2993 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2993 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2995 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2994 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2994 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2994 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2994 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2994 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2994 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2996 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2995 - inet/filter/limit-2995 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2995 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2995 - inet6/filter/limit-2995 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2995 -m recent --name user:C --rsource --mask fe00:: --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2997 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2996 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2996 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2996 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2996 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2996 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2996 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2996 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2998 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2997 - inet/filter/limit-2997 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2997 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2997 - inet6/filter/limit-2997 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2999 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2998 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2998 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2998 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2998 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2998 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2998 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3000 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3001 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3000 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3000 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3000 -m limit --limit 1/second -j LOG - inet/filter/limit-3000 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3000 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3000 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3000 -m limit --limit 1/second -j LOG - inet6/filter/limit-3000 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3002 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3001 - inet/filter/limit-3001 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3001 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3001 - inet6/filter/limit-3001 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3001 -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3003 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3002 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3002 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3002 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3002 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3002 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3002 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3002 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3002 -j TEE --gateway fc00::2 - inet6/filter/limit-3002 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3004 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3003 - inet/filter/limit-3003 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3003 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3003 -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3003 - inet6/filter/limit-3003 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3003 -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3005 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3004 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3004 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3004 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3004 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3004 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3004 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3006 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3007 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3006 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3006 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3006 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3006 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3006 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3006 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3006 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3008 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3007 - inet/filter/limit-3007 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3007 -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3007 - inet6/filter/limit-3007 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3009 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3008 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3008 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3008 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3008 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3008 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3008 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3010 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3009 - inet/filter/limit-3009 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3009 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3009 - inet6/filter/limit-3009 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3009 -m recent --name user:C --rdest --mask fe00:: --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3011 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3010 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3010 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3010 -m limit --limit 1/second -j LOG - inet/filter/limit-3010 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3010 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3010 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3010 -m limit --limit 1/second -j LOG - inet6/filter/limit-3010 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3012 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3011 - inet/filter/limit-3011 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3011 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3011 - inet6/filter/limit-3011 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3011 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3013 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3012 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3012 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3012 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3012 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3012 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3012 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3012 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3012 -j TEE --gateway fc00::2 - inet6/filter/limit-3012 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3014 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3013 - inet/filter/limit-3013 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3013 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3013 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3013 - inet6/filter/limit-3013 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3013 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3015 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3014 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3014 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3014 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3014 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3014 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3014 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3016 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3015 - inet/filter/limit-3015 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3015 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3015 - inet6/filter/limit-3015 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3015 -m recent --name user:C --rdest --mask fe00:: --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3017 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3016 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3016 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3016 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3016 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3016 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3016 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3016 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3018 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3017 - inet/filter/limit-3017 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3017 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3017 - inet6/filter/limit-3017 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3019 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3018 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3018 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3018 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3018 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3018 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3018 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3020 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3021 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3020 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3020 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3020 -m limit --limit 1/second -j LOG - inet/filter/limit-3020 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3020 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3020 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3020 -m limit --limit 1/second -j LOG - inet6/filter/limit-3020 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3022 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3021 - inet/filter/limit-3021 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3021 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3021 - inet6/filter/limit-3021 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3021 -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3023 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3022 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3022 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3022 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3022 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3022 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3022 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3022 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3022 -j TEE --gateway fc00::2 - inet6/filter/limit-3022 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3024 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3023 - inet/filter/limit-3023 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3023 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3023 -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3023 - inet6/filter/limit-3023 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3023 -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3025 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3024 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3024 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3024 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3024 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3024 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3024 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3026 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3027 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3026 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3026 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3026 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3026 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3026 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3026 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3026 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3028 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3027 - inet/filter/limit-3027 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3027 -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3027 - inet6/filter/limit-3027 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3029 {"flow-limit":{},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3028 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3028 -m recent --name limit-3028 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1660 - inet/filter/limit-3028 -m recent --name limit-3028 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1660 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1660 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3028 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3028 -m recent --name limit-3028 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1660 - inet6/filter/limit-3028 -m recent --name limit-3028 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1660 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1660 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3030 {"action":"pass","flow-limit":{},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3029 - inet/filter/limit-3029 -m recent --name limit-3029 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1661 - inet/filter/limit-3029 -m recent --name limit-3029 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1661 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1661 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3029 - inet6/filter/limit-3029 -m recent --name limit-3029 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1661 - inet6/filter/limit-3029 -m recent --name limit-3029 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1661 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1661 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3031 {"flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3030 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3030 -m recent --name limit-3030 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1662 - inet/filter/limit-3030 -m limit --limit 1/second -j LOG - inet/filter/limit-3030 -m recent --name limit-3030 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1662 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1662 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3030 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3030 -m recent --name limit-3030 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1662 - inet6/filter/limit-3030 -m limit --limit 1/second -j LOG - inet6/filter/limit-3030 -m recent --name limit-3030 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1662 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1662 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3032 {"action":"pass","flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3031 - inet/filter/limit-3031 -m recent --name limit-3031 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1663 - inet/filter/limit-3031 -m recent --name limit-3031 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1663 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1663 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3031 - inet6/filter/limit-3031 -m recent --name limit-3031 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1663 - inet6/filter/limit-3031 -m recent --name limit-3031 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1663 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1663 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3033 {"flow-limit":{},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3032 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3032 -m recent --name limit-3032 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1664 - inet/filter/limit-3032 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3032 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3032 -m recent --name limit-3032 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1664 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1664 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3032 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3032 -m recent --name limit-3032 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1664 - inet6/filter/limit-3032 -j TEE --gateway fc00::2 - inet6/filter/limit-3032 -m recent --name limit-3032 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1664 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1664 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3034 {"action":"pass","flow-limit":{},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3033 - inet/filter/limit-3033 -m recent --name limit-3033 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1665 - inet/filter/limit-3033 -m recent --name limit-3033 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3033 -m recent --name limit-3033 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1665 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1665 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3033 - inet6/filter/limit-3033 -m recent --name limit-3033 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1665 - inet6/filter/limit-3033 -m recent --name limit-3033 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-1665 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1665 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3035 {"flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3034 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3034 -m recent --name limit-3034 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1666 - inet/filter/limit-3034 -m recent --name limit-3034 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1666 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1666 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3034 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3034 -m recent --name limit-3034 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1666 - inet6/filter/limit-3034 -m recent --name limit-3034 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1666 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1666 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3036 {"action":"pass","flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3035 - inet/filter/limit-3035 -m recent --name limit-3035 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1667 - inet/filter/limit-3035 -m recent --name limit-3035 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1667 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1667 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3035 - inet6/filter/limit-3035 -m recent --name limit-3035 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1667 - inet6/filter/limit-3035 -m recent --name limit-3035 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1667 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1667 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3037 {"flow-limit":{},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3036 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3036 -m recent --name limit-3036 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1668 - inet/filter/limit-3036 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3036 -m recent --name limit-3036 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1668 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1668 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3036 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3036 -m recent --name limit-3036 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1668 - inet6/filter/limit-3036 -m recent --name limit-3036 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1668 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1668 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3038 {"action":"pass","flow-limit":{},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3037 - inet/filter/limit-3037 -m recent --name limit-3037 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1669 - inet/filter/limit-3037 -m recent --name limit-3037 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1669 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1669 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3037 - inet6/filter/limit-3037 -m recent --name limit-3037 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1669 - inet6/filter/logdrop-1669 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1669 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3039 {"flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3038 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3038 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1670 - inet/filter/limit-3038 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1670 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1670 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3038 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3038 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1670 - inet6/filter/limit-3038 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1670 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1670 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3040 {"action":"pass","flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3039 - inet/filter/limit-3039 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1671 - inet/filter/limit-3039 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1671 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1671 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3039 - inet6/filter/limit-3039 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1671 - inet6/filter/limit-3039 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1671 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1671 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3041 {"flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3040 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3040 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1672 - inet/filter/limit-3040 -m limit --limit 1/second -j LOG - inet/filter/limit-3040 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1672 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1672 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3040 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3040 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1672 - inet6/filter/limit-3040 -m limit --limit 1/second -j LOG - inet6/filter/limit-3040 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1672 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1672 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3042 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3041 - inet/filter/limit-3041 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1673 - inet/filter/limit-3041 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1673 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1673 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3041 - inet6/filter/limit-3041 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1673 - inet6/filter/limit-3041 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1673 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1673 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3043 {"flow-limit":{"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3042 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3042 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1674 - inet/filter/limit-3042 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3042 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3042 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1674 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1674 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3042 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3042 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1674 - inet6/filter/limit-3042 -j TEE --gateway fc00::2 - inet6/filter/limit-3042 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1674 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1674 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3044 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3043 - inet/filter/limit-3043 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1675 - inet/filter/limit-3043 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3043 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1675 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1675 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3043 - inet6/filter/limit-3043 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1675 - inet6/filter/limit-3043 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-1675 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1675 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3045 {"flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3044 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3044 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1676 - inet/filter/limit-3044 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1676 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1676 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3044 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3044 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1676 - inet6/filter/limit-3044 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1676 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1676 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3046 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3045 - inet/filter/limit-3045 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1677 - inet/filter/limit-3045 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1677 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1677 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3045 - inet6/filter/limit-3045 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1677 - inet6/filter/limit-3045 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1677 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1677 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3047 {"flow-limit":{"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3046 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3046 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1678 - inet/filter/limit-3046 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3046 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1678 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1678 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3046 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3046 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1678 - inet6/filter/limit-3046 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1678 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1678 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3048 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3047 - inet/filter/limit-3047 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1679 - inet/filter/limit-3047 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1679 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1679 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3047 - inet6/filter/limit-3047 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1679 - inet6/filter/logdrop-1679 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1679 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3049 {"flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3048 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3048 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1680 - inet/filter/limit-3048 -j ACCEPT - inet/filter/logdrop-1680 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1680 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3048 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3048 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1680 - inet6/filter/limit-3048 -j ACCEPT - inet6/filter/logdrop-1680 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1680 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3050 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1681 - inet/filter/logdrop-1681 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1681 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1681 - inet6/filter/logdrop-1681 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1681 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3051 {"flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3050 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3050 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1682 - inet/filter/limit-3050 -m limit --limit 1/second -j LOG - inet/filter/limit-3050 -j ACCEPT - inet/filter/logdrop-1682 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1682 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3050 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3050 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1682 - inet6/filter/limit-3050 -m limit --limit 1/second -j LOG - inet6/filter/limit-3050 -j ACCEPT - inet6/filter/logdrop-1682 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1682 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3052 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3051 - inet/filter/limit-3051 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1683 - inet/filter/limit-3051 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1683 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1683 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3051 - inet6/filter/limit-3051 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1683 - inet6/filter/limit-3051 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1683 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1683 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3053 {"flow-limit":{"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3052 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3052 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1684 - inet/filter/limit-3052 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3052 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3052 -j ACCEPT - inet/filter/logdrop-1684 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1684 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3052 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3052 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1684 - inet6/filter/limit-3052 -j TEE --gateway fc00::2 - inet6/filter/limit-3052 -j ACCEPT - inet6/filter/logdrop-1684 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1684 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3054 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3053 - inet/filter/limit-3053 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1685 - inet/filter/limit-3053 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3053 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1685 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1685 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3053 - inet6/filter/limit-3053 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1685 - inet6/filter/limit-3053 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1685 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1685 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3055 {"flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3054 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3054 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1686 - inet/filter/limit-3054 -j ACCEPT - inet/filter/logdrop-1686 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1686 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3054 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3054 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1686 - inet6/filter/limit-3054 -j ACCEPT - inet6/filter/logdrop-1686 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1686 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3056 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1687 - inet/filter/logdrop-1687 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1687 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1687 - inet6/filter/logdrop-1687 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1687 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3057 {"flow-limit":{"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3056 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3056 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1688 - inet/filter/limit-3056 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3056 -j ACCEPT - inet/filter/logdrop-1688 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1688 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3056 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3056 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1688 - inet6/filter/limit-3056 -j ACCEPT - inet6/filter/logdrop-1688 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1688 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3058 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3057 - inet/filter/limit-3057 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1689 - inet/filter/limit-3057 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1689 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1689 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3057 - inet6/filter/limit-3057 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1689 - inet6/filter/logdrop-1689 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1689 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3059 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3058 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3058 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1690 - inet/filter/limit-3058 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1690 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1690 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3058 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3058 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1690 - inet6/filter/limit-3058 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1690 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1690 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3060 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3059 - inet/filter/limit-3059 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1691 - inet/filter/limit-3059 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-1691 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1691 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3059 - inet6/filter/limit-3059 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1691 - inet6/filter/limit-3059 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1691 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1691 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3061 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3060 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3060 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1692 - inet/filter/limit-3060 -m limit --limit 1/second -j LOG - inet/filter/limit-3060 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1692 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1692 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3060 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3060 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1692 - inet6/filter/limit-3060 -m limit --limit 1/second -j LOG - inet6/filter/limit-3060 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1692 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1692 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3062 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3061 - inet/filter/limit-3061 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1693 - inet/filter/limit-3061 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1693 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1693 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3061 - inet6/filter/limit-3061 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1693 - inet6/filter/limit-3061 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1693 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1693 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3063 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3062 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3062 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1694 - inet/filter/limit-3062 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3062 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3062 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1694 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1694 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3062 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3062 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1694 - inet6/filter/limit-3062 -j TEE --gateway fc00::2 - inet6/filter/limit-3062 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1694 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1694 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3064 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3063 - inet/filter/limit-3063 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1695 - inet/filter/limit-3063 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3063 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1695 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1695 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3063 - inet6/filter/limit-3063 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1695 - inet6/filter/limit-3063 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-1695 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1695 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3065 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3064 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3064 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1696 - inet/filter/limit-3064 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1696 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1696 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3064 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3064 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1696 - inet6/filter/limit-3064 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1696 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1696 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3066 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3065 - inet/filter/limit-3065 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1697 - inet/filter/limit-3065 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-1697 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1697 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3065 - inet6/filter/limit-3065 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1697 - inet6/filter/limit-3065 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1697 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1697 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3067 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3066 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3066 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1698 - inet/filter/limit-3066 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3066 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1698 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1698 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3066 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3066 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1698 - inet6/filter/limit-3066 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1698 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1698 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3068 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3067 - inet/filter/limit-3067 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1699 - inet/filter/limit-3067 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1699 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1699 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3067 - inet6/filter/limit-3067 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1699 - inet6/filter/logdrop-1699 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1699 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3069 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3068 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3068 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1700 - inet/filter/limit-3068 -j ACCEPT - inet/filter/logdrop-1700 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1700 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3068 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3068 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1700 - inet6/filter/limit-3068 -j ACCEPT - inet6/filter/logdrop-1700 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1700 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3070 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1701 - inet/filter/logdrop-1701 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1701 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1701 - inet6/filter/logdrop-1701 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1701 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3071 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3070 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3070 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1702 - inet/filter/limit-3070 -m limit --limit 1/second -j LOG - inet/filter/limit-3070 -j ACCEPT - inet/filter/logdrop-1702 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1702 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3070 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3070 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1702 - inet6/filter/limit-3070 -m limit --limit 1/second -j LOG - inet6/filter/limit-3070 -j ACCEPT - inet6/filter/logdrop-1702 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1702 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3072 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3071 - inet/filter/limit-3071 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1703 - inet/filter/limit-3071 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1703 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1703 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3071 - inet6/filter/limit-3071 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1703 - inet6/filter/limit-3071 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1703 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1703 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3073 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3072 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3072 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1704 - inet/filter/limit-3072 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3072 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3072 -j ACCEPT - inet/filter/logdrop-1704 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1704 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3072 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3072 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1704 - inet6/filter/limit-3072 -j TEE --gateway fc00::2 - inet6/filter/limit-3072 -j ACCEPT - inet6/filter/logdrop-1704 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1704 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3074 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3073 - inet/filter/limit-3073 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1705 - inet/filter/limit-3073 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3073 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1705 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1705 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3073 - inet6/filter/limit-3073 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1705 - inet6/filter/limit-3073 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1705 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1705 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3075 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3074 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3074 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1706 - inet/filter/limit-3074 -j ACCEPT - inet/filter/logdrop-1706 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1706 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3074 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3074 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1706 - inet6/filter/limit-3074 -j ACCEPT - inet6/filter/logdrop-1706 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1706 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3076 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1707 - inet/filter/logdrop-1707 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1707 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1707 - inet6/filter/logdrop-1707 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1707 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3077 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3076 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3076 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1708 - inet/filter/limit-3076 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3076 -j ACCEPT - inet/filter/logdrop-1708 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1708 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3076 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3076 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1708 - inet6/filter/limit-3076 -j ACCEPT - inet6/filter/logdrop-1708 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1708 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3078 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3077 - inet/filter/limit-3077 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1709 - inet/filter/limit-3077 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1709 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1709 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3077 - inet6/filter/limit-3077 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1709 - inet6/filter/logdrop-1709 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1709 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3079 {"flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3078 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3078 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1710 - inet/filter/limit-3078 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1710 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1710 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3078 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3078 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1710 - inet6/filter/limit-3078 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1710 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1710 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3080 {"action":"pass","flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3079 - inet/filter/limit-3079 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1711 - inet/filter/limit-3079 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-1711 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1711 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3079 - inet6/filter/limit-3079 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1711 - inet6/filter/limit-3079 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-1711 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1711 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3081 {"flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3080 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3080 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1712 - inet/filter/limit-3080 -m limit --limit 1/second -j LOG - inet/filter/limit-3080 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1712 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1712 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3080 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3080 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1712 - inet6/filter/limit-3080 -m limit --limit 1/second -j LOG - inet6/filter/limit-3080 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1712 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1712 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3082 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3081 - inet/filter/limit-3081 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1713 - inet/filter/limit-3081 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1713 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1713 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3081 - inet6/filter/limit-3081 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1713 - inet6/filter/limit-3081 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1713 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1713 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3083 {"flow-limit":{"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3082 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3082 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1714 - inet/filter/limit-3082 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3082 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3082 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1714 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1714 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3082 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3082 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1714 - inet6/filter/limit-3082 -j TEE --gateway fc00::2 - inet6/filter/limit-3082 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1714 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1714 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3084 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3083 - inet/filter/limit-3083 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1715 - inet/filter/limit-3083 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3083 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1715 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1715 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3083 - inet6/filter/limit-3083 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1715 - inet6/filter/limit-3083 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-1715 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1715 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3085 {"flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3084 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3084 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1716 - inet/filter/limit-3084 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1716 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1716 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3084 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3084 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1716 - inet6/filter/limit-3084 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1716 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1716 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3086 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3085 - inet/filter/limit-3085 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1717 - inet/filter/limit-3085 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-1717 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1717 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3085 - inet6/filter/limit-3085 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1717 - inet6/filter/limit-3085 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-1717 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1717 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3087 {"flow-limit":{"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3086 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3086 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1718 - inet/filter/limit-3086 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3086 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1718 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1718 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3086 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3086 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1718 - inet6/filter/limit-3086 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1718 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1718 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3088 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3087 - inet/filter/limit-3087 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1719 - inet/filter/limit-3087 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1719 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1719 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3087 - inet6/filter/limit-3087 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1719 - inet6/filter/logdrop-1719 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1719 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3089 {"flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3088 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3088 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1720 - inet/filter/limit-3088 -j ACCEPT - inet/filter/logdrop-1720 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1720 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3088 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3088 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1720 - inet6/filter/limit-3088 -j ACCEPT - inet6/filter/logdrop-1720 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1720 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3090 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1721 - inet/filter/logdrop-1721 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1721 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1721 - inet6/filter/logdrop-1721 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1721 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3091 {"flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3090 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3090 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1722 - inet/filter/limit-3090 -m limit --limit 1/second -j LOG - inet/filter/limit-3090 -j ACCEPT - inet/filter/logdrop-1722 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1722 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3090 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3090 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1722 - inet6/filter/limit-3090 -m limit --limit 1/second -j LOG - inet6/filter/limit-3090 -j ACCEPT - inet6/filter/logdrop-1722 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1722 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3092 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3091 - inet/filter/limit-3091 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1723 - inet/filter/limit-3091 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1723 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1723 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3091 - inet6/filter/limit-3091 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1723 - inet6/filter/limit-3091 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1723 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1723 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3093 {"flow-limit":{"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3092 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3092 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1724 - inet/filter/limit-3092 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3092 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3092 -j ACCEPT - inet/filter/logdrop-1724 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1724 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3092 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3092 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1724 - inet6/filter/limit-3092 -j TEE --gateway fc00::2 - inet6/filter/limit-3092 -j ACCEPT - inet6/filter/logdrop-1724 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1724 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3094 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3093 - inet/filter/limit-3093 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1725 - inet/filter/limit-3093 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3093 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1725 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1725 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3093 - inet6/filter/limit-3093 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1725 - inet6/filter/limit-3093 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1725 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1725 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3095 {"flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3094 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3094 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1726 - inet/filter/limit-3094 -j ACCEPT - inet/filter/logdrop-1726 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1726 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3094 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3094 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1726 - inet6/filter/limit-3094 -j ACCEPT - inet6/filter/logdrop-1726 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1726 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3096 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1727 - inet/filter/logdrop-1727 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1727 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1727 - inet6/filter/logdrop-1727 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1727 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3097 {"flow-limit":{"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3096 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3096 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1728 - inet/filter/limit-3096 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3096 -j ACCEPT - inet/filter/logdrop-1728 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1728 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3096 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3096 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1728 - inet6/filter/limit-3096 -j ACCEPT - inet6/filter/logdrop-1728 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1728 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3098 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3097 - inet/filter/limit-3097 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1729 - inet/filter/limit-3097 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1729 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1729 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3097 - inet6/filter/limit-3097 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1729 - inet6/filter/logdrop-1729 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1729 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3099 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3098 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3098 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1730 - inet/filter/limit-3098 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1730 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1730 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3098 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3098 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1730 - inet6/filter/limit-3098 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1730 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1730 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3100 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3099 - inet/filter/limit-3099 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1731 - inet/filter/limit-3099 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-1731 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1731 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3099 - inet6/filter/limit-3099 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1731 - inet6/filter/limit-3099 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-1731 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1731 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3101 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3100 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3100 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1732 - inet/filter/limit-3100 -m limit --limit 1/second -j LOG - inet/filter/limit-3100 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1732 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1732 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3100 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3100 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1732 - inet6/filter/limit-3100 -m limit --limit 1/second -j LOG - inet6/filter/limit-3100 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1732 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1732 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3102 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3101 - inet/filter/limit-3101 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1733 - inet/filter/limit-3101 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1733 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1733 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3101 - inet6/filter/limit-3101 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1733 - inet6/filter/limit-3101 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1733 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1733 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3103 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3102 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3102 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1734 - inet/filter/limit-3102 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3102 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3102 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1734 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1734 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3102 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3102 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1734 - inet6/filter/limit-3102 -j TEE --gateway fc00::2 - inet6/filter/limit-3102 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1734 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1734 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3104 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3103 - inet/filter/limit-3103 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1735 - inet/filter/limit-3103 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3103 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1735 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1735 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3103 - inet6/filter/limit-3103 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1735 - inet6/filter/limit-3103 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-1735 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1735 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3105 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3104 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3104 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1736 - inet/filter/limit-3104 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1736 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1736 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3104 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3104 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1736 - inet6/filter/limit-3104 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1736 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1736 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3106 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3105 - inet/filter/limit-3105 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1737 - inet/filter/limit-3105 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-1737 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1737 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3105 - inet6/filter/limit-3105 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1737 - inet6/filter/limit-3105 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-1737 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1737 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3107 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3106 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3106 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1738 - inet/filter/limit-3106 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3106 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1738 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1738 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3106 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3106 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1738 - inet6/filter/limit-3106 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1738 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1738 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3108 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3107 - inet/filter/limit-3107 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1739 - inet/filter/limit-3107 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1739 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1739 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3107 - inet6/filter/limit-3107 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1739 - inet6/filter/logdrop-1739 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1739 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3109 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3108 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3108 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1740 - inet/filter/limit-3108 -j ACCEPT - inet/filter/logdrop-1740 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1740 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3108 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3108 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1740 - inet6/filter/limit-3108 -j ACCEPT - inet6/filter/logdrop-1740 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1740 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3110 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1741 - inet/filter/logdrop-1741 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1741 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1741 - inet6/filter/logdrop-1741 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1741 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3111 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3110 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3110 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1742 - inet/filter/limit-3110 -m limit --limit 1/second -j LOG - inet/filter/limit-3110 -j ACCEPT - inet/filter/logdrop-1742 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1742 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3110 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3110 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1742 - inet6/filter/limit-3110 -m limit --limit 1/second -j LOG - inet6/filter/limit-3110 -j ACCEPT - inet6/filter/logdrop-1742 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1742 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3112 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3111 - inet/filter/limit-3111 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1743 - inet/filter/limit-3111 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1743 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1743 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3111 - inet6/filter/limit-3111 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1743 - inet6/filter/limit-3111 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1743 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1743 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3113 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3112 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3112 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1744 - inet/filter/limit-3112 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3112 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3112 -j ACCEPT - inet/filter/logdrop-1744 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1744 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3112 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3112 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1744 - inet6/filter/limit-3112 -j TEE --gateway fc00::2 - inet6/filter/limit-3112 -j ACCEPT - inet6/filter/logdrop-1744 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1744 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3114 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3113 - inet/filter/limit-3113 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1745 - inet/filter/limit-3113 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3113 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1745 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1745 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3113 - inet6/filter/limit-3113 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1745 - inet6/filter/limit-3113 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1745 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1745 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3115 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3114 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3114 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1746 - inet/filter/limit-3114 -j ACCEPT - inet/filter/logdrop-1746 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1746 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3114 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3114 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1746 - inet6/filter/limit-3114 -j ACCEPT - inet6/filter/logdrop-1746 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1746 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3116 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1747 - inet/filter/logdrop-1747 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1747 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1747 - inet6/filter/logdrop-1747 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1747 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3117 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3116 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3116 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1748 - inet/filter/limit-3116 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3116 -j ACCEPT - inet/filter/logdrop-1748 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1748 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3116 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3116 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1748 - inet6/filter/limit-3116 -j ACCEPT - inet6/filter/logdrop-1748 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1748 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3118 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3117 - inet/filter/limit-3117 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1749 - inet/filter/limit-3117 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1749 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1749 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3117 - inet6/filter/limit-3117 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1749 - inet6/filter/logdrop-1749 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1749 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3119 {"flow-limit":{"log":"mirror"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3118 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3118 -m recent --name limit-3118 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1750 - inet/filter/limit-3118 -m recent --name limit-3118 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1750 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1750 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1750 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3118 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3118 -m recent --name limit-3118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1750 - inet6/filter/limit-3118 -m recent --name limit-3118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1750 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1750 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3120 {"action":"pass","flow-limit":{"log":"mirror"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3119 - inet/filter/limit-3119 -m recent --name limit-3119 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1751 - inet/filter/limit-3119 -m recent --name limit-3119 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1751 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1751 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1751 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3119 - inet6/filter/limit-3119 -m recent --name limit-3119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1751 - inet6/filter/limit-3119 -m recent --name limit-3119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1751 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1751 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3121 {"flow-limit":{"log":"mirror"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3120 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3120 -m recent --name limit-3120 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1752 - inet/filter/limit-3120 -m limit --limit 1/second -j LOG - inet/filter/limit-3120 -m recent --name limit-3120 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1752 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1752 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1752 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3120 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3120 -m recent --name limit-3120 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1752 - inet6/filter/limit-3120 -m limit --limit 1/second -j LOG - inet6/filter/limit-3120 -m recent --name limit-3120 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1752 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1752 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3122 {"action":"pass","flow-limit":{"log":"mirror"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3121 - inet/filter/limit-3121 -m recent --name limit-3121 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1753 - inet/filter/limit-3121 -m recent --name limit-3121 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1753 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1753 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1753 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3121 - inet6/filter/limit-3121 -m recent --name limit-3121 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1753 - inet6/filter/limit-3121 -m recent --name limit-3121 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1753 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1753 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3123 {"flow-limit":{"log":"mirror"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3122 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3122 -m recent --name limit-3122 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1754 - inet/filter/limit-3122 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3122 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3122 -m recent --name limit-3122 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1754 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1754 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1754 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3122 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3122 -m recent --name limit-3122 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1754 - inet6/filter/limit-3122 -j TEE --gateway fc00::2 - inet6/filter/limit-3122 -m recent --name limit-3122 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1754 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1754 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3124 {"action":"pass","flow-limit":{"log":"mirror"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3123 - inet/filter/limit-3123 -m recent --name limit-3123 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1755 - inet/filter/limit-3123 -m recent --name limit-3123 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3123 -m recent --name limit-3123 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1755 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1755 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1755 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3123 - inet6/filter/limit-3123 -m recent --name limit-3123 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1755 - inet6/filter/limit-3123 -m recent --name limit-3123 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-1755 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1755 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3125 {"flow-limit":{"log":"mirror"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3124 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3124 -m recent --name limit-3124 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1756 - inet/filter/limit-3124 -m recent --name limit-3124 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1756 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1756 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1756 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3124 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3124 -m recent --name limit-3124 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1756 - inet6/filter/limit-3124 -m recent --name limit-3124 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1756 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1756 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3126 {"action":"pass","flow-limit":{"log":"mirror"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3125 - inet/filter/limit-3125 -m recent --name limit-3125 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1757 - inet/filter/limit-3125 -m recent --name limit-3125 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1757 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1757 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1757 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3125 - inet6/filter/limit-3125 -m recent --name limit-3125 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1757 - inet6/filter/limit-3125 -m recent --name limit-3125 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1757 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1757 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3127 {"flow-limit":{"log":"mirror"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3126 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3126 -m recent --name limit-3126 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1758 - inet/filter/limit-3126 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3126 -m recent --name limit-3126 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1758 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1758 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1758 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3126 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3126 -m recent --name limit-3126 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1758 - inet6/filter/limit-3126 -m recent --name limit-3126 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1758 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1758 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3128 {"action":"pass","flow-limit":{"log":"mirror"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3127 - inet/filter/limit-3127 -m recent --name limit-3127 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1759 - inet/filter/limit-3127 -m recent --name limit-3127 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1759 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1759 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1759 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3127 - inet6/filter/limit-3127 -m recent --name limit-3127 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1759 - inet6/filter/logdrop-1759 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1759 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3129 {"flow-limit":{"log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3128 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3128 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1760 - inet/filter/limit-3128 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1760 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1760 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1760 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3128 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1760 - inet6/filter/limit-3128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1760 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1760 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3130 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3129 - inet/filter/limit-3129 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1761 - inet/filter/limit-3129 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1761 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1761 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1761 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3129 - inet6/filter/limit-3129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1761 - inet6/filter/limit-3129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1761 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1761 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3131 {"flow-limit":{"log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3130 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3130 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1762 - inet/filter/limit-3130 -m limit --limit 1/second -j LOG - inet/filter/limit-3130 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1762 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1762 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1762 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3130 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1762 - inet6/filter/limit-3130 -m limit --limit 1/second -j LOG - inet6/filter/limit-3130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1762 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1762 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3132 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3131 - inet/filter/limit-3131 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1763 - inet/filter/limit-3131 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1763 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1763 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1763 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3131 - inet6/filter/limit-3131 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1763 - inet6/filter/limit-3131 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1763 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1763 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3133 {"flow-limit":{"log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3132 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3132 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1764 - inet/filter/limit-3132 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3132 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3132 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1764 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1764 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1764 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3132 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3132 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1764 - inet6/filter/limit-3132 -j TEE --gateway fc00::2 - inet6/filter/limit-3132 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1764 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1764 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3134 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3133 - inet/filter/limit-3133 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1765 - inet/filter/limit-3133 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3133 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1765 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1765 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1765 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3133 - inet6/filter/limit-3133 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1765 - inet6/filter/limit-3133 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-1765 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1765 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3135 {"flow-limit":{"log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3134 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3134 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1766 - inet/filter/limit-3134 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1766 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1766 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1766 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3134 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3134 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1766 - inet6/filter/limit-3134 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1766 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1766 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3136 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3135 - inet/filter/limit-3135 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1767 - inet/filter/limit-3135 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1767 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1767 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1767 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3135 - inet6/filter/limit-3135 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1767 - inet6/filter/limit-3135 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1767 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1767 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3137 {"flow-limit":{"log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3136 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3136 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1768 - inet/filter/limit-3136 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3136 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1768 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1768 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1768 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3136 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3136 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1768 - inet6/filter/limit-3136 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1768 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1768 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3138 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3137 - inet/filter/limit-3137 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1769 - inet/filter/limit-3137 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1769 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1769 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1769 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3137 - inet6/filter/limit-3137 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1769 - inet6/filter/logdrop-1769 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1769 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3139 {"flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3138 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3138 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1770 - inet/filter/limit-3138 -j ACCEPT - inet/filter/logdrop-1770 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1770 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1770 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3138 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3138 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1770 - inet6/filter/limit-3138 -j ACCEPT - inet6/filter/logdrop-1770 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1770 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3140 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1771 - inet/filter/logdrop-1771 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1771 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1771 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1771 - inet6/filter/logdrop-1771 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1771 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3141 {"flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3140 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3140 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1772 - inet/filter/limit-3140 -m limit --limit 1/second -j LOG - inet/filter/limit-3140 -j ACCEPT - inet/filter/logdrop-1772 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1772 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1772 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3140 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3140 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1772 - inet6/filter/limit-3140 -m limit --limit 1/second -j LOG - inet6/filter/limit-3140 -j ACCEPT - inet6/filter/logdrop-1772 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1772 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3142 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3141 - inet/filter/limit-3141 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1773 - inet/filter/limit-3141 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1773 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1773 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1773 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3141 - inet6/filter/limit-3141 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1773 - inet6/filter/limit-3141 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1773 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1773 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3143 {"flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3142 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3142 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1774 - inet/filter/limit-3142 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3142 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3142 -j ACCEPT - inet/filter/logdrop-1774 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1774 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1774 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3142 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3142 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1774 - inet6/filter/limit-3142 -j TEE --gateway fc00::2 - inet6/filter/limit-3142 -j ACCEPT - inet6/filter/logdrop-1774 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1774 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3144 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3143 - inet/filter/limit-3143 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1775 - inet/filter/limit-3143 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3143 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1775 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1775 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1775 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3143 - inet6/filter/limit-3143 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1775 - inet6/filter/limit-3143 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1775 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1775 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3145 {"flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3144 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3144 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1776 - inet/filter/limit-3144 -j ACCEPT - inet/filter/logdrop-1776 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1776 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1776 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3144 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3144 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1776 - inet6/filter/limit-3144 -j ACCEPT - inet6/filter/logdrop-1776 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1776 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3146 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1777 - inet/filter/logdrop-1777 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1777 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1777 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1777 - inet6/filter/logdrop-1777 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1777 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3147 {"flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3146 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3146 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1778 - inet/filter/limit-3146 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3146 -j ACCEPT - inet/filter/logdrop-1778 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1778 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1778 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3146 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3146 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1778 - inet6/filter/limit-3146 -j ACCEPT - inet6/filter/logdrop-1778 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1778 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3148 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3147 - inet/filter/limit-3147 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1779 - inet/filter/limit-3147 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1779 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1779 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1779 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3147 - inet6/filter/limit-3147 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1779 - inet6/filter/logdrop-1779 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1779 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3149 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3148 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3148 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1780 - inet/filter/limit-3148 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1780 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1780 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1780 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3148 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1780 - inet6/filter/limit-3148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1780 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1780 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3150 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3149 - inet/filter/limit-3149 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1781 - inet/filter/limit-3149 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-1781 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1781 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1781 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3149 - inet6/filter/limit-3149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1781 - inet6/filter/limit-3149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1781 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1781 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3151 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3150 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3150 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1782 - inet/filter/limit-3150 -m limit --limit 1/second -j LOG - inet/filter/limit-3150 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1782 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1782 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1782 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3150 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3150 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1782 - inet6/filter/limit-3150 -m limit --limit 1/second -j LOG - inet6/filter/limit-3150 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1782 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1782 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3152 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3151 - inet/filter/limit-3151 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1783 - inet/filter/limit-3151 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1783 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1783 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1783 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3151 - inet6/filter/limit-3151 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1783 - inet6/filter/limit-3151 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1783 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1783 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3153 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3152 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3152 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1784 - inet/filter/limit-3152 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3152 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3152 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1784 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1784 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1784 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3152 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1784 - inet6/filter/limit-3152 -j TEE --gateway fc00::2 - inet6/filter/limit-3152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1784 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1784 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3154 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3153 - inet/filter/limit-3153 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1785 - inet/filter/limit-3153 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3153 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1785 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1785 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1785 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3153 - inet6/filter/limit-3153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1785 - inet6/filter/limit-3153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-1785 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1785 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3155 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3154 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3154 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1786 - inet/filter/limit-3154 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1786 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1786 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1786 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3154 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1786 - inet6/filter/limit-3154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1786 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1786 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3156 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3155 - inet/filter/limit-3155 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1787 - inet/filter/limit-3155 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-1787 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1787 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1787 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3155 - inet6/filter/limit-3155 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1787 - inet6/filter/limit-3155 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1787 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1787 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3157 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3156 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3156 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1788 - inet/filter/limit-3156 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3156 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1788 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1788 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1788 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3156 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3156 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1788 - inet6/filter/limit-3156 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1788 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1788 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3158 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3157 - inet/filter/limit-3157 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1789 - inet/filter/limit-3157 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1789 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1789 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1789 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3157 - inet6/filter/limit-3157 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1789 - inet6/filter/logdrop-1789 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1789 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3159 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3158 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3158 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1790 - inet/filter/limit-3158 -j ACCEPT - inet/filter/logdrop-1790 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1790 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1790 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3158 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3158 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1790 - inet6/filter/limit-3158 -j ACCEPT - inet6/filter/logdrop-1790 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1790 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3160 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1791 - inet/filter/logdrop-1791 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1791 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1791 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1791 - inet6/filter/logdrop-1791 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1791 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3161 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3160 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3160 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1792 - inet/filter/limit-3160 -m limit --limit 1/second -j LOG - inet/filter/limit-3160 -j ACCEPT - inet/filter/logdrop-1792 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1792 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1792 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3160 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3160 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1792 - inet6/filter/limit-3160 -m limit --limit 1/second -j LOG - inet6/filter/limit-3160 -j ACCEPT - inet6/filter/logdrop-1792 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1792 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3162 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3161 - inet/filter/limit-3161 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1793 - inet/filter/limit-3161 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1793 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1793 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1793 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3161 - inet6/filter/limit-3161 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1793 - inet6/filter/limit-3161 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1793 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1793 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3163 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3162 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3162 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1794 - inet/filter/limit-3162 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3162 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3162 -j ACCEPT - inet/filter/logdrop-1794 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1794 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1794 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3162 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3162 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1794 - inet6/filter/limit-3162 -j TEE --gateway fc00::2 - inet6/filter/limit-3162 -j ACCEPT - inet6/filter/logdrop-1794 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1794 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3164 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3163 - inet/filter/limit-3163 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1795 - inet/filter/limit-3163 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3163 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1795 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1795 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1795 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3163 - inet6/filter/limit-3163 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1795 - inet6/filter/limit-3163 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1795 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1795 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3165 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3164 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3164 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1796 - inet/filter/limit-3164 -j ACCEPT - inet/filter/logdrop-1796 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1796 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1796 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3164 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3164 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1796 - inet6/filter/limit-3164 -j ACCEPT - inet6/filter/logdrop-1796 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1796 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3166 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1797 - inet/filter/logdrop-1797 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1797 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1797 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1797 - inet6/filter/logdrop-1797 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1797 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3167 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3166 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3166 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1798 - inet/filter/limit-3166 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3166 -j ACCEPT - inet/filter/logdrop-1798 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1798 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1798 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3166 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3166 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1798 - inet6/filter/limit-3166 -j ACCEPT - inet6/filter/logdrop-1798 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1798 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3168 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3167 - inet/filter/limit-3167 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1799 - inet/filter/limit-3167 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1799 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1799 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1799 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3167 - inet6/filter/limit-3167 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1799 - inet6/filter/logdrop-1799 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1799 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3169 {"flow-limit":{"log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3168 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3168 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1800 - inet/filter/limit-3168 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1800 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1800 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1800 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3168 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3168 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1800 - inet6/filter/limit-3168 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1800 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1800 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3170 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3169 - inet/filter/limit-3169 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1801 - inet/filter/limit-3169 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-1801 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1801 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1801 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3169 - inet6/filter/limit-3169 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1801 - inet6/filter/limit-3169 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-1801 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1801 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3171 {"flow-limit":{"log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3170 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3170 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1802 - inet/filter/limit-3170 -m limit --limit 1/second -j LOG - inet/filter/limit-3170 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1802 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1802 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1802 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3170 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3170 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1802 - inet6/filter/limit-3170 -m limit --limit 1/second -j LOG - inet6/filter/limit-3170 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1802 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1802 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3172 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3171 - inet/filter/limit-3171 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1803 - inet/filter/limit-3171 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1803 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1803 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1803 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3171 - inet6/filter/limit-3171 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1803 - inet6/filter/limit-3171 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1803 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1803 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3173 {"flow-limit":{"log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3172 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3172 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1804 - inet/filter/limit-3172 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3172 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3172 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1804 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1804 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1804 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3172 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3172 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1804 - inet6/filter/limit-3172 -j TEE --gateway fc00::2 - inet6/filter/limit-3172 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1804 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1804 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3174 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3173 - inet/filter/limit-3173 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1805 - inet/filter/limit-3173 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3173 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1805 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1805 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1805 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3173 - inet6/filter/limit-3173 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1805 - inet6/filter/limit-3173 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-1805 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1805 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3175 {"flow-limit":{"log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3174 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3174 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1806 - inet/filter/limit-3174 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1806 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1806 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1806 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3174 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3174 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1806 - inet6/filter/limit-3174 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1806 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1806 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3176 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3175 - inet/filter/limit-3175 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1807 - inet/filter/limit-3175 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-1807 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1807 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1807 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3175 - inet6/filter/limit-3175 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1807 - inet6/filter/limit-3175 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-1807 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1807 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3177 {"flow-limit":{"log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3176 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3176 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1808 - inet/filter/limit-3176 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3176 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1808 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1808 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1808 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3176 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3176 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1808 - inet6/filter/limit-3176 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1808 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1808 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3178 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3177 - inet/filter/limit-3177 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1809 - inet/filter/limit-3177 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1809 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1809 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1809 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3177 - inet6/filter/limit-3177 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1809 - inet6/filter/logdrop-1809 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1809 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3179 {"flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3178 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3178 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1810 - inet/filter/limit-3178 -j ACCEPT - inet/filter/logdrop-1810 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1810 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1810 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3178 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3178 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1810 - inet6/filter/limit-3178 -j ACCEPT - inet6/filter/logdrop-1810 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1810 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3180 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1811 - inet/filter/logdrop-1811 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1811 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1811 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1811 - inet6/filter/logdrop-1811 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1811 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3181 {"flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3180 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3180 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1812 - inet/filter/limit-3180 -m limit --limit 1/second -j LOG - inet/filter/limit-3180 -j ACCEPT - inet/filter/logdrop-1812 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1812 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1812 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3180 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3180 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1812 - inet6/filter/limit-3180 -m limit --limit 1/second -j LOG - inet6/filter/limit-3180 -j ACCEPT - inet6/filter/logdrop-1812 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1812 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3182 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3181 - inet/filter/limit-3181 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1813 - inet/filter/limit-3181 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1813 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1813 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1813 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3181 - inet6/filter/limit-3181 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1813 - inet6/filter/limit-3181 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1813 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1813 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3183 {"flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3182 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3182 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1814 - inet/filter/limit-3182 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3182 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3182 -j ACCEPT - inet/filter/logdrop-1814 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1814 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1814 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3182 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3182 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1814 - inet6/filter/limit-3182 -j TEE --gateway fc00::2 - inet6/filter/limit-3182 -j ACCEPT - inet6/filter/logdrop-1814 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1814 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3184 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3183 - inet/filter/limit-3183 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1815 - inet/filter/limit-3183 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3183 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1815 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1815 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1815 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3183 - inet6/filter/limit-3183 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1815 - inet6/filter/limit-3183 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1815 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1815 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3185 {"flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3184 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3184 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1816 - inet/filter/limit-3184 -j ACCEPT - inet/filter/logdrop-1816 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1816 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1816 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3184 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3184 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1816 - inet6/filter/limit-3184 -j ACCEPT - inet6/filter/logdrop-1816 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1816 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3186 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1817 - inet/filter/logdrop-1817 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1817 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1817 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1817 - inet6/filter/logdrop-1817 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1817 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3187 {"flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3186 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3186 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1818 - inet/filter/limit-3186 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3186 -j ACCEPT - inet/filter/logdrop-1818 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1818 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1818 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3186 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3186 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1818 - inet6/filter/limit-3186 -j ACCEPT - inet6/filter/logdrop-1818 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1818 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3188 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3187 - inet/filter/limit-3187 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1819 - inet/filter/limit-3187 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1819 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1819 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1819 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3187 - inet6/filter/limit-3187 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1819 - inet6/filter/logdrop-1819 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1819 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3189 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3188 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3188 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1820 - inet/filter/limit-3188 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1820 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1820 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1820 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3188 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3188 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1820 - inet6/filter/limit-3188 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1820 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1820 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3190 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3189 - inet/filter/limit-3189 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1821 - inet/filter/limit-3189 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-1821 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1821 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1821 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3189 - inet6/filter/limit-3189 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1821 - inet6/filter/limit-3189 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-1821 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1821 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3191 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3190 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3190 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1822 - inet/filter/limit-3190 -m limit --limit 1/second -j LOG - inet/filter/limit-3190 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1822 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1822 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1822 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3190 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3190 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1822 - inet6/filter/limit-3190 -m limit --limit 1/second -j LOG - inet6/filter/limit-3190 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1822 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1822 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3192 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3191 - inet/filter/limit-3191 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1823 - inet/filter/limit-3191 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1823 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1823 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1823 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3191 - inet6/filter/limit-3191 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1823 - inet6/filter/limit-3191 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1823 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1823 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3193 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3192 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3192 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1824 - inet/filter/limit-3192 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3192 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3192 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1824 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1824 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1824 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3192 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3192 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1824 - inet6/filter/limit-3192 -j TEE --gateway fc00::2 - inet6/filter/limit-3192 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1824 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1824 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3194 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3193 - inet/filter/limit-3193 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1825 - inet/filter/limit-3193 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3193 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1825 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1825 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1825 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3193 - inet6/filter/limit-3193 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1825 - inet6/filter/limit-3193 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-1825 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1825 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3195 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3194 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3194 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1826 - inet/filter/limit-3194 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1826 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1826 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1826 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3194 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3194 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1826 - inet6/filter/limit-3194 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1826 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1826 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3196 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3195 - inet/filter/limit-3195 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1827 - inet/filter/limit-3195 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-1827 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1827 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1827 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3195 - inet6/filter/limit-3195 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1827 - inet6/filter/limit-3195 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-1827 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1827 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3197 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3196 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3196 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1828 - inet/filter/limit-3196 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3196 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1828 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1828 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1828 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3196 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3196 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1828 - inet6/filter/limit-3196 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1828 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1828 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3198 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3197 - inet/filter/limit-3197 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1829 - inet/filter/limit-3197 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1829 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1829 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1829 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3197 - inet6/filter/limit-3197 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1829 - inet6/filter/logdrop-1829 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1829 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3199 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3198 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3198 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1830 - inet/filter/limit-3198 -j ACCEPT - inet/filter/logdrop-1830 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1830 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1830 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3198 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3198 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1830 - inet6/filter/limit-3198 -j ACCEPT - inet6/filter/logdrop-1830 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1830 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3200 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1831 - inet/filter/logdrop-1831 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1831 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1831 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1831 - inet6/filter/logdrop-1831 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1831 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3201 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3200 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3200 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1832 - inet/filter/limit-3200 -m limit --limit 1/second -j LOG - inet/filter/limit-3200 -j ACCEPT - inet/filter/logdrop-1832 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1832 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1832 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3200 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3200 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1832 - inet6/filter/limit-3200 -m limit --limit 1/second -j LOG - inet6/filter/limit-3200 -j ACCEPT - inet6/filter/logdrop-1832 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1832 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3202 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3201 - inet/filter/limit-3201 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1833 - inet/filter/limit-3201 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1833 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1833 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1833 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3201 - inet6/filter/limit-3201 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1833 - inet6/filter/limit-3201 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1833 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1833 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3203 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3202 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3202 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1834 - inet/filter/limit-3202 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3202 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3202 -j ACCEPT - inet/filter/logdrop-1834 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1834 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1834 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3202 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3202 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1834 - inet6/filter/limit-3202 -j TEE --gateway fc00::2 - inet6/filter/limit-3202 -j ACCEPT - inet6/filter/logdrop-1834 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1834 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3204 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3203 - inet/filter/limit-3203 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1835 - inet/filter/limit-3203 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3203 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1835 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1835 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1835 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3203 - inet6/filter/limit-3203 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1835 - inet6/filter/limit-3203 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1835 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1835 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3205 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3204 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3204 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1836 - inet/filter/limit-3204 -j ACCEPT - inet/filter/logdrop-1836 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1836 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1836 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3204 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3204 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1836 - inet6/filter/limit-3204 -j ACCEPT - inet6/filter/logdrop-1836 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1836 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3206 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1837 - inet/filter/logdrop-1837 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1837 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1837 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1837 - inet6/filter/logdrop-1837 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1837 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3207 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3206 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3206 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1838 - inet/filter/limit-3206 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3206 -j ACCEPT - inet/filter/logdrop-1838 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1838 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1838 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3206 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3206 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1838 - inet6/filter/limit-3206 -j ACCEPT - inet6/filter/logdrop-1838 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1838 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3208 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3207 - inet/filter/limit-3207 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1839 - inet/filter/limit-3207 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1839 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-1839 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1839 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3207 - inet6/filter/limit-3207 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1839 - inet6/filter/logdrop-1839 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1839 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3209 {"flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3208 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3208 -m recent --name limit-3208 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3208 -m recent --name limit-3208 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3208 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3208 -m recent --name limit-3208 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3208 -m recent --name limit-3208 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3210 {"action":"pass","flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3209 - inet/filter/limit-3209 -m recent --name limit-3209 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3209 -m recent --name limit-3209 --rsource --mask 255.255.255.255 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3209 - inet6/filter/limit-3209 -m recent --name limit-3209 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3209 -m recent --name limit-3209 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3211 {"flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3210 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3210 -m recent --name limit-3210 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3210 -m limit --limit 1/second -j LOG - inet/filter/limit-3210 -m recent --name limit-3210 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3210 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3210 -m recent --name limit-3210 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3210 -m limit --limit 1/second -j LOG - inet6/filter/limit-3210 -m recent --name limit-3210 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3212 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3211 - inet/filter/limit-3211 -m recent --name limit-3211 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3211 -m recent --name limit-3211 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3211 - inet6/filter/limit-3211 -m recent --name limit-3211 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3211 -m recent --name limit-3211 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3213 {"flow-limit":{"log":"none"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3212 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3212 -m recent --name limit-3212 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3212 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3212 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3212 -m recent --name limit-3212 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3212 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3212 -m recent --name limit-3212 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3212 -j TEE --gateway fc00::2 - inet6/filter/limit-3212 -m recent --name limit-3212 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3214 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3213 - inet/filter/limit-3213 -m recent --name limit-3213 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3213 -m recent --name limit-3213 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3213 -m recent --name limit-3213 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3213 - inet6/filter/limit-3213 -m recent --name limit-3213 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3213 -m recent --name limit-3213 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3215 {"flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3214 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3214 -m recent --name limit-3214 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3214 -m recent --name limit-3214 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3214 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3214 -m recent --name limit-3214 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3214 -m recent --name limit-3214 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3216 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3215 - inet/filter/limit-3215 -m recent --name limit-3215 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3215 -m recent --name limit-3215 --rsource --mask 255.255.255.255 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3215 - inet6/filter/limit-3215 -m recent --name limit-3215 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3215 -m recent --name limit-3215 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3217 {"flow-limit":{"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3216 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3216 -m recent --name limit-3216 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3216 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3216 -m recent --name limit-3216 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3216 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3216 -m recent --name limit-3216 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3216 -m recent --name limit-3216 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3218 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3217 - inet/filter/limit-3217 -m recent --name limit-3217 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3217 -m recent --name limit-3217 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3217 - inet6/filter/limit-3217 -m recent --name limit-3217 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3219 {"flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3218 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3218 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3218 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3218 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3218 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3218 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3220 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3219 - inet/filter/limit-3219 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3219 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3219 - inet6/filter/limit-3219 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3219 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3221 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3220 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3220 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3220 -m limit --limit 1/second -j LOG - inet/filter/limit-3220 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3220 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3220 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3220 -m limit --limit 1/second -j LOG - inet6/filter/limit-3220 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3222 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3221 - inet/filter/limit-3221 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3221 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3221 - inet6/filter/limit-3221 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3221 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3223 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3222 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3222 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3222 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3222 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3222 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3222 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3222 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3222 -j TEE --gateway fc00::2 - inet6/filter/limit-3222 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3224 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3223 - inet/filter/limit-3223 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3223 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3223 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3223 - inet6/filter/limit-3223 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3223 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3225 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3224 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3224 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3224 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3224 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3224 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3224 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3226 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3225 - inet/filter/limit-3225 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3225 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3225 - inet6/filter/limit-3225 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3225 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3227 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3226 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3226 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3226 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3226 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3226 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3226 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3226 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3228 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3227 - inet/filter/limit-3227 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3227 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3227 - inet6/filter/limit-3227 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3229 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3228 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3228 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3228 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3228 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3228 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3230 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3231 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3230 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3230 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3230 -m limit --limit 1/second -j LOG - inet/filter/limit-3230 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3230 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3230 -m limit --limit 1/second -j LOG - inet6/filter/limit-3230 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3232 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3231 - inet/filter/limit-3231 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3231 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3231 - inet6/filter/limit-3231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3231 -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3233 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3232 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3232 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3232 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3232 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3232 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3232 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3232 -j TEE --gateway fc00::2 - inet6/filter/limit-3232 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3234 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3233 - inet/filter/limit-3233 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3233 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3233 -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3233 - inet6/filter/limit-3233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3233 -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3235 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3234 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3234 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3234 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3234 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3234 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3236 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3237 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3236 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3236 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3236 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3236 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3236 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3236 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3238 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3237 - inet/filter/limit-3237 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3237 -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3237 - inet6/filter/limit-3237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3239 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3238 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3238 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3238 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3238 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3240 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3239 - inet/filter/limit-3239 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3239 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3239 - inet6/filter/limit-3239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3241 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3240 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3240 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3240 -m limit --limit 1/second -j LOG - inet/filter/limit-3240 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3240 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3240 -m limit --limit 1/second -j LOG - inet6/filter/limit-3240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3242 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3241 - inet/filter/limit-3241 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3241 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3241 - inet6/filter/limit-3241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3243 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3242 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3242 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3242 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3242 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3242 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3242 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3242 -j TEE --gateway fc00::2 - inet6/filter/limit-3242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3244 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3243 - inet/filter/limit-3243 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3243 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3243 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3243 - inet6/filter/limit-3243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3245 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3244 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3244 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3244 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3244 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3246 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3245 - inet/filter/limit-3245 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3245 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3245 - inet6/filter/limit-3245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3247 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3246 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3246 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3246 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3246 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3246 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3248 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3247 - inet/filter/limit-3247 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3247 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3247 - inet6/filter/limit-3247 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3249 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3248 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3248 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3248 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3248 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3248 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3250 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3251 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3250 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3250 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3250 -m limit --limit 1/second -j LOG - inet/filter/limit-3250 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3250 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3250 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3250 -m limit --limit 1/second -j LOG - inet6/filter/limit-3250 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3252 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3251 - inet/filter/limit-3251 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3251 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3251 - inet6/filter/limit-3251 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3251 -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3253 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3252 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3252 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3252 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3252 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3252 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3252 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3252 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3252 -j TEE --gateway fc00::2 - inet6/filter/limit-3252 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3254 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3253 - inet/filter/limit-3253 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3253 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3253 -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3253 - inet6/filter/limit-3253 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3253 -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3255 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3254 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3254 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3254 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3254 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3254 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3254 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3256 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3257 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3256 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3256 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3256 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3256 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3256 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3256 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3256 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3258 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3257 - inet/filter/limit-3257 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3257 -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3257 - inet6/filter/limit-3257 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3259 {"flow-limit":{"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3258 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3258 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3258 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3258 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3258 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3258 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3260 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3259 - inet/filter/limit-3259 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3259 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3259 - inet6/filter/limit-3259 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3259 -m recent --name user:C --rsource --mask fe00:: --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3261 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3260 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3260 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3260 -m limit --limit 1/second -j LOG - inet/filter/limit-3260 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3260 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3260 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3260 -m limit --limit 1/second -j LOG - inet6/filter/limit-3260 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3262 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3261 - inet/filter/limit-3261 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3261 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3261 - inet6/filter/limit-3261 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3261 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3263 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3262 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3262 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3262 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3262 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3262 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3262 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3262 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3262 -j TEE --gateway fc00::2 - inet6/filter/limit-3262 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3264 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3263 - inet/filter/limit-3263 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3263 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3263 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3263 - inet6/filter/limit-3263 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3263 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3265 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3264 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3264 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3264 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3264 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3264 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3264 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3266 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3265 - inet/filter/limit-3265 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3265 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3265 - inet6/filter/limit-3265 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3265 -m recent --name user:C --rsource --mask fe00:: --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3267 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3266 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3266 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3266 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3266 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3266 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3266 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3266 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3268 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3267 - inet/filter/limit-3267 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3267 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3267 - inet6/filter/limit-3267 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3269 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3268 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3268 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3268 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3268 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3268 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3268 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3270 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3271 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3270 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3270 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3270 -m limit --limit 1/second -j LOG - inet/filter/limit-3270 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3270 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3270 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3270 -m limit --limit 1/second -j LOG - inet6/filter/limit-3270 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3272 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3271 - inet/filter/limit-3271 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3271 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3271 - inet6/filter/limit-3271 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3271 -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3273 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3272 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3272 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3272 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3272 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3272 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3272 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3272 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3272 -j TEE --gateway fc00::2 - inet6/filter/limit-3272 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3274 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3273 - inet/filter/limit-3273 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3273 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3273 -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3273 - inet6/filter/limit-3273 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3273 -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3275 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3274 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3274 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3274 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3274 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3274 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3274 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3276 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3277 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3276 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3276 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3276 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3276 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3276 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3276 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3276 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3278 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3277 - inet/filter/limit-3277 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3277 -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3277 - inet6/filter/limit-3277 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3279 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3278 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3278 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3278 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3278 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3278 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3278 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3280 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3279 - inet/filter/limit-3279 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3279 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3279 - inet6/filter/limit-3279 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3279 -m recent --name user:C --rdest --mask fe00:: --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3281 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3280 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3280 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3280 -m limit --limit 1/second -j LOG - inet/filter/limit-3280 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3280 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3280 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3280 -m limit --limit 1/second -j LOG - inet6/filter/limit-3280 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3282 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3281 - inet/filter/limit-3281 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3281 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3281 - inet6/filter/limit-3281 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3281 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3283 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3282 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3282 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3282 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3282 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3282 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3282 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3282 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3282 -j TEE --gateway fc00::2 - inet6/filter/limit-3282 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3284 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3283 - inet/filter/limit-3283 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3283 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3283 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3283 - inet6/filter/limit-3283 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3283 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3285 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3284 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3284 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3284 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3284 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3284 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3284 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3286 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3285 - inet/filter/limit-3285 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3285 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3285 - inet6/filter/limit-3285 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3285 -m recent --name user:C --rdest --mask fe00:: --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3287 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3286 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3286 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3286 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3286 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3286 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3286 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3286 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3288 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3287 - inet/filter/limit-3287 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3287 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3287 - inet6/filter/limit-3287 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3289 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3288 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3288 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3288 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3288 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3288 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3288 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3290 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3291 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3290 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3290 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3290 -m limit --limit 1/second -j LOG - inet/filter/limit-3290 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3290 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3290 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3290 -m limit --limit 1/second -j LOG - inet6/filter/limit-3290 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3292 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3291 - inet/filter/limit-3291 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3291 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3291 - inet6/filter/limit-3291 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3291 -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3293 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3292 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3292 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3292 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3292 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3292 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3292 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3292 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3292 -j TEE --gateway fc00::2 - inet6/filter/limit-3292 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3294 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3293 - inet/filter/limit-3293 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3293 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3293 -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3293 - inet6/filter/limit-3293 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3293 -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3295 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3294 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3294 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3294 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3294 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3294 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3294 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3296 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3297 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3296 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3296 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3296 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3296 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3296 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3296 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-3296 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3298 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3297 - inet/filter/limit-3297 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-3297 -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3297 - inet6/filter/limit-3297 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3299 {"flow-limit":{"log":"ulog"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3298 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3298 -m recent --name limit-3298 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1840 - inet/filter/limit-3298 -m recent --name limit-3298 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1840 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1840 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3298 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3298 -m recent --name limit-3298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1840 - inet6/filter/limit-3298 -m recent --name limit-3298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1840 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3300 {"action":"pass","flow-limit":{"log":"ulog"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3299 - inet/filter/limit-3299 -m recent --name limit-3299 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1841 - inet/filter/limit-3299 -m recent --name limit-3299 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1841 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1841 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3299 - inet6/filter/limit-3299 -m recent --name limit-3299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1841 - inet6/filter/limit-3299 -m recent --name limit-3299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1841 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3301 {"flow-limit":{"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3300 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3300 -m recent --name limit-3300 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1842 - inet/filter/limit-3300 -m limit --limit 1/second -j LOG - inet/filter/limit-3300 -m recent --name limit-3300 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1842 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1842 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3300 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3300 -m recent --name limit-3300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1842 - inet6/filter/limit-3300 -m limit --limit 1/second -j LOG - inet6/filter/limit-3300 -m recent --name limit-3300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1842 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3302 {"action":"pass","flow-limit":{"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3301 - inet/filter/limit-3301 -m recent --name limit-3301 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1843 - inet/filter/limit-3301 -m recent --name limit-3301 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1843 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1843 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3301 - inet6/filter/limit-3301 -m recent --name limit-3301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1843 - inet6/filter/limit-3301 -m recent --name limit-3301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1843 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3303 {"flow-limit":{"log":"ulog"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3302 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3302 -m recent --name limit-3302 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1844 - inet/filter/limit-3302 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3302 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3302 -m recent --name limit-3302 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1844 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1844 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3302 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3302 -m recent --name limit-3302 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1844 - inet6/filter/limit-3302 -j TEE --gateway fc00::2 - inet6/filter/limit-3302 -m recent --name limit-3302 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1844 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3304 {"action":"pass","flow-limit":{"log":"ulog"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3303 - inet/filter/limit-3303 -m recent --name limit-3303 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1845 - inet/filter/limit-3303 -m recent --name limit-3303 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3303 -m recent --name limit-3303 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1845 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1845 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3303 - inet6/filter/limit-3303 -m recent --name limit-3303 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1845 - inet6/filter/limit-3303 -m recent --name limit-3303 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-1845 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3305 {"flow-limit":{"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3304 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3304 -m recent --name limit-3304 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1846 - inet/filter/limit-3304 -m recent --name limit-3304 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1846 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1846 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3304 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3304 -m recent --name limit-3304 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1846 - inet6/filter/limit-3304 -m recent --name limit-3304 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1846 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3306 {"action":"pass","flow-limit":{"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3305 - inet/filter/limit-3305 -m recent --name limit-3305 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1847 - inet/filter/limit-3305 -m recent --name limit-3305 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1847 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1847 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3305 - inet6/filter/limit-3305 -m recent --name limit-3305 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1847 - inet6/filter/limit-3305 -m recent --name limit-3305 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1847 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3307 {"flow-limit":{"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3306 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3306 -m recent --name limit-3306 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1848 - inet/filter/limit-3306 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3306 -m recent --name limit-3306 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1848 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1848 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3306 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3306 -m recent --name limit-3306 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1848 - inet6/filter/limit-3306 -m recent --name limit-3306 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1848 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3308 {"action":"pass","flow-limit":{"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3307 - inet/filter/limit-3307 -m recent --name limit-3307 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1849 - inet/filter/limit-3307 -m recent --name limit-3307 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1849 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1849 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3307 - inet6/filter/limit-3307 -m recent --name limit-3307 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1849 - inet6/filter/logdrop-1849 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3309 {"flow-limit":{"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3308 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3308 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1850 - inet/filter/limit-3308 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1850 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1850 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3308 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1850 - inet6/filter/limit-3308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1850 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3310 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3309 - inet/filter/limit-3309 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1851 - inet/filter/limit-3309 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1851 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1851 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3309 - inet6/filter/limit-3309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1851 - inet6/filter/limit-3309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1851 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3311 {"flow-limit":{"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3310 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3310 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1852 - inet/filter/limit-3310 -m limit --limit 1/second -j LOG - inet/filter/limit-3310 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1852 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1852 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3310 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3310 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1852 - inet6/filter/limit-3310 -m limit --limit 1/second -j LOG - inet6/filter/limit-3310 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1852 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3312 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3311 - inet/filter/limit-3311 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1853 - inet/filter/limit-3311 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1853 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1853 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3311 - inet6/filter/limit-3311 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1853 - inet6/filter/limit-3311 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1853 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3313 {"flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3312 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3312 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1854 - inet/filter/limit-3312 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3312 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3312 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1854 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1854 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3312 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3312 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1854 - inet6/filter/limit-3312 -j TEE --gateway fc00::2 - inet6/filter/limit-3312 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1854 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3314 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3313 - inet/filter/limit-3313 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1855 - inet/filter/limit-3313 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3313 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1855 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1855 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3313 - inet6/filter/limit-3313 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1855 - inet6/filter/limit-3313 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-1855 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3315 {"flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3314 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3314 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1856 - inet/filter/limit-3314 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1856 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1856 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3314 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3314 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1856 - inet6/filter/limit-3314 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1856 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3316 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3315 - inet/filter/limit-3315 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1857 - inet/filter/limit-3315 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1857 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1857 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3315 - inet6/filter/limit-3315 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1857 - inet6/filter/limit-3315 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1857 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3317 {"flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3316 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3316 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1858 - inet/filter/limit-3316 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3316 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1858 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1858 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3316 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3316 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1858 - inet6/filter/limit-3316 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1858 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3318 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3317 - inet/filter/limit-3317 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1859 - inet/filter/limit-3317 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1859 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1859 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3317 - inet6/filter/limit-3317 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1859 - inet6/filter/logdrop-1859 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3319 {"flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3318 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3318 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1860 - inet/filter/limit-3318 -j ACCEPT - inet/filter/logdrop-1860 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1860 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3318 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3318 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1860 - inet6/filter/limit-3318 -j ACCEPT - inet6/filter/logdrop-1860 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3320 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1861 - inet/filter/logdrop-1861 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1861 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1861 - inet6/filter/logdrop-1861 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3321 {"flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3320 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3320 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1862 - inet/filter/limit-3320 -m limit --limit 1/second -j LOG - inet/filter/limit-3320 -j ACCEPT - inet/filter/logdrop-1862 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1862 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3320 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3320 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1862 - inet6/filter/limit-3320 -m limit --limit 1/second -j LOG - inet6/filter/limit-3320 -j ACCEPT - inet6/filter/logdrop-1862 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3322 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3321 - inet/filter/limit-3321 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1863 - inet/filter/limit-3321 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1863 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1863 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3321 - inet6/filter/limit-3321 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1863 - inet6/filter/limit-3321 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1863 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3323 {"flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3322 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3322 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1864 - inet/filter/limit-3322 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3322 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3322 -j ACCEPT - inet/filter/logdrop-1864 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1864 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3322 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3322 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1864 - inet6/filter/limit-3322 -j TEE --gateway fc00::2 - inet6/filter/limit-3322 -j ACCEPT - inet6/filter/logdrop-1864 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3324 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3323 - inet/filter/limit-3323 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1865 - inet/filter/limit-3323 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3323 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1865 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1865 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3323 - inet6/filter/limit-3323 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1865 - inet6/filter/limit-3323 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1865 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3325 {"flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3324 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3324 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1866 - inet/filter/limit-3324 -j ACCEPT - inet/filter/logdrop-1866 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1866 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3324 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3324 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1866 - inet6/filter/limit-3324 -j ACCEPT - inet6/filter/logdrop-1866 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3326 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1867 - inet/filter/logdrop-1867 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1867 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1867 - inet6/filter/logdrop-1867 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3327 {"flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3326 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3326 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1868 - inet/filter/limit-3326 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3326 -j ACCEPT - inet/filter/logdrop-1868 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1868 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3326 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3326 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1868 - inet6/filter/limit-3326 -j ACCEPT - inet6/filter/logdrop-1868 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3328 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3327 - inet/filter/limit-3327 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1869 - inet/filter/limit-3327 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1869 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1869 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3327 - inet6/filter/limit-3327 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1869 - inet6/filter/logdrop-1869 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3329 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3328 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3328 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1870 - inet/filter/limit-3328 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1870 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1870 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3328 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1870 - inet6/filter/limit-3328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1870 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3330 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3329 - inet/filter/limit-3329 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1871 - inet/filter/limit-3329 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-1871 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1871 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3329 - inet6/filter/limit-3329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1871 - inet6/filter/limit-3329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1871 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3331 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3330 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3330 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1872 - inet/filter/limit-3330 -m limit --limit 1/second -j LOG - inet/filter/limit-3330 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1872 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1872 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3330 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3330 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1872 - inet6/filter/limit-3330 -m limit --limit 1/second -j LOG - inet6/filter/limit-3330 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1872 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3332 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3331 - inet/filter/limit-3331 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1873 - inet/filter/limit-3331 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1873 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1873 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3331 - inet6/filter/limit-3331 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1873 - inet6/filter/limit-3331 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1873 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3333 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3332 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3332 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1874 - inet/filter/limit-3332 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3332 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3332 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1874 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1874 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3332 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3332 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1874 - inet6/filter/limit-3332 -j TEE --gateway fc00::2 - inet6/filter/limit-3332 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1874 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3334 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3333 - inet/filter/limit-3333 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1875 - inet/filter/limit-3333 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3333 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1875 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1875 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3333 - inet6/filter/limit-3333 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1875 - inet6/filter/limit-3333 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-1875 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3335 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3334 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3334 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1876 - inet/filter/limit-3334 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1876 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1876 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3334 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3334 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1876 - inet6/filter/limit-3334 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1876 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3336 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3335 - inet/filter/limit-3335 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1877 - inet/filter/limit-3335 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-1877 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1877 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3335 - inet6/filter/limit-3335 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1877 - inet6/filter/limit-3335 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1877 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3337 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3336 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3336 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1878 - inet/filter/limit-3336 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3336 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1878 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1878 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3336 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3336 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1878 - inet6/filter/limit-3336 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1878 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3338 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3337 - inet/filter/limit-3337 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1879 - inet/filter/limit-3337 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1879 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1879 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3337 - inet6/filter/limit-3337 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1879 - inet6/filter/logdrop-1879 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3339 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3338 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3338 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1880 - inet/filter/limit-3338 -j ACCEPT - inet/filter/logdrop-1880 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1880 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3338 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3338 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1880 - inet6/filter/limit-3338 -j ACCEPT - inet6/filter/logdrop-1880 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3340 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1881 - inet/filter/logdrop-1881 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1881 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1881 - inet6/filter/logdrop-1881 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3341 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3340 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3340 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1882 - inet/filter/limit-3340 -m limit --limit 1/second -j LOG - inet/filter/limit-3340 -j ACCEPT - inet/filter/logdrop-1882 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1882 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3340 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3340 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1882 - inet6/filter/limit-3340 -m limit --limit 1/second -j LOG - inet6/filter/limit-3340 -j ACCEPT - inet6/filter/logdrop-1882 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3342 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3341 - inet/filter/limit-3341 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1883 - inet/filter/limit-3341 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1883 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1883 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3341 - inet6/filter/limit-3341 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1883 - inet6/filter/limit-3341 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1883 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3343 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3342 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3342 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1884 - inet/filter/limit-3342 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3342 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3342 -j ACCEPT - inet/filter/logdrop-1884 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1884 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3342 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3342 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1884 - inet6/filter/limit-3342 -j TEE --gateway fc00::2 - inet6/filter/limit-3342 -j ACCEPT - inet6/filter/logdrop-1884 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3344 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3343 - inet/filter/limit-3343 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1885 - inet/filter/limit-3343 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3343 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1885 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1885 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3343 - inet6/filter/limit-3343 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1885 - inet6/filter/limit-3343 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1885 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3345 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3344 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3344 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1886 - inet/filter/limit-3344 -j ACCEPT - inet/filter/logdrop-1886 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1886 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3344 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3344 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1886 - inet6/filter/limit-3344 -j ACCEPT - inet6/filter/logdrop-1886 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3346 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1887 - inet/filter/logdrop-1887 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1887 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1887 - inet6/filter/logdrop-1887 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3347 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3346 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3346 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1888 - inet/filter/limit-3346 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3346 -j ACCEPT - inet/filter/logdrop-1888 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1888 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3346 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3346 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1888 - inet6/filter/limit-3346 -j ACCEPT - inet6/filter/logdrop-1888 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3348 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3347 - inet/filter/limit-3347 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1889 - inet/filter/limit-3347 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1889 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1889 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3347 - inet6/filter/limit-3347 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1889 - inet6/filter/logdrop-1889 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3349 {"flow-limit":{"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3348 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3348 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1890 - inet/filter/limit-3348 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1890 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1890 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3348 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3348 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1890 - inet6/filter/limit-3348 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1890 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3350 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3349 - inet/filter/limit-3349 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1891 - inet/filter/limit-3349 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-1891 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1891 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3349 - inet6/filter/limit-3349 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1891 - inet6/filter/limit-3349 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-1891 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3351 {"flow-limit":{"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3350 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3350 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1892 - inet/filter/limit-3350 -m limit --limit 1/second -j LOG - inet/filter/limit-3350 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1892 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1892 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3350 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3350 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1892 - inet6/filter/limit-3350 -m limit --limit 1/second -j LOG - inet6/filter/limit-3350 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1892 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3352 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3351 - inet/filter/limit-3351 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1893 - inet/filter/limit-3351 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1893 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1893 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3351 - inet6/filter/limit-3351 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1893 - inet6/filter/limit-3351 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1893 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3353 {"flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3352 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3352 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1894 - inet/filter/limit-3352 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3352 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3352 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1894 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1894 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3352 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3352 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1894 - inet6/filter/limit-3352 -j TEE --gateway fc00::2 - inet6/filter/limit-3352 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1894 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3354 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3353 - inet/filter/limit-3353 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1895 - inet/filter/limit-3353 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3353 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1895 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1895 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3353 - inet6/filter/limit-3353 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1895 - inet6/filter/limit-3353 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-1895 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3355 {"flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3354 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3354 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1896 - inet/filter/limit-3354 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1896 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1896 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3354 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3354 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1896 - inet6/filter/limit-3354 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1896 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3356 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3355 - inet/filter/limit-3355 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1897 - inet/filter/limit-3355 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-1897 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1897 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3355 - inet6/filter/limit-3355 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1897 - inet6/filter/limit-3355 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-1897 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3357 {"flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3356 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3356 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1898 - inet/filter/limit-3356 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3356 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1898 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1898 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3356 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3356 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1898 - inet6/filter/limit-3356 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1898 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3358 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3357 - inet/filter/limit-3357 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1899 - inet/filter/limit-3357 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1899 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1899 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3357 - inet6/filter/limit-3357 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1899 - inet6/filter/logdrop-1899 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3359 {"flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3358 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3358 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1900 - inet/filter/limit-3358 -j ACCEPT - inet/filter/logdrop-1900 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1900 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3358 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3358 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1900 - inet6/filter/limit-3358 -j ACCEPT - inet6/filter/logdrop-1900 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3360 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1901 - inet/filter/logdrop-1901 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1901 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1901 - inet6/filter/logdrop-1901 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3361 {"flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3360 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3360 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1902 - inet/filter/limit-3360 -m limit --limit 1/second -j LOG - inet/filter/limit-3360 -j ACCEPT - inet/filter/logdrop-1902 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1902 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3360 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3360 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1902 - inet6/filter/limit-3360 -m limit --limit 1/second -j LOG - inet6/filter/limit-3360 -j ACCEPT - inet6/filter/logdrop-1902 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3362 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3361 - inet/filter/limit-3361 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1903 - inet/filter/limit-3361 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1903 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1903 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3361 - inet6/filter/limit-3361 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1903 - inet6/filter/limit-3361 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1903 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3363 {"flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3362 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3362 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1904 - inet/filter/limit-3362 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3362 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3362 -j ACCEPT - inet/filter/logdrop-1904 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1904 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3362 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3362 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1904 - inet6/filter/limit-3362 -j TEE --gateway fc00::2 - inet6/filter/limit-3362 -j ACCEPT - inet6/filter/logdrop-1904 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3364 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3363 - inet/filter/limit-3363 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1905 - inet/filter/limit-3363 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3363 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1905 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1905 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3363 - inet6/filter/limit-3363 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1905 - inet6/filter/limit-3363 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1905 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3365 {"flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3364 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3364 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1906 - inet/filter/limit-3364 -j ACCEPT - inet/filter/logdrop-1906 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1906 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3364 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3364 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1906 - inet6/filter/limit-3364 -j ACCEPT - inet6/filter/logdrop-1906 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3366 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1907 - inet/filter/logdrop-1907 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1907 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1907 - inet6/filter/logdrop-1907 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3367 {"flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3366 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3366 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1908 - inet/filter/limit-3366 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3366 -j ACCEPT - inet/filter/logdrop-1908 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1908 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3366 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3366 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1908 - inet6/filter/limit-3366 -j ACCEPT - inet6/filter/logdrop-1908 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3368 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3367 - inet/filter/limit-3367 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1909 - inet/filter/limit-3367 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1909 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1909 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3367 - inet6/filter/limit-3367 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1909 - inet6/filter/logdrop-1909 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3369 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3368 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3368 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1910 - inet/filter/limit-3368 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1910 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1910 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3368 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3368 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1910 - inet6/filter/limit-3368 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1910 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3370 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3369 - inet/filter/limit-3369 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1911 - inet/filter/limit-3369 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-1911 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1911 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3369 - inet6/filter/limit-3369 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1911 - inet6/filter/limit-3369 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-1911 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3371 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3370 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3370 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1912 - inet/filter/limit-3370 -m limit --limit 1/second -j LOG - inet/filter/limit-3370 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1912 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1912 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3370 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3370 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1912 - inet6/filter/limit-3370 -m limit --limit 1/second -j LOG - inet6/filter/limit-3370 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1912 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3372 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3371 - inet/filter/limit-3371 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1913 - inet/filter/limit-3371 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1913 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1913 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3371 - inet6/filter/limit-3371 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1913 - inet6/filter/limit-3371 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1913 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3373 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3372 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3372 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1914 - inet/filter/limit-3372 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3372 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3372 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1914 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1914 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3372 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3372 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1914 - inet6/filter/limit-3372 -j TEE --gateway fc00::2 - inet6/filter/limit-3372 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1914 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3374 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3373 - inet/filter/limit-3373 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1915 - inet/filter/limit-3373 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3373 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1915 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1915 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3373 - inet6/filter/limit-3373 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1915 - inet6/filter/limit-3373 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-1915 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3375 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3374 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3374 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1916 - inet/filter/limit-3374 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1916 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1916 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3374 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3374 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1916 - inet6/filter/limit-3374 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1916 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3376 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3375 - inet/filter/limit-3375 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1917 - inet/filter/limit-3375 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-1917 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1917 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3375 - inet6/filter/limit-3375 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1917 - inet6/filter/limit-3375 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-1917 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3377 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3376 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3376 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1918 - inet/filter/limit-3376 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3376 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1918 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1918 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3376 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3376 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1918 - inet6/filter/limit-3376 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1918 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3378 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3377 - inet/filter/limit-3377 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1919 - inet/filter/limit-3377 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1919 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1919 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3377 - inet6/filter/limit-3377 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1919 - inet6/filter/logdrop-1919 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3379 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3378 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3378 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1920 - inet/filter/limit-3378 -j ACCEPT - inet/filter/logdrop-1920 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1920 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3378 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3378 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1920 - inet6/filter/limit-3378 -j ACCEPT - inet6/filter/logdrop-1920 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3380 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1921 - inet/filter/logdrop-1921 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1921 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1921 - inet6/filter/logdrop-1921 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3381 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3380 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3380 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1922 - inet/filter/limit-3380 -m limit --limit 1/second -j LOG - inet/filter/limit-3380 -j ACCEPT - inet/filter/logdrop-1922 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1922 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3380 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3380 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1922 - inet6/filter/limit-3380 -m limit --limit 1/second -j LOG - inet6/filter/limit-3380 -j ACCEPT - inet6/filter/logdrop-1922 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3382 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3381 - inet/filter/limit-3381 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1923 - inet/filter/limit-3381 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1923 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1923 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3381 - inet6/filter/limit-3381 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1923 - inet6/filter/limit-3381 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1923 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3383 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3382 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3382 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1924 - inet/filter/limit-3382 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3382 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3382 -j ACCEPT - inet/filter/logdrop-1924 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1924 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3382 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3382 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1924 - inet6/filter/limit-3382 -j TEE --gateway fc00::2 - inet6/filter/limit-3382 -j ACCEPT - inet6/filter/logdrop-1924 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3384 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3383 - inet/filter/limit-3383 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1925 - inet/filter/limit-3383 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3383 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1925 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1925 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3383 - inet6/filter/limit-3383 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1925 - inet6/filter/limit-3383 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1925 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3385 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3384 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3384 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1926 - inet/filter/limit-3384 -j ACCEPT - inet/filter/logdrop-1926 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1926 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3384 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3384 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1926 - inet6/filter/limit-3384 -j ACCEPT - inet6/filter/logdrop-1926 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3386 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1927 - inet/filter/logdrop-1927 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1927 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1927 - inet6/filter/logdrop-1927 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3387 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3386 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3386 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1928 - inet/filter/limit-3386 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3386 -j ACCEPT - inet/filter/logdrop-1928 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1928 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3386 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3386 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1928 - inet6/filter/limit-3386 -j ACCEPT - inet6/filter/logdrop-1928 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3388 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3387 - inet/filter/limit-3387 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1929 - inet/filter/limit-3387 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1929 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1929 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3387 - inet6/filter/limit-3387 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1929 - inet6/filter/logdrop-1929 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3389 {"flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3388 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3388 -m recent --name limit-3388 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3388 -m recent --name limit-3388 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3388 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3388 -m recent --name limit-3388 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3388 -m recent --name limit-3388 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3390 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3389 - inet/filter/limit-3389 -m recent --name limit-3389 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3389 -m recent --name limit-3389 --rsource --mask 255.255.255.255 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3389 - inet6/filter/limit-3389 -m recent --name limit-3389 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3389 -m recent --name limit-3389 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3391 {"flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3390 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3390 -m recent --name limit-3390 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3390 -m limit --limit 1/second -j LOG - inet/filter/limit-3390 -m recent --name limit-3390 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3390 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3390 -m recent --name limit-3390 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3390 -m limit --limit 1/second -j LOG - inet6/filter/limit-3390 -m recent --name limit-3390 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3392 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3391 - inet/filter/limit-3391 -m recent --name limit-3391 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3391 -m recent --name limit-3391 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3391 - inet6/filter/limit-3391 -m recent --name limit-3391 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3391 -m recent --name limit-3391 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3393 {"flow-limit":{"interval":5,"log":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3392 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3392 -m recent --name limit-3392 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3392 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3392 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3392 -m recent --name limit-3392 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3392 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3392 -m recent --name limit-3392 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3392 -j TEE --gateway fc00::2 - inet6/filter/limit-3392 -m recent --name limit-3392 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3394 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3393 - inet/filter/limit-3393 -m recent --name limit-3393 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3393 -m recent --name limit-3393 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3393 -m recent --name limit-3393 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3393 - inet6/filter/limit-3393 -m recent --name limit-3393 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3393 -m recent --name limit-3393 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3395 {"flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3394 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3394 -m recent --name limit-3394 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3394 -m recent --name limit-3394 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3394 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3394 -m recent --name limit-3394 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3394 -m recent --name limit-3394 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3396 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3395 - inet/filter/limit-3395 -m recent --name limit-3395 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3395 -m recent --name limit-3395 --rsource --mask 255.255.255.255 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3395 - inet6/filter/limit-3395 -m recent --name limit-3395 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3395 -m recent --name limit-3395 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3397 {"flow-limit":{"interval":5,"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3396 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3396 -m recent --name limit-3396 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3396 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3396 -m recent --name limit-3396 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3396 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3396 -m recent --name limit-3396 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3396 -m recent --name limit-3396 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3398 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3397 - inet/filter/limit-3397 -m recent --name limit-3397 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3397 -m recent --name limit-3397 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3397 - inet6/filter/limit-3397 -m recent --name limit-3397 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3399 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3398 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3398 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3398 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3398 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3398 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3398 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3400 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3399 - inet/filter/limit-3399 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3399 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3399 - inet6/filter/limit-3399 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3399 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3401 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3400 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3400 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3400 -m limit --limit 1/second -j LOG - inet/filter/limit-3400 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3400 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3400 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3400 -m limit --limit 1/second -j LOG - inet6/filter/limit-3400 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3402 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3401 - inet/filter/limit-3401 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3401 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3401 - inet6/filter/limit-3401 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3401 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3403 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3402 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3402 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3402 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3402 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3402 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3402 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3402 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3402 -j TEE --gateway fc00::2 - inet6/filter/limit-3402 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3404 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3403 - inet/filter/limit-3403 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3403 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3403 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3403 - inet6/filter/limit-3403 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3403 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3405 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3404 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3404 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3404 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3404 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3404 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3404 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3406 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3405 - inet/filter/limit-3405 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3405 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3405 - inet6/filter/limit-3405 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3405 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3407 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3406 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3406 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3406 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3406 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3406 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3406 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3406 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3408 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3407 - inet/filter/limit-3407 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3407 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3407 - inet6/filter/limit-3407 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3409 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3408 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3408 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3408 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3408 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3408 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3408 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3410 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3411 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3410 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3410 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3410 -m limit --limit 1/second -j LOG - inet/filter/limit-3410 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3410 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3410 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3410 -m limit --limit 1/second -j LOG - inet6/filter/limit-3410 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3412 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3411 - inet/filter/limit-3411 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3411 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3411 - inet6/filter/limit-3411 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3411 -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3413 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3412 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3412 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3412 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3412 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3412 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3412 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3412 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3412 -j TEE --gateway fc00::2 - inet6/filter/limit-3412 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3414 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3413 - inet/filter/limit-3413 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3413 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3413 -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3413 - inet6/filter/limit-3413 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3413 -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3415 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3414 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3414 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3414 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3414 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3414 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3414 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3416 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3417 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3416 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3416 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3416 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3416 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3416 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3416 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3416 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3418 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3417 - inet/filter/limit-3417 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3417 -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3417 - inet6/filter/limit-3417 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3419 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3418 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3418 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3418 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3418 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3418 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3418 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3420 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3419 - inet/filter/limit-3419 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3419 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3419 - inet6/filter/limit-3419 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3419 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3421 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3420 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3420 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3420 -m limit --limit 1/second -j LOG - inet/filter/limit-3420 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3420 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3420 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3420 -m limit --limit 1/second -j LOG - inet6/filter/limit-3420 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3422 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3421 - inet/filter/limit-3421 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3421 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3421 - inet6/filter/limit-3421 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3421 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3423 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3422 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3422 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3422 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3422 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3422 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3422 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3422 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3422 -j TEE --gateway fc00::2 - inet6/filter/limit-3422 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3424 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3423 - inet/filter/limit-3423 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3423 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3423 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3423 - inet6/filter/limit-3423 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3423 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3425 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3424 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3424 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3424 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3424 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3424 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3424 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3426 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3425 - inet/filter/limit-3425 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3425 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3425 - inet6/filter/limit-3425 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3425 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3427 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3426 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3426 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3426 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3426 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3426 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3426 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3426 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3428 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3427 - inet/filter/limit-3427 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3427 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3427 - inet6/filter/limit-3427 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3429 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3428 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3428 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3428 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3428 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3428 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3428 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3430 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3431 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3430 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3430 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3430 -m limit --limit 1/second -j LOG - inet/filter/limit-3430 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3430 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3430 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3430 -m limit --limit 1/second -j LOG - inet6/filter/limit-3430 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3432 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3431 - inet/filter/limit-3431 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3431 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3431 - inet6/filter/limit-3431 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3431 -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3433 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3432 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3432 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3432 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3432 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3432 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3432 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3432 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3432 -j TEE --gateway fc00::2 - inet6/filter/limit-3432 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3434 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3433 - inet/filter/limit-3433 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3433 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3433 -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3433 - inet6/filter/limit-3433 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3433 -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3435 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3434 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3434 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3434 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3434 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3434 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3434 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3436 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3437 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3436 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3436 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3436 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3436 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3436 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3436 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3438 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3437 - inet/filter/limit-3437 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3437 -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3437 - inet6/filter/limit-3437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3439 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3438 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3438 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3438 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3438 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3438 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3438 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3440 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3439 - inet/filter/limit-3439 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3439 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3439 - inet6/filter/limit-3439 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3439 -m recent --name user:C --rsource --mask fe00:: --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3441 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3440 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3440 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3440 -m limit --limit 1/second -j LOG - inet/filter/limit-3440 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3440 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3440 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3440 -m limit --limit 1/second -j LOG - inet6/filter/limit-3440 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3442 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3441 - inet/filter/limit-3441 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3441 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3441 - inet6/filter/limit-3441 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3441 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3443 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3442 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3442 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3442 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3442 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3442 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3442 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3442 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3442 -j TEE --gateway fc00::2 - inet6/filter/limit-3442 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3444 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3443 - inet/filter/limit-3443 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3443 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3443 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3443 - inet6/filter/limit-3443 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3443 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3445 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3444 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3444 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3444 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3444 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3444 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3444 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3446 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3445 - inet/filter/limit-3445 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3445 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3445 - inet6/filter/limit-3445 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3445 -m recent --name user:C --rsource --mask fe00:: --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3447 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3446 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3446 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3446 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3446 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3446 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3446 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3446 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3448 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3447 - inet/filter/limit-3447 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3447 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3447 - inet6/filter/limit-3447 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3449 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3448 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3448 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3448 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3448 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3448 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3448 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3450 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3451 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3450 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3450 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3450 -m limit --limit 1/second -j LOG - inet/filter/limit-3450 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3450 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3450 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3450 -m limit --limit 1/second -j LOG - inet6/filter/limit-3450 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3452 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3451 - inet/filter/limit-3451 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3451 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3451 - inet6/filter/limit-3451 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3451 -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3453 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3452 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3452 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3452 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3452 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3452 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3452 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3452 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3452 -j TEE --gateway fc00::2 - inet6/filter/limit-3452 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3454 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3453 - inet/filter/limit-3453 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3453 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3453 -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3453 - inet6/filter/limit-3453 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3453 -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3455 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3454 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3454 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3454 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3454 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3454 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3454 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3456 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3457 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3456 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3456 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3456 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3456 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3456 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3456 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3456 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3458 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3457 - inet/filter/limit-3457 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3457 -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3457 - inet6/filter/limit-3457 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3459 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3458 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3458 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3458 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3458 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3458 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3458 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3460 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3459 - inet/filter/limit-3459 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3459 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3459 - inet6/filter/limit-3459 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3459 -m recent --name user:C --rdest --mask fe00:: --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3461 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3460 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3460 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3460 -m limit --limit 1/second -j LOG - inet/filter/limit-3460 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3460 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3460 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3460 -m limit --limit 1/second -j LOG - inet6/filter/limit-3460 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3462 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3461 - inet/filter/limit-3461 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3461 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3461 - inet6/filter/limit-3461 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3461 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3463 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3462 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3462 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3462 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3462 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3462 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3462 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3462 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3462 -j TEE --gateway fc00::2 - inet6/filter/limit-3462 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3464 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3463 - inet/filter/limit-3463 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3463 - inet6/filter/limit-3463 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3463 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3465 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3464 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3464 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3464 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3464 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3464 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3464 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3466 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3465 - inet/filter/limit-3465 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3465 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3465 - inet6/filter/limit-3465 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3465 -m recent --name user:C --rdest --mask fe00:: --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3467 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3466 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3466 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3466 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3466 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3466 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3466 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3466 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3468 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3467 - inet/filter/limit-3467 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3467 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3467 - inet6/filter/limit-3467 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3469 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3468 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3468 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3468 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3468 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3468 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3468 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3470 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3471 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3470 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3470 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3470 -m limit --limit 1/second -j LOG - inet/filter/limit-3470 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3470 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3470 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3470 -m limit --limit 1/second -j LOG - inet6/filter/limit-3470 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3472 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3471 - inet/filter/limit-3471 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3471 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3471 - inet6/filter/limit-3471 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3471 -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3473 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3472 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3472 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3472 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3472 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3472 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3472 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3472 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3472 -j TEE --gateway fc00::2 - inet6/filter/limit-3472 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3474 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3473 - inet/filter/limit-3473 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3473 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3473 -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3473 - inet6/filter/limit-3473 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3473 -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3475 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3474 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3474 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3474 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3474 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3474 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3474 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3476 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3477 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3476 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3476 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3476 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3476 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3476 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3476 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3476 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3478 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3477 - inet/filter/limit-3477 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3477 -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3477 - inet6/filter/limit-3477 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3479 {"flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3478 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3478 -m recent --name limit-3478 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1930 - inet/filter/limit-3478 -m recent --name limit-3478 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1930 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1930 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3478 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3478 -m recent --name limit-3478 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1930 - inet6/filter/limit-3478 -m recent --name limit-3478 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1930 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1930 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3480 {"action":"pass","flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3479 - inet/filter/limit-3479 -m recent --name limit-3479 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1931 - inet/filter/limit-3479 -m recent --name limit-3479 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1931 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1931 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3479 - inet6/filter/limit-3479 -m recent --name limit-3479 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1931 - inet6/filter/limit-3479 -m recent --name limit-3479 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1931 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1931 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3481 {"flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3480 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3480 -m recent --name limit-3480 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1932 - inet/filter/limit-3480 -m limit --limit 1/second -j LOG - inet/filter/limit-3480 -m recent --name limit-3480 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1932 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1932 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3480 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3480 -m recent --name limit-3480 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1932 - inet6/filter/limit-3480 -m limit --limit 1/second -j LOG - inet6/filter/limit-3480 -m recent --name limit-3480 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1932 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1932 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3482 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3481 - inet/filter/limit-3481 -m recent --name limit-3481 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1933 - inet/filter/limit-3481 -m recent --name limit-3481 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1933 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1933 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3481 - inet6/filter/limit-3481 -m recent --name limit-3481 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1933 - inet6/filter/limit-3481 -m recent --name limit-3481 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1933 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1933 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3483 {"flow-limit":{"interval":5},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3482 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3482 -m recent --name limit-3482 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1934 - inet/filter/limit-3482 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3482 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3482 -m recent --name limit-3482 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1934 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1934 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3482 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3482 -m recent --name limit-3482 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1934 - inet6/filter/limit-3482 -j TEE --gateway fc00::2 - inet6/filter/limit-3482 -m recent --name limit-3482 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1934 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1934 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3484 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3483 - inet/filter/limit-3483 -m recent --name limit-3483 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1935 - inet/filter/limit-3483 -m recent --name limit-3483 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3483 -m recent --name limit-3483 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1935 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1935 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3483 - inet6/filter/limit-3483 -m recent --name limit-3483 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1935 - inet6/filter/limit-3483 -m recent --name limit-3483 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-1935 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1935 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3485 {"flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3484 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3484 -m recent --name limit-3484 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1936 - inet/filter/limit-3484 -m recent --name limit-3484 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1936 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1936 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3484 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3484 -m recent --name limit-3484 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1936 - inet6/filter/limit-3484 -m recent --name limit-3484 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1936 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1936 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3486 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3485 - inet/filter/limit-3485 -m recent --name limit-3485 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1937 - inet/filter/limit-3485 -m recent --name limit-3485 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1937 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1937 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3485 - inet6/filter/limit-3485 -m recent --name limit-3485 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1937 - inet6/filter/limit-3485 -m recent --name limit-3485 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1937 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1937 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3487 {"flow-limit":{"interval":5},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3486 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3486 -m recent --name limit-3486 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1938 - inet/filter/limit-3486 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3486 -m recent --name limit-3486 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1938 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1938 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3486 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3486 -m recent --name limit-3486 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1938 - inet6/filter/limit-3486 -m recent --name limit-3486 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1938 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1938 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3488 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3487 - inet/filter/limit-3487 -m recent --name limit-3487 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1939 - inet/filter/limit-3487 -m recent --name limit-3487 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1939 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1939 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3487 - inet6/filter/limit-3487 -m recent --name limit-3487 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1939 - inet6/filter/logdrop-1939 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1939 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3489 {"flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3488 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3488 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1940 - inet/filter/limit-3488 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1940 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1940 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3488 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1940 - inet6/filter/limit-3488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1940 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1940 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3490 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3489 - inet/filter/limit-3489 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1941 - inet/filter/limit-3489 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1941 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1941 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3489 - inet6/filter/limit-3489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1941 - inet6/filter/limit-3489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1941 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1941 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3491 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3490 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3490 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1942 - inet/filter/limit-3490 -m limit --limit 1/second -j LOG - inet/filter/limit-3490 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1942 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1942 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3490 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3490 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1942 - inet6/filter/limit-3490 -m limit --limit 1/second -j LOG - inet6/filter/limit-3490 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1942 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1942 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3492 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3491 - inet/filter/limit-3491 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1943 - inet/filter/limit-3491 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1943 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1943 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3491 - inet6/filter/limit-3491 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1943 - inet6/filter/limit-3491 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1943 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1943 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3493 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3492 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3492 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1944 - inet/filter/limit-3492 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3492 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3492 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1944 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1944 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3492 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3492 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1944 - inet6/filter/limit-3492 -j TEE --gateway fc00::2 - inet6/filter/limit-3492 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1944 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1944 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3494 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3493 - inet/filter/limit-3493 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1945 - inet/filter/limit-3493 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3493 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1945 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1945 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3493 - inet6/filter/limit-3493 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1945 - inet6/filter/limit-3493 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-1945 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1945 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3495 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3494 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3494 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1946 - inet/filter/limit-3494 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1946 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1946 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3494 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3494 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1946 - inet6/filter/limit-3494 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1946 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1946 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3496 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3495 - inet/filter/limit-3495 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1947 - inet/filter/limit-3495 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1947 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1947 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3495 - inet6/filter/limit-3495 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1947 - inet6/filter/limit-3495 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1947 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1947 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3497 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3496 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3496 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1948 - inet/filter/limit-3496 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3496 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1948 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1948 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3496 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3496 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1948 - inet6/filter/limit-3496 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1948 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1948 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3498 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3497 - inet/filter/limit-3497 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1949 - inet/filter/limit-3497 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1949 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1949 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3497 - inet6/filter/limit-3497 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1949 - inet6/filter/logdrop-1949 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1949 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3499 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3498 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3498 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1950 - inet/filter/limit-3498 -j ACCEPT - inet/filter/logdrop-1950 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1950 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3498 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3498 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1950 - inet6/filter/limit-3498 -j ACCEPT - inet6/filter/logdrop-1950 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1950 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3500 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1951 - inet/filter/logdrop-1951 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1951 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1951 - inet6/filter/logdrop-1951 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1951 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3501 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3500 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3500 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1952 - inet/filter/limit-3500 -m limit --limit 1/second -j LOG - inet/filter/limit-3500 -j ACCEPT - inet/filter/logdrop-1952 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1952 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3500 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3500 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1952 - inet6/filter/limit-3500 -m limit --limit 1/second -j LOG - inet6/filter/limit-3500 -j ACCEPT - inet6/filter/logdrop-1952 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1952 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3502 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3501 - inet/filter/limit-3501 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1953 - inet/filter/limit-3501 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1953 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1953 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3501 - inet6/filter/limit-3501 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1953 - inet6/filter/limit-3501 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1953 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1953 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3503 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3502 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3502 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1954 - inet/filter/limit-3502 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3502 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3502 -j ACCEPT - inet/filter/logdrop-1954 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1954 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3502 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3502 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1954 - inet6/filter/limit-3502 -j TEE --gateway fc00::2 - inet6/filter/limit-3502 -j ACCEPT - inet6/filter/logdrop-1954 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1954 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3504 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3503 - inet/filter/limit-3503 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1955 - inet/filter/limit-3503 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3503 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1955 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1955 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3503 - inet6/filter/limit-3503 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1955 - inet6/filter/limit-3503 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1955 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1955 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3505 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3504 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3504 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1956 - inet/filter/limit-3504 -j ACCEPT - inet/filter/logdrop-1956 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1956 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3504 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3504 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1956 - inet6/filter/limit-3504 -j ACCEPT - inet6/filter/logdrop-1956 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1956 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3506 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1957 - inet/filter/logdrop-1957 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1957 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1957 - inet6/filter/logdrop-1957 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1957 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3507 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3506 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3506 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1958 - inet/filter/limit-3506 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3506 -j ACCEPT - inet/filter/logdrop-1958 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1958 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3506 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3506 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1958 - inet6/filter/limit-3506 -j ACCEPT - inet6/filter/logdrop-1958 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1958 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3508 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3507 - inet/filter/limit-3507 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1959 - inet/filter/limit-3507 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1959 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1959 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3507 - inet6/filter/limit-3507 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1959 - inet6/filter/logdrop-1959 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1959 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3509 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3508 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3508 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1960 - inet/filter/limit-3508 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1960 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1960 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3508 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1960 - inet6/filter/limit-3508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1960 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1960 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3510 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3509 - inet/filter/limit-3509 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1961 - inet/filter/limit-3509 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-1961 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1961 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3509 - inet6/filter/limit-3509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1961 - inet6/filter/limit-3509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1961 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1961 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3511 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3510 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3510 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1962 - inet/filter/limit-3510 -m limit --limit 1/second -j LOG - inet/filter/limit-3510 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1962 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1962 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3510 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3510 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1962 - inet6/filter/limit-3510 -m limit --limit 1/second -j LOG - inet6/filter/limit-3510 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1962 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1962 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3512 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3511 - inet/filter/limit-3511 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1963 - inet/filter/limit-3511 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1963 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1963 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3511 - inet6/filter/limit-3511 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1963 - inet6/filter/limit-3511 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1963 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1963 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3513 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3512 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3512 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1964 - inet/filter/limit-3512 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3512 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3512 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1964 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1964 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3512 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3512 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1964 - inet6/filter/limit-3512 -j TEE --gateway fc00::2 - inet6/filter/limit-3512 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1964 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1964 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3514 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3513 - inet/filter/limit-3513 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1965 - inet/filter/limit-3513 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3513 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1965 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1965 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3513 - inet6/filter/limit-3513 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1965 - inet6/filter/limit-3513 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-1965 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1965 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3515 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3514 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3514 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1966 - inet/filter/limit-3514 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1966 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1966 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3514 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3514 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1966 - inet6/filter/limit-3514 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1966 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1966 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3516 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3515 - inet/filter/limit-3515 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1967 - inet/filter/limit-3515 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-1967 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1967 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3515 - inet6/filter/limit-3515 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1967 - inet6/filter/limit-3515 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1967 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1967 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3517 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3516 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3516 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1968 - inet/filter/limit-3516 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3516 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1968 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1968 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3516 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3516 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1968 - inet6/filter/limit-3516 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1968 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1968 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3518 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3517 - inet/filter/limit-3517 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1969 - inet/filter/limit-3517 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1969 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1969 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3517 - inet6/filter/limit-3517 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1969 - inet6/filter/logdrop-1969 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1969 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3519 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3518 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3518 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1970 - inet/filter/limit-3518 -j ACCEPT - inet/filter/logdrop-1970 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1970 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3518 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3518 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1970 - inet6/filter/limit-3518 -j ACCEPT - inet6/filter/logdrop-1970 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1970 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3520 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1971 - inet/filter/logdrop-1971 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1971 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1971 - inet6/filter/logdrop-1971 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1971 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3521 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3520 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3520 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1972 - inet/filter/limit-3520 -m limit --limit 1/second -j LOG - inet/filter/limit-3520 -j ACCEPT - inet/filter/logdrop-1972 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1972 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3520 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3520 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1972 - inet6/filter/limit-3520 -m limit --limit 1/second -j LOG - inet6/filter/limit-3520 -j ACCEPT - inet6/filter/logdrop-1972 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1972 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3522 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3521 - inet/filter/limit-3521 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1973 - inet/filter/limit-3521 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1973 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1973 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3521 - inet6/filter/limit-3521 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1973 - inet6/filter/limit-3521 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1973 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1973 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3523 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3522 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3522 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1974 - inet/filter/limit-3522 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3522 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3522 -j ACCEPT - inet/filter/logdrop-1974 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1974 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3522 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3522 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1974 - inet6/filter/limit-3522 -j TEE --gateway fc00::2 - inet6/filter/limit-3522 -j ACCEPT - inet6/filter/logdrop-1974 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1974 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3524 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3523 - inet/filter/limit-3523 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1975 - inet/filter/limit-3523 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3523 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1975 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1975 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3523 - inet6/filter/limit-3523 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1975 - inet6/filter/limit-3523 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1975 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1975 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3525 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3524 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3524 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1976 - inet/filter/limit-3524 -j ACCEPT - inet/filter/logdrop-1976 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1976 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3524 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3524 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1976 - inet6/filter/limit-3524 -j ACCEPT - inet6/filter/logdrop-1976 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1976 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3526 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1977 - inet/filter/logdrop-1977 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1977 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1977 - inet6/filter/logdrop-1977 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1977 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3527 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3526 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3526 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1978 - inet/filter/limit-3526 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3526 -j ACCEPT - inet/filter/logdrop-1978 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1978 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3526 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3526 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1978 - inet6/filter/limit-3526 -j ACCEPT - inet6/filter/logdrop-1978 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1978 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3528 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3527 - inet/filter/limit-3527 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1979 - inet/filter/limit-3527 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1979 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1979 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3527 - inet6/filter/limit-3527 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1979 - inet6/filter/logdrop-1979 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1979 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3529 {"flow-limit":{"interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3528 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3528 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1980 - inet/filter/limit-3528 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1980 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1980 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3528 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3528 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1980 - inet6/filter/limit-3528 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1980 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1980 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3530 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3529 - inet/filter/limit-3529 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1981 - inet/filter/limit-3529 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-1981 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1981 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3529 - inet6/filter/limit-3529 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1981 - inet6/filter/limit-3529 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-1981 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1981 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3531 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3530 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3530 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1982 - inet/filter/limit-3530 -m limit --limit 1/second -j LOG - inet/filter/limit-3530 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1982 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1982 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3530 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3530 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1982 - inet6/filter/limit-3530 -m limit --limit 1/second -j LOG - inet6/filter/limit-3530 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1982 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1982 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3532 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3531 - inet/filter/limit-3531 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1983 - inet/filter/limit-3531 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1983 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1983 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3531 - inet6/filter/limit-3531 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1983 - inet6/filter/limit-3531 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1983 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1983 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3533 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3532 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3532 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1984 - inet/filter/limit-3532 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3532 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3532 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1984 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1984 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3532 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3532 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1984 - inet6/filter/limit-3532 -j TEE --gateway fc00::2 - inet6/filter/limit-3532 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1984 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1984 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3534 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3533 - inet/filter/limit-3533 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1985 - inet/filter/limit-3533 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3533 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1985 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1985 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3533 - inet6/filter/limit-3533 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1985 - inet6/filter/limit-3533 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-1985 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1985 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3535 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3534 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3534 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1986 - inet/filter/limit-3534 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1986 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1986 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3534 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3534 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1986 - inet6/filter/limit-3534 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1986 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1986 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3536 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3535 - inet/filter/limit-3535 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1987 - inet/filter/limit-3535 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-1987 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1987 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3535 - inet6/filter/limit-3535 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1987 - inet6/filter/limit-3535 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-1987 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1987 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3537 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3536 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3536 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1988 - inet/filter/limit-3536 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3536 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1988 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1988 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3536 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3536 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1988 - inet6/filter/limit-3536 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1988 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1988 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3538 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3537 - inet/filter/limit-3537 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1989 - inet/filter/limit-3537 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1989 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1989 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3537 - inet6/filter/limit-3537 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1989 - inet6/filter/logdrop-1989 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1989 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3539 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3538 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3538 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1990 - inet/filter/limit-3538 -j ACCEPT - inet/filter/logdrop-1990 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1990 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3538 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3538 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1990 - inet6/filter/limit-3538 -j ACCEPT - inet6/filter/logdrop-1990 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1990 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3540 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1991 - inet/filter/logdrop-1991 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1991 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1991 - inet6/filter/logdrop-1991 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1991 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3541 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3540 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3540 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1992 - inet/filter/limit-3540 -m limit --limit 1/second -j LOG - inet/filter/limit-3540 -j ACCEPT - inet/filter/logdrop-1992 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1992 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3540 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3540 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1992 - inet6/filter/limit-3540 -m limit --limit 1/second -j LOG - inet6/filter/limit-3540 -j ACCEPT - inet6/filter/logdrop-1992 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1992 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3542 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3541 - inet/filter/limit-3541 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1993 - inet/filter/limit-3541 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1993 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1993 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3541 - inet6/filter/limit-3541 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1993 - inet6/filter/limit-3541 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1993 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1993 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3543 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3542 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3542 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1994 - inet/filter/limit-3542 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3542 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3542 -j ACCEPT - inet/filter/logdrop-1994 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1994 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3542 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3542 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1994 - inet6/filter/limit-3542 -j TEE --gateway fc00::2 - inet6/filter/limit-3542 -j ACCEPT - inet6/filter/logdrop-1994 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1994 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3544 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3543 - inet/filter/limit-3543 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1995 - inet/filter/limit-3543 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3543 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-1995 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1995 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3543 - inet6/filter/limit-3543 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1995 - inet6/filter/limit-3543 -j TEE --gateway fc00::2 - inet6/filter/logdrop-1995 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1995 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3545 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3544 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3544 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1996 - inet/filter/limit-3544 -j ACCEPT - inet/filter/logdrop-1996 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1996 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3544 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3544 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1996 - inet6/filter/limit-3544 -j ACCEPT - inet6/filter/logdrop-1996 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1996 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3546 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1997 - inet/filter/logdrop-1997 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1997 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1997 - inet6/filter/logdrop-1997 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1997 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3547 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3546 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3546 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1998 - inet/filter/limit-3546 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3546 -j ACCEPT - inet/filter/logdrop-1998 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1998 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3546 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3546 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1998 - inet6/filter/limit-3546 -j ACCEPT - inet6/filter/logdrop-1998 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1998 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3548 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3547 - inet/filter/limit-3547 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1999 - inet/filter/limit-3547 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1999 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1999 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3547 - inet6/filter/limit-3547 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1999 - inet6/filter/logdrop-1999 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1999 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3549 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3548 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3548 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2000 - inet/filter/limit-3548 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2000 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2000 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3548 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3548 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2000 - inet6/filter/limit-3548 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2000 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2000 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3550 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3549 - inet/filter/limit-3549 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2001 - inet/filter/limit-3549 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-2001 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2001 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3549 - inet6/filter/limit-3549 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2001 - inet6/filter/limit-3549 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-2001 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2001 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3551 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3550 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3550 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2002 - inet/filter/limit-3550 -m limit --limit 1/second -j LOG - inet/filter/limit-3550 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2002 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2002 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3550 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3550 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2002 - inet6/filter/limit-3550 -m limit --limit 1/second -j LOG - inet6/filter/limit-3550 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2002 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2002 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3552 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3551 - inet/filter/limit-3551 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2003 - inet/filter/limit-3551 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-2003 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2003 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3551 - inet6/filter/limit-3551 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2003 - inet6/filter/limit-3551 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2003 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2003 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3553 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3552 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3552 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2004 - inet/filter/limit-3552 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3552 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3552 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2004 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2004 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3552 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3552 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2004 - inet6/filter/limit-3552 -j TEE --gateway fc00::2 - inet6/filter/limit-3552 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2004 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2004 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3554 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3553 - inet/filter/limit-3553 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2005 - inet/filter/limit-3553 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3553 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2005 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2005 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3553 - inet6/filter/limit-3553 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2005 - inet6/filter/limit-3553 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-2005 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2005 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3555 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3554 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3554 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2006 - inet/filter/limit-3554 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2006 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2006 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3554 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3554 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2006 - inet6/filter/limit-3554 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2006 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2006 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3556 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3555 - inet/filter/limit-3555 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2007 - inet/filter/limit-3555 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-2007 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2007 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3555 - inet6/filter/limit-3555 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2007 - inet6/filter/limit-3555 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-2007 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2007 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3557 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3556 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3556 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2008 - inet/filter/limit-3556 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3556 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2008 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2008 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3556 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3556 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2008 - inet6/filter/limit-3556 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2008 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2008 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3558 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3557 - inet/filter/limit-3557 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2009 - inet/filter/limit-3557 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2009 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2009 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3557 - inet6/filter/limit-3557 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2009 - inet6/filter/logdrop-2009 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2009 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3559 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3558 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3558 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2010 - inet/filter/limit-3558 -j ACCEPT - inet/filter/logdrop-2010 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2010 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3558 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3558 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2010 - inet6/filter/limit-3558 -j ACCEPT - inet6/filter/logdrop-2010 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2010 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3560 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2011 - inet/filter/logdrop-2011 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2011 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2011 - inet6/filter/logdrop-2011 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2011 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3561 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3560 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3560 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2012 - inet/filter/limit-3560 -m limit --limit 1/second -j LOG - inet/filter/limit-3560 -j ACCEPT - inet/filter/logdrop-2012 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2012 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3560 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3560 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2012 - inet6/filter/limit-3560 -m limit --limit 1/second -j LOG - inet6/filter/limit-3560 -j ACCEPT - inet6/filter/logdrop-2012 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2012 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3562 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3561 - inet/filter/limit-3561 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2013 - inet/filter/limit-3561 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2013 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2013 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3561 - inet6/filter/limit-3561 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2013 - inet6/filter/limit-3561 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2013 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2013 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3563 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3562 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3562 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2014 - inet/filter/limit-3562 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3562 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3562 -j ACCEPT - inet/filter/logdrop-2014 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2014 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3562 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3562 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2014 - inet6/filter/limit-3562 -j TEE --gateway fc00::2 - inet6/filter/limit-3562 -j ACCEPT - inet6/filter/logdrop-2014 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2014 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3564 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3563 - inet/filter/limit-3563 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2015 - inet/filter/limit-3563 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3563 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2015 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2015 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3563 - inet6/filter/limit-3563 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2015 - inet6/filter/limit-3563 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2015 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2015 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3565 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3564 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3564 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2016 - inet/filter/limit-3564 -j ACCEPT - inet/filter/logdrop-2016 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2016 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3564 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3564 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2016 - inet6/filter/limit-3564 -j ACCEPT - inet6/filter/logdrop-2016 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2016 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3566 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2017 - inet/filter/logdrop-2017 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2017 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2017 - inet6/filter/logdrop-2017 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2017 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3567 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3566 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3566 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2018 - inet/filter/limit-3566 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3566 -j ACCEPT - inet/filter/logdrop-2018 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2018 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3566 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3566 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2018 - inet6/filter/limit-3566 -j ACCEPT - inet6/filter/logdrop-2018 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2018 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3568 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3567 - inet/filter/limit-3567 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2019 - inet/filter/limit-3567 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2019 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2019 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3567 - inet6/filter/limit-3567 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2019 - inet6/filter/logdrop-2019 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2019 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3569 {"flow-limit":{"interval":5,"log":"mirror"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3568 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3568 -m recent --name limit-3568 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2020 - inet/filter/limit-3568 -m recent --name limit-3568 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2020 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2020 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2020 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3568 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3568 -m recent --name limit-3568 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2020 - inet6/filter/limit-3568 -m recent --name limit-3568 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2020 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2020 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3570 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3569 - inet/filter/limit-3569 -m recent --name limit-3569 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2021 - inet/filter/limit-3569 -m recent --name limit-3569 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-2021 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2021 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2021 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3569 - inet6/filter/limit-3569 -m recent --name limit-3569 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2021 - inet6/filter/limit-3569 -m recent --name limit-3569 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-2021 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2021 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3571 {"flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3570 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3570 -m recent --name limit-3570 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2022 - inet/filter/limit-3570 -m limit --limit 1/second -j LOG - inet/filter/limit-3570 -m recent --name limit-3570 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2022 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2022 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2022 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3570 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3570 -m recent --name limit-3570 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2022 - inet6/filter/limit-3570 -m limit --limit 1/second -j LOG - inet6/filter/limit-3570 -m recent --name limit-3570 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2022 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2022 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3572 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3571 - inet/filter/limit-3571 -m recent --name limit-3571 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2023 - inet/filter/limit-3571 -m recent --name limit-3571 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-2023 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2023 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2023 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3571 - inet6/filter/limit-3571 -m recent --name limit-3571 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2023 - inet6/filter/limit-3571 -m recent --name limit-3571 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2023 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2023 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3573 {"flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3572 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3572 -m recent --name limit-3572 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2024 - inet/filter/limit-3572 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3572 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3572 -m recent --name limit-3572 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2024 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2024 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2024 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3572 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3572 -m recent --name limit-3572 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2024 - inet6/filter/limit-3572 -j TEE --gateway fc00::2 - inet6/filter/limit-3572 -m recent --name limit-3572 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2024 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2024 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3574 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3573 - inet/filter/limit-3573 -m recent --name limit-3573 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2025 - inet/filter/limit-3573 -m recent --name limit-3573 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3573 -m recent --name limit-3573 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2025 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2025 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2025 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3573 - inet6/filter/limit-3573 -m recent --name limit-3573 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2025 - inet6/filter/limit-3573 -m recent --name limit-3573 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-2025 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2025 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3575 {"flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3574 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3574 -m recent --name limit-3574 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2026 - inet/filter/limit-3574 -m recent --name limit-3574 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2026 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2026 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2026 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3574 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3574 -m recent --name limit-3574 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2026 - inet6/filter/limit-3574 -m recent --name limit-3574 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2026 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2026 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3576 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3575 - inet/filter/limit-3575 -m recent --name limit-3575 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2027 - inet/filter/limit-3575 -m recent --name limit-3575 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-2027 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2027 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2027 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3575 - inet6/filter/limit-3575 -m recent --name limit-3575 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2027 - inet6/filter/limit-3575 -m recent --name limit-3575 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-2027 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2027 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3577 {"flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3576 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3576 -m recent --name limit-3576 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2028 - inet/filter/limit-3576 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3576 -m recent --name limit-3576 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2028 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2028 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2028 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3576 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3576 -m recent --name limit-3576 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2028 - inet6/filter/limit-3576 -m recent --name limit-3576 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2028 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2028 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3578 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3577 - inet/filter/limit-3577 -m recent --name limit-3577 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2029 - inet/filter/limit-3577 -m recent --name limit-3577 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2029 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2029 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2029 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3577 - inet6/filter/limit-3577 -m recent --name limit-3577 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2029 - inet6/filter/logdrop-2029 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2029 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3579 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3578 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3578 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2030 - inet/filter/limit-3578 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2030 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2030 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2030 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3578 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3578 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2030 - inet6/filter/limit-3578 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2030 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2030 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3580 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3579 - inet/filter/limit-3579 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2031 - inet/filter/limit-3579 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-2031 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2031 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2031 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3579 - inet6/filter/limit-3579 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2031 - inet6/filter/limit-3579 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-2031 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2031 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3581 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3580 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3580 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2032 - inet/filter/limit-3580 -m limit --limit 1/second -j LOG - inet/filter/limit-3580 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2032 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2032 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2032 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3580 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3580 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2032 - inet6/filter/limit-3580 -m limit --limit 1/second -j LOG - inet6/filter/limit-3580 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2032 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2032 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3582 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3581 - inet/filter/limit-3581 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2033 - inet/filter/limit-3581 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-2033 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2033 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2033 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3581 - inet6/filter/limit-3581 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2033 - inet6/filter/limit-3581 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2033 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2033 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3583 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3582 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3582 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2034 - inet/filter/limit-3582 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3582 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3582 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2034 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2034 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2034 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3582 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3582 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2034 - inet6/filter/limit-3582 -j TEE --gateway fc00::2 - inet6/filter/limit-3582 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2034 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2034 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3584 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3583 - inet/filter/limit-3583 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2035 - inet/filter/limit-3583 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3583 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2035 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2035 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2035 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3583 - inet6/filter/limit-3583 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2035 - inet6/filter/limit-3583 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-2035 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2035 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3585 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3584 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3584 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2036 - inet/filter/limit-3584 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2036 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2036 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2036 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3584 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3584 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2036 - inet6/filter/limit-3584 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2036 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2036 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3586 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3585 - inet/filter/limit-3585 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2037 - inet/filter/limit-3585 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-2037 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2037 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2037 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3585 - inet6/filter/limit-3585 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2037 - inet6/filter/limit-3585 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-2037 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2037 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3587 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3586 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3586 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2038 - inet/filter/limit-3586 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3586 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2038 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2038 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2038 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3586 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2038 - inet6/filter/limit-3586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2038 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2038 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3588 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3587 - inet/filter/limit-3587 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2039 - inet/filter/limit-3587 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2039 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2039 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2039 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3587 - inet6/filter/limit-3587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2039 - inet6/filter/logdrop-2039 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2039 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3589 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3588 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3588 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2040 - inet/filter/limit-3588 -j ACCEPT - inet/filter/logdrop-2040 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2040 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2040 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3588 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2040 - inet6/filter/limit-3588 -j ACCEPT - inet6/filter/logdrop-2040 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2040 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3590 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2041 - inet/filter/logdrop-2041 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2041 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2041 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2041 - inet6/filter/logdrop-2041 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2041 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3591 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3590 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3590 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2042 - inet/filter/limit-3590 -m limit --limit 1/second -j LOG - inet/filter/limit-3590 -j ACCEPT - inet/filter/logdrop-2042 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2042 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2042 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3590 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2042 - inet6/filter/limit-3590 -m limit --limit 1/second -j LOG - inet6/filter/limit-3590 -j ACCEPT - inet6/filter/logdrop-2042 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2042 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3592 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3591 - inet/filter/limit-3591 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2043 - inet/filter/limit-3591 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2043 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2043 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2043 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3591 - inet6/filter/limit-3591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2043 - inet6/filter/limit-3591 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2043 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2043 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3593 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3592 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3592 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2044 - inet/filter/limit-3592 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3592 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3592 -j ACCEPT - inet/filter/logdrop-2044 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2044 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2044 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3592 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3592 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2044 - inet6/filter/limit-3592 -j TEE --gateway fc00::2 - inet6/filter/limit-3592 -j ACCEPT - inet6/filter/logdrop-2044 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2044 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3594 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3593 - inet/filter/limit-3593 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2045 - inet/filter/limit-3593 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3593 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2045 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2045 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2045 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3593 - inet6/filter/limit-3593 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2045 - inet6/filter/limit-3593 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2045 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2045 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3595 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3594 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3594 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2046 - inet/filter/limit-3594 -j ACCEPT - inet/filter/logdrop-2046 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2046 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2046 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3594 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3594 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2046 - inet6/filter/limit-3594 -j ACCEPT - inet6/filter/logdrop-2046 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2046 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3596 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2047 - inet/filter/logdrop-2047 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2047 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2047 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2047 - inet6/filter/logdrop-2047 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2047 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3597 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3596 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3596 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2048 - inet/filter/limit-3596 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3596 -j ACCEPT - inet/filter/logdrop-2048 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2048 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2048 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3596 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3596 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2048 - inet6/filter/limit-3596 -j ACCEPT - inet6/filter/logdrop-2048 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2048 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3598 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3597 - inet/filter/limit-3597 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2049 - inet/filter/limit-3597 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2049 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2049 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2049 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3597 - inet6/filter/limit-3597 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2049 - inet6/filter/logdrop-2049 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2049 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3599 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3598 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3598 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2050 - inet/filter/limit-3598 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2050 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2050 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2050 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3598 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2050 - inet6/filter/limit-3598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2050 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2050 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3600 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3599 - inet/filter/limit-3599 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2051 - inet/filter/limit-3599 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-2051 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2051 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2051 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3599 - inet6/filter/limit-3599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2051 - inet6/filter/limit-3599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-2051 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2051 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3601 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3600 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3600 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2052 - inet/filter/limit-3600 -m limit --limit 1/second -j LOG - inet/filter/limit-3600 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2052 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2052 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2052 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3600 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2052 - inet6/filter/limit-3600 -m limit --limit 1/second -j LOG - inet6/filter/limit-3600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2052 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2052 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3602 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3601 - inet/filter/limit-3601 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2053 - inet/filter/limit-3601 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-2053 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2053 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2053 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3601 - inet6/filter/limit-3601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2053 - inet6/filter/limit-3601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2053 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2053 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3603 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3602 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3602 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2054 - inet/filter/limit-3602 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3602 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3602 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2054 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2054 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2054 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3602 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2054 - inet6/filter/limit-3602 -j TEE --gateway fc00::2 - inet6/filter/limit-3602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2054 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2054 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3604 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3603 - inet/filter/limit-3603 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2055 - inet/filter/limit-3603 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3603 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2055 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2055 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2055 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3603 - inet6/filter/limit-3603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2055 - inet6/filter/limit-3603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-2055 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2055 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3605 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3604 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3604 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2056 - inet/filter/limit-3604 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2056 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2056 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2056 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3604 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2056 - inet6/filter/limit-3604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2056 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2056 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3606 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3605 - inet/filter/limit-3605 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2057 - inet/filter/limit-3605 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-2057 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2057 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2057 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3605 - inet6/filter/limit-3605 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2057 - inet6/filter/limit-3605 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-2057 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2057 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3607 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3606 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3606 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2058 - inet/filter/limit-3606 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3606 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2058 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2058 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2058 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3606 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2058 - inet6/filter/limit-3606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2058 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2058 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3608 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3607 - inet/filter/limit-3607 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2059 - inet/filter/limit-3607 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2059 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2059 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2059 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3607 - inet6/filter/limit-3607 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2059 - inet6/filter/logdrop-2059 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2059 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3609 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3608 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3608 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2060 - inet/filter/limit-3608 -j ACCEPT - inet/filter/logdrop-2060 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2060 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2060 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3608 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3608 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2060 - inet6/filter/limit-3608 -j ACCEPT - inet6/filter/logdrop-2060 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2060 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3610 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2061 - inet/filter/logdrop-2061 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2061 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2061 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2061 - inet6/filter/logdrop-2061 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2061 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3611 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3610 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3610 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2062 - inet/filter/limit-3610 -m limit --limit 1/second -j LOG - inet/filter/limit-3610 -j ACCEPT - inet/filter/logdrop-2062 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2062 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2062 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3610 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3610 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2062 - inet6/filter/limit-3610 -m limit --limit 1/second -j LOG - inet6/filter/limit-3610 -j ACCEPT - inet6/filter/logdrop-2062 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2062 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3612 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3611 - inet/filter/limit-3611 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2063 - inet/filter/limit-3611 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2063 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2063 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2063 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3611 - inet6/filter/limit-3611 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2063 - inet6/filter/limit-3611 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2063 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2063 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3613 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3612 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3612 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2064 - inet/filter/limit-3612 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3612 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3612 -j ACCEPT - inet/filter/logdrop-2064 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2064 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2064 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3612 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3612 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2064 - inet6/filter/limit-3612 -j TEE --gateway fc00::2 - inet6/filter/limit-3612 -j ACCEPT - inet6/filter/logdrop-2064 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2064 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3614 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3613 - inet/filter/limit-3613 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2065 - inet/filter/limit-3613 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3613 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2065 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2065 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2065 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3613 - inet6/filter/limit-3613 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2065 - inet6/filter/limit-3613 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2065 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2065 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3615 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3614 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3614 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2066 - inet/filter/limit-3614 -j ACCEPT - inet/filter/logdrop-2066 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2066 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2066 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3614 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3614 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2066 - inet6/filter/limit-3614 -j ACCEPT - inet6/filter/logdrop-2066 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2066 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3616 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2067 - inet/filter/logdrop-2067 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2067 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2067 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2067 - inet6/filter/logdrop-2067 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2067 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3617 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3616 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3616 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2068 - inet/filter/limit-3616 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3616 -j ACCEPT - inet/filter/logdrop-2068 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2068 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2068 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3616 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3616 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2068 - inet6/filter/limit-3616 -j ACCEPT - inet6/filter/logdrop-2068 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2068 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3618 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3617 - inet/filter/limit-3617 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2069 - inet/filter/limit-3617 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2069 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2069 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2069 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3617 - inet6/filter/limit-3617 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2069 - inet6/filter/logdrop-2069 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2069 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3619 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3618 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3618 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2070 - inet/filter/limit-3618 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2070 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2070 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2070 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3618 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3618 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2070 - inet6/filter/limit-3618 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2070 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2070 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3620 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3619 - inet/filter/limit-3619 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2071 - inet/filter/limit-3619 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-2071 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2071 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2071 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3619 - inet6/filter/limit-3619 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2071 - inet6/filter/limit-3619 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-2071 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2071 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3621 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3620 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3620 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2072 - inet/filter/limit-3620 -m limit --limit 1/second -j LOG - inet/filter/limit-3620 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2072 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2072 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2072 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3620 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3620 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2072 - inet6/filter/limit-3620 -m limit --limit 1/second -j LOG - inet6/filter/limit-3620 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2072 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2072 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3622 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3621 - inet/filter/limit-3621 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2073 - inet/filter/limit-3621 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-2073 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2073 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2073 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3621 - inet6/filter/limit-3621 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2073 - inet6/filter/limit-3621 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2073 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2073 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3623 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3622 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3622 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2074 - inet/filter/limit-3622 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3622 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3622 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2074 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2074 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2074 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3622 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3622 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2074 - inet6/filter/limit-3622 -j TEE --gateway fc00::2 - inet6/filter/limit-3622 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2074 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2074 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3624 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3623 - inet/filter/limit-3623 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2075 - inet/filter/limit-3623 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3623 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2075 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2075 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2075 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3623 - inet6/filter/limit-3623 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2075 - inet6/filter/limit-3623 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-2075 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2075 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3625 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3624 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3624 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2076 - inet/filter/limit-3624 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2076 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2076 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2076 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3624 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3624 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2076 - inet6/filter/limit-3624 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2076 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2076 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3626 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3625 - inet/filter/limit-3625 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2077 - inet/filter/limit-3625 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-2077 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2077 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2077 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3625 - inet6/filter/limit-3625 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2077 - inet6/filter/limit-3625 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-2077 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2077 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3627 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3626 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3626 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2078 - inet/filter/limit-3626 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3626 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2078 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2078 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2078 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3626 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3626 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2078 - inet6/filter/limit-3626 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2078 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2078 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3628 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3627 - inet/filter/limit-3627 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2079 - inet/filter/limit-3627 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2079 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2079 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2079 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3627 - inet6/filter/limit-3627 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2079 - inet6/filter/logdrop-2079 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2079 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3629 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3628 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3628 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2080 - inet/filter/limit-3628 -j ACCEPT - inet/filter/logdrop-2080 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2080 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2080 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3628 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3628 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2080 - inet6/filter/limit-3628 -j ACCEPT - inet6/filter/logdrop-2080 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2080 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3630 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2081 - inet/filter/logdrop-2081 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2081 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2081 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2081 - inet6/filter/logdrop-2081 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2081 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3631 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3630 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3630 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2082 - inet/filter/limit-3630 -m limit --limit 1/second -j LOG - inet/filter/limit-3630 -j ACCEPT - inet/filter/logdrop-2082 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2082 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2082 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3630 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3630 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2082 - inet6/filter/limit-3630 -m limit --limit 1/second -j LOG - inet6/filter/limit-3630 -j ACCEPT - inet6/filter/logdrop-2082 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2082 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3632 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3631 - inet/filter/limit-3631 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2083 - inet/filter/limit-3631 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2083 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2083 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2083 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3631 - inet6/filter/limit-3631 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2083 - inet6/filter/limit-3631 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2083 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2083 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3633 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3632 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3632 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2084 - inet/filter/limit-3632 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3632 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3632 -j ACCEPT - inet/filter/logdrop-2084 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2084 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2084 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3632 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3632 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2084 - inet6/filter/limit-3632 -j TEE --gateway fc00::2 - inet6/filter/limit-3632 -j ACCEPT - inet6/filter/logdrop-2084 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2084 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3634 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3633 - inet/filter/limit-3633 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2085 - inet/filter/limit-3633 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3633 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2085 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2085 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2085 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3633 - inet6/filter/limit-3633 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2085 - inet6/filter/limit-3633 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2085 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2085 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3635 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3634 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3634 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2086 - inet/filter/limit-3634 -j ACCEPT - inet/filter/logdrop-2086 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2086 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2086 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3634 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3634 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2086 - inet6/filter/limit-3634 -j ACCEPT - inet6/filter/logdrop-2086 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2086 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3636 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2087 - inet/filter/logdrop-2087 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2087 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2087 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2087 - inet6/filter/logdrop-2087 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2087 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3637 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3636 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3636 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2088 - inet/filter/limit-3636 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3636 -j ACCEPT - inet/filter/logdrop-2088 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2088 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2088 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3636 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3636 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2088 - inet6/filter/limit-3636 -j ACCEPT - inet6/filter/logdrop-2088 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2088 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3638 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3637 - inet/filter/limit-3637 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2089 - inet/filter/limit-3637 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2089 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2089 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2089 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3637 - inet6/filter/limit-3637 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2089 - inet6/filter/logdrop-2089 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2089 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3639 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3638 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3638 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2090 - inet/filter/limit-3638 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2090 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2090 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2090 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3638 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3638 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2090 - inet6/filter/limit-3638 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2090 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2090 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3640 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3639 - inet/filter/limit-3639 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2091 - inet/filter/limit-3639 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-2091 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2091 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2091 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3639 - inet6/filter/limit-3639 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2091 - inet6/filter/limit-3639 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-2091 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2091 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3641 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3640 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3640 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2092 - inet/filter/limit-3640 -m limit --limit 1/second -j LOG - inet/filter/limit-3640 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2092 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2092 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2092 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3640 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3640 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2092 - inet6/filter/limit-3640 -m limit --limit 1/second -j LOG - inet6/filter/limit-3640 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2092 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2092 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3642 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3641 - inet/filter/limit-3641 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2093 - inet/filter/limit-3641 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-2093 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2093 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2093 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3641 - inet6/filter/limit-3641 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2093 - inet6/filter/limit-3641 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2093 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2093 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3643 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3642 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3642 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2094 - inet/filter/limit-3642 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3642 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3642 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2094 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2094 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2094 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3642 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3642 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2094 - inet6/filter/limit-3642 -j TEE --gateway fc00::2 - inet6/filter/limit-3642 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2094 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2094 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3644 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3643 - inet/filter/limit-3643 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2095 - inet/filter/limit-3643 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3643 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2095 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2095 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2095 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3643 - inet6/filter/limit-3643 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2095 - inet6/filter/limit-3643 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-2095 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2095 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3645 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3644 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3644 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2096 - inet/filter/limit-3644 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2096 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2096 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2096 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3644 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3644 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2096 - inet6/filter/limit-3644 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2096 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2096 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3646 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3645 - inet/filter/limit-3645 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2097 - inet/filter/limit-3645 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-2097 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2097 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2097 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3645 - inet6/filter/limit-3645 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2097 - inet6/filter/limit-3645 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-2097 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2097 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3647 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3646 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3646 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2098 - inet/filter/limit-3646 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3646 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2098 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2098 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2098 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3646 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3646 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2098 - inet6/filter/limit-3646 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2098 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2098 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3648 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3647 - inet/filter/limit-3647 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2099 - inet/filter/limit-3647 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2099 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2099 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2099 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3647 - inet6/filter/limit-3647 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2099 - inet6/filter/logdrop-2099 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2099 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3649 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3648 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3648 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2100 - inet/filter/limit-3648 -j ACCEPT - inet/filter/logdrop-2100 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2100 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2100 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3648 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3648 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2100 - inet6/filter/limit-3648 -j ACCEPT - inet6/filter/logdrop-2100 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2100 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3650 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2101 - inet/filter/logdrop-2101 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2101 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2101 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2101 - inet6/filter/logdrop-2101 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2101 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3651 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3650 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3650 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2102 - inet/filter/limit-3650 -m limit --limit 1/second -j LOG - inet/filter/limit-3650 -j ACCEPT - inet/filter/logdrop-2102 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2102 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2102 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3650 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3650 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2102 - inet6/filter/limit-3650 -m limit --limit 1/second -j LOG - inet6/filter/limit-3650 -j ACCEPT - inet6/filter/logdrop-2102 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2102 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3652 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3651 - inet/filter/limit-3651 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2103 - inet/filter/limit-3651 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2103 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2103 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2103 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3651 - inet6/filter/limit-3651 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2103 - inet6/filter/limit-3651 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2103 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2103 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3653 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3652 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3652 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2104 - inet/filter/limit-3652 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3652 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3652 -j ACCEPT - inet/filter/logdrop-2104 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2104 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2104 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3652 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3652 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2104 - inet6/filter/limit-3652 -j TEE --gateway fc00::2 - inet6/filter/limit-3652 -j ACCEPT - inet6/filter/logdrop-2104 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2104 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3654 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3653 - inet/filter/limit-3653 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2105 - inet/filter/limit-3653 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3653 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2105 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2105 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2105 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3653 - inet6/filter/limit-3653 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2105 - inet6/filter/limit-3653 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2105 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2105 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3655 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3654 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3654 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2106 - inet/filter/limit-3654 -j ACCEPT - inet/filter/logdrop-2106 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2106 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2106 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3654 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3654 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2106 - inet6/filter/limit-3654 -j ACCEPT - inet6/filter/logdrop-2106 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2106 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3656 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2107 - inet/filter/logdrop-2107 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2107 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2107 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2107 - inet6/filter/logdrop-2107 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2107 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3657 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3656 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3656 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2108 - inet/filter/limit-3656 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3656 -j ACCEPT - inet/filter/logdrop-2108 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2108 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2108 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3656 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3656 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2108 - inet6/filter/limit-3656 -j ACCEPT - inet6/filter/logdrop-2108 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2108 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3658 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3657 - inet/filter/limit-3657 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2109 - inet/filter/limit-3657 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2109 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2109 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2109 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3657 - inet6/filter/limit-3657 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2109 - inet6/filter/logdrop-2109 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2109 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3659 {"flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3658 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3658 -m recent --name limit-3658 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3658 -m recent --name limit-3658 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3658 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3658 -m recent --name limit-3658 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3658 -m recent --name limit-3658 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3660 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3659 - inet/filter/limit-3659 -m recent --name limit-3659 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3659 -m recent --name limit-3659 --rsource --mask 255.255.255.255 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3659 - inet6/filter/limit-3659 -m recent --name limit-3659 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3659 -m recent --name limit-3659 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3661 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3660 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3660 -m recent --name limit-3660 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3660 -m limit --limit 1/second -j LOG - inet/filter/limit-3660 -m recent --name limit-3660 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3660 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3660 -m recent --name limit-3660 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3660 -m limit --limit 1/second -j LOG - inet6/filter/limit-3660 -m recent --name limit-3660 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3662 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3661 - inet/filter/limit-3661 -m recent --name limit-3661 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3661 -m recent --name limit-3661 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3661 - inet6/filter/limit-3661 -m recent --name limit-3661 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3661 -m recent --name limit-3661 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3663 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3662 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3662 -m recent --name limit-3662 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3662 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3662 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3662 -m recent --name limit-3662 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3662 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3662 -m recent --name limit-3662 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3662 -j TEE --gateway fc00::2 - inet6/filter/limit-3662 -m recent --name limit-3662 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3664 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3663 - inet/filter/limit-3663 -m recent --name limit-3663 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3663 -m recent --name limit-3663 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3663 -m recent --name limit-3663 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3663 - inet6/filter/limit-3663 -m recent --name limit-3663 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3663 -m recent --name limit-3663 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3665 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3664 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3664 -m recent --name limit-3664 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3664 -m recent --name limit-3664 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3664 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3664 -m recent --name limit-3664 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3664 -m recent --name limit-3664 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3666 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3665 - inet/filter/limit-3665 -m recent --name limit-3665 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3665 -m recent --name limit-3665 --rsource --mask 255.255.255.255 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3665 - inet6/filter/limit-3665 -m recent --name limit-3665 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3665 -m recent --name limit-3665 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3667 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3666 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3666 -m recent --name limit-3666 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3666 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3666 -m recent --name limit-3666 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3666 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3666 -m recent --name limit-3666 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3666 -m recent --name limit-3666 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3668 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3667 - inet/filter/limit-3667 -m recent --name limit-3667 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3667 -m recent --name limit-3667 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3667 - inet6/filter/limit-3667 -m recent --name limit-3667 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3669 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3668 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3668 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3668 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3668 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3668 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3668 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3670 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3669 - inet/filter/limit-3669 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3669 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3669 - inet6/filter/limit-3669 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3669 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3671 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3670 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3670 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3670 -m limit --limit 1/second -j LOG - inet/filter/limit-3670 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3670 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3670 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3670 -m limit --limit 1/second -j LOG - inet6/filter/limit-3670 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3672 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3671 - inet/filter/limit-3671 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3671 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3671 - inet6/filter/limit-3671 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3671 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3673 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3672 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3672 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3672 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3672 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3672 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3672 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3672 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3672 -j TEE --gateway fc00::2 - inet6/filter/limit-3672 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3674 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3673 - inet/filter/limit-3673 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3673 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3673 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3673 - inet6/filter/limit-3673 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3673 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3675 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3674 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3674 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3674 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3674 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3674 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3674 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3676 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3675 - inet/filter/limit-3675 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3675 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3675 - inet6/filter/limit-3675 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3675 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3677 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3676 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3676 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3676 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3676 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3676 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3676 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3676 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3678 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3677 - inet/filter/limit-3677 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3677 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3677 - inet6/filter/limit-3677 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3679 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3678 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3678 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3678 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3678 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3678 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3678 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3680 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3681 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3680 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3680 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3680 -m limit --limit 1/second -j LOG - inet/filter/limit-3680 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3680 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3680 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3680 -m limit --limit 1/second -j LOG - inet6/filter/limit-3680 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3682 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3681 - inet/filter/limit-3681 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3681 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3681 - inet6/filter/limit-3681 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3681 -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3683 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3682 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3682 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3682 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3682 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3682 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3682 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3682 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3682 -j TEE --gateway fc00::2 - inet6/filter/limit-3682 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3684 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3683 - inet/filter/limit-3683 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3683 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3683 -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3683 - inet6/filter/limit-3683 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3683 -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3685 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3684 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3684 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3684 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3684 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3684 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3684 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3686 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3687 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3686 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3686 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3686 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3686 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3686 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3686 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3686 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3688 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3687 - inet/filter/limit-3687 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3687 -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3687 - inet6/filter/limit-3687 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3689 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3688 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3688 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3688 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3688 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3688 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3688 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3690 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3689 - inet/filter/limit-3689 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3689 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3689 - inet6/filter/limit-3689 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3689 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3691 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3690 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3690 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3690 -m limit --limit 1/second -j LOG - inet/filter/limit-3690 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3690 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3690 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3690 -m limit --limit 1/second -j LOG - inet6/filter/limit-3690 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3692 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3691 - inet/filter/limit-3691 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3691 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3691 - inet6/filter/limit-3691 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3691 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3693 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3692 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3692 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3692 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3692 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3692 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3692 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3692 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3692 -j TEE --gateway fc00::2 - inet6/filter/limit-3692 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3694 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3693 - inet/filter/limit-3693 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3693 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3693 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3693 - inet6/filter/limit-3693 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3693 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3695 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3694 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3694 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3694 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3694 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3694 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3694 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3696 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3695 - inet/filter/limit-3695 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3695 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3695 - inet6/filter/limit-3695 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3695 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3697 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3696 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3696 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3696 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3696 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3696 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3696 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3696 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3698 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3697 - inet/filter/limit-3697 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3697 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3697 - inet6/filter/limit-3697 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3699 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3698 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3698 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3698 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3698 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3698 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3698 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3700 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3701 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3700 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3700 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3700 -m limit --limit 1/second -j LOG - inet/filter/limit-3700 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3700 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3700 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3700 -m limit --limit 1/second -j LOG - inet6/filter/limit-3700 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3702 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3701 - inet/filter/limit-3701 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3701 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3701 - inet6/filter/limit-3701 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3701 -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3703 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3702 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3702 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3702 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3702 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3702 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3702 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3702 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3702 -j TEE --gateway fc00::2 - inet6/filter/limit-3702 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3704 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3703 - inet/filter/limit-3703 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3703 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3703 -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3703 - inet6/filter/limit-3703 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3703 -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3705 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3704 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3704 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3704 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3704 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3704 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3704 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3706 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3707 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3706 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3706 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3706 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3706 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3706 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3706 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3706 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3708 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3707 - inet/filter/limit-3707 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3707 -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3707 - inet6/filter/limit-3707 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3709 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3708 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3708 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3708 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3708 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3708 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3708 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3710 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3709 - inet/filter/limit-3709 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3709 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3709 - inet6/filter/limit-3709 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3709 -m recent --name user:C --rsource --mask fe00:: --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3711 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3710 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3710 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3710 -m limit --limit 1/second -j LOG - inet/filter/limit-3710 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3710 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3710 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3710 -m limit --limit 1/second -j LOG - inet6/filter/limit-3710 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3712 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3711 - inet/filter/limit-3711 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3711 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3711 - inet6/filter/limit-3711 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3711 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3713 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3712 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3712 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3712 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3712 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3712 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3712 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3712 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3712 -j TEE --gateway fc00::2 - inet6/filter/limit-3712 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3714 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3713 - inet/filter/limit-3713 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3713 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3713 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3713 - inet6/filter/limit-3713 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3713 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3715 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3714 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3714 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3714 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3714 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3714 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3714 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3716 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3715 - inet/filter/limit-3715 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3715 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3715 - inet6/filter/limit-3715 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3715 -m recent --name user:C --rsource --mask fe00:: --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3717 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3716 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3716 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3716 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3716 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3716 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3716 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3716 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3718 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3717 - inet/filter/limit-3717 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3717 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3717 - inet6/filter/limit-3717 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3719 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3718 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3718 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3718 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3718 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3718 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3718 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3720 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3721 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3720 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3720 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3720 -m limit --limit 1/second -j LOG - inet/filter/limit-3720 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3720 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3720 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3720 -m limit --limit 1/second -j LOG - inet6/filter/limit-3720 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3722 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3721 - inet/filter/limit-3721 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3721 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3721 - inet6/filter/limit-3721 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3721 -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3723 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3722 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3722 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3722 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3722 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3722 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3722 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3722 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3722 -j TEE --gateway fc00::2 - inet6/filter/limit-3722 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3724 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3723 - inet/filter/limit-3723 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3723 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3723 -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3723 - inet6/filter/limit-3723 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3723 -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3725 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3724 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3724 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3724 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3724 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3724 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3724 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3726 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3727 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3726 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3726 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3726 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3726 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3726 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3726 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3726 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3728 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3727 - inet/filter/limit-3727 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3727 -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3727 - inet6/filter/limit-3727 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3729 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3728 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3728 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3728 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3728 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3728 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3728 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3730 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3729 - inet/filter/limit-3729 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3729 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3729 - inet6/filter/limit-3729 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3729 -m recent --name user:C --rdest --mask fe00:: --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3731 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3730 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3730 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3730 -m limit --limit 1/second -j LOG - inet/filter/limit-3730 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3730 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3730 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3730 -m limit --limit 1/second -j LOG - inet6/filter/limit-3730 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3732 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3731 - inet/filter/limit-3731 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3731 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3731 - inet6/filter/limit-3731 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3731 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3733 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3732 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3732 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3732 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3732 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3732 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3732 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3732 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3732 -j TEE --gateway fc00::2 - inet6/filter/limit-3732 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3734 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3733 - inet/filter/limit-3733 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3733 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3733 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3733 - inet6/filter/limit-3733 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3733 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3735 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3734 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3734 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3734 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3734 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3734 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3734 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3736 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3735 - inet/filter/limit-3735 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3735 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3735 - inet6/filter/limit-3735 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3735 -m recent --name user:C --rdest --mask fe00:: --set - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3737 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3736 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3736 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3736 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3736 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3736 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3736 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3736 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3738 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3737 - inet/filter/limit-3737 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3737 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3737 - inet6/filter/limit-3737 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3739 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3738 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3738 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3738 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3738 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3738 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3738 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3740 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3741 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3740 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3740 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3740 -m limit --limit 1/second -j LOG - inet/filter/limit-3740 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3740 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3740 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3740 -m limit --limit 1/second -j LOG - inet6/filter/limit-3740 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3742 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3741 - inet/filter/limit-3741 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3741 -m limit --limit 1/second -j LOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3741 - inet6/filter/limit-3741 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3741 -m limit --limit 1/second -j LOG - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3743 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3742 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3742 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3742 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3742 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3742 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3742 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3742 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3742 -j TEE --gateway fc00::2 - inet6/filter/limit-3742 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3744 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3743 - inet/filter/limit-3743 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3743 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3743 -j TEE --gateway 10.0.0.2 - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3743 - inet6/filter/limit-3743 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3743 -j TEE --gateway fc00::2 - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3745 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3744 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3744 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3744 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3744 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3744 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3744 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3746 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3747 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3746 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3746 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3746 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3746 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3746 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3746 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-3746 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3748 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3747 - inet/filter/limit-3747 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-3747 -m limit --limit 12/minute -j ULOG - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3747 - inet6/filter/limit-3747 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3749 {"flow-limit":{"interval":5,"log":"ulog"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3748 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3748 -m recent --name limit-3748 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2110 - inet/filter/limit-3748 -m recent --name limit-3748 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2110 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2110 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3748 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3748 -m recent --name limit-3748 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2110 - inet6/filter/limit-3748 -m recent --name limit-3748 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2110 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3750 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3749 - inet/filter/limit-3749 -m recent --name limit-3749 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2111 - inet/filter/limit-3749 -m recent --name limit-3749 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-2111 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2111 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3749 - inet6/filter/limit-3749 -m recent --name limit-3749 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2111 - inet6/filter/limit-3749 -m recent --name limit-3749 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-2111 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3751 {"flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3750 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3750 -m recent --name limit-3750 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2112 - inet/filter/limit-3750 -m limit --limit 1/second -j LOG - inet/filter/limit-3750 -m recent --name limit-3750 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2112 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2112 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3750 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3750 -m recent --name limit-3750 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2112 - inet6/filter/limit-3750 -m limit --limit 1/second -j LOG - inet6/filter/limit-3750 -m recent --name limit-3750 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2112 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3752 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3751 - inet/filter/limit-3751 -m recent --name limit-3751 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2113 - inet/filter/limit-3751 -m recent --name limit-3751 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-2113 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2113 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3751 - inet6/filter/limit-3751 -m recent --name limit-3751 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2113 - inet6/filter/limit-3751 -m recent --name limit-3751 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2113 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3753 {"flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3752 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3752 -m recent --name limit-3752 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2114 - inet/filter/limit-3752 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3752 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3752 -m recent --name limit-3752 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2114 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2114 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3752 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3752 -m recent --name limit-3752 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2114 - inet6/filter/limit-3752 -j TEE --gateway fc00::2 - inet6/filter/limit-3752 -m recent --name limit-3752 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2114 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3754 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3753 - inet/filter/limit-3753 -m recent --name limit-3753 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2115 - inet/filter/limit-3753 -m recent --name limit-3753 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3753 -m recent --name limit-3753 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2115 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2115 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3753 - inet6/filter/limit-3753 -m recent --name limit-3753 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2115 - inet6/filter/limit-3753 -m recent --name limit-3753 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-2115 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3755 {"flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3754 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3754 -m recent --name limit-3754 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2116 - inet/filter/limit-3754 -m recent --name limit-3754 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2116 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2116 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3754 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3754 -m recent --name limit-3754 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2116 - inet6/filter/limit-3754 -m recent --name limit-3754 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2116 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3756 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3755 - inet/filter/limit-3755 -m recent --name limit-3755 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2117 - inet/filter/limit-3755 -m recent --name limit-3755 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-2117 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2117 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3755 - inet6/filter/limit-3755 -m recent --name limit-3755 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2117 - inet6/filter/limit-3755 -m recent --name limit-3755 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-2117 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3757 {"flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3756 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3756 -m recent --name limit-3756 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2118 - inet/filter/limit-3756 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3756 -m recent --name limit-3756 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2118 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2118 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3756 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3756 -m recent --name limit-3756 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2118 - inet6/filter/limit-3756 -m recent --name limit-3756 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2118 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3758 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3757 - inet/filter/limit-3757 -m recent --name limit-3757 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2119 - inet/filter/limit-3757 -m recent --name limit-3757 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2119 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2119 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3757 - inet6/filter/limit-3757 -m recent --name limit-3757 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2119 - inet6/filter/logdrop-2119 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3759 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3758 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3758 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2120 - inet/filter/limit-3758 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2120 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2120 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3758 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3758 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2120 - inet6/filter/limit-3758 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2120 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3760 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3759 - inet/filter/limit-3759 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2121 - inet/filter/limit-3759 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-2121 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2121 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3759 - inet6/filter/limit-3759 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2121 - inet6/filter/limit-3759 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-2121 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3761 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3760 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3760 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2122 - inet/filter/limit-3760 -m limit --limit 1/second -j LOG - inet/filter/limit-3760 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2122 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2122 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3760 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3760 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2122 - inet6/filter/limit-3760 -m limit --limit 1/second -j LOG - inet6/filter/limit-3760 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2122 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3762 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3761 - inet/filter/limit-3761 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2123 - inet/filter/limit-3761 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-2123 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2123 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3761 - inet6/filter/limit-3761 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2123 - inet6/filter/limit-3761 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2123 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3763 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3762 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3762 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2124 - inet/filter/limit-3762 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3762 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3762 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2124 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2124 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3762 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3762 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2124 - inet6/filter/limit-3762 -j TEE --gateway fc00::2 - inet6/filter/limit-3762 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2124 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3764 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3763 - inet/filter/limit-3763 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2125 - inet/filter/limit-3763 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3763 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2125 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2125 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3763 - inet6/filter/limit-3763 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2125 - inet6/filter/limit-3763 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-2125 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3765 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3764 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3764 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2126 - inet/filter/limit-3764 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2126 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2126 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3764 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3764 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2126 - inet6/filter/limit-3764 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2126 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3766 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3765 - inet/filter/limit-3765 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2127 - inet/filter/limit-3765 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-2127 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2127 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3765 - inet6/filter/limit-3765 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2127 - inet6/filter/limit-3765 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-2127 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3767 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3766 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3766 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2128 - inet/filter/limit-3766 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3766 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2128 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2128 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3766 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3766 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2128 - inet6/filter/limit-3766 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2128 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3768 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3767 - inet/filter/limit-3767 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2129 - inet/filter/limit-3767 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2129 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2129 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3767 - inet6/filter/limit-3767 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2129 - inet6/filter/logdrop-2129 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3769 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3768 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3768 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2130 - inet/filter/limit-3768 -j ACCEPT - inet/filter/logdrop-2130 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2130 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3768 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3768 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2130 - inet6/filter/limit-3768 -j ACCEPT - inet6/filter/logdrop-2130 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3770 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2131 - inet/filter/logdrop-2131 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2131 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2131 - inet6/filter/logdrop-2131 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3771 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3770 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3770 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2132 - inet/filter/limit-3770 -m limit --limit 1/second -j LOG - inet/filter/limit-3770 -j ACCEPT - inet/filter/logdrop-2132 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2132 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3770 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3770 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2132 - inet6/filter/limit-3770 -m limit --limit 1/second -j LOG - inet6/filter/limit-3770 -j ACCEPT - inet6/filter/logdrop-2132 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3772 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3771 - inet/filter/limit-3771 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2133 - inet/filter/limit-3771 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2133 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2133 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3771 - inet6/filter/limit-3771 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2133 - inet6/filter/limit-3771 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2133 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3773 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3772 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3772 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2134 - inet/filter/limit-3772 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3772 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3772 -j ACCEPT - inet/filter/logdrop-2134 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2134 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3772 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3772 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2134 - inet6/filter/limit-3772 -j TEE --gateway fc00::2 - inet6/filter/limit-3772 -j ACCEPT - inet6/filter/logdrop-2134 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3774 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3773 - inet/filter/limit-3773 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2135 - inet/filter/limit-3773 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3773 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2135 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2135 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3773 - inet6/filter/limit-3773 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2135 - inet6/filter/limit-3773 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2135 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3775 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3774 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3774 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2136 - inet/filter/limit-3774 -j ACCEPT - inet/filter/logdrop-2136 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2136 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3774 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3774 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2136 - inet6/filter/limit-3774 -j ACCEPT - inet6/filter/logdrop-2136 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3776 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2137 - inet/filter/logdrop-2137 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2137 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2137 - inet6/filter/logdrop-2137 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3777 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3776 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3776 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2138 - inet/filter/limit-3776 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3776 -j ACCEPT - inet/filter/logdrop-2138 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2138 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3776 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3776 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2138 - inet6/filter/limit-3776 -j ACCEPT - inet6/filter/logdrop-2138 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3778 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3777 - inet/filter/limit-3777 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2139 - inet/filter/limit-3777 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2139 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2139 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3777 - inet6/filter/limit-3777 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2139 - inet6/filter/logdrop-2139 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3779 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3778 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3778 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2140 - inet/filter/limit-3778 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2140 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2140 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3778 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3778 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2140 - inet6/filter/limit-3778 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2140 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3780 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3779 - inet/filter/limit-3779 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2141 - inet/filter/limit-3779 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-2141 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2141 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3779 - inet6/filter/limit-3779 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2141 - inet6/filter/limit-3779 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-2141 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3781 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3780 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3780 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2142 - inet/filter/limit-3780 -m limit --limit 1/second -j LOG - inet/filter/limit-3780 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2142 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2142 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3780 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3780 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2142 - inet6/filter/limit-3780 -m limit --limit 1/second -j LOG - inet6/filter/limit-3780 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2142 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3782 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3781 - inet/filter/limit-3781 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2143 - inet/filter/limit-3781 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-2143 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2143 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3781 - inet6/filter/limit-3781 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2143 - inet6/filter/limit-3781 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2143 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3783 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3782 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3782 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2144 - inet/filter/limit-3782 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3782 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3782 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2144 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2144 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3782 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3782 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2144 - inet6/filter/limit-3782 -j TEE --gateway fc00::2 - inet6/filter/limit-3782 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2144 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3784 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3783 - inet/filter/limit-3783 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2145 - inet/filter/limit-3783 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3783 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2145 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2145 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3783 - inet6/filter/limit-3783 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2145 - inet6/filter/limit-3783 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-2145 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3785 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3784 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3784 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2146 - inet/filter/limit-3784 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2146 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2146 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3784 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3784 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2146 - inet6/filter/limit-3784 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2146 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3786 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3785 - inet/filter/limit-3785 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2147 - inet/filter/limit-3785 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-2147 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2147 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3785 - inet6/filter/limit-3785 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2147 - inet6/filter/limit-3785 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-2147 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3787 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3786 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3786 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2148 - inet/filter/limit-3786 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3786 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-2148 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2148 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3786 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3786 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2148 - inet6/filter/limit-3786 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-2148 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3788 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3787 - inet/filter/limit-3787 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2149 - inet/filter/limit-3787 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2149 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2149 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3787 - inet6/filter/limit-3787 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2149 - inet6/filter/logdrop-2149 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3789 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3788 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3788 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2150 - inet/filter/limit-3788 -j ACCEPT - inet/filter/logdrop-2150 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2150 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3788 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3788 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2150 - inet6/filter/limit-3788 -j ACCEPT - inet6/filter/logdrop-2150 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3790 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2151 - inet/filter/logdrop-2151 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2151 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2151 - inet6/filter/logdrop-2151 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3791 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3790 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3790 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2152 - inet/filter/limit-3790 -m limit --limit 1/second -j LOG - inet/filter/limit-3790 -j ACCEPT - inet/filter/logdrop-2152 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2152 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3790 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3790 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2152 - inet6/filter/limit-3790 -m limit --limit 1/second -j LOG - inet6/filter/limit-3790 -j ACCEPT - inet6/filter/logdrop-2152 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3792 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3791 - inet/filter/limit-3791 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2153 - inet/filter/limit-3791 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2153 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2153 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3791 - inet6/filter/limit-3791 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2153 - inet6/filter/limit-3791 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2153 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3793 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3792 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3792 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2154 - inet/filter/limit-3792 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3792 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3792 -j ACCEPT - inet/filter/logdrop-2154 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2154 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3792 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3792 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2154 - inet6/filter/limit-3792 -j TEE --gateway fc00::2 - inet6/filter/limit-3792 -j ACCEPT - inet6/filter/logdrop-2154 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3794 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3793 - inet/filter/limit-3793 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2155 - inet/filter/limit-3793 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3793 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2155 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2155 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3793 - inet6/filter/limit-3793 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2155 - inet6/filter/limit-3793 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2155 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3795 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3794 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3794 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2156 - inet/filter/limit-3794 -j ACCEPT - inet/filter/logdrop-2156 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2156 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3794 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2156 - inet6/filter/limit-3794 -j ACCEPT - inet6/filter/logdrop-2156 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3796 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2157 - inet/filter/logdrop-2157 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2157 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2157 - inet6/filter/logdrop-2157 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3797 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3796 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3796 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2158 - inet/filter/limit-3796 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3796 -j ACCEPT - inet/filter/logdrop-2158 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2158 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3796 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2158 - inet6/filter/limit-3796 -j ACCEPT - inet6/filter/logdrop-2158 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3798 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3797 - inet/filter/limit-3797 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2159 - inet/filter/limit-3797 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2159 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2159 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3797 - inet6/filter/limit-3797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2159 - inet6/filter/logdrop-2159 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3799 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3798 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3798 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2160 - inet/filter/limit-3798 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2160 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2160 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3798 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3798 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2160 - inet6/filter/limit-3798 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2160 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3800 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3799 - inet/filter/limit-3799 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2161 - inet/filter/limit-3799 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-2161 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2161 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3799 - inet6/filter/limit-3799 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2161 - inet6/filter/limit-3799 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-2161 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3801 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3800 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3800 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2162 - inet/filter/limit-3800 -m limit --limit 1/second -j LOG - inet/filter/limit-3800 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2162 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2162 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3800 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3800 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2162 - inet6/filter/limit-3800 -m limit --limit 1/second -j LOG - inet6/filter/limit-3800 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2162 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3802 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3801 - inet/filter/limit-3801 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2163 - inet/filter/limit-3801 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-2163 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2163 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3801 - inet6/filter/limit-3801 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2163 - inet6/filter/limit-3801 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2163 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3803 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3802 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3802 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2164 - inet/filter/limit-3802 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3802 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3802 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2164 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2164 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3802 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3802 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2164 - inet6/filter/limit-3802 -j TEE --gateway fc00::2 - inet6/filter/limit-3802 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2164 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3804 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3803 - inet/filter/limit-3803 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2165 - inet/filter/limit-3803 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3803 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2165 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2165 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3803 - inet6/filter/limit-3803 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2165 - inet6/filter/limit-3803 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-2165 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3805 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3804 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3804 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2166 - inet/filter/limit-3804 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2166 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2166 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3804 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3804 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2166 - inet6/filter/limit-3804 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2166 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3806 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3805 - inet/filter/limit-3805 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2167 - inet/filter/limit-3805 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-2167 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2167 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3805 - inet6/filter/limit-3805 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2167 - inet6/filter/limit-3805 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-2167 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3807 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3806 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3806 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2168 - inet/filter/limit-3806 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3806 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2168 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2168 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3806 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3806 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2168 - inet6/filter/limit-3806 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2168 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3808 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3807 - inet/filter/limit-3807 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2169 - inet/filter/limit-3807 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2169 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2169 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3807 - inet6/filter/limit-3807 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2169 - inet6/filter/logdrop-2169 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3809 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3808 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3808 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2170 - inet/filter/limit-3808 -j ACCEPT - inet/filter/logdrop-2170 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2170 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3808 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3808 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2170 - inet6/filter/limit-3808 -j ACCEPT - inet6/filter/logdrop-2170 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3810 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2171 - inet/filter/logdrop-2171 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2171 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2171 - inet6/filter/logdrop-2171 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3811 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3810 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3810 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2172 - inet/filter/limit-3810 -m limit --limit 1/second -j LOG - inet/filter/limit-3810 -j ACCEPT - inet/filter/logdrop-2172 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2172 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3810 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3810 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2172 - inet6/filter/limit-3810 -m limit --limit 1/second -j LOG - inet6/filter/limit-3810 -j ACCEPT - inet6/filter/logdrop-2172 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3812 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3811 - inet/filter/limit-3811 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2173 - inet/filter/limit-3811 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2173 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2173 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3811 - inet6/filter/limit-3811 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2173 - inet6/filter/limit-3811 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2173 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3813 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3812 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3812 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2174 - inet/filter/limit-3812 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3812 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3812 -j ACCEPT - inet/filter/logdrop-2174 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2174 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3812 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3812 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2174 - inet6/filter/limit-3812 -j TEE --gateway fc00::2 - inet6/filter/limit-3812 -j ACCEPT - inet6/filter/logdrop-2174 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3814 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3813 - inet/filter/limit-3813 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2175 - inet/filter/limit-3813 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3813 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2175 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2175 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3813 - inet6/filter/limit-3813 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2175 - inet6/filter/limit-3813 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2175 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3815 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3814 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3814 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2176 - inet/filter/limit-3814 -j ACCEPT - inet/filter/logdrop-2176 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2176 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3814 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3814 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2176 - inet6/filter/limit-3814 -j ACCEPT - inet6/filter/logdrop-2176 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3816 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2177 - inet/filter/logdrop-2177 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2177 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2177 - inet6/filter/logdrop-2177 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3817 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3816 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3816 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2178 - inet/filter/limit-3816 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3816 -j ACCEPT - inet/filter/logdrop-2178 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2178 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3816 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3816 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2178 - inet6/filter/limit-3816 -j ACCEPT - inet6/filter/logdrop-2178 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3818 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3817 - inet/filter/limit-3817 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2179 - inet/filter/limit-3817 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2179 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2179 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3817 - inet6/filter/limit-3817 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2179 - inet6/filter/logdrop-2179 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3819 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3818 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3818 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2180 - inet/filter/limit-3818 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2180 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2180 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3818 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3818 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2180 - inet6/filter/limit-3818 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2180 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3820 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3819 - inet/filter/limit-3819 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2181 - inet/filter/limit-3819 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-2181 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2181 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3819 - inet6/filter/limit-3819 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2181 - inet6/filter/limit-3819 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-2181 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3821 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3820 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3820 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2182 - inet/filter/limit-3820 -m limit --limit 1/second -j LOG - inet/filter/limit-3820 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2182 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2182 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3820 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3820 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2182 - inet6/filter/limit-3820 -m limit --limit 1/second -j LOG - inet6/filter/limit-3820 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2182 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3822 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3821 - inet/filter/limit-3821 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2183 - inet/filter/limit-3821 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-2183 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2183 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3821 - inet6/filter/limit-3821 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2183 - inet6/filter/limit-3821 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2183 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3823 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3822 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3822 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2184 - inet/filter/limit-3822 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3822 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3822 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2184 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2184 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3822 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3822 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2184 - inet6/filter/limit-3822 -j TEE --gateway fc00::2 - inet6/filter/limit-3822 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2184 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3824 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3823 - inet/filter/limit-3823 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2185 - inet/filter/limit-3823 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 - inet/filter/limit-3823 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2185 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2185 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3823 - inet6/filter/limit-3823 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2185 - inet6/filter/limit-3823 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 - inet6/filter/logdrop-2185 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3825 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3824 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3824 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2186 - inet/filter/limit-3824 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2186 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2186 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3824 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3824 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2186 - inet6/filter/limit-3824 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2186 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3826 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3825 - inet/filter/limit-3825 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2187 - inet/filter/limit-3825 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-2187 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2187 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3825 - inet6/filter/limit-3825 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2187 - inet6/filter/limit-3825 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-2187 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3827 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3826 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3826 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2188 - inet/filter/limit-3826 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3826 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-2188 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2188 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3826 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3826 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2188 - inet6/filter/limit-3826 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-2188 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3828 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3827 - inet/filter/limit-3827 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2189 - inet/filter/limit-3827 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2189 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2189 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3827 - inet6/filter/limit-3827 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2189 - inet6/filter/logdrop-2189 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3829 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3828 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3828 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2190 - inet/filter/limit-3828 -j ACCEPT - inet/filter/logdrop-2190 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2190 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3828 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3828 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2190 - inet6/filter/limit-3828 -j ACCEPT - inet6/filter/logdrop-2190 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3830 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2191 - inet/filter/logdrop-2191 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2191 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2191 - inet6/filter/logdrop-2191 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3831 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3830 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3830 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2192 - inet/filter/limit-3830 -m limit --limit 1/second -j LOG - inet/filter/limit-3830 -j ACCEPT - inet/filter/logdrop-2192 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2192 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3830 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3830 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2192 - inet6/filter/limit-3830 -m limit --limit 1/second -j LOG - inet6/filter/limit-3830 -j ACCEPT - inet6/filter/logdrop-2192 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3832 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3831 - inet/filter/limit-3831 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2193 - inet/filter/limit-3831 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2193 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2193 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3831 - inet6/filter/limit-3831 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2193 - inet6/filter/limit-3831 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2193 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3833 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3832 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3832 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2194 - inet/filter/limit-3832 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3832 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3832 -j ACCEPT - inet/filter/logdrop-2194 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2194 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3832 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3832 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2194 - inet6/filter/limit-3832 -j TEE --gateway fc00::2 - inet6/filter/limit-3832 -j ACCEPT - inet6/filter/logdrop-2194 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3834 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3833 - inet/filter/limit-3833 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2195 - inet/filter/limit-3833 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3833 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2195 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2195 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3833 - inet6/filter/limit-3833 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2195 - inet6/filter/limit-3833 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2195 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3835 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3834 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3834 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2196 - inet/filter/limit-3834 -j ACCEPT - inet/filter/logdrop-2196 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2196 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3834 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3834 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2196 - inet6/filter/limit-3834 -j ACCEPT - inet6/filter/logdrop-2196 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3836 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2197 - inet/filter/logdrop-2197 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2197 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2197 - inet6/filter/logdrop-2197 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3837 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3836 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3836 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2198 - inet/filter/limit-3836 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3836 -j ACCEPT - inet/filter/logdrop-2198 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2198 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3836 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3836 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2198 - inet6/filter/limit-3836 -j ACCEPT - inet6/filter/logdrop-2198 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3838 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3837 - inet/filter/limit-3837 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2199 - inet/filter/limit-3837 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2199 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2199 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3837 - inet6/filter/limit-3837 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2199 - inet6/filter/logdrop-2199 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3839 {"flow-limit":150,"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3838 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3838 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3838 -j ACCEPT - inet/filter/limit-3838 -m limit --limit 1/second -j LOG - inet/filter/limit-3838 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3838 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3838 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3838 -j ACCEPT - inet6/filter/limit-3838 -m limit --limit 1/second -j LOG - inet6/filter/limit-3838 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3840 {"action":"pass","flow-limit":150,"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3839 - inet/filter/limit-3839 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3839 -j RETURN - inet/filter/limit-3839 -m limit --limit 1/second -j LOG - inet/filter/limit-3839 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3839 - inet6/filter/limit-3839 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3839 -j RETURN - inet6/filter/limit-3839 -m limit --limit 1/second -j LOG - inet6/filter/limit-3839 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3841 {"flow-limit":150,"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3840 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3840 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3840 -j logaccept-66 - inet/filter/limit-3840 -m limit --limit 1/second -j LOG - inet/filter/limit-3840 -j DROP - inet/filter/logaccept-66 -m limit --limit 1/second -j LOG - inet/filter/logaccept-66 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3840 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3840 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3840 -j logaccept-66 - inet6/filter/limit-3840 -m limit --limit 1/second -j LOG - inet6/filter/limit-3840 -j DROP - inet6/filter/logaccept-66 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-66 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3842 {"flow-limit":150,"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3841 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3841 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3841 -j logaccept-67 - inet/filter/limit-3841 -m limit --limit 1/second -j LOG - inet/filter/limit-3841 -j DROP - inet/filter/logaccept-67 -j TEE --gateway 10.0.0.1 - inet/filter/logaccept-67 -j TEE --gateway 10.0.0.2 - inet/filter/logaccept-67 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3841 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3841 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3841 -j logaccept-67 - inet6/filter/limit-3841 -m limit --limit 1/second -j LOG - inet6/filter/limit-3841 -j DROP - inet6/filter/logaccept-67 -j TEE --gateway fc00::2 - inet6/filter/logaccept-67 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3843 {"flow-limit":150,"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3842 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3842 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3842 -j ACCEPT - inet/filter/limit-3842 -m limit --limit 1/second -j LOG - inet/filter/limit-3842 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3842 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3842 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3842 -j ACCEPT - inet6/filter/limit-3842 -m limit --limit 1/second -j LOG - inet6/filter/limit-3842 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3844 {"flow-limit":150,"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3843 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3843 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3843 -j logaccept-68 - inet/filter/limit-3843 -m limit --limit 1/second -j LOG - inet/filter/limit-3843 -j DROP - inet/filter/logaccept-68 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-68 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3843 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3843 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3843 -j logaccept-68 - inet6/filter/limit-3843 -m limit --limit 1/second -j LOG - inet6/filter/limit-3843 -j DROP - inet6/filter/logaccept-68 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3845 {"flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3844 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3844 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3844 -j ACCEPT - inet/filter/limit-3844 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3844 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3844 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3844 -j ACCEPT - inet6/filter/limit-3844 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3846 {"action":"pass","flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3845 - inet/filter/limit-3845 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3845 -j RETURN - inet/filter/limit-3845 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3845 - inet6/filter/limit-3845 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3845 -j RETURN - inet6/filter/limit-3845 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3847 {"flow-limit":{"count":150,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3846 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3846 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3846 -j logaccept-69 - inet/filter/limit-3846 -j DROP - inet/filter/logaccept-69 -m limit --limit 1/second -j LOG - inet/filter/logaccept-69 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3846 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3846 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3846 -j logaccept-69 - inet6/filter/limit-3846 -j DROP - inet6/filter/logaccept-69 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-69 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3848 {"flow-limit":{"count":150,"log":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3847 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3847 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3847 -j logaccept-70 - inet/filter/limit-3847 -j DROP - inet/filter/logaccept-70 -j TEE --gateway 10.0.0.1 - inet/filter/logaccept-70 -j TEE --gateway 10.0.0.2 - inet/filter/logaccept-70 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3847 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3847 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3847 -j logaccept-70 - inet6/filter/limit-3847 -j DROP - inet6/filter/logaccept-70 -j TEE --gateway fc00::2 - inet6/filter/logaccept-70 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3849 {"flow-limit":{"count":150,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3848 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3848 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3848 -j ACCEPT - inet/filter/limit-3848 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3848 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3848 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3848 -j ACCEPT - inet6/filter/limit-3848 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3850 {"flow-limit":{"count":150,"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3849 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3849 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3849 -j logaccept-71 - inet/filter/limit-3849 -j DROP - inet/filter/logaccept-71 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-71 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3849 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3849 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3849 -j logaccept-71 - inet6/filter/limit-3849 -j DROP - inet6/filter/logaccept-71 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3851 {"flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3850 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3850 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3850 -j ACCEPT - inet/filter/limit-3850 -m limit --limit 1/second -j LOG - inet/filter/limit-3850 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3850 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3850 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3850 -j ACCEPT - inet6/filter/limit-3850 -m limit --limit 1/second -j LOG - inet6/filter/limit-3850 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3852 {"action":"pass","flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3851 - inet/filter/limit-3851 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3851 -j RETURN - inet/filter/limit-3851 -m limit --limit 1/second -j LOG - inet/filter/limit-3851 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3851 - inet6/filter/limit-3851 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3851 -j RETURN - inet6/filter/limit-3851 -m limit --limit 1/second -j LOG - inet6/filter/limit-3851 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3853 {"flow-limit":{"count":150},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3852 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3852 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3852 -j logaccept-72 - inet/filter/limit-3852 -m limit --limit 1/second -j LOG - inet/filter/limit-3852 -j DROP - inet/filter/logaccept-72 -m limit --limit 1/second -j LOG - inet/filter/logaccept-72 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3852 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3852 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3852 -j logaccept-72 - inet6/filter/limit-3852 -m limit --limit 1/second -j LOG - inet6/filter/limit-3852 -j DROP - inet6/filter/logaccept-72 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-72 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3854 {"flow-limit":{"count":150},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3853 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3853 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3853 -j logaccept-73 - inet/filter/limit-3853 -m limit --limit 1/second -j LOG - inet/filter/limit-3853 -j DROP - inet/filter/logaccept-73 -j TEE --gateway 10.0.0.1 - inet/filter/logaccept-73 -j TEE --gateway 10.0.0.2 - inet/filter/logaccept-73 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3853 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3853 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3853 -j logaccept-73 - inet6/filter/limit-3853 -m limit --limit 1/second -j LOG - inet6/filter/limit-3853 -j DROP - inet6/filter/logaccept-73 -j TEE --gateway fc00::2 - inet6/filter/logaccept-73 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3855 {"flow-limit":{"count":150},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3854 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3854 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3854 -j ACCEPT - inet/filter/limit-3854 -m limit --limit 1/second -j LOG - inet/filter/limit-3854 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3854 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3854 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3854 -j ACCEPT - inet6/filter/limit-3854 -m limit --limit 1/second -j LOG - inet6/filter/limit-3854 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3856 {"flow-limit":{"count":150},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3855 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3855 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3855 -j logaccept-74 - inet/filter/limit-3855 -m limit --limit 1/second -j LOG - inet/filter/limit-3855 -j DROP - inet/filter/logaccept-74 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-74 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3855 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3855 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3855 -j logaccept-74 - inet6/filter/limit-3855 -m limit --limit 1/second -j LOG - inet6/filter/limit-3855 -j DROP - inet6/filter/logaccept-74 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3857 {"flow-limit":{"count":150,"log":"mirror"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3856 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3856 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3856 -j ACCEPT - inet/filter/limit-3856 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3856 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3856 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3856 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3856 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3856 -j ACCEPT - inet6/filter/limit-3856 -j TEE --gateway fc00::2 - inet6/filter/limit-3856 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3858 {"action":"pass","flow-limit":{"count":150,"log":"mirror"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3857 - inet/filter/limit-3857 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3857 -j RETURN - inet/filter/limit-3857 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3857 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3857 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3857 - inet6/filter/limit-3857 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3857 -j RETURN - inet6/filter/limit-3857 -j TEE --gateway fc00::2 - inet6/filter/limit-3857 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3859 {"flow-limit":{"count":150,"log":"mirror"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3858 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3858 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3858 -j logaccept-75 - inet/filter/limit-3858 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3858 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3858 -j DROP - inet/filter/logaccept-75 -m limit --limit 1/second -j LOG - inet/filter/logaccept-75 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3858 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3858 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3858 -j logaccept-75 - inet6/filter/limit-3858 -j TEE --gateway fc00::2 - inet6/filter/limit-3858 -j DROP - inet6/filter/logaccept-75 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-75 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3860 {"flow-limit":{"count":150,"log":"mirror"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3859 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3859 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3859 -j logaccept-76 - inet/filter/limit-3859 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3859 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3859 -j DROP - inet/filter/logaccept-76 -j TEE --gateway 10.0.0.1 - inet/filter/logaccept-76 -j TEE --gateway 10.0.0.2 - inet/filter/logaccept-76 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3859 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3859 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3859 -j logaccept-76 - inet6/filter/limit-3859 -j TEE --gateway fc00::2 - inet6/filter/limit-3859 -j DROP - inet6/filter/logaccept-76 -j TEE --gateway fc00::2 - inet6/filter/logaccept-76 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3861 {"flow-limit":{"count":150,"log":"mirror"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3860 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3860 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3860 -j ACCEPT - inet/filter/limit-3860 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3860 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3860 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3860 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3860 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3860 -j ACCEPT - inet6/filter/limit-3860 -j TEE --gateway fc00::2 - inet6/filter/limit-3860 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3862 {"flow-limit":{"count":150,"log":"mirror"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3861 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3861 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3861 -j logaccept-77 - inet/filter/limit-3861 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3861 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3861 -j DROP - inet/filter/logaccept-77 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-77 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3861 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3861 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3861 -j logaccept-77 - inet6/filter/limit-3861 -j TEE --gateway fc00::2 - inet6/filter/limit-3861 -j DROP - inet6/filter/logaccept-77 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3863 {"flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3862 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3862 -j ACCEPT - inet/filter/limit-3862 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3862 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3862 -j ACCEPT - inet6/filter/limit-3862 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3864 {"action":"pass","flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3863 - inet/filter/limit-3863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3863 -j RETURN - inet/filter/limit-3863 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3863 - inet6/filter/limit-3863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3863 -j RETURN - inet6/filter/limit-3863 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3865 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3864 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3864 -j logaccept-78 - inet/filter/limit-3864 -j DROP - inet/filter/logaccept-78 -m limit --limit 1/second -j LOG - inet/filter/logaccept-78 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3864 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3864 -j logaccept-78 - inet6/filter/limit-3864 -j DROP - inet6/filter/logaccept-78 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-78 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3866 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3865 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3865 -j logaccept-79 - inet/filter/limit-3865 -j DROP - inet/filter/logaccept-79 -j TEE --gateway 10.0.0.1 - inet/filter/logaccept-79 -j TEE --gateway 10.0.0.2 - inet/filter/logaccept-79 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3865 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3865 -j logaccept-79 - inet6/filter/limit-3865 -j DROP - inet6/filter/logaccept-79 -j TEE --gateway fc00::2 - inet6/filter/logaccept-79 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3867 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3866 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3866 -j ACCEPT - inet/filter/limit-3866 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3866 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3866 -j ACCEPT - inet6/filter/limit-3866 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3868 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3867 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3867 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3867 -j logaccept-80 - inet/filter/limit-3867 -j DROP - inet/filter/logaccept-80 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-80 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3867 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3867 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3867 -j logaccept-80 - inet6/filter/limit-3867 -j DROP - inet6/filter/logaccept-80 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3869 {"flow-limit":{"count":150,"log":"ulog"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3868 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3868 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3868 -j ACCEPT - inet/filter/limit-3868 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3868 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3868 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3868 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3868 -j ACCEPT - inet6/filter/limit-3868 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3870 {"action":"pass","flow-limit":{"count":150,"log":"ulog"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3869 - inet/filter/limit-3869 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3869 -j RETURN - inet/filter/limit-3869 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3869 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3869 - inet6/filter/limit-3869 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3869 -j RETURN - inet6/filter/limit-3869 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3871 {"flow-limit":{"count":150,"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3870 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3870 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3870 -j logaccept-81 - inet/filter/limit-3870 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3870 -j DROP - inet/filter/logaccept-81 -m limit --limit 1/second -j LOG - inet/filter/logaccept-81 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3870 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3870 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3870 -j logaccept-81 - inet6/filter/limit-3870 -j DROP - inet6/filter/logaccept-81 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-81 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3872 {"flow-limit":{"count":150,"log":"ulog"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3871 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3871 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3871 -j logaccept-82 - inet/filter/limit-3871 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3871 -j DROP - inet/filter/logaccept-82 -j TEE --gateway 10.0.0.1 - inet/filter/logaccept-82 -j TEE --gateway 10.0.0.2 - inet/filter/logaccept-82 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3871 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3871 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3871 -j logaccept-82 - inet6/filter/limit-3871 -j DROP - inet6/filter/logaccept-82 -j TEE --gateway fc00::2 - inet6/filter/logaccept-82 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3873 {"flow-limit":{"count":150,"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3872 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3872 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3872 -j ACCEPT - inet/filter/limit-3872 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3872 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3872 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3872 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3872 -j ACCEPT - inet6/filter/limit-3872 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3874 {"flow-limit":{"count":150,"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3873 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3873 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3873 -j logaccept-83 - inet/filter/limit-3873 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3873 -j DROP - inet/filter/logaccept-83 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-83 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3873 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3873 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3873 -j logaccept-83 - inet6/filter/limit-3873 -j DROP - inet6/filter/logaccept-83 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3875 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3874 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3874 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3874 -j ACCEPT - inet/filter/limit-3874 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3874 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3874 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3874 -j ACCEPT - inet6/filter/limit-3874 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3876 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3875 - inet/filter/limit-3875 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3875 -j RETURN - inet/filter/limit-3875 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3875 - inet6/filter/limit-3875 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3875 -j RETURN - inet6/filter/limit-3875 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3877 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3876 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3876 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3876 -j logaccept-84 - inet/filter/limit-3876 -j DROP - inet/filter/logaccept-84 -m limit --limit 1/second -j LOG - inet/filter/logaccept-84 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3876 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3876 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3876 -j logaccept-84 - inet6/filter/limit-3876 -j DROP - inet6/filter/logaccept-84 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-84 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3878 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3877 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3877 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3877 -j logaccept-85 - inet/filter/limit-3877 -j DROP - inet/filter/logaccept-85 -j TEE --gateway 10.0.0.1 - inet/filter/logaccept-85 -j TEE --gateway 10.0.0.2 - inet/filter/logaccept-85 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3877 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3877 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3877 -j logaccept-85 - inet6/filter/limit-3877 -j DROP - inet6/filter/logaccept-85 -j TEE --gateway fc00::2 - inet6/filter/logaccept-85 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3879 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3878 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3878 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3878 -j ACCEPT - inet/filter/limit-3878 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3878 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3878 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3878 -j ACCEPT - inet6/filter/limit-3878 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3880 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3879 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3879 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3879 -j logaccept-86 - inet/filter/limit-3879 -j DROP - inet/filter/logaccept-86 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-86 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3879 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3879 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3879 -j logaccept-86 - inet6/filter/limit-3879 -j DROP - inet6/filter/logaccept-86 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3881 {"flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3880 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3880 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3880 -j ACCEPT - inet/filter/limit-3880 -m limit --limit 1/second -j LOG - inet/filter/limit-3880 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3880 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3880 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3880 -j ACCEPT - inet6/filter/limit-3880 -m limit --limit 1/second -j LOG - inet6/filter/limit-3880 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3882 {"action":"pass","flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3881 - inet/filter/limit-3881 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3881 -j RETURN - inet/filter/limit-3881 -m limit --limit 1/second -j LOG - inet/filter/limit-3881 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3881 - inet6/filter/limit-3881 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3881 -j RETURN - inet6/filter/limit-3881 -m limit --limit 1/second -j LOG - inet6/filter/limit-3881 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3883 {"flow-limit":{"count":150,"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3882 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3882 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3882 -j logaccept-87 - inet/filter/limit-3882 -m limit --limit 1/second -j LOG - inet/filter/limit-3882 -j DROP - inet/filter/logaccept-87 -m limit --limit 1/second -j LOG - inet/filter/logaccept-87 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3882 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3882 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3882 -j logaccept-87 - inet6/filter/limit-3882 -m limit --limit 1/second -j LOG - inet6/filter/limit-3882 -j DROP - inet6/filter/logaccept-87 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-87 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3884 {"flow-limit":{"count":150,"interval":5},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3883 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3883 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3883 -j logaccept-88 - inet/filter/limit-3883 -m limit --limit 1/second -j LOG - inet/filter/limit-3883 -j DROP - inet/filter/logaccept-88 -j TEE --gateway 10.0.0.1 - inet/filter/logaccept-88 -j TEE --gateway 10.0.0.2 - inet/filter/logaccept-88 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3883 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3883 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3883 -j logaccept-88 - inet6/filter/limit-3883 -m limit --limit 1/second -j LOG - inet6/filter/limit-3883 -j DROP - inet6/filter/logaccept-88 -j TEE --gateway fc00::2 - inet6/filter/logaccept-88 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3885 {"flow-limit":{"count":150,"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3884 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3884 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3884 -j ACCEPT - inet/filter/limit-3884 -m limit --limit 1/second -j LOG - inet/filter/limit-3884 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3884 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3884 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3884 -j ACCEPT - inet6/filter/limit-3884 -m limit --limit 1/second -j LOG - inet6/filter/limit-3884 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3886 {"flow-limit":{"count":150,"interval":5},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3885 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3885 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3885 -j logaccept-89 - inet/filter/limit-3885 -m limit --limit 1/second -j LOG - inet/filter/limit-3885 -j DROP - inet/filter/logaccept-89 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-89 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3885 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3885 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3885 -j logaccept-89 - inet6/filter/limit-3885 -m limit --limit 1/second -j LOG - inet6/filter/limit-3885 -j DROP - inet6/filter/logaccept-89 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3887 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3886 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3886 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3886 -j ACCEPT - inet/filter/limit-3886 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3886 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3886 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3886 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3886 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3886 -j ACCEPT - inet6/filter/limit-3886 -j TEE --gateway fc00::2 - inet6/filter/limit-3886 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3888 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"mirror"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3887 - inet/filter/limit-3887 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3887 -j RETURN - inet/filter/limit-3887 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3887 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3887 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3887 - inet6/filter/limit-3887 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3887 -j RETURN - inet6/filter/limit-3887 -j TEE --gateway fc00::2 - inet6/filter/limit-3887 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3889 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3888 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3888 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3888 -j logaccept-90 - inet/filter/limit-3888 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3888 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3888 -j DROP - inet/filter/logaccept-90 -m limit --limit 1/second -j LOG - inet/filter/logaccept-90 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3888 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3888 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3888 -j logaccept-90 - inet6/filter/limit-3888 -j TEE --gateway fc00::2 - inet6/filter/limit-3888 -j DROP - inet6/filter/logaccept-90 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-90 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3890 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3889 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3889 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3889 -j logaccept-91 - inet/filter/limit-3889 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3889 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3889 -j DROP - inet/filter/logaccept-91 -j TEE --gateway 10.0.0.1 - inet/filter/logaccept-91 -j TEE --gateway 10.0.0.2 - inet/filter/logaccept-91 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3889 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3889 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3889 -j logaccept-91 - inet6/filter/limit-3889 -j TEE --gateway fc00::2 - inet6/filter/limit-3889 -j DROP - inet6/filter/logaccept-91 -j TEE --gateway fc00::2 - inet6/filter/logaccept-91 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3891 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3890 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3890 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3890 -j ACCEPT - inet/filter/limit-3890 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3890 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3890 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3890 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3890 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3890 -j ACCEPT - inet6/filter/limit-3890 -j TEE --gateway fc00::2 - inet6/filter/limit-3890 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3892 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3891 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3891 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3891 -j logaccept-92 - inet/filter/limit-3891 -j TEE --gateway 10.0.0.1 - inet/filter/limit-3891 -j TEE --gateway 10.0.0.2 - inet/filter/limit-3891 -j DROP - inet/filter/logaccept-92 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-92 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3891 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3891 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3891 -j logaccept-92 - inet6/filter/limit-3891 -j TEE --gateway fc00::2 - inet6/filter/limit-3891 -j DROP - inet6/filter/logaccept-92 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3893 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3892 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3892 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3892 -j ACCEPT - inet/filter/limit-3892 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3892 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3892 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3892 -j ACCEPT - inet6/filter/limit-3892 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3894 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3893 - inet/filter/limit-3893 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3893 -j RETURN - inet/filter/limit-3893 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3893 - inet6/filter/limit-3893 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3893 -j RETURN - inet6/filter/limit-3893 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3895 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3894 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3894 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3894 -j logaccept-93 - inet/filter/limit-3894 -j DROP - inet/filter/logaccept-93 -m limit --limit 1/second -j LOG - inet/filter/logaccept-93 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3894 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3894 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3894 -j logaccept-93 - inet6/filter/limit-3894 -j DROP - inet6/filter/logaccept-93 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-93 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3896 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3895 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3895 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3895 -j logaccept-94 - inet/filter/limit-3895 -j DROP - inet/filter/logaccept-94 -j TEE --gateway 10.0.0.1 - inet/filter/logaccept-94 -j TEE --gateway 10.0.0.2 - inet/filter/logaccept-94 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3895 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3895 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3895 -j logaccept-94 - inet6/filter/limit-3895 -j DROP - inet6/filter/logaccept-94 -j TEE --gateway fc00::2 - inet6/filter/logaccept-94 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3897 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3896 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3896 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3896 -j ACCEPT - inet/filter/limit-3896 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3896 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3896 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3896 -j ACCEPT - inet6/filter/limit-3896 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3898 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3897 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3897 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3897 -j logaccept-95 - inet/filter/limit-3897 -j DROP - inet/filter/logaccept-95 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-95 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3897 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3897 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3897 -j logaccept-95 - inet6/filter/limit-3897 -j DROP - inet6/filter/logaccept-95 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3899 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3898 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3898 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3898 -j ACCEPT - inet/filter/limit-3898 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3898 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3898 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3898 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3898 -j ACCEPT - inet6/filter/limit-3898 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3900 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3899 - inet/filter/limit-3899 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3899 -j RETURN - inet/filter/limit-3899 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3899 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3899 - inet6/filter/limit-3899 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3899 -j RETURN - inet6/filter/limit-3899 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3901 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3900 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3900 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3900 -j logaccept-96 - inet/filter/limit-3900 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3900 -j DROP - inet/filter/logaccept-96 -m limit --limit 1/second -j LOG - inet/filter/logaccept-96 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3900 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3900 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3900 -j logaccept-96 - inet6/filter/limit-3900 -j DROP - inet6/filter/logaccept-96 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-96 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3902 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3901 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3901 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3901 -j logaccept-97 - inet/filter/limit-3901 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3901 -j DROP - inet/filter/logaccept-97 -j TEE --gateway 10.0.0.1 - inet/filter/logaccept-97 -j TEE --gateway 10.0.0.2 - inet/filter/logaccept-97 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3901 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3901 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3901 -j logaccept-97 - inet6/filter/limit-3901 -j DROP - inet6/filter/logaccept-97 -j TEE --gateway fc00::2 - inet6/filter/logaccept-97 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3903 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3902 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3902 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3902 -j ACCEPT - inet/filter/limit-3902 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3902 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3902 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3902 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3902 -j ACCEPT - inet6/filter/limit-3902 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 3904 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-3903 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-3903 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3903 -j logaccept-98 - inet/filter/limit-3903 -m limit --limit 12/minute -j ULOG - inet/filter/limit-3903 -j DROP - inet/filter/logaccept-98 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-98 -j ACCEPT - inet/raw/OUTPUT -o eth0 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-3903 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-3903 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3903 -j logaccept-98 - inet6/filter/limit-3903 -j DROP - inet6/filter/logaccept-98 -j ACCEPT - inet6/raw/OUTPUT -o eth0 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +Filter 2929 {"flow-limit":1,"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-0 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-0 -m recent --name limit-ntp-0 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-0 + inet/filter/limit-ntp-0 -m recent --name limit-ntp-0 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-0 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-0 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-0 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-0 -m recent --name limit-ntp-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-0 + inet6/filter/limit-ntp-0 -m recent --name limit-ntp-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-0 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-0 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2930 {"action":"pass","flow-limit":1,"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-1 + inet/filter/limit-ntp-1 -m recent --name limit-ntp-1 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-1 + inet/filter/limit-ntp-1 -m recent --name limit-ntp-1 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-1 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-1 + inet6/filter/limit-ntp-1 -m recent --name limit-ntp-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-1 + inet6/filter/limit-ntp-1 -m recent --name limit-ntp-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-1 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2931 {"flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-2 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-2 -m recent --name limit-ntp-2 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-2 + inet/filter/limit-ntp-2 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-2 -m recent --name limit-ntp-2 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-2 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-2 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-2 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-2 -m recent --name limit-ntp-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-2 + inet6/filter/limit-ntp-2 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-2 -m recent --name limit-ntp-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-2 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-2 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2932 {"action":"pass","flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-3 + inet/filter/limit-ntp-3 -m recent --name limit-ntp-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-3 + inet/filter/limit-ntp-3 -m recent --name limit-ntp-3 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-3 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-3 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-3 + inet6/filter/limit-ntp-3 -m recent --name limit-ntp-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-3 + inet6/filter/limit-ntp-3 -m recent --name limit-ntp-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-3 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-3 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2933 {"flow-limit":1,"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-4 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-4 -m recent --name limit-ntp-4 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-4 + inet/filter/limit-ntp-4 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-4 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-4 -m recent --name limit-ntp-4 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-4 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-4 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-4 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-4 -m recent --name limit-ntp-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-4 + inet6/filter/limit-ntp-4 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-4 -m recent --name limit-ntp-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-4 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-4 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2934 {"action":"pass","flow-limit":1,"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-5 + inet/filter/limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-5 + inet/filter/limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-5 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-5 + inet6/filter/limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-5 + inet6/filter/limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-5 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2935 {"flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-6 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-6 -m recent --name limit-ntp-6 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-6 + inet/filter/limit-ntp-6 -m recent --name limit-ntp-6 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-6 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-6 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-6 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-6 -m recent --name limit-ntp-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-6 + inet6/filter/limit-ntp-6 -m recent --name limit-ntp-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-6 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-6 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2936 {"action":"pass","flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-7 + inet/filter/limit-ntp-7 -m recent --name limit-ntp-7 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-7 + inet/filter/limit-ntp-7 -m recent --name limit-ntp-7 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-7 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-7 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-7 + inet6/filter/limit-ntp-7 -m recent --name limit-ntp-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-7 + inet6/filter/limit-ntp-7 -m recent --name limit-ntp-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-7 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-7 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2937 {"flow-limit":1,"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-8 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-8 -m recent --name limit-ntp-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-8 + inet/filter/limit-ntp-8 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-8 -m recent --name limit-ntp-8 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-8 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-8 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-8 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-8 -m recent --name limit-ntp-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-8 + inet6/filter/limit-ntp-8 -m recent --name limit-ntp-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-8 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-8 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2938 {"action":"pass","flow-limit":1,"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-9 + inet/filter/limit-ntp-9 -m recent --name limit-ntp-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-9 + inet/filter/limit-ntp-9 -m recent --name limit-ntp-9 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-9 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-9 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-9 + inet6/filter/limit-ntp-9 -m recent --name limit-ntp-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-9 + inet6/filter/logdrop-ntp-9 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-9 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2939 {"flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-10 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-10 -m recent --name limit-ntp-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-10 -m recent --name limit-ntp-10 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-10 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-10 -m recent --name limit-ntp-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-10 -m recent --name limit-ntp-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2940 {"action":"pass","flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-11 + inet/filter/limit-ntp-11 -m recent --name limit-ntp-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-11 -m recent --name limit-ntp-11 --rsource --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-11 + inet6/filter/limit-ntp-11 -m recent --name limit-ntp-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-11 -m recent --name limit-ntp-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2941 {"flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-12 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-12 -m recent --name limit-ntp-12 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-12 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-12 -m recent --name limit-ntp-12 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-12 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-12 -m recent --name limit-ntp-12 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-12 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-12 -m recent --name limit-ntp-12 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2942 {"action":"pass","flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-13 + inet/filter/limit-ntp-13 -m recent --name limit-ntp-13 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-13 -m recent --name limit-ntp-13 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-13 + inet6/filter/limit-ntp-13 -m recent --name limit-ntp-13 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-13 -m recent --name limit-ntp-13 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2943 {"flow-limit":{"log":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-14 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-14 -m recent --name limit-ntp-14 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-14 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-14 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-14 -m recent --name limit-ntp-14 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-14 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-14 -m recent --name limit-ntp-14 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-14 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-14 -m recent --name limit-ntp-14 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2944 {"action":"pass","flow-limit":{"log":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-15 + inet/filter/limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-15 + inet6/filter/limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2945 {"flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-16 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-16 -m recent --name limit-ntp-16 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-16 -m recent --name limit-ntp-16 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-16 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-16 -m recent --name limit-ntp-16 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-16 -m recent --name limit-ntp-16 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2946 {"action":"pass","flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-17 + inet/filter/limit-ntp-17 -m recent --name limit-ntp-17 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-17 -m recent --name limit-ntp-17 --rsource --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-17 + inet6/filter/limit-ntp-17 -m recent --name limit-ntp-17 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-17 -m recent --name limit-ntp-17 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2947 {"flow-limit":{"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-18 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-18 -m recent --name limit-ntp-18 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-18 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-18 -m recent --name limit-ntp-18 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-18 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-18 -m recent --name limit-ntp-18 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-18 -m recent --name limit-ntp-18 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2948 {"action":"pass","flow-limit":{"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-19 + inet/filter/limit-ntp-19 -m recent --name limit-ntp-19 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-19 -m recent --name limit-ntp-19 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-19 + inet6/filter/limit-ntp-19 -m recent --name limit-ntp-19 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2949 {"flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-20 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-20 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-20 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-20 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2950 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-21 + inet/filter/limit-ntp-21 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-21 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-21 + inet6/filter/limit-ntp-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2951 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-22 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-22 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-22 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-22 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-22 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-22 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2952 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-23 + inet/filter/limit-ntp-23 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-23 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-23 + inet6/filter/limit-ntp-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2953 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-24 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-24 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-24 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-24 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-24 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-24 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-24 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-24 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-24 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2954 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-25 + inet/filter/limit-ntp-25 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-25 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-25 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-25 + inet6/filter/limit-ntp-25 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-25 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2955 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-26 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-26 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-26 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-26 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-26 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-26 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2956 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-27 + inet/filter/limit-ntp-27 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-27 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-27 + inet6/filter/limit-ntp-27 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-27 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2957 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-28 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-28 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-28 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-28 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-28 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-28 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-28 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2958 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-29 + inet/filter/limit-ntp-29 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-29 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-29 + inet6/filter/limit-ntp-29 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2959 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-30 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-30 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-30 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-30 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-30 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-30 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2960 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2961 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-32 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-32 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-32 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-32 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-32 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-32 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-32 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-32 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2962 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-33 + inet/filter/limit-ntp-33 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-33 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-33 + inet6/filter/limit-ntp-33 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-33 -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2963 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-34 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-34 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-34 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-34 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-34 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-34 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-34 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-34 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-34 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2964 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-35 + inet/filter/limit-ntp-35 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-35 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-35 -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-35 + inet6/filter/limit-ntp-35 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-35 -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2965 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-36 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-36 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-36 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-36 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-36 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-36 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2966 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2967 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-38 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-38 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-38 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-38 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-38 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-38 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-38 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2968 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-39 + inet/filter/limit-ntp-39 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-39 -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-39 + inet6/filter/limit-ntp-39 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2969 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-40 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-40 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-40 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-40 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-40 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-40 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2970 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-41 + inet/filter/limit-ntp-41 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-41 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-41 + inet6/filter/limit-ntp-41 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-41 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2971 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-42 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-42 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-42 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-42 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-42 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-42 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-42 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-42 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2972 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-43 + inet/filter/limit-ntp-43 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-43 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-43 + inet6/filter/limit-ntp-43 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-43 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2973 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-44 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-44 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-44 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-44 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-44 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-44 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-44 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-44 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-44 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2974 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-45 + inet/filter/limit-ntp-45 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-45 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-45 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-45 + inet6/filter/limit-ntp-45 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-45 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2975 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-46 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-46 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-46 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-46 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-46 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-46 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2976 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-47 + inet/filter/limit-ntp-47 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-47 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-47 + inet6/filter/limit-ntp-47 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-47 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2977 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-48 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-48 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-48 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-48 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-48 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-48 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-48 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2978 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-49 + inet/filter/limit-ntp-49 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-49 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-49 + inet6/filter/limit-ntp-49 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2979 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-50 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-50 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-50 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-50 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-50 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-50 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2980 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2981 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-52 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-52 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-52 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-52 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-52 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-52 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-52 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-52 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2982 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-53 + inet/filter/limit-ntp-53 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-53 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-53 + inet6/filter/limit-ntp-53 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-53 -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2983 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-54 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-54 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-54 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-54 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-54 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-54 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-54 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-54 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-54 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2984 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-55 + inet/filter/limit-ntp-55 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-55 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-55 -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-55 + inet6/filter/limit-ntp-55 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-55 -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2985 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-56 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-56 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-56 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-56 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-56 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-56 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2986 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2987 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-58 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-58 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-58 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-58 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-58 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-58 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-58 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2988 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-59 + inet/filter/limit-ntp-59 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-59 -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-59 + inet6/filter/limit-ntp-59 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2989 {"flow-limit":{"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-60 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-60 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-60 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-60 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-60 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-60 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2990 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-61 + inet/filter/limit-ntp-61 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-61 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-61 + inet6/filter/limit-ntp-61 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-61 -m recent --name user:C --rsource --mask fe00:: --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2991 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-62 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-62 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-62 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-62 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-62 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-62 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-62 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-62 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2992 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-63 + inet/filter/limit-ntp-63 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-63 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-63 + inet6/filter/limit-ntp-63 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-63 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2993 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-64 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-64 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-64 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-64 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-64 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-64 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-64 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-64 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-64 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2994 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-65 + inet/filter/limit-ntp-65 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-65 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-65 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-65 + inet6/filter/limit-ntp-65 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-65 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2995 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-66 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-66 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-66 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-66 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-66 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-66 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2996 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-67 + inet/filter/limit-ntp-67 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-67 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-67 + inet6/filter/limit-ntp-67 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-67 -m recent --name user:C --rsource --mask fe00:: --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2997 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-68 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-68 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-68 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-68 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-68 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-68 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-68 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2998 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-69 + inet/filter/limit-ntp-69 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-69 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-69 + inet6/filter/limit-ntp-69 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 2999 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-70 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-70 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-70 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-70 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-70 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-70 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3000 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3001 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-72 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-72 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-72 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-72 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-72 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-72 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-72 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-72 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3002 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-73 + inet/filter/limit-ntp-73 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-73 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-73 + inet6/filter/limit-ntp-73 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-73 -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3003 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-74 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-74 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-74 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-74 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-74 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-74 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-74 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-74 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-74 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3004 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-75 + inet/filter/limit-ntp-75 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-75 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-75 -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-75 + inet6/filter/limit-ntp-75 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-75 -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3005 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-76 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-76 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-76 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-76 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-76 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-76 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3006 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3007 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-78 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-78 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-78 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-78 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-78 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-78 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-78 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3008 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-79 + inet/filter/limit-ntp-79 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-79 -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-79 + inet6/filter/limit-ntp-79 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3009 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-80 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-80 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-80 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-80 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-80 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-80 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3010 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-81 + inet/filter/limit-ntp-81 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-81 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-81 + inet6/filter/limit-ntp-81 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-81 -m recent --name user:C --rdest --mask fe00:: --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3011 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-82 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-82 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-82 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-82 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-82 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-82 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-82 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-82 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3012 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-83 + inet/filter/limit-ntp-83 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-83 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-83 + inet6/filter/limit-ntp-83 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-83 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3013 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-84 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-84 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-84 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-84 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-84 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-84 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-84 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-84 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-84 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3014 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-85 + inet/filter/limit-ntp-85 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-85 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-85 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-85 + inet6/filter/limit-ntp-85 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-85 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3015 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-86 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-86 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-86 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-86 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-86 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-86 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3016 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-87 + inet/filter/limit-ntp-87 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-87 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-87 + inet6/filter/limit-ntp-87 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-87 -m recent --name user:C --rdest --mask fe00:: --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3017 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-88 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-88 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-88 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-88 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-88 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-88 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-88 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3018 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-89 + inet/filter/limit-ntp-89 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-89 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-89 + inet6/filter/limit-ntp-89 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3019 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-90 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-90 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-90 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-90 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-90 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-90 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3020 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3021 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-92 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-92 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-92 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-92 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-92 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-92 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-92 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-92 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3022 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-93 + inet/filter/limit-ntp-93 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-93 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-93 + inet6/filter/limit-ntp-93 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-93 -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3023 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-94 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-94 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-94 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-94 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-94 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-94 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-94 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-94 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-94 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3024 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-95 + inet/filter/limit-ntp-95 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-95 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-95 -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-95 + inet6/filter/limit-ntp-95 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-95 -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3025 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-96 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-96 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-96 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-96 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-96 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-96 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3026 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3027 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-98 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-98 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-98 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-98 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-98 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-98 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-98 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3028 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-99 + inet/filter/limit-ntp-99 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-99 -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-99 + inet6/filter/limit-ntp-99 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3029 {"flow-limit":{},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-100 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-100 -m recent --name limit-ntp-100 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-10 + inet/filter/limit-ntp-100 -m recent --name limit-ntp-100 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-10 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-10 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-100 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-100 -m recent --name limit-ntp-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-10 + inet6/filter/limit-ntp-100 -m recent --name limit-ntp-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-10 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-10 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3030 {"action":"pass","flow-limit":{},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-101 + inet/filter/limit-ntp-101 -m recent --name limit-ntp-101 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-11 + inet/filter/limit-ntp-101 -m recent --name limit-ntp-101 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-11 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-11 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-101 + inet6/filter/limit-ntp-101 -m recent --name limit-ntp-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-11 + inet6/filter/limit-ntp-101 -m recent --name limit-ntp-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-11 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-11 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3031 {"flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-102 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-102 -m recent --name limit-ntp-102 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-12 + inet/filter/limit-ntp-102 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-102 -m recent --name limit-ntp-102 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-12 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-12 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-102 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-102 -m recent --name limit-ntp-102 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-12 + inet6/filter/limit-ntp-102 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-102 -m recent --name limit-ntp-102 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-12 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-12 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3032 {"action":"pass","flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-103 + inet/filter/limit-ntp-103 -m recent --name limit-ntp-103 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-13 + inet/filter/limit-ntp-103 -m recent --name limit-ntp-103 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-13 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-13 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-103 + inet6/filter/limit-ntp-103 -m recent --name limit-ntp-103 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-13 + inet6/filter/limit-ntp-103 -m recent --name limit-ntp-103 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-13 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-13 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3033 {"flow-limit":{},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-104 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-104 -m recent --name limit-ntp-104 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-14 + inet/filter/limit-ntp-104 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-104 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-104 -m recent --name limit-ntp-104 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-14 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-14 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-104 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-104 -m recent --name limit-ntp-104 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-14 + inet6/filter/limit-ntp-104 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-104 -m recent --name limit-ntp-104 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-14 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-14 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3034 {"action":"pass","flow-limit":{},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-105 + inet/filter/limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-15 + inet/filter/limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-15 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-15 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-105 + inet6/filter/limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-15 + inet6/filter/limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-15 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-15 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3035 {"flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-106 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-106 -m recent --name limit-ntp-106 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-16 + inet/filter/limit-ntp-106 -m recent --name limit-ntp-106 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-16 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-16 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-106 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-106 -m recent --name limit-ntp-106 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-16 + inet6/filter/limit-ntp-106 -m recent --name limit-ntp-106 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-16 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-16 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3036 {"action":"pass","flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-107 + inet/filter/limit-ntp-107 -m recent --name limit-ntp-107 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-17 + inet/filter/limit-ntp-107 -m recent --name limit-ntp-107 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-17 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-17 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-107 + inet6/filter/limit-ntp-107 -m recent --name limit-ntp-107 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-17 + inet6/filter/limit-ntp-107 -m recent --name limit-ntp-107 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-17 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-17 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3037 {"flow-limit":{},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-108 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-108 -m recent --name limit-ntp-108 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-18 + inet/filter/limit-ntp-108 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-108 -m recent --name limit-ntp-108 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-18 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-18 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-108 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-108 -m recent --name limit-ntp-108 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-18 + inet6/filter/limit-ntp-108 -m recent --name limit-ntp-108 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-18 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-18 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3038 {"action":"pass","flow-limit":{},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-109 + inet/filter/limit-ntp-109 -m recent --name limit-ntp-109 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-19 + inet/filter/limit-ntp-109 -m recent --name limit-ntp-109 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-19 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-19 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-109 + inet6/filter/limit-ntp-109 -m recent --name limit-ntp-109 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-19 + inet6/filter/logdrop-ntp-19 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-19 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3039 {"flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-110 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-110 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-20 + inet/filter/limit-ntp-110 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-20 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-20 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-110 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-110 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-20 + inet6/filter/limit-ntp-110 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-20 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-20 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3040 {"action":"pass","flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-111 + inet/filter/limit-ntp-111 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-21 + inet/filter/limit-ntp-111 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-21 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-21 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-111 + inet6/filter/limit-ntp-111 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-21 + inet6/filter/limit-ntp-111 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-21 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-21 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3041 {"flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-112 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-112 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-22 + inet/filter/limit-ntp-112 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-112 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-22 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-22 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-112 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-112 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-22 + inet6/filter/limit-ntp-112 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-112 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-22 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-22 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3042 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-113 + inet/filter/limit-ntp-113 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-23 + inet/filter/limit-ntp-113 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-23 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-23 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-113 + inet6/filter/limit-ntp-113 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-23 + inet6/filter/limit-ntp-113 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-23 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-23 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3043 {"flow-limit":{"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-114 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-114 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-24 + inet/filter/limit-ntp-114 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-114 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-114 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-24 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-24 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-114 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-114 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-24 + inet6/filter/limit-ntp-114 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-114 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-24 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-24 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3044 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-115 + inet/filter/limit-ntp-115 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-25 + inet/filter/limit-ntp-115 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-115 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-25 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-25 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-115 + inet6/filter/limit-ntp-115 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-25 + inet6/filter/limit-ntp-115 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-25 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-25 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3045 {"flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-116 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-116 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-26 + inet/filter/limit-ntp-116 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-26 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-26 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-116 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-116 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-26 + inet6/filter/limit-ntp-116 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-26 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-26 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3046 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-117 + inet/filter/limit-ntp-117 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-27 + inet/filter/limit-ntp-117 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-27 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-27 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-117 + inet6/filter/limit-ntp-117 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-27 + inet6/filter/limit-ntp-117 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-27 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-27 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3047 {"flow-limit":{"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-118 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-118 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-28 + inet/filter/limit-ntp-118 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-118 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-28 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-28 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-118 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-118 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-28 + inet6/filter/limit-ntp-118 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-28 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-28 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3048 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-119 + inet/filter/limit-ntp-119 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-29 + inet/filter/limit-ntp-119 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-29 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-29 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-119 + inet6/filter/limit-ntp-119 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-29 + inet6/filter/logdrop-ntp-29 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-29 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3049 {"flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-120 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-120 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-30 + inet/filter/limit-ntp-120 -j ACCEPT + inet/filter/logdrop-ntp-30 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-30 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-120 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-30 + inet6/filter/limit-ntp-120 -j ACCEPT + inet6/filter/logdrop-ntp-30 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-30 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3050 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-31 + inet/filter/logdrop-ntp-31 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-31 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-31 + inet6/filter/logdrop-ntp-31 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-31 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3051 {"flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-122 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-122 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-32 + inet/filter/limit-ntp-122 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-122 -j ACCEPT + inet/filter/logdrop-ntp-32 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-32 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-122 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-32 + inet6/filter/limit-ntp-122 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-122 -j ACCEPT + inet6/filter/logdrop-ntp-32 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-32 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3052 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-123 + inet/filter/limit-ntp-123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-33 + inet/filter/limit-ntp-123 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-33 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-33 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-123 + inet6/filter/limit-ntp-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-33 + inet6/filter/limit-ntp-123 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-33 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-33 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3053 {"flow-limit":{"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-124 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-124 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-34 + inet/filter/limit-ntp-124 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-124 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-124 -j ACCEPT + inet/filter/logdrop-ntp-34 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-34 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-124 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-34 + inet6/filter/limit-ntp-124 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-124 -j ACCEPT + inet6/filter/logdrop-ntp-34 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-34 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3054 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-125 + inet/filter/limit-ntp-125 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-35 + inet/filter/limit-ntp-125 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-125 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-35 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-35 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-125 + inet6/filter/limit-ntp-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-35 + inet6/filter/limit-ntp-125 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-35 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-35 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3055 {"flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-126 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-126 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-36 + inet/filter/limit-ntp-126 -j ACCEPT + inet/filter/logdrop-ntp-36 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-36 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-126 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-36 + inet6/filter/limit-ntp-126 -j ACCEPT + inet6/filter/logdrop-ntp-36 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-36 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3056 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-37 + inet/filter/logdrop-ntp-37 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-37 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-37 + inet6/filter/logdrop-ntp-37 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-37 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3057 {"flow-limit":{"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-128 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-128 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-38 + inet/filter/limit-ntp-128 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-128 -j ACCEPT + inet/filter/logdrop-ntp-38 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-38 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-128 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-38 + inet6/filter/limit-ntp-128 -j ACCEPT + inet6/filter/logdrop-ntp-38 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-38 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3058 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-129 + inet/filter/limit-ntp-129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-39 + inet/filter/limit-ntp-129 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-39 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-39 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-129 + inet6/filter/limit-ntp-129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-39 + inet6/filter/logdrop-ntp-39 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-39 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3059 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-130 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-130 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-40 + inet/filter/limit-ntp-130 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-40 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-40 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-130 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-130 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-40 + inet6/filter/limit-ntp-130 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-40 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-40 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3060 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-131 + inet/filter/limit-ntp-131 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-41 + inet/filter/limit-ntp-131 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-41 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-41 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-131 + inet6/filter/limit-ntp-131 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-41 + inet6/filter/limit-ntp-131 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-41 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-41 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3061 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-132 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-132 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-42 + inet/filter/limit-ntp-132 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-132 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-42 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-42 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-132 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-42 + inet6/filter/limit-ntp-132 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-42 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-42 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3062 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-133 + inet/filter/limit-ntp-133 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-43 + inet/filter/limit-ntp-133 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-43 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-43 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-133 + inet6/filter/limit-ntp-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-43 + inet6/filter/limit-ntp-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-43 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-43 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3063 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-134 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-134 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-44 + inet/filter/limit-ntp-134 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-134 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-134 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-44 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-44 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-134 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-44 + inet6/filter/limit-ntp-134 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-44 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-44 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3064 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-135 + inet/filter/limit-ntp-135 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-45 + inet/filter/limit-ntp-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-45 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-45 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-135 + inet6/filter/limit-ntp-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-45 + inet6/filter/limit-ntp-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-45 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-45 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3065 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-136 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-136 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-46 + inet/filter/limit-ntp-136 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-46 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-46 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-136 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-46 + inet6/filter/limit-ntp-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-46 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-46 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3066 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-137 + inet/filter/limit-ntp-137 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-47 + inet/filter/limit-ntp-137 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-47 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-47 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-137 + inet6/filter/limit-ntp-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-47 + inet6/filter/limit-ntp-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-47 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-47 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3067 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-138 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-138 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-48 + inet/filter/limit-ntp-138 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-138 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-48 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-48 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-138 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-48 + inet6/filter/limit-ntp-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-48 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-48 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3068 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-139 + inet/filter/limit-ntp-139 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-49 + inet/filter/limit-ntp-139 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-49 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-49 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-139 + inet6/filter/limit-ntp-139 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-49 + inet6/filter/logdrop-ntp-49 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-49 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3069 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-140 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-140 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-50 + inet/filter/limit-ntp-140 -j ACCEPT + inet/filter/logdrop-ntp-50 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-50 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-140 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-50 + inet6/filter/limit-ntp-140 -j ACCEPT + inet6/filter/logdrop-ntp-50 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-50 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3070 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-51 + inet/filter/logdrop-ntp-51 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-51 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-51 + inet6/filter/logdrop-ntp-51 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-51 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3071 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-142 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-142 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-52 + inet/filter/limit-ntp-142 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-142 -j ACCEPT + inet/filter/logdrop-ntp-52 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-52 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-142 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-142 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-52 + inet6/filter/limit-ntp-142 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-142 -j ACCEPT + inet6/filter/logdrop-ntp-52 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-52 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3072 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-143 + inet/filter/limit-ntp-143 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-53 + inet/filter/limit-ntp-143 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-53 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-53 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-143 + inet6/filter/limit-ntp-143 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-53 + inet6/filter/limit-ntp-143 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-53 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-53 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3073 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-144 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-144 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-54 + inet/filter/limit-ntp-144 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-144 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-144 -j ACCEPT + inet/filter/logdrop-ntp-54 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-54 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-144 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-144 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-54 + inet6/filter/limit-ntp-144 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-144 -j ACCEPT + inet6/filter/logdrop-ntp-54 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-54 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3074 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-145 + inet/filter/limit-ntp-145 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-55 + inet/filter/limit-ntp-145 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-145 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-55 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-55 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-145 + inet6/filter/limit-ntp-145 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-55 + inet6/filter/limit-ntp-145 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-55 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-55 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3075 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-146 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-146 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-56 + inet/filter/limit-ntp-146 -j ACCEPT + inet/filter/logdrop-ntp-56 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-56 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-146 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-146 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-56 + inet6/filter/limit-ntp-146 -j ACCEPT + inet6/filter/logdrop-ntp-56 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-56 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3076 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-57 + inet/filter/logdrop-ntp-57 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-57 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-57 + inet6/filter/logdrop-ntp-57 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-57 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3077 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-148 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-148 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-58 + inet/filter/limit-ntp-148 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-148 -j ACCEPT + inet/filter/logdrop-ntp-58 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-58 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-148 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-58 + inet6/filter/limit-ntp-148 -j ACCEPT + inet6/filter/logdrop-ntp-58 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-58 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3078 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-149 + inet/filter/limit-ntp-149 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-59 + inet/filter/limit-ntp-149 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-59 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-59 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-149 + inet6/filter/limit-ntp-149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-59 + inet6/filter/logdrop-ntp-59 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-59 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3079 {"flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-150 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-150 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-60 + inet/filter/limit-ntp-150 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-60 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-60 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-150 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-150 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-60 + inet6/filter/limit-ntp-150 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-60 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-60 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3080 {"action":"pass","flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-151 + inet/filter/limit-ntp-151 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-61 + inet/filter/limit-ntp-151 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-ntp-61 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-61 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-151 + inet6/filter/limit-ntp-151 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-61 + inet6/filter/limit-ntp-151 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-ntp-61 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-61 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3081 {"flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-152 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-152 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-62 + inet/filter/limit-ntp-152 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-152 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-62 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-62 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-152 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-152 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-62 + inet6/filter/limit-ntp-152 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-152 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-62 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-62 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3082 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-153 + inet/filter/limit-ntp-153 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-63 + inet/filter/limit-ntp-153 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-63 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-63 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-153 + inet6/filter/limit-ntp-153 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-63 + inet6/filter/limit-ntp-153 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-63 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-63 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3083 {"flow-limit":{"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-154 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-154 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-64 + inet/filter/limit-ntp-154 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-154 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-154 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-64 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-64 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-154 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-154 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-64 + inet6/filter/limit-ntp-154 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-154 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-64 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-64 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3084 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-155 + inet/filter/limit-ntp-155 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-65 + inet/filter/limit-ntp-155 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-155 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-65 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-65 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-155 + inet6/filter/limit-ntp-155 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-65 + inet6/filter/limit-ntp-155 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-65 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-65 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3085 {"flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-156 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-156 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-66 + inet/filter/limit-ntp-156 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-66 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-66 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-156 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-156 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-66 + inet6/filter/limit-ntp-156 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-66 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-66 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3086 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-157 + inet/filter/limit-ntp-157 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-67 + inet/filter/limit-ntp-157 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-ntp-67 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-67 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-157 + inet6/filter/limit-ntp-157 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-67 + inet6/filter/limit-ntp-157 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-ntp-67 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-67 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3087 {"flow-limit":{"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-158 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-158 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-68 + inet/filter/limit-ntp-158 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-158 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-68 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-68 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-158 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-158 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-68 + inet6/filter/limit-ntp-158 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-68 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-68 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3088 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-159 + inet/filter/limit-ntp-159 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-69 + inet/filter/limit-ntp-159 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-69 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-69 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-159 + inet6/filter/limit-ntp-159 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-69 + inet6/filter/logdrop-ntp-69 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-69 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3089 {"flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-160 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-160 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-70 + inet/filter/limit-ntp-160 -j ACCEPT + inet/filter/logdrop-ntp-70 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-70 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-160 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-160 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-70 + inet6/filter/limit-ntp-160 -j ACCEPT + inet6/filter/logdrop-ntp-70 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-70 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3090 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-71 + inet/filter/logdrop-ntp-71 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-71 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-71 + inet6/filter/logdrop-ntp-71 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-71 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3091 {"flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-162 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-162 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-72 + inet/filter/limit-ntp-162 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-162 -j ACCEPT + inet/filter/logdrop-ntp-72 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-72 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-162 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-162 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-72 + inet6/filter/limit-ntp-162 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-162 -j ACCEPT + inet6/filter/logdrop-ntp-72 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-72 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3092 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-163 + inet/filter/limit-ntp-163 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-73 + inet/filter/limit-ntp-163 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-73 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-73 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-163 + inet6/filter/limit-ntp-163 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-73 + inet6/filter/limit-ntp-163 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-73 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-73 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3093 {"flow-limit":{"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-164 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-164 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-74 + inet/filter/limit-ntp-164 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-164 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-164 -j ACCEPT + inet/filter/logdrop-ntp-74 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-74 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-164 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-164 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-74 + inet6/filter/limit-ntp-164 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-164 -j ACCEPT + inet6/filter/logdrop-ntp-74 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-74 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3094 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-165 + inet/filter/limit-ntp-165 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-75 + inet/filter/limit-ntp-165 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-165 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-75 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-75 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-165 + inet6/filter/limit-ntp-165 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-75 + inet6/filter/limit-ntp-165 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-75 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-75 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3095 {"flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-166 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-166 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-76 + inet/filter/limit-ntp-166 -j ACCEPT + inet/filter/logdrop-ntp-76 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-76 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-166 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-166 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-76 + inet6/filter/limit-ntp-166 -j ACCEPT + inet6/filter/logdrop-ntp-76 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-76 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3096 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-77 + inet/filter/logdrop-ntp-77 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-77 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-77 + inet6/filter/logdrop-ntp-77 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-77 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3097 {"flow-limit":{"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-168 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-168 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-78 + inet/filter/limit-ntp-168 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-168 -j ACCEPT + inet/filter/logdrop-ntp-78 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-78 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-168 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-168 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-78 + inet6/filter/limit-ntp-168 -j ACCEPT + inet6/filter/logdrop-ntp-78 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-78 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3098 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-169 + inet/filter/limit-ntp-169 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-79 + inet/filter/limit-ntp-169 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-79 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-79 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-169 + inet6/filter/limit-ntp-169 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-79 + inet6/filter/logdrop-ntp-79 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-79 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3099 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-170 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-170 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-80 + inet/filter/limit-ntp-170 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-80 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-80 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-170 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-170 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-80 + inet6/filter/limit-ntp-170 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-80 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-80 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3100 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-171 + inet/filter/limit-ntp-171 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-81 + inet/filter/limit-ntp-171 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-ntp-81 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-81 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-171 + inet6/filter/limit-ntp-171 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-81 + inet6/filter/limit-ntp-171 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-ntp-81 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-81 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3101 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-172 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-172 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-82 + inet/filter/limit-ntp-172 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-172 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-82 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-82 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-172 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-172 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-82 + inet6/filter/limit-ntp-172 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-172 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-82 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-82 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3102 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-173 + inet/filter/limit-ntp-173 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-83 + inet/filter/limit-ntp-173 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-83 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-83 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-173 + inet6/filter/limit-ntp-173 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-83 + inet6/filter/limit-ntp-173 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-83 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-83 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3103 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-174 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-174 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-84 + inet/filter/limit-ntp-174 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-174 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-174 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-84 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-84 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-174 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-174 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-84 + inet6/filter/limit-ntp-174 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-174 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-84 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-84 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3104 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-175 + inet/filter/limit-ntp-175 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-85 + inet/filter/limit-ntp-175 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-175 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-85 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-85 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-175 + inet6/filter/limit-ntp-175 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-85 + inet6/filter/limit-ntp-175 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-85 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-85 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3105 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-176 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-176 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-86 + inet/filter/limit-ntp-176 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-86 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-86 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-176 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-176 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-86 + inet6/filter/limit-ntp-176 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-86 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-86 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3106 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-177 + inet/filter/limit-ntp-177 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-87 + inet/filter/limit-ntp-177 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-ntp-87 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-87 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-177 + inet6/filter/limit-ntp-177 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-87 + inet6/filter/limit-ntp-177 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-ntp-87 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-87 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3107 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-178 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-178 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-88 + inet/filter/limit-ntp-178 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-178 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-88 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-88 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-178 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-178 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-88 + inet6/filter/limit-ntp-178 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-88 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-88 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3108 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-179 + inet/filter/limit-ntp-179 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-89 + inet/filter/limit-ntp-179 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-89 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-89 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-179 + inet6/filter/limit-ntp-179 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-89 + inet6/filter/logdrop-ntp-89 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-89 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3109 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-180 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-180 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-90 + inet/filter/limit-ntp-180 -j ACCEPT + inet/filter/logdrop-ntp-90 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-90 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-180 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-180 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-90 + inet6/filter/limit-ntp-180 -j ACCEPT + inet6/filter/logdrop-ntp-90 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-90 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3110 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-91 + inet/filter/logdrop-ntp-91 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-91 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-91 + inet6/filter/logdrop-ntp-91 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-91 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3111 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-182 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-182 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-92 + inet/filter/limit-ntp-182 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-182 -j ACCEPT + inet/filter/logdrop-ntp-92 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-92 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-182 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-182 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-92 + inet6/filter/limit-ntp-182 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-182 -j ACCEPT + inet6/filter/logdrop-ntp-92 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-92 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3112 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-183 + inet/filter/limit-ntp-183 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-93 + inet/filter/limit-ntp-183 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-93 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-93 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-183 + inet6/filter/limit-ntp-183 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-93 + inet6/filter/limit-ntp-183 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-93 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-93 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3113 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-184 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-184 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-94 + inet/filter/limit-ntp-184 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-184 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-184 -j ACCEPT + inet/filter/logdrop-ntp-94 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-94 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-184 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-184 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-94 + inet6/filter/limit-ntp-184 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-184 -j ACCEPT + inet6/filter/logdrop-ntp-94 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-94 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3114 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-185 + inet/filter/limit-ntp-185 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-95 + inet/filter/limit-ntp-185 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-185 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-95 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-95 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-185 + inet6/filter/limit-ntp-185 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-95 + inet6/filter/limit-ntp-185 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-95 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-95 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3115 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-186 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-186 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-96 + inet/filter/limit-ntp-186 -j ACCEPT + inet/filter/logdrop-ntp-96 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-96 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-186 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-186 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-96 + inet6/filter/limit-ntp-186 -j ACCEPT + inet6/filter/logdrop-ntp-96 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-96 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3116 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-97 + inet/filter/logdrop-ntp-97 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-97 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-97 + inet6/filter/logdrop-ntp-97 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-97 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3117 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-188 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-188 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-98 + inet/filter/limit-ntp-188 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-188 -j ACCEPT + inet/filter/logdrop-ntp-98 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-98 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-188 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-188 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-98 + inet6/filter/limit-ntp-188 -j ACCEPT + inet6/filter/logdrop-ntp-98 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-98 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3118 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-189 + inet/filter/limit-ntp-189 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-99 + inet/filter/limit-ntp-189 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-99 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-99 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-189 + inet6/filter/limit-ntp-189 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-99 + inet6/filter/logdrop-ntp-99 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-99 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3119 {"flow-limit":{"log":"mirror"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-190 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-190 -m recent --name limit-ntp-190 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-100 + inet/filter/limit-ntp-190 -m recent --name limit-ntp-190 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-100 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-100 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-100 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-190 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-190 -m recent --name limit-ntp-190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-100 + inet6/filter/limit-ntp-190 -m recent --name limit-ntp-190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-100 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-100 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3120 {"action":"pass","flow-limit":{"log":"mirror"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-191 + inet/filter/limit-ntp-191 -m recent --name limit-ntp-191 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-101 + inet/filter/limit-ntp-191 -m recent --name limit-ntp-191 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-101 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-101 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-101 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-191 + inet6/filter/limit-ntp-191 -m recent --name limit-ntp-191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-101 + inet6/filter/limit-ntp-191 -m recent --name limit-ntp-191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-101 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-101 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3121 {"flow-limit":{"log":"mirror"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-192 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-192 -m recent --name limit-ntp-192 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-102 + inet/filter/limit-ntp-192 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-192 -m recent --name limit-ntp-192 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-102 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-102 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-102 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-192 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-192 -m recent --name limit-ntp-192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-102 + inet6/filter/limit-ntp-192 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-192 -m recent --name limit-ntp-192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-102 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-102 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3122 {"action":"pass","flow-limit":{"log":"mirror"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-193 + inet/filter/limit-ntp-193 -m recent --name limit-ntp-193 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-103 + inet/filter/limit-ntp-193 -m recent --name limit-ntp-193 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-103 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-103 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-103 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-193 + inet6/filter/limit-ntp-193 -m recent --name limit-ntp-193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-103 + inet6/filter/limit-ntp-193 -m recent --name limit-ntp-193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-103 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-103 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3123 {"flow-limit":{"log":"mirror"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-194 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-194 -m recent --name limit-ntp-194 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-104 + inet/filter/limit-ntp-194 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-194 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-194 -m recent --name limit-ntp-194 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-104 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-104 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-104 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-194 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-194 -m recent --name limit-ntp-194 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-104 + inet6/filter/limit-ntp-194 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-194 -m recent --name limit-ntp-194 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-104 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-104 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3124 {"action":"pass","flow-limit":{"log":"mirror"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-195 + inet/filter/limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-105 + inet/filter/limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-105 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-105 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-105 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-195 + inet6/filter/limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-105 + inet6/filter/limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-105 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-105 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3125 {"flow-limit":{"log":"mirror"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-196 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-196 -m recent --name limit-ntp-196 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-106 + inet/filter/limit-ntp-196 -m recent --name limit-ntp-196 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-106 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-106 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-106 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-196 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-196 -m recent --name limit-ntp-196 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-106 + inet6/filter/limit-ntp-196 -m recent --name limit-ntp-196 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-106 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-106 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3126 {"action":"pass","flow-limit":{"log":"mirror"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-197 + inet/filter/limit-ntp-197 -m recent --name limit-ntp-197 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-107 + inet/filter/limit-ntp-197 -m recent --name limit-ntp-197 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-107 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-107 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-107 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-197 + inet6/filter/limit-ntp-197 -m recent --name limit-ntp-197 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-107 + inet6/filter/limit-ntp-197 -m recent --name limit-ntp-197 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-107 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-107 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3127 {"flow-limit":{"log":"mirror"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-198 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-198 -m recent --name limit-ntp-198 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-108 + inet/filter/limit-ntp-198 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-198 -m recent --name limit-ntp-198 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-108 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-108 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-108 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-198 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-198 -m recent --name limit-ntp-198 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-108 + inet6/filter/limit-ntp-198 -m recent --name limit-ntp-198 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-108 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-108 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3128 {"action":"pass","flow-limit":{"log":"mirror"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-199 + inet/filter/limit-ntp-199 -m recent --name limit-ntp-199 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-109 + inet/filter/limit-ntp-199 -m recent --name limit-ntp-199 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-109 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-109 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-109 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-199 + inet6/filter/limit-ntp-199 -m recent --name limit-ntp-199 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-109 + inet6/filter/logdrop-ntp-109 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-109 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3129 {"flow-limit":{"log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-200 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-200 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-110 + inet/filter/limit-ntp-200 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-110 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-110 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-110 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-200 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-110 + inet6/filter/limit-ntp-200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-110 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-110 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3130 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-201 + inet/filter/limit-ntp-201 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-111 + inet/filter/limit-ntp-201 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-111 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-111 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-111 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-201 + inet6/filter/limit-ntp-201 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-111 + inet6/filter/limit-ntp-201 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-111 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-111 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3131 {"flow-limit":{"log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-202 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-202 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-112 + inet/filter/limit-ntp-202 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-202 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-112 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-112 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-112 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-202 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-112 + inet6/filter/limit-ntp-202 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-112 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-112 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3132 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-203 + inet/filter/limit-ntp-203 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-113 + inet/filter/limit-ntp-203 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-113 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-113 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-113 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-203 + inet6/filter/limit-ntp-203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-113 + inet6/filter/limit-ntp-203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-113 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-113 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3133 {"flow-limit":{"log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-204 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-204 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-114 + inet/filter/limit-ntp-204 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-204 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-204 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-114 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-114 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-114 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-204 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-114 + inet6/filter/limit-ntp-204 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-114 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-114 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3134 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-205 + inet/filter/limit-ntp-205 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-115 + inet/filter/limit-ntp-205 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-205 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-115 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-115 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-115 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-205 + inet6/filter/limit-ntp-205 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-115 + inet6/filter/limit-ntp-205 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-115 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-115 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3135 {"flow-limit":{"log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-206 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-206 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-116 + inet/filter/limit-ntp-206 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-116 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-116 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-116 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-206 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-206 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-116 + inet6/filter/limit-ntp-206 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-116 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-116 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3136 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-207 + inet/filter/limit-ntp-207 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-117 + inet/filter/limit-ntp-207 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-117 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-117 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-117 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-207 + inet6/filter/limit-ntp-207 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-117 + inet6/filter/limit-ntp-207 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-117 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-117 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3137 {"flow-limit":{"log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-208 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-208 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-118 + inet/filter/limit-ntp-208 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-208 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-118 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-118 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-118 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-208 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-208 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-118 + inet6/filter/limit-ntp-208 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-118 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-118 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3138 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-209 + inet/filter/limit-ntp-209 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-119 + inet/filter/limit-ntp-209 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-119 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-119 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-119 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-209 + inet6/filter/limit-ntp-209 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-119 + inet6/filter/logdrop-ntp-119 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-119 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3139 {"flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-210 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-210 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-120 + inet/filter/limit-ntp-210 -j ACCEPT + inet/filter/logdrop-ntp-120 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-120 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-120 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-210 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-210 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-120 + inet6/filter/limit-ntp-210 -j ACCEPT + inet6/filter/logdrop-ntp-120 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-120 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3140 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-121 + inet/filter/logdrop-ntp-121 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-121 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-121 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-121 + inet6/filter/logdrop-ntp-121 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-121 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3141 {"flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-212 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-212 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-122 + inet/filter/limit-ntp-212 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-212 -j ACCEPT + inet/filter/logdrop-ntp-122 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-122 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-122 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-212 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-212 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-122 + inet6/filter/limit-ntp-212 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-212 -j ACCEPT + inet6/filter/logdrop-ntp-122 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-122 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3142 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-213 + inet/filter/limit-ntp-213 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-123 + inet/filter/limit-ntp-213 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-123 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-123 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-123 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-213 + inet6/filter/limit-ntp-213 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-123 + inet6/filter/limit-ntp-213 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-123 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-123 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3143 {"flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-214 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-214 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-124 + inet/filter/limit-ntp-214 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-214 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-214 -j ACCEPT + inet/filter/logdrop-ntp-124 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-124 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-124 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-214 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-214 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-124 + inet6/filter/limit-ntp-214 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-214 -j ACCEPT + inet6/filter/logdrop-ntp-124 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-124 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3144 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-215 + inet/filter/limit-ntp-215 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-125 + inet/filter/limit-ntp-215 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-215 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-125 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-125 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-125 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-215 + inet6/filter/limit-ntp-215 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-125 + inet6/filter/limit-ntp-215 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-125 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-125 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3145 {"flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-216 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-216 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-126 + inet/filter/limit-ntp-216 -j ACCEPT + inet/filter/logdrop-ntp-126 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-126 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-126 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-216 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-216 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-126 + inet6/filter/limit-ntp-216 -j ACCEPT + inet6/filter/logdrop-ntp-126 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-126 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3146 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-127 + inet/filter/logdrop-ntp-127 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-127 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-127 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-127 + inet6/filter/logdrop-ntp-127 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-127 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3147 {"flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-218 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-218 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-128 + inet/filter/limit-ntp-218 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-218 -j ACCEPT + inet/filter/logdrop-ntp-128 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-128 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-128 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-218 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-218 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-128 + inet6/filter/limit-ntp-218 -j ACCEPT + inet6/filter/logdrop-ntp-128 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-128 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3148 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-219 + inet/filter/limit-ntp-219 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-129 + inet/filter/limit-ntp-219 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-129 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-129 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-129 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-219 + inet6/filter/limit-ntp-219 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-129 + inet6/filter/logdrop-ntp-129 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-129 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3149 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-220 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-220 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-130 + inet/filter/limit-ntp-220 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-130 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-130 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-130 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-220 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-220 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-130 + inet6/filter/limit-ntp-220 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-130 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-130 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3150 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-221 + inet/filter/limit-ntp-221 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-131 + inet/filter/limit-ntp-221 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-131 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-131 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-131 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-221 + inet6/filter/limit-ntp-221 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-131 + inet6/filter/limit-ntp-221 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-131 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-131 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3151 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-222 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-222 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-132 + inet/filter/limit-ntp-222 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-222 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-132 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-132 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-132 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-222 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-222 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-132 + inet6/filter/limit-ntp-222 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-222 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-132 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-132 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3152 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-223 + inet/filter/limit-ntp-223 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-133 + inet/filter/limit-ntp-223 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-133 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-133 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-133 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-223 + inet6/filter/limit-ntp-223 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-133 + inet6/filter/limit-ntp-223 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-133 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-133 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3153 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-224 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-224 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-134 + inet/filter/limit-ntp-224 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-224 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-224 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-134 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-134 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-134 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-224 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-224 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-134 + inet6/filter/limit-ntp-224 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-224 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-134 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-134 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3154 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-225 + inet/filter/limit-ntp-225 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-135 + inet/filter/limit-ntp-225 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-225 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-135 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-135 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-135 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-225 + inet6/filter/limit-ntp-225 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-135 + inet6/filter/limit-ntp-225 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-135 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-135 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3155 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-226 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-226 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-136 + inet/filter/limit-ntp-226 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-136 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-136 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-136 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-226 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-226 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-136 + inet6/filter/limit-ntp-226 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-136 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-136 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3156 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-227 + inet/filter/limit-ntp-227 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-137 + inet/filter/limit-ntp-227 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-137 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-137 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-137 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-227 + inet6/filter/limit-ntp-227 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-137 + inet6/filter/limit-ntp-227 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-137 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-137 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3157 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-228 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-228 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-138 + inet/filter/limit-ntp-228 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-228 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-138 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-138 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-138 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-228 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-228 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-138 + inet6/filter/limit-ntp-228 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-138 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-138 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3158 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-229 + inet/filter/limit-ntp-229 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-139 + inet/filter/limit-ntp-229 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-139 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-139 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-139 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-229 + inet6/filter/limit-ntp-229 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-139 + inet6/filter/logdrop-ntp-139 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-139 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3159 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-230 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-230 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-140 + inet/filter/limit-ntp-230 -j ACCEPT + inet/filter/logdrop-ntp-140 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-140 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-140 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-230 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-230 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-140 + inet6/filter/limit-ntp-230 -j ACCEPT + inet6/filter/logdrop-ntp-140 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-140 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3160 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-141 + inet/filter/logdrop-ntp-141 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-141 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-141 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-141 + inet6/filter/logdrop-ntp-141 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-141 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3161 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-232 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-232 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-142 + inet/filter/limit-ntp-232 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-232 -j ACCEPT + inet/filter/logdrop-ntp-142 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-142 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-142 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-232 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-232 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-142 + inet6/filter/limit-ntp-232 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-232 -j ACCEPT + inet6/filter/logdrop-ntp-142 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-142 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3162 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-233 + inet/filter/limit-ntp-233 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-143 + inet/filter/limit-ntp-233 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-143 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-143 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-143 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-233 + inet6/filter/limit-ntp-233 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-143 + inet6/filter/limit-ntp-233 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-143 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-143 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3163 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-234 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-234 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-144 + inet/filter/limit-ntp-234 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-234 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-234 -j ACCEPT + inet/filter/logdrop-ntp-144 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-144 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-144 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-234 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-234 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-144 + inet6/filter/limit-ntp-234 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-234 -j ACCEPT + inet6/filter/logdrop-ntp-144 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-144 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3164 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-235 + inet/filter/limit-ntp-235 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-145 + inet/filter/limit-ntp-235 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-235 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-145 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-145 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-145 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-235 + inet6/filter/limit-ntp-235 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-145 + inet6/filter/limit-ntp-235 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-145 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-145 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3165 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-236 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-236 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-146 + inet/filter/limit-ntp-236 -j ACCEPT + inet/filter/logdrop-ntp-146 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-146 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-146 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-236 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-236 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-146 + inet6/filter/limit-ntp-236 -j ACCEPT + inet6/filter/logdrop-ntp-146 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-146 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3166 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-147 + inet/filter/logdrop-ntp-147 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-147 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-147 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-147 + inet6/filter/logdrop-ntp-147 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-147 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3167 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-238 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-238 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-148 + inet/filter/limit-ntp-238 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-238 -j ACCEPT + inet/filter/logdrop-ntp-148 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-148 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-148 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-238 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-148 + inet6/filter/limit-ntp-238 -j ACCEPT + inet6/filter/logdrop-ntp-148 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-148 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3168 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-239 + inet/filter/limit-ntp-239 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-149 + inet/filter/limit-ntp-239 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-149 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-149 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-149 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-239 + inet6/filter/limit-ntp-239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-149 + inet6/filter/logdrop-ntp-149 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-149 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3169 {"flow-limit":{"log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-240 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-240 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-150 + inet/filter/limit-ntp-240 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-150 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-150 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-150 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-240 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-240 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-150 + inet6/filter/limit-ntp-240 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-150 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-150 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3170 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-241 + inet/filter/limit-ntp-241 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-151 + inet/filter/limit-ntp-241 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-ntp-151 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-151 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-151 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-241 + inet6/filter/limit-ntp-241 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-151 + inet6/filter/limit-ntp-241 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-ntp-151 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-151 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3171 {"flow-limit":{"log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-242 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-242 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-152 + inet/filter/limit-ntp-242 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-242 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-152 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-152 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-152 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-242 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-242 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-152 + inet6/filter/limit-ntp-242 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-242 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-152 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-152 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3172 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-243 + inet/filter/limit-ntp-243 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-153 + inet/filter/limit-ntp-243 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-153 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-153 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-153 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-243 + inet6/filter/limit-ntp-243 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-153 + inet6/filter/limit-ntp-243 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-153 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-153 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3173 {"flow-limit":{"log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-244 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-244 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-154 + inet/filter/limit-ntp-244 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-244 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-244 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-154 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-154 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-154 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-244 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-244 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-154 + inet6/filter/limit-ntp-244 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-244 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-154 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-154 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3174 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-245 + inet/filter/limit-ntp-245 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-155 + inet/filter/limit-ntp-245 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-245 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-155 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-155 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-155 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-245 + inet6/filter/limit-ntp-245 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-155 + inet6/filter/limit-ntp-245 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-155 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-155 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3175 {"flow-limit":{"log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-246 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-246 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-156 + inet/filter/limit-ntp-246 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-156 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-156 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-156 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-246 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-246 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-156 + inet6/filter/limit-ntp-246 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-156 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-156 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3176 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-247 + inet/filter/limit-ntp-247 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-157 + inet/filter/limit-ntp-247 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-ntp-157 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-157 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-157 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-247 + inet6/filter/limit-ntp-247 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-157 + inet6/filter/limit-ntp-247 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-ntp-157 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-157 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3177 {"flow-limit":{"log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-248 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-248 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-158 + inet/filter/limit-ntp-248 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-248 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-158 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-158 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-158 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-248 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-248 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-158 + inet6/filter/limit-ntp-248 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-158 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-158 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3178 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-249 + inet/filter/limit-ntp-249 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-159 + inet/filter/limit-ntp-249 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-159 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-159 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-159 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-249 + inet6/filter/limit-ntp-249 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-159 + inet6/filter/logdrop-ntp-159 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-159 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3179 {"flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-250 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-250 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-160 + inet/filter/limit-ntp-250 -j ACCEPT + inet/filter/logdrop-ntp-160 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-160 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-160 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-250 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-250 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-160 + inet6/filter/limit-ntp-250 -j ACCEPT + inet6/filter/logdrop-ntp-160 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-160 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3180 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-161 + inet/filter/logdrop-ntp-161 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-161 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-161 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-161 + inet6/filter/logdrop-ntp-161 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-161 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3181 {"flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-252 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-252 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-162 + inet/filter/limit-ntp-252 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-252 -j ACCEPT + inet/filter/logdrop-ntp-162 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-162 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-162 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-252 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-252 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-162 + inet6/filter/limit-ntp-252 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-252 -j ACCEPT + inet6/filter/logdrop-ntp-162 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-162 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3182 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-253 + inet/filter/limit-ntp-253 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-163 + inet/filter/limit-ntp-253 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-163 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-163 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-163 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-253 + inet6/filter/limit-ntp-253 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-163 + inet6/filter/limit-ntp-253 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-163 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-163 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3183 {"flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-254 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-254 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-164 + inet/filter/limit-ntp-254 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-254 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-254 -j ACCEPT + inet/filter/logdrop-ntp-164 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-164 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-164 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-254 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-254 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-164 + inet6/filter/limit-ntp-254 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-254 -j ACCEPT + inet6/filter/logdrop-ntp-164 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-164 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3184 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-255 + inet/filter/limit-ntp-255 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-165 + inet/filter/limit-ntp-255 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-255 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-165 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-165 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-165 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-255 + inet6/filter/limit-ntp-255 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-165 + inet6/filter/limit-ntp-255 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-165 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-165 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3185 {"flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-256 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-256 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-166 + inet/filter/limit-ntp-256 -j ACCEPT + inet/filter/logdrop-ntp-166 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-166 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-166 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-256 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-256 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-166 + inet6/filter/limit-ntp-256 -j ACCEPT + inet6/filter/logdrop-ntp-166 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-166 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3186 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-167 + inet/filter/logdrop-ntp-167 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-167 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-167 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-167 + inet6/filter/logdrop-ntp-167 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-167 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3187 {"flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-258 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-258 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-168 + inet/filter/limit-ntp-258 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-258 -j ACCEPT + inet/filter/logdrop-ntp-168 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-168 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-168 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-258 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-258 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-168 + inet6/filter/limit-ntp-258 -j ACCEPT + inet6/filter/logdrop-ntp-168 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-168 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3188 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-259 + inet/filter/limit-ntp-259 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-169 + inet/filter/limit-ntp-259 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-169 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-169 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-169 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-259 + inet6/filter/limit-ntp-259 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-169 + inet6/filter/logdrop-ntp-169 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-169 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3189 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-260 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-260 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-170 + inet/filter/limit-ntp-260 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-170 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-170 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-170 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-260 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-260 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-170 + inet6/filter/limit-ntp-260 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-170 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-170 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3190 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-261 + inet/filter/limit-ntp-261 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-171 + inet/filter/limit-ntp-261 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-ntp-171 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-171 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-171 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-261 + inet6/filter/limit-ntp-261 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-171 + inet6/filter/limit-ntp-261 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-ntp-171 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-171 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3191 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-262 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-262 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-172 + inet/filter/limit-ntp-262 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-262 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-172 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-172 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-172 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-262 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-262 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-172 + inet6/filter/limit-ntp-262 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-262 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-172 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-172 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3192 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-263 + inet/filter/limit-ntp-263 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-173 + inet/filter/limit-ntp-263 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-173 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-173 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-173 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-263 + inet6/filter/limit-ntp-263 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-173 + inet6/filter/limit-ntp-263 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-173 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-173 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3193 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-264 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-264 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-174 + inet/filter/limit-ntp-264 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-264 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-264 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-174 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-174 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-174 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-264 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-264 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-174 + inet6/filter/limit-ntp-264 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-264 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-174 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-174 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3194 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-265 + inet/filter/limit-ntp-265 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-175 + inet/filter/limit-ntp-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-175 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-175 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-175 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-265 + inet6/filter/limit-ntp-265 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-175 + inet6/filter/limit-ntp-265 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-175 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-175 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3195 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-266 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-266 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-176 + inet/filter/limit-ntp-266 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-176 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-176 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-176 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-266 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-266 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-176 + inet6/filter/limit-ntp-266 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-176 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-176 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3196 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-267 + inet/filter/limit-ntp-267 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-177 + inet/filter/limit-ntp-267 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-ntp-177 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-177 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-177 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-267 + inet6/filter/limit-ntp-267 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-177 + inet6/filter/limit-ntp-267 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-ntp-177 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-177 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3197 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-268 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-268 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-178 + inet/filter/limit-ntp-268 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-268 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-178 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-178 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-178 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-268 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-268 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-178 + inet6/filter/limit-ntp-268 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-178 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-178 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3198 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-269 + inet/filter/limit-ntp-269 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-179 + inet/filter/limit-ntp-269 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-179 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-179 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-179 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-269 + inet6/filter/limit-ntp-269 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-179 + inet6/filter/logdrop-ntp-179 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-179 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3199 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-270 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-270 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-180 + inet/filter/limit-ntp-270 -j ACCEPT + inet/filter/logdrop-ntp-180 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-180 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-180 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-270 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-270 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-180 + inet6/filter/limit-ntp-270 -j ACCEPT + inet6/filter/logdrop-ntp-180 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-180 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3200 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-181 + inet/filter/logdrop-ntp-181 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-181 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-181 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-181 + inet6/filter/logdrop-ntp-181 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-181 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3201 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-272 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-272 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-182 + inet/filter/limit-ntp-272 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-272 -j ACCEPT + inet/filter/logdrop-ntp-182 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-182 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-182 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-272 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-272 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-182 + inet6/filter/limit-ntp-272 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-272 -j ACCEPT + inet6/filter/logdrop-ntp-182 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-182 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3202 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-273 + inet/filter/limit-ntp-273 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-183 + inet/filter/limit-ntp-273 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-183 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-183 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-183 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-273 + inet6/filter/limit-ntp-273 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-183 + inet6/filter/limit-ntp-273 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-183 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-183 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3203 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-274 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-274 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-184 + inet/filter/limit-ntp-274 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-274 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-274 -j ACCEPT + inet/filter/logdrop-ntp-184 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-184 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-184 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-274 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-274 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-184 + inet6/filter/limit-ntp-274 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-274 -j ACCEPT + inet6/filter/logdrop-ntp-184 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-184 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3204 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-275 + inet/filter/limit-ntp-275 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-185 + inet/filter/limit-ntp-275 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-275 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-185 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-185 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-185 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-275 + inet6/filter/limit-ntp-275 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-185 + inet6/filter/limit-ntp-275 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-185 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-185 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3205 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-276 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-276 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-186 + inet/filter/limit-ntp-276 -j ACCEPT + inet/filter/logdrop-ntp-186 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-186 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-186 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-276 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-276 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-186 + inet6/filter/limit-ntp-276 -j ACCEPT + inet6/filter/logdrop-ntp-186 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-186 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3206 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-187 + inet/filter/logdrop-ntp-187 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-187 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-187 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-187 + inet6/filter/logdrop-ntp-187 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-187 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3207 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-278 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-278 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-188 + inet/filter/limit-ntp-278 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-278 -j ACCEPT + inet/filter/logdrop-ntp-188 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-188 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-188 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-278 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-278 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-188 + inet6/filter/limit-ntp-278 -j ACCEPT + inet6/filter/logdrop-ntp-188 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-188 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3208 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-279 + inet/filter/limit-ntp-279 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-189 + inet/filter/limit-ntp-279 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-189 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-189 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-189 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-279 + inet6/filter/limit-ntp-279 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-189 + inet6/filter/logdrop-ntp-189 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-189 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3209 {"flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-280 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-280 -m recent --name limit-ntp-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-280 -m recent --name limit-ntp-280 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-280 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-280 -m recent --name limit-ntp-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-280 -m recent --name limit-ntp-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3210 {"action":"pass","flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-281 + inet/filter/limit-ntp-281 -m recent --name limit-ntp-281 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-281 -m recent --name limit-ntp-281 --rsource --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-281 + inet6/filter/limit-ntp-281 -m recent --name limit-ntp-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-281 -m recent --name limit-ntp-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3211 {"flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-282 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-282 -m recent --name limit-ntp-282 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-282 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-282 -m recent --name limit-ntp-282 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-282 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-282 -m recent --name limit-ntp-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-282 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-282 -m recent --name limit-ntp-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3212 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-283 + inet/filter/limit-ntp-283 -m recent --name limit-ntp-283 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-283 -m recent --name limit-ntp-283 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-283 + inet6/filter/limit-ntp-283 -m recent --name limit-ntp-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-283 -m recent --name limit-ntp-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3213 {"flow-limit":{"log":"none"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-284 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-284 -m recent --name limit-ntp-284 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-284 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-284 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-284 -m recent --name limit-ntp-284 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-284 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-284 -m recent --name limit-ntp-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-284 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-284 -m recent --name limit-ntp-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3214 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-285 + inet/filter/limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-285 + inet6/filter/limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3215 {"flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-286 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-286 -m recent --name limit-ntp-286 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-286 -m recent --name limit-ntp-286 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-286 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-286 -m recent --name limit-ntp-286 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-286 -m recent --name limit-ntp-286 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3216 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-287 + inet/filter/limit-ntp-287 -m recent --name limit-ntp-287 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-287 -m recent --name limit-ntp-287 --rsource --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-287 + inet6/filter/limit-ntp-287 -m recent --name limit-ntp-287 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-287 -m recent --name limit-ntp-287 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3217 {"flow-limit":{"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-288 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-288 -m recent --name limit-ntp-288 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-288 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-288 -m recent --name limit-ntp-288 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-288 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-288 -m recent --name limit-ntp-288 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-288 -m recent --name limit-ntp-288 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3218 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-289 + inet/filter/limit-ntp-289 -m recent --name limit-ntp-289 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-289 -m recent --name limit-ntp-289 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-289 + inet6/filter/limit-ntp-289 -m recent --name limit-ntp-289 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3219 {"flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-290 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-290 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-290 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-290 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3220 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-291 + inet/filter/limit-ntp-291 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-291 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-291 + inet6/filter/limit-ntp-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3221 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-292 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-292 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-292 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-292 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-292 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-292 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3222 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-293 + inet/filter/limit-ntp-293 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-293 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-293 + inet6/filter/limit-ntp-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3223 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-294 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-294 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-294 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-294 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-294 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-294 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-294 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3224 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-295 + inet/filter/limit-ntp-295 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-295 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-295 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-295 + inet6/filter/limit-ntp-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3225 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-296 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-296 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-296 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-296 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3226 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-297 + inet/filter/limit-ntp-297 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-297 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-297 + inet6/filter/limit-ntp-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3227 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-298 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-298 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-298 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-298 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-298 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-298 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-298 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3228 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-299 + inet/filter/limit-ntp-299 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-299 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-299 + inet6/filter/limit-ntp-299 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3229 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-300 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-300 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-300 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-300 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-300 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-300 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3230 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3231 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-302 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-302 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-302 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-302 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-302 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-302 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-302 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-302 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3232 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-303 + inet/filter/limit-ntp-303 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-303 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-303 + inet6/filter/limit-ntp-303 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-303 -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3233 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-304 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-304 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-304 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-304 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-304 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-304 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-304 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-304 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3234 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-305 + inet/filter/limit-ntp-305 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-305 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-305 -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-305 + inet6/filter/limit-ntp-305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-305 -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3235 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-306 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-306 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-306 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-306 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-306 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3236 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3237 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-308 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-308 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-308 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-308 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-308 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-308 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3238 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-309 + inet/filter/limit-ntp-309 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-309 -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-309 + inet6/filter/limit-ntp-309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3239 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-310 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-310 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-310 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-310 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-310 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-310 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3240 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-311 + inet/filter/limit-ntp-311 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-311 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-311 + inet6/filter/limit-ntp-311 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-311 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3241 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-312 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-312 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-312 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-312 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-312 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-312 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-312 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-312 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3242 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-313 + inet/filter/limit-ntp-313 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-313 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-313 + inet6/filter/limit-ntp-313 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-313 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3243 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-314 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-314 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-314 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-314 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-314 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-314 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-314 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3244 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-315 + inet/filter/limit-ntp-315 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-315 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-315 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-315 + inet6/filter/limit-ntp-315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3245 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-316 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-316 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-316 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-316 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3246 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-317 + inet/filter/limit-ntp-317 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-317 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-317 + inet6/filter/limit-ntp-317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3247 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-318 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-318 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-318 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-318 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-318 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3248 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-319 + inet/filter/limit-ntp-319 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-319 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-319 + inet6/filter/limit-ntp-319 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3249 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-320 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-320 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-320 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-320 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-320 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-320 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3250 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3251 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-322 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-322 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-322 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-322 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-322 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-322 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-322 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-322 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3252 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-323 + inet/filter/limit-ntp-323 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-323 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-323 + inet6/filter/limit-ntp-323 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-323 -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3253 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-324 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-324 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-324 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-324 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-324 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-324 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-324 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-324 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-324 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3254 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-325 + inet/filter/limit-ntp-325 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-325 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-325 -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-325 + inet6/filter/limit-ntp-325 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-325 -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3255 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-326 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-326 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-326 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-326 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-326 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-326 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3256 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3257 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-328 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-328 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-328 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-328 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-328 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-328 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3258 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-329 + inet/filter/limit-ntp-329 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-329 -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-329 + inet6/filter/limit-ntp-329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3259 {"flow-limit":{"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-330 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-330 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-330 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-330 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-330 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-330 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3260 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-331 + inet/filter/limit-ntp-331 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-331 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-331 + inet6/filter/limit-ntp-331 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-331 -m recent --name user:C --rsource --mask fe00:: --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3261 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-332 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-332 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-332 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-332 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-332 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-332 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-332 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-332 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3262 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-333 + inet/filter/limit-ntp-333 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-333 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-333 + inet6/filter/limit-ntp-333 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-333 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3263 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-334 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-334 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-334 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-334 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-334 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-334 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-334 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-334 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-334 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3264 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-335 + inet/filter/limit-ntp-335 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-335 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-335 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-335 + inet6/filter/limit-ntp-335 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-335 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3265 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-336 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-336 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-336 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-336 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-336 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-336 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3266 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-337 + inet/filter/limit-ntp-337 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-337 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-337 + inet6/filter/limit-ntp-337 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-337 -m recent --name user:C --rsource --mask fe00:: --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3267 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-338 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-338 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-338 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-338 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-338 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-338 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-338 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3268 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-339 + inet/filter/limit-ntp-339 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-339 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-339 + inet6/filter/limit-ntp-339 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3269 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-340 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-340 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-340 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-340 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-340 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-340 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3270 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3271 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-342 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-342 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-342 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-342 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-342 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-342 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-342 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-342 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3272 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-343 + inet/filter/limit-ntp-343 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-343 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-343 + inet6/filter/limit-ntp-343 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-343 -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3273 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-344 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-344 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-344 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-344 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-344 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-344 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-344 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-344 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-344 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3274 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-345 + inet/filter/limit-ntp-345 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-345 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-345 -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-345 + inet6/filter/limit-ntp-345 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-345 -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3275 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-346 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-346 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-346 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-346 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-346 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-346 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3276 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3277 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-348 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-348 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-348 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-348 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-348 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-348 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-348 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3278 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-349 + inet/filter/limit-ntp-349 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-349 -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-349 + inet6/filter/limit-ntp-349 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3279 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-350 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-350 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-350 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-350 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-350 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-350 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3280 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-351 + inet/filter/limit-ntp-351 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-351 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-351 + inet6/filter/limit-ntp-351 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-351 -m recent --name user:C --rdest --mask fe00:: --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3281 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-352 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-352 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-352 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-352 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-352 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-352 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-352 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-352 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3282 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-353 + inet/filter/limit-ntp-353 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-353 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-353 + inet6/filter/limit-ntp-353 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-353 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3283 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-354 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-354 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-354 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-354 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-354 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-354 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-354 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-354 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-354 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3284 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-355 + inet/filter/limit-ntp-355 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-355 + inet6/filter/limit-ntp-355 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-355 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3285 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-356 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-356 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-356 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-356 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-356 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-356 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3286 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-357 + inet/filter/limit-ntp-357 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-357 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-357 + inet6/filter/limit-ntp-357 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-357 -m recent --name user:C --rdest --mask fe00:: --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3287 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-358 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-358 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-358 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-358 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-358 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-358 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-358 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3288 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-359 + inet/filter/limit-ntp-359 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-359 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-359 + inet6/filter/limit-ntp-359 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3289 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-360 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-360 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-360 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-360 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-360 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-360 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3290 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3291 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-362 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-362 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-362 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-362 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-362 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-362 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-362 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-362 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3292 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-363 + inet/filter/limit-ntp-363 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-363 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-363 + inet6/filter/limit-ntp-363 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-363 -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3293 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-364 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-364 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-364 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-364 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-364 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-364 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-364 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-364 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-364 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3294 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-365 + inet/filter/limit-ntp-365 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-365 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-365 -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-365 + inet6/filter/limit-ntp-365 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-365 -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3295 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-366 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-366 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-366 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-366 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-366 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-366 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3296 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3297 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-368 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-368 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-368 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-368 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-368 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-368 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-ntp-368 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3298 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-369 + inet/filter/limit-ntp-369 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-ntp-369 -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-369 + inet6/filter/limit-ntp-369 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3299 {"flow-limit":{"log":"ulog"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-370 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-370 -m recent --name limit-ntp-370 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-190 + inet/filter/limit-ntp-370 -m recent --name limit-ntp-370 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-190 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-190 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-370 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-370 -m recent --name limit-ntp-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-190 + inet6/filter/limit-ntp-370 -m recent --name limit-ntp-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-190 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3300 {"action":"pass","flow-limit":{"log":"ulog"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-371 + inet/filter/limit-ntp-371 -m recent --name limit-ntp-371 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-191 + inet/filter/limit-ntp-371 -m recent --name limit-ntp-371 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-191 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-191 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-371 + inet6/filter/limit-ntp-371 -m recent --name limit-ntp-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-191 + inet6/filter/limit-ntp-371 -m recent --name limit-ntp-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-191 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3301 {"flow-limit":{"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-372 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-372 -m recent --name limit-ntp-372 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-192 + inet/filter/limit-ntp-372 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-372 -m recent --name limit-ntp-372 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-192 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-192 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-372 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-372 -m recent --name limit-ntp-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-192 + inet6/filter/limit-ntp-372 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-372 -m recent --name limit-ntp-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-192 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3302 {"action":"pass","flow-limit":{"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-373 + inet/filter/limit-ntp-373 -m recent --name limit-ntp-373 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-193 + inet/filter/limit-ntp-373 -m recent --name limit-ntp-373 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-193 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-193 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-373 + inet6/filter/limit-ntp-373 -m recent --name limit-ntp-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-193 + inet6/filter/limit-ntp-373 -m recent --name limit-ntp-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-193 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3303 {"flow-limit":{"log":"ulog"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-374 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-374 -m recent --name limit-ntp-374 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-194 + inet/filter/limit-ntp-374 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-374 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-374 -m recent --name limit-ntp-374 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-194 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-194 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-374 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-374 -m recent --name limit-ntp-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-194 + inet6/filter/limit-ntp-374 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-374 -m recent --name limit-ntp-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-194 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3304 {"action":"pass","flow-limit":{"log":"ulog"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-375 + inet/filter/limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-195 + inet/filter/limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-195 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-195 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-375 + inet6/filter/limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-195 + inet6/filter/limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-195 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3305 {"flow-limit":{"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-376 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-376 -m recent --name limit-ntp-376 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-196 + inet/filter/limit-ntp-376 -m recent --name limit-ntp-376 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-196 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-196 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-376 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-376 -m recent --name limit-ntp-376 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-196 + inet6/filter/limit-ntp-376 -m recent --name limit-ntp-376 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-196 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3306 {"action":"pass","flow-limit":{"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-377 + inet/filter/limit-ntp-377 -m recent --name limit-ntp-377 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-197 + inet/filter/limit-ntp-377 -m recent --name limit-ntp-377 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-197 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-197 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-377 + inet6/filter/limit-ntp-377 -m recent --name limit-ntp-377 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-197 + inet6/filter/limit-ntp-377 -m recent --name limit-ntp-377 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-197 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3307 {"flow-limit":{"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-378 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-378 -m recent --name limit-ntp-378 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-198 + inet/filter/limit-ntp-378 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-378 -m recent --name limit-ntp-378 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-198 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-198 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-378 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-378 -m recent --name limit-ntp-378 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-198 + inet6/filter/limit-ntp-378 -m recent --name limit-ntp-378 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-198 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3308 {"action":"pass","flow-limit":{"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-379 + inet/filter/limit-ntp-379 -m recent --name limit-ntp-379 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-199 + inet/filter/limit-ntp-379 -m recent --name limit-ntp-379 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-199 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-199 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-379 + inet6/filter/limit-ntp-379 -m recent --name limit-ntp-379 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-199 + inet6/filter/logdrop-ntp-199 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3309 {"flow-limit":{"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-380 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-380 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-200 + inet/filter/limit-ntp-380 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-200 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-200 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-380 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-200 + inet6/filter/limit-ntp-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-200 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3310 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-381 + inet/filter/limit-ntp-381 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-201 + inet/filter/limit-ntp-381 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-201 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-201 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-381 + inet6/filter/limit-ntp-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-201 + inet6/filter/limit-ntp-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-201 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3311 {"flow-limit":{"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-382 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-382 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-202 + inet/filter/limit-ntp-382 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-382 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-202 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-202 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-382 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-202 + inet6/filter/limit-ntp-382 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-202 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3312 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-383 + inet/filter/limit-ntp-383 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-203 + inet/filter/limit-ntp-383 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-203 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-203 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-383 + inet6/filter/limit-ntp-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-203 + inet6/filter/limit-ntp-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-203 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3313 {"flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-384 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-384 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-204 + inet/filter/limit-ntp-384 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-384 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-384 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-204 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-204 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-384 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-204 + inet6/filter/limit-ntp-384 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-204 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3314 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-385 + inet/filter/limit-ntp-385 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-205 + inet/filter/limit-ntp-385 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-385 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-205 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-205 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-385 + inet6/filter/limit-ntp-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-205 + inet6/filter/limit-ntp-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-205 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3315 {"flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-386 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-386 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-206 + inet/filter/limit-ntp-386 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-206 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-206 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-386 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-206 + inet6/filter/limit-ntp-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-206 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3316 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-387 + inet/filter/limit-ntp-387 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-207 + inet/filter/limit-ntp-387 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-207 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-207 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-387 + inet6/filter/limit-ntp-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-207 + inet6/filter/limit-ntp-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-207 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3317 {"flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-388 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-388 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-208 + inet/filter/limit-ntp-388 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-388 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-208 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-208 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-388 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-208 + inet6/filter/limit-ntp-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-208 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3318 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-389 + inet/filter/limit-ntp-389 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-209 + inet/filter/limit-ntp-389 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-209 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-209 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-389 + inet6/filter/limit-ntp-389 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-209 + inet6/filter/logdrop-ntp-209 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3319 {"flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-390 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-390 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-210 + inet/filter/limit-ntp-390 -j ACCEPT + inet/filter/logdrop-ntp-210 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-210 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-390 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-390 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-210 + inet6/filter/limit-ntp-390 -j ACCEPT + inet6/filter/logdrop-ntp-210 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3320 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-211 + inet/filter/logdrop-ntp-211 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-211 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-211 + inet6/filter/logdrop-ntp-211 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3321 {"flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-392 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-392 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-212 + inet/filter/limit-ntp-392 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-392 -j ACCEPT + inet/filter/logdrop-ntp-212 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-212 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-392 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-392 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-212 + inet6/filter/limit-ntp-392 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-392 -j ACCEPT + inet6/filter/logdrop-ntp-212 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3322 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-393 + inet/filter/limit-ntp-393 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-213 + inet/filter/limit-ntp-393 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-213 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-213 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-393 + inet6/filter/limit-ntp-393 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-213 + inet6/filter/limit-ntp-393 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-213 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3323 {"flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-394 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-394 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-214 + inet/filter/limit-ntp-394 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-394 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-394 -j ACCEPT + inet/filter/logdrop-ntp-214 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-214 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-394 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-394 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-214 + inet6/filter/limit-ntp-394 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-394 -j ACCEPT + inet6/filter/logdrop-ntp-214 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3324 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-395 + inet/filter/limit-ntp-395 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-215 + inet/filter/limit-ntp-395 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-395 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-215 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-215 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-395 + inet6/filter/limit-ntp-395 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-215 + inet6/filter/limit-ntp-395 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-215 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3325 {"flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-396 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-396 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-216 + inet/filter/limit-ntp-396 -j ACCEPT + inet/filter/logdrop-ntp-216 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-216 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-396 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-396 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-216 + inet6/filter/limit-ntp-396 -j ACCEPT + inet6/filter/logdrop-ntp-216 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3326 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-217 + inet/filter/logdrop-ntp-217 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-217 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-217 + inet6/filter/logdrop-ntp-217 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3327 {"flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-398 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-398 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-218 + inet/filter/limit-ntp-398 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-398 -j ACCEPT + inet/filter/logdrop-ntp-218 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-218 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-398 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-398 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-218 + inet6/filter/limit-ntp-398 -j ACCEPT + inet6/filter/logdrop-ntp-218 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3328 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-399 + inet/filter/limit-ntp-399 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-219 + inet/filter/limit-ntp-399 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-219 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-219 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-399 + inet6/filter/limit-ntp-399 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-219 + inet6/filter/logdrop-ntp-219 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3329 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-400 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-400 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-220 + inet/filter/limit-ntp-400 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-220 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-220 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-400 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-400 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-220 + inet6/filter/limit-ntp-400 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-220 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3330 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-401 + inet/filter/limit-ntp-401 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-221 + inet/filter/limit-ntp-401 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-221 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-221 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-401 + inet6/filter/limit-ntp-401 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-221 + inet6/filter/limit-ntp-401 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-221 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3331 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-402 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-402 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-222 + inet/filter/limit-ntp-402 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-402 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-222 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-222 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-402 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-402 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-222 + inet6/filter/limit-ntp-402 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-402 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-222 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3332 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-403 + inet/filter/limit-ntp-403 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-223 + inet/filter/limit-ntp-403 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-223 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-223 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-403 + inet6/filter/limit-ntp-403 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-223 + inet6/filter/limit-ntp-403 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-223 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3333 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-404 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-404 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-224 + inet/filter/limit-ntp-404 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-404 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-404 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-224 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-224 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-404 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-404 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-224 + inet6/filter/limit-ntp-404 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-404 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-224 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3334 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-405 + inet/filter/limit-ntp-405 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-225 + inet/filter/limit-ntp-405 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-405 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-225 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-225 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-405 + inet6/filter/limit-ntp-405 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-225 + inet6/filter/limit-ntp-405 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-225 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3335 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-406 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-406 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-226 + inet/filter/limit-ntp-406 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-226 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-226 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-406 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-406 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-226 + inet6/filter/limit-ntp-406 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-226 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3336 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-407 + inet/filter/limit-ntp-407 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-227 + inet/filter/limit-ntp-407 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-227 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-227 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-407 + inet6/filter/limit-ntp-407 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-227 + inet6/filter/limit-ntp-407 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-227 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3337 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-408 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-408 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-228 + inet/filter/limit-ntp-408 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-408 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-228 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-228 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-408 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-408 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-228 + inet6/filter/limit-ntp-408 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-228 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3338 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-409 + inet/filter/limit-ntp-409 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-229 + inet/filter/limit-ntp-409 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-229 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-229 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-409 + inet6/filter/limit-ntp-409 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-229 + inet6/filter/logdrop-ntp-229 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3339 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-410 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-410 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-230 + inet/filter/limit-ntp-410 -j ACCEPT + inet/filter/logdrop-ntp-230 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-230 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-410 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-410 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-230 + inet6/filter/limit-ntp-410 -j ACCEPT + inet6/filter/logdrop-ntp-230 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3340 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-231 + inet/filter/logdrop-ntp-231 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-231 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-231 + inet6/filter/logdrop-ntp-231 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3341 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-412 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-412 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-232 + inet/filter/limit-ntp-412 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-412 -j ACCEPT + inet/filter/logdrop-ntp-232 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-232 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-412 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-412 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-232 + inet6/filter/limit-ntp-412 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-412 -j ACCEPT + inet6/filter/logdrop-ntp-232 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3342 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-413 + inet/filter/limit-ntp-413 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-233 + inet/filter/limit-ntp-413 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-233 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-233 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-413 + inet6/filter/limit-ntp-413 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-233 + inet6/filter/limit-ntp-413 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-233 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3343 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-414 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-414 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-234 + inet/filter/limit-ntp-414 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-414 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-414 -j ACCEPT + inet/filter/logdrop-ntp-234 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-234 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-414 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-414 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-234 + inet6/filter/limit-ntp-414 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-414 -j ACCEPT + inet6/filter/logdrop-ntp-234 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3344 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-415 + inet/filter/limit-ntp-415 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-235 + inet/filter/limit-ntp-415 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-415 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-235 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-235 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-415 + inet6/filter/limit-ntp-415 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-235 + inet6/filter/limit-ntp-415 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-235 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3345 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-416 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-416 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-236 + inet/filter/limit-ntp-416 -j ACCEPT + inet/filter/logdrop-ntp-236 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-236 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-416 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-416 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-236 + inet6/filter/limit-ntp-416 -j ACCEPT + inet6/filter/logdrop-ntp-236 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3346 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-237 + inet/filter/logdrop-ntp-237 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-237 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-237 + inet6/filter/logdrop-ntp-237 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3347 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-418 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-418 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-238 + inet/filter/limit-ntp-418 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-418 -j ACCEPT + inet/filter/logdrop-ntp-238 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-238 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-418 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-418 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-238 + inet6/filter/limit-ntp-418 -j ACCEPT + inet6/filter/logdrop-ntp-238 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3348 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-419 + inet/filter/limit-ntp-419 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-239 + inet/filter/limit-ntp-419 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-239 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-239 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-419 + inet6/filter/limit-ntp-419 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-239 + inet6/filter/logdrop-ntp-239 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3349 {"flow-limit":{"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-420 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-420 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-240 + inet/filter/limit-ntp-420 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-240 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-240 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-420 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-420 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-240 + inet6/filter/limit-ntp-420 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-240 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3350 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-421 + inet/filter/limit-ntp-421 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-241 + inet/filter/limit-ntp-421 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-ntp-241 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-241 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-421 + inet6/filter/limit-ntp-421 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-241 + inet6/filter/limit-ntp-421 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-ntp-241 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3351 {"flow-limit":{"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-422 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-422 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-242 + inet/filter/limit-ntp-422 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-422 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-242 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-242 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-422 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-422 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-242 + inet6/filter/limit-ntp-422 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-422 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-242 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3352 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-423 + inet/filter/limit-ntp-423 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-243 + inet/filter/limit-ntp-423 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-243 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-243 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-423 + inet6/filter/limit-ntp-423 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-243 + inet6/filter/limit-ntp-423 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-243 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3353 {"flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-424 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-424 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-244 + inet/filter/limit-ntp-424 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-424 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-424 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-244 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-244 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-424 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-424 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-244 + inet6/filter/limit-ntp-424 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-424 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-244 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3354 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-425 + inet/filter/limit-ntp-425 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-245 + inet/filter/limit-ntp-425 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-425 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-245 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-245 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-425 + inet6/filter/limit-ntp-425 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-245 + inet6/filter/limit-ntp-425 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-245 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3355 {"flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-426 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-426 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-246 + inet/filter/limit-ntp-426 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-246 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-246 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-426 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-426 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-246 + inet6/filter/limit-ntp-426 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-246 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3356 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-427 + inet/filter/limit-ntp-427 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-247 + inet/filter/limit-ntp-427 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-ntp-247 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-247 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-427 + inet6/filter/limit-ntp-427 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-247 + inet6/filter/limit-ntp-427 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-ntp-247 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3357 {"flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-428 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-428 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-248 + inet/filter/limit-ntp-428 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-428 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-248 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-248 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-428 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-428 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-248 + inet6/filter/limit-ntp-428 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-248 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3358 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-429 + inet/filter/limit-ntp-429 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-249 + inet/filter/limit-ntp-429 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-249 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-249 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-429 + inet6/filter/limit-ntp-429 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-249 + inet6/filter/logdrop-ntp-249 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3359 {"flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-430 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-430 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-250 + inet/filter/limit-ntp-430 -j ACCEPT + inet/filter/logdrop-ntp-250 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-250 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-430 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-430 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-250 + inet6/filter/limit-ntp-430 -j ACCEPT + inet6/filter/logdrop-ntp-250 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3360 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-251 + inet/filter/logdrop-ntp-251 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-251 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-251 + inet6/filter/logdrop-ntp-251 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3361 {"flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-432 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-432 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-252 + inet/filter/limit-ntp-432 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-432 -j ACCEPT + inet/filter/logdrop-ntp-252 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-252 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-432 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-432 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-252 + inet6/filter/limit-ntp-432 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-432 -j ACCEPT + inet6/filter/logdrop-ntp-252 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3362 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-433 + inet/filter/limit-ntp-433 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-253 + inet/filter/limit-ntp-433 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-253 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-253 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-433 + inet6/filter/limit-ntp-433 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-253 + inet6/filter/limit-ntp-433 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-253 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3363 {"flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-434 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-434 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-254 + inet/filter/limit-ntp-434 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-434 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-434 -j ACCEPT + inet/filter/logdrop-ntp-254 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-254 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-434 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-434 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-254 + inet6/filter/limit-ntp-434 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-434 -j ACCEPT + inet6/filter/logdrop-ntp-254 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3364 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-435 + inet/filter/limit-ntp-435 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-255 + inet/filter/limit-ntp-435 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-435 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-255 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-255 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-435 + inet6/filter/limit-ntp-435 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-255 + inet6/filter/limit-ntp-435 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-255 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3365 {"flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-436 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-436 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-256 + inet/filter/limit-ntp-436 -j ACCEPT + inet/filter/logdrop-ntp-256 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-256 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-436 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-436 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-256 + inet6/filter/limit-ntp-436 -j ACCEPT + inet6/filter/logdrop-ntp-256 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3366 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-257 + inet/filter/logdrop-ntp-257 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-257 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-257 + inet6/filter/logdrop-ntp-257 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3367 {"flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-438 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-438 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-258 + inet/filter/limit-ntp-438 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-438 -j ACCEPT + inet/filter/logdrop-ntp-258 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-258 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-438 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-438 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-258 + inet6/filter/limit-ntp-438 -j ACCEPT + inet6/filter/logdrop-ntp-258 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3368 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-439 + inet/filter/limit-ntp-439 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-259 + inet/filter/limit-ntp-439 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-259 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-259 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-439 + inet6/filter/limit-ntp-439 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-259 + inet6/filter/logdrop-ntp-259 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3369 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-440 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-440 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-260 + inet/filter/limit-ntp-440 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-260 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-260 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-440 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-440 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-260 + inet6/filter/limit-ntp-440 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-260 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3370 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-441 + inet/filter/limit-ntp-441 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-261 + inet/filter/limit-ntp-441 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-ntp-261 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-261 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-441 + inet6/filter/limit-ntp-441 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-261 + inet6/filter/limit-ntp-441 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-ntp-261 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3371 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-442 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-442 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-262 + inet/filter/limit-ntp-442 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-442 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-262 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-262 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-442 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-442 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-262 + inet6/filter/limit-ntp-442 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-442 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-262 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3372 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-443 + inet/filter/limit-ntp-443 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-263 + inet/filter/limit-ntp-443 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-263 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-263 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-443 + inet6/filter/limit-ntp-443 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-263 + inet6/filter/limit-ntp-443 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-263 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3373 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-444 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-444 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-264 + inet/filter/limit-ntp-444 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-444 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-444 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-264 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-264 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-444 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-444 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-264 + inet6/filter/limit-ntp-444 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-444 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-264 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3374 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-445 + inet/filter/limit-ntp-445 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-265 + inet/filter/limit-ntp-445 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-445 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-265 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-265 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-445 + inet6/filter/limit-ntp-445 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-265 + inet6/filter/limit-ntp-445 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-265 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3375 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-446 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-446 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-266 + inet/filter/limit-ntp-446 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-266 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-266 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-446 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-446 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-266 + inet6/filter/limit-ntp-446 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-266 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3376 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-447 + inet/filter/limit-ntp-447 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-267 + inet/filter/limit-ntp-447 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-ntp-267 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-267 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-447 + inet6/filter/limit-ntp-447 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-267 + inet6/filter/limit-ntp-447 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-ntp-267 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3377 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-448 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-448 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-268 + inet/filter/limit-ntp-448 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-448 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-268 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-268 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-448 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-448 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-268 + inet6/filter/limit-ntp-448 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-268 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3378 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-449 + inet/filter/limit-ntp-449 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-269 + inet/filter/limit-ntp-449 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-269 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-269 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-449 + inet6/filter/limit-ntp-449 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-269 + inet6/filter/logdrop-ntp-269 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3379 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-450 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-450 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-270 + inet/filter/limit-ntp-450 -j ACCEPT + inet/filter/logdrop-ntp-270 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-270 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-450 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-450 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-270 + inet6/filter/limit-ntp-450 -j ACCEPT + inet6/filter/logdrop-ntp-270 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3380 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-271 + inet/filter/logdrop-ntp-271 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-271 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-271 + inet6/filter/logdrop-ntp-271 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3381 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-452 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-452 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-272 + inet/filter/limit-ntp-452 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-452 -j ACCEPT + inet/filter/logdrop-ntp-272 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-272 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-452 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-452 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-272 + inet6/filter/limit-ntp-452 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-452 -j ACCEPT + inet6/filter/logdrop-ntp-272 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3382 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-453 + inet/filter/limit-ntp-453 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-273 + inet/filter/limit-ntp-453 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-273 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-273 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-453 + inet6/filter/limit-ntp-453 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-273 + inet6/filter/limit-ntp-453 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-273 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3383 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-454 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-454 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-274 + inet/filter/limit-ntp-454 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-454 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-454 -j ACCEPT + inet/filter/logdrop-ntp-274 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-274 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-454 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-454 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-274 + inet6/filter/limit-ntp-454 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-454 -j ACCEPT + inet6/filter/logdrop-ntp-274 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3384 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-455 + inet/filter/limit-ntp-455 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-275 + inet/filter/limit-ntp-455 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-455 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-275 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-275 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-455 + inet6/filter/limit-ntp-455 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-275 + inet6/filter/limit-ntp-455 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-275 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3385 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-456 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-456 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-276 + inet/filter/limit-ntp-456 -j ACCEPT + inet/filter/logdrop-ntp-276 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-276 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-456 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-456 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-276 + inet6/filter/limit-ntp-456 -j ACCEPT + inet6/filter/logdrop-ntp-276 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3386 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-277 + inet/filter/logdrop-ntp-277 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-277 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-277 + inet6/filter/logdrop-ntp-277 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3387 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-458 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-458 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-278 + inet/filter/limit-ntp-458 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-458 -j ACCEPT + inet/filter/logdrop-ntp-278 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-278 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-458 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-458 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-278 + inet6/filter/limit-ntp-458 -j ACCEPT + inet6/filter/logdrop-ntp-278 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3388 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-459 + inet/filter/limit-ntp-459 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-279 + inet/filter/limit-ntp-459 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-279 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-279 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-459 + inet6/filter/limit-ntp-459 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-279 + inet6/filter/logdrop-ntp-279 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3389 {"flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-460 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-460 -m recent --name limit-ntp-460 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-460 -m recent --name limit-ntp-460 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-460 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-460 -m recent --name limit-ntp-460 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-460 -m recent --name limit-ntp-460 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3390 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-461 + inet/filter/limit-ntp-461 -m recent --name limit-ntp-461 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-461 -m recent --name limit-ntp-461 --rsource --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-461 + inet6/filter/limit-ntp-461 -m recent --name limit-ntp-461 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-461 -m recent --name limit-ntp-461 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3391 {"flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-462 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-462 -m recent --name limit-ntp-462 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-462 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-462 -m recent --name limit-ntp-462 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-462 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-462 -m recent --name limit-ntp-462 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-462 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-462 -m recent --name limit-ntp-462 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3392 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-463 + inet/filter/limit-ntp-463 -m recent --name limit-ntp-463 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-463 -m recent --name limit-ntp-463 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-463 + inet6/filter/limit-ntp-463 -m recent --name limit-ntp-463 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-463 -m recent --name limit-ntp-463 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3393 {"flow-limit":{"interval":5,"log":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-464 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-464 -m recent --name limit-ntp-464 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-464 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-464 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-464 -m recent --name limit-ntp-464 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-464 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-464 -m recent --name limit-ntp-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-464 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-464 -m recent --name limit-ntp-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3394 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-465 + inet/filter/limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-465 + inet6/filter/limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3395 {"flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-466 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-466 -m recent --name limit-ntp-466 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-466 -m recent --name limit-ntp-466 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-466 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-466 -m recent --name limit-ntp-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-466 -m recent --name limit-ntp-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3396 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-467 + inet/filter/limit-ntp-467 -m recent --name limit-ntp-467 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-467 -m recent --name limit-ntp-467 --rsource --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-467 + inet6/filter/limit-ntp-467 -m recent --name limit-ntp-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-467 -m recent --name limit-ntp-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3397 {"flow-limit":{"interval":5,"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-468 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-468 -m recent --name limit-ntp-468 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-468 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-468 -m recent --name limit-ntp-468 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-468 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-468 -m recent --name limit-ntp-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-468 -m recent --name limit-ntp-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3398 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-469 + inet/filter/limit-ntp-469 -m recent --name limit-ntp-469 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-469 -m recent --name limit-ntp-469 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-469 + inet6/filter/limit-ntp-469 -m recent --name limit-ntp-469 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3399 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-470 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-470 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-470 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-470 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3400 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-471 + inet/filter/limit-ntp-471 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-471 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-471 + inet6/filter/limit-ntp-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3401 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-472 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-472 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-472 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-472 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-472 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-472 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3402 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-473 + inet/filter/limit-ntp-473 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-473 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-473 + inet6/filter/limit-ntp-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3403 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-474 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-474 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-474 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-474 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-474 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-474 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-474 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3404 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-475 + inet/filter/limit-ntp-475 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-475 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-475 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-475 + inet6/filter/limit-ntp-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3405 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-476 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-476 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-476 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-476 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-476 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-476 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3406 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-477 + inet/filter/limit-ntp-477 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-477 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-477 + inet6/filter/limit-ntp-477 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-477 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3407 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-478 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-478 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-478 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-478 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3408 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-479 + inet/filter/limit-ntp-479 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-479 + inet6/filter/limit-ntp-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3409 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-480 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-480 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-480 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-480 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-480 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3410 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3411 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-482 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-482 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-482 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-482 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-482 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-482 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-482 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3412 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-483 + inet/filter/limit-ntp-483 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-483 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-483 + inet6/filter/limit-ntp-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-483 -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3413 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-484 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-484 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-484 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-484 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-484 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-484 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-484 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-484 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-484 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3414 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-485 + inet/filter/limit-ntp-485 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-485 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-485 -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-485 + inet6/filter/limit-ntp-485 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-485 -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3415 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-486 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-486 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-486 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-486 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-486 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-486 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3416 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3417 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-488 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-488 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-488 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-488 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-488 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-488 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3418 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-489 + inet/filter/limit-ntp-489 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-489 -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-489 + inet6/filter/limit-ntp-489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3419 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-490 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-490 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-490 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3420 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-491 + inet/filter/limit-ntp-491 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-491 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-491 + inet6/filter/limit-ntp-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3421 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-492 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-492 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-492 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-492 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-492 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-492 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3422 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-493 + inet/filter/limit-ntp-493 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-493 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-493 + inet6/filter/limit-ntp-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3423 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-494 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-494 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-494 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-494 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-494 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-494 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-494 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3424 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-495 + inet/filter/limit-ntp-495 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-495 + inet6/filter/limit-ntp-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3425 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-496 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-496 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-496 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-496 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3426 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-497 + inet/filter/limit-ntp-497 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-497 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-497 + inet6/filter/limit-ntp-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3427 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-498 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-498 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-498 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-498 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-498 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3428 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-499 + inet/filter/limit-ntp-499 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-499 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-499 + inet6/filter/limit-ntp-499 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3429 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-500 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-500 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-500 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-500 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-500 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-500 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3430 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3431 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-502 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-502 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-502 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-502 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-502 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-502 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-502 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-502 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3432 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-503 + inet/filter/limit-ntp-503 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-503 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-503 + inet6/filter/limit-ntp-503 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-503 -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3433 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-504 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-504 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-504 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-504 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-504 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-504 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-504 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-504 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-504 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3434 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-505 + inet/filter/limit-ntp-505 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-505 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-505 -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-505 + inet6/filter/limit-ntp-505 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-505 -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3435 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-506 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-506 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-506 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-506 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-506 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-506 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3436 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3437 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-508 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-508 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-508 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-508 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-508 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-508 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3438 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-509 + inet/filter/limit-ntp-509 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-509 -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-509 + inet6/filter/limit-ntp-509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3439 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-510 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-510 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-510 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-510 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-510 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-510 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3440 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-511 + inet/filter/limit-ntp-511 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-511 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-511 + inet6/filter/limit-ntp-511 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-511 -m recent --name user:C --rsource --mask fe00:: --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3441 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-512 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-512 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-512 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-512 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-512 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-512 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-512 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-512 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3442 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-513 + inet/filter/limit-ntp-513 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-513 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-513 + inet6/filter/limit-ntp-513 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-513 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3443 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-514 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-514 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-514 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-514 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-514 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-514 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-514 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-514 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-514 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3444 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-515 + inet/filter/limit-ntp-515 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-515 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-515 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-515 + inet6/filter/limit-ntp-515 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-515 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3445 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-516 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-516 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-516 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-516 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-516 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-516 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3446 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-517 + inet/filter/limit-ntp-517 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-517 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-517 + inet6/filter/limit-ntp-517 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-517 -m recent --name user:C --rsource --mask fe00:: --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3447 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-518 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-518 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-518 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-518 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-518 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-518 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-518 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3448 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-519 + inet/filter/limit-ntp-519 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-519 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-519 + inet6/filter/limit-ntp-519 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3449 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-520 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-520 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-520 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-520 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-520 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-520 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3450 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3451 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-522 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-522 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-522 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-522 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-522 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-522 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-522 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-522 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3452 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-523 + inet/filter/limit-ntp-523 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-523 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-523 + inet6/filter/limit-ntp-523 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-523 -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3453 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-524 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-524 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-524 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-524 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-524 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-524 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-524 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-524 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-524 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3454 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-525 + inet/filter/limit-ntp-525 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-525 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-525 -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-525 + inet6/filter/limit-ntp-525 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-525 -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3455 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-526 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-526 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-526 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-526 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-526 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-526 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3456 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3457 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-528 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-528 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-528 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-528 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-528 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-528 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-528 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3458 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-529 + inet/filter/limit-ntp-529 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-529 -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-529 + inet6/filter/limit-ntp-529 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3459 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-530 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-530 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-530 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-530 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-530 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-530 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3460 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-531 + inet/filter/limit-ntp-531 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-531 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-531 + inet6/filter/limit-ntp-531 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-531 -m recent --name user:C --rdest --mask fe00:: --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3461 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-532 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-532 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-532 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-532 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-532 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-532 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-532 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-532 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3462 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-533 + inet/filter/limit-ntp-533 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-533 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-533 + inet6/filter/limit-ntp-533 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-533 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3463 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-534 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-534 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-534 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-534 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-534 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-534 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-534 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-534 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-534 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3464 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-535 + inet/filter/limit-ntp-535 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-535 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-535 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-535 + inet6/filter/limit-ntp-535 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-535 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3465 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-536 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-536 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-536 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-536 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-536 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-536 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3466 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-537 + inet/filter/limit-ntp-537 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-537 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-537 + inet6/filter/limit-ntp-537 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-537 -m recent --name user:C --rdest --mask fe00:: --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3467 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-538 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-538 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-538 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-538 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-538 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-538 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-538 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3468 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-539 + inet/filter/limit-ntp-539 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-539 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-539 + inet6/filter/limit-ntp-539 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3469 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-540 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-540 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-540 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-540 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-540 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-540 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3470 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3471 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-542 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-542 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-542 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-542 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-542 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-542 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-542 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-542 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3472 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-543 + inet/filter/limit-ntp-543 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-543 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-543 + inet6/filter/limit-ntp-543 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-543 -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3473 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-544 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-544 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-544 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-544 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-544 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-544 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-544 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-544 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-544 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3474 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-545 + inet/filter/limit-ntp-545 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-545 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-545 -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-545 + inet6/filter/limit-ntp-545 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-545 -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3475 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-546 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-546 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-546 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-546 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-546 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-546 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3476 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3477 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-548 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-548 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-548 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-548 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-548 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-548 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-548 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3478 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-549 + inet/filter/limit-ntp-549 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-549 -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-549 + inet6/filter/limit-ntp-549 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3479 {"flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-550 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-550 -m recent --name limit-ntp-550 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-280 + inet/filter/limit-ntp-550 -m recent --name limit-ntp-550 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-280 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-280 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-550 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-550 -m recent --name limit-ntp-550 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-280 + inet6/filter/limit-ntp-550 -m recent --name limit-ntp-550 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-280 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-280 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3480 {"action":"pass","flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-551 + inet/filter/limit-ntp-551 -m recent --name limit-ntp-551 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-281 + inet/filter/limit-ntp-551 -m recent --name limit-ntp-551 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-281 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-281 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-551 + inet6/filter/limit-ntp-551 -m recent --name limit-ntp-551 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-281 + inet6/filter/limit-ntp-551 -m recent --name limit-ntp-551 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-281 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-281 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3481 {"flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-552 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-552 -m recent --name limit-ntp-552 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-282 + inet/filter/limit-ntp-552 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-552 -m recent --name limit-ntp-552 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-282 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-282 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-552 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-552 -m recent --name limit-ntp-552 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-282 + inet6/filter/limit-ntp-552 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-552 -m recent --name limit-ntp-552 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-282 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-282 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3482 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-553 + inet/filter/limit-ntp-553 -m recent --name limit-ntp-553 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-283 + inet/filter/limit-ntp-553 -m recent --name limit-ntp-553 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-283 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-283 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-553 + inet6/filter/limit-ntp-553 -m recent --name limit-ntp-553 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-283 + inet6/filter/limit-ntp-553 -m recent --name limit-ntp-553 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-283 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-283 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3483 {"flow-limit":{"interval":5},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-554 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-554 -m recent --name limit-ntp-554 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-284 + inet/filter/limit-ntp-554 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-554 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-554 -m recent --name limit-ntp-554 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-284 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-284 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-554 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-554 -m recent --name limit-ntp-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-284 + inet6/filter/limit-ntp-554 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-554 -m recent --name limit-ntp-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-284 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-284 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3484 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-555 + inet/filter/limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-285 + inet/filter/limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-285 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-285 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-555 + inet6/filter/limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-285 + inet6/filter/limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-285 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-285 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3485 {"flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-556 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-556 -m recent --name limit-ntp-556 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-286 + inet/filter/limit-ntp-556 -m recent --name limit-ntp-556 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-286 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-286 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-556 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-556 -m recent --name limit-ntp-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-286 + inet6/filter/limit-ntp-556 -m recent --name limit-ntp-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-286 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-286 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3486 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-557 + inet/filter/limit-ntp-557 -m recent --name limit-ntp-557 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-287 + inet/filter/limit-ntp-557 -m recent --name limit-ntp-557 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-287 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-287 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-557 + inet6/filter/limit-ntp-557 -m recent --name limit-ntp-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-287 + inet6/filter/limit-ntp-557 -m recent --name limit-ntp-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-287 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-287 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3487 {"flow-limit":{"interval":5},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-558 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-558 -m recent --name limit-ntp-558 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-288 + inet/filter/limit-ntp-558 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-558 -m recent --name limit-ntp-558 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-288 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-288 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-558 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-558 -m recent --name limit-ntp-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-288 + inet6/filter/limit-ntp-558 -m recent --name limit-ntp-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-288 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-288 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3488 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-559 + inet/filter/limit-ntp-559 -m recent --name limit-ntp-559 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-289 + inet/filter/limit-ntp-559 -m recent --name limit-ntp-559 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-289 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-289 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-559 + inet6/filter/limit-ntp-559 -m recent --name limit-ntp-559 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-289 + inet6/filter/logdrop-ntp-289 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-289 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3489 {"flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-560 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-560 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-290 + inet/filter/limit-ntp-560 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-290 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-290 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-560 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-290 + inet6/filter/limit-ntp-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-290 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-290 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3490 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-561 + inet/filter/limit-ntp-561 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-291 + inet/filter/limit-ntp-561 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-291 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-291 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-561 + inet6/filter/limit-ntp-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-291 + inet6/filter/limit-ntp-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-291 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-291 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3491 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-562 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-562 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-292 + inet/filter/limit-ntp-562 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-562 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-292 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-292 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-562 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-292 + inet6/filter/limit-ntp-562 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-292 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-292 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3492 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-563 + inet/filter/limit-ntp-563 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-293 + inet/filter/limit-ntp-563 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-293 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-293 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-563 + inet6/filter/limit-ntp-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-293 + inet6/filter/limit-ntp-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-293 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-293 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3493 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-564 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-564 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-294 + inet/filter/limit-ntp-564 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-564 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-564 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-294 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-294 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-564 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-294 + inet6/filter/limit-ntp-564 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-294 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-294 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3494 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-565 + inet/filter/limit-ntp-565 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-295 + inet/filter/limit-ntp-565 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-565 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-295 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-295 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-565 + inet6/filter/limit-ntp-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-295 + inet6/filter/limit-ntp-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-295 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-295 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3495 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-566 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-566 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-296 + inet/filter/limit-ntp-566 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-296 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-296 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-566 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-296 + inet6/filter/limit-ntp-566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-296 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-296 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3496 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-567 + inet/filter/limit-ntp-567 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-297 + inet/filter/limit-ntp-567 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-297 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-297 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-567 + inet6/filter/limit-ntp-567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-297 + inet6/filter/limit-ntp-567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-297 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-297 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3497 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-568 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-568 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-298 + inet/filter/limit-ntp-568 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-568 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-298 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-298 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-568 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-298 + inet6/filter/limit-ntp-568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-298 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-298 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3498 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-569 + inet/filter/limit-ntp-569 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-299 + inet/filter/limit-ntp-569 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-299 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-299 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-569 + inet6/filter/limit-ntp-569 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-299 + inet6/filter/logdrop-ntp-299 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-299 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3499 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-570 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-570 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-300 + inet/filter/limit-ntp-570 -j ACCEPT + inet/filter/logdrop-ntp-300 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-300 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-570 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-570 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-300 + inet6/filter/limit-ntp-570 -j ACCEPT + inet6/filter/logdrop-ntp-300 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-300 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3500 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-301 + inet/filter/logdrop-ntp-301 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-301 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-301 + inet6/filter/logdrop-ntp-301 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-301 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3501 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-572 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-572 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-302 + inet/filter/limit-ntp-572 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-572 -j ACCEPT + inet/filter/logdrop-ntp-302 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-302 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-572 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-572 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-302 + inet6/filter/limit-ntp-572 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-572 -j ACCEPT + inet6/filter/logdrop-ntp-302 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-302 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3502 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-573 + inet/filter/limit-ntp-573 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-303 + inet/filter/limit-ntp-573 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-303 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-303 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-573 + inet6/filter/limit-ntp-573 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-303 + inet6/filter/limit-ntp-573 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-303 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-303 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3503 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-574 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-574 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-304 + inet/filter/limit-ntp-574 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-574 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-574 -j ACCEPT + inet/filter/logdrop-ntp-304 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-304 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-574 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-574 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-304 + inet6/filter/limit-ntp-574 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-574 -j ACCEPT + inet6/filter/logdrop-ntp-304 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-304 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3504 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-575 + inet/filter/limit-ntp-575 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-305 + inet/filter/limit-ntp-575 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-575 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-305 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-305 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-575 + inet6/filter/limit-ntp-575 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-305 + inet6/filter/limit-ntp-575 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-305 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-305 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3505 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-576 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-576 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-306 + inet/filter/limit-ntp-576 -j ACCEPT + inet/filter/logdrop-ntp-306 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-306 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-576 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-576 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-306 + inet6/filter/limit-ntp-576 -j ACCEPT + inet6/filter/logdrop-ntp-306 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-306 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3506 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-307 + inet/filter/logdrop-ntp-307 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-307 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-307 + inet6/filter/logdrop-ntp-307 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-307 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3507 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-578 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-578 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-308 + inet/filter/limit-ntp-578 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-578 -j ACCEPT + inet/filter/logdrop-ntp-308 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-308 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-578 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-578 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-308 + inet6/filter/limit-ntp-578 -j ACCEPT + inet6/filter/logdrop-ntp-308 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-308 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3508 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-579 + inet/filter/limit-ntp-579 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-309 + inet/filter/limit-ntp-579 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-309 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-309 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-579 + inet6/filter/limit-ntp-579 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-309 + inet6/filter/logdrop-ntp-309 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-309 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3509 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-580 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-580 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-310 + inet/filter/limit-ntp-580 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-310 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-310 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-580 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-310 + inet6/filter/limit-ntp-580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-310 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-310 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3510 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-581 + inet/filter/limit-ntp-581 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-311 + inet/filter/limit-ntp-581 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-311 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-311 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-581 + inet6/filter/limit-ntp-581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-311 + inet6/filter/limit-ntp-581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-311 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-311 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3511 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-582 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-582 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-312 + inet/filter/limit-ntp-582 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-582 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-312 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-312 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-582 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-312 + inet6/filter/limit-ntp-582 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-312 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-312 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3512 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-583 + inet/filter/limit-ntp-583 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-313 + inet/filter/limit-ntp-583 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-313 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-313 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-583 + inet6/filter/limit-ntp-583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-313 + inet6/filter/limit-ntp-583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-313 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-313 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3513 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-584 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-584 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-314 + inet/filter/limit-ntp-584 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-584 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-584 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-314 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-314 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-584 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-314 + inet6/filter/limit-ntp-584 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-314 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-314 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3514 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-585 + inet/filter/limit-ntp-585 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-315 + inet/filter/limit-ntp-585 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-585 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-315 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-315 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-585 + inet6/filter/limit-ntp-585 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-315 + inet6/filter/limit-ntp-585 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-315 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-315 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3515 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-586 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-586 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-316 + inet/filter/limit-ntp-586 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-316 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-316 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-586 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-586 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-316 + inet6/filter/limit-ntp-586 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-316 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-316 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3516 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-587 + inet/filter/limit-ntp-587 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-317 + inet/filter/limit-ntp-587 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-317 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-317 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-587 + inet6/filter/limit-ntp-587 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-317 + inet6/filter/limit-ntp-587 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-317 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-317 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3517 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-588 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-588 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-318 + inet/filter/limit-ntp-588 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-588 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-318 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-318 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-588 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-588 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-318 + inet6/filter/limit-ntp-588 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-318 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-318 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3518 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-589 + inet/filter/limit-ntp-589 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-319 + inet/filter/limit-ntp-589 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-319 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-319 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-589 + inet6/filter/limit-ntp-589 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-319 + inet6/filter/logdrop-ntp-319 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-319 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3519 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-590 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-590 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-320 + inet/filter/limit-ntp-590 -j ACCEPT + inet/filter/logdrop-ntp-320 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-320 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-590 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-590 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-320 + inet6/filter/limit-ntp-590 -j ACCEPT + inet6/filter/logdrop-ntp-320 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-320 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3520 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-321 + inet/filter/logdrop-ntp-321 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-321 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-321 + inet6/filter/logdrop-ntp-321 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-321 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3521 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-592 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-592 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-322 + inet/filter/limit-ntp-592 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-592 -j ACCEPT + inet/filter/logdrop-ntp-322 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-322 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-592 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-592 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-322 + inet6/filter/limit-ntp-592 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-592 -j ACCEPT + inet6/filter/logdrop-ntp-322 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-322 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3522 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-593 + inet/filter/limit-ntp-593 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-323 + inet/filter/limit-ntp-593 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-323 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-323 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-593 + inet6/filter/limit-ntp-593 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-323 + inet6/filter/limit-ntp-593 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-323 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-323 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3523 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-594 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-594 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-324 + inet/filter/limit-ntp-594 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-594 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-594 -j ACCEPT + inet/filter/logdrop-ntp-324 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-324 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-594 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-594 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-324 + inet6/filter/limit-ntp-594 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-594 -j ACCEPT + inet6/filter/logdrop-ntp-324 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-324 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3524 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-595 + inet/filter/limit-ntp-595 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-325 + inet/filter/limit-ntp-595 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-595 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-325 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-325 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-595 + inet6/filter/limit-ntp-595 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-325 + inet6/filter/limit-ntp-595 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-325 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-325 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3525 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-596 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-596 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-326 + inet/filter/limit-ntp-596 -j ACCEPT + inet/filter/logdrop-ntp-326 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-326 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-596 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-596 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-326 + inet6/filter/limit-ntp-596 -j ACCEPT + inet6/filter/logdrop-ntp-326 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-326 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3526 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-327 + inet/filter/logdrop-ntp-327 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-327 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-327 + inet6/filter/logdrop-ntp-327 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-327 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3527 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-598 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-598 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-328 + inet/filter/limit-ntp-598 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-598 -j ACCEPT + inet/filter/logdrop-ntp-328 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-328 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-598 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-328 + inet6/filter/limit-ntp-598 -j ACCEPT + inet6/filter/logdrop-ntp-328 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-328 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3528 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-599 + inet/filter/limit-ntp-599 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-329 + inet/filter/limit-ntp-599 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-329 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-329 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-599 + inet6/filter/limit-ntp-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-329 + inet6/filter/logdrop-ntp-329 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-329 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3529 {"flow-limit":{"interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-600 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-600 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-330 + inet/filter/limit-ntp-600 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-330 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-330 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-600 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-600 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-330 + inet6/filter/limit-ntp-600 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-330 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-330 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3530 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-601 + inet/filter/limit-ntp-601 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-331 + inet/filter/limit-ntp-601 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-ntp-331 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-331 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-601 + inet6/filter/limit-ntp-601 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-331 + inet6/filter/limit-ntp-601 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-ntp-331 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-331 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3531 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-602 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-602 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-332 + inet/filter/limit-ntp-602 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-602 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-332 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-332 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-602 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-602 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-332 + inet6/filter/limit-ntp-602 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-602 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-332 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-332 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3532 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-603 + inet/filter/limit-ntp-603 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-333 + inet/filter/limit-ntp-603 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-333 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-333 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-603 + inet6/filter/limit-ntp-603 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-333 + inet6/filter/limit-ntp-603 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-333 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-333 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3533 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-604 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-604 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-334 + inet/filter/limit-ntp-604 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-604 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-604 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-334 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-334 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-604 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-604 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-334 + inet6/filter/limit-ntp-604 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-604 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-334 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-334 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3534 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-605 + inet/filter/limit-ntp-605 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-335 + inet/filter/limit-ntp-605 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-605 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-335 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-335 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-605 + inet6/filter/limit-ntp-605 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-335 + inet6/filter/limit-ntp-605 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-335 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-335 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3535 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-606 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-606 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-336 + inet/filter/limit-ntp-606 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-336 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-336 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-606 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-606 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-336 + inet6/filter/limit-ntp-606 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-336 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-336 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3536 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-607 + inet/filter/limit-ntp-607 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-337 + inet/filter/limit-ntp-607 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-ntp-337 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-337 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-607 + inet6/filter/limit-ntp-607 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-337 + inet6/filter/limit-ntp-607 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-ntp-337 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-337 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3537 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-608 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-608 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-338 + inet/filter/limit-ntp-608 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-608 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-338 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-338 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-608 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-608 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-338 + inet6/filter/limit-ntp-608 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-338 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-338 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3538 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-609 + inet/filter/limit-ntp-609 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-339 + inet/filter/limit-ntp-609 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-339 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-339 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-609 + inet6/filter/limit-ntp-609 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-339 + inet6/filter/logdrop-ntp-339 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-339 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3539 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-610 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-610 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-340 + inet/filter/limit-ntp-610 -j ACCEPT + inet/filter/logdrop-ntp-340 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-340 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-610 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-610 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-340 + inet6/filter/limit-ntp-610 -j ACCEPT + inet6/filter/logdrop-ntp-340 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-340 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3540 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-341 + inet/filter/logdrop-ntp-341 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-341 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-341 + inet6/filter/logdrop-ntp-341 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-341 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3541 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-612 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-612 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-342 + inet/filter/limit-ntp-612 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-612 -j ACCEPT + inet/filter/logdrop-ntp-342 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-342 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-612 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-612 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-342 + inet6/filter/limit-ntp-612 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-612 -j ACCEPT + inet6/filter/logdrop-ntp-342 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-342 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3542 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-613 + inet/filter/limit-ntp-613 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-343 + inet/filter/limit-ntp-613 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-343 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-343 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-613 + inet6/filter/limit-ntp-613 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-343 + inet6/filter/limit-ntp-613 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-343 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-343 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3543 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-614 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-614 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-344 + inet/filter/limit-ntp-614 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-614 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-614 -j ACCEPT + inet/filter/logdrop-ntp-344 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-344 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-614 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-614 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-344 + inet6/filter/limit-ntp-614 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-614 -j ACCEPT + inet6/filter/logdrop-ntp-344 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-344 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3544 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-615 + inet/filter/limit-ntp-615 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-345 + inet/filter/limit-ntp-615 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-615 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-345 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-345 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-615 + inet6/filter/limit-ntp-615 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-345 + inet6/filter/limit-ntp-615 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-345 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-345 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3545 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-616 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-616 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-346 + inet/filter/limit-ntp-616 -j ACCEPT + inet/filter/logdrop-ntp-346 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-346 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-616 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-616 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-346 + inet6/filter/limit-ntp-616 -j ACCEPT + inet6/filter/logdrop-ntp-346 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-346 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3546 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-347 + inet/filter/logdrop-ntp-347 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-347 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-347 + inet6/filter/logdrop-ntp-347 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-347 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3547 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-618 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-618 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-348 + inet/filter/limit-ntp-618 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-618 -j ACCEPT + inet/filter/logdrop-ntp-348 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-348 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-618 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-618 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-348 + inet6/filter/limit-ntp-618 -j ACCEPT + inet6/filter/logdrop-ntp-348 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-348 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3548 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-619 + inet/filter/limit-ntp-619 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-349 + inet/filter/limit-ntp-619 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-349 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-349 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-619 + inet6/filter/limit-ntp-619 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-349 + inet6/filter/logdrop-ntp-349 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-349 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3549 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-620 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-620 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-350 + inet/filter/limit-ntp-620 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-350 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-350 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-620 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-620 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-350 + inet6/filter/limit-ntp-620 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-350 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-350 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3550 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-621 + inet/filter/limit-ntp-621 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-351 + inet/filter/limit-ntp-621 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-ntp-351 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-351 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-621 + inet6/filter/limit-ntp-621 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-351 + inet6/filter/limit-ntp-621 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-ntp-351 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-351 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3551 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-622 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-622 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-352 + inet/filter/limit-ntp-622 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-622 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-352 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-352 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-622 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-622 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-352 + inet6/filter/limit-ntp-622 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-622 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-352 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-352 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3552 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-623 + inet/filter/limit-ntp-623 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-353 + inet/filter/limit-ntp-623 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-353 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-353 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-623 + inet6/filter/limit-ntp-623 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-353 + inet6/filter/limit-ntp-623 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-353 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-353 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3553 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-624 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-624 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-354 + inet/filter/limit-ntp-624 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-624 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-624 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-354 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-354 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-624 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-624 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-354 + inet6/filter/limit-ntp-624 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-624 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-354 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-354 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3554 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-625 + inet/filter/limit-ntp-625 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-355 + inet/filter/limit-ntp-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-355 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-355 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-625 + inet6/filter/limit-ntp-625 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-355 + inet6/filter/limit-ntp-625 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-355 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-355 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3555 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-626 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-626 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-356 + inet/filter/limit-ntp-626 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-356 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-356 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-626 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-626 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-356 + inet6/filter/limit-ntp-626 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-356 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-356 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3556 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-627 + inet/filter/limit-ntp-627 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-357 + inet/filter/limit-ntp-627 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-ntp-357 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-357 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-627 + inet6/filter/limit-ntp-627 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-357 + inet6/filter/limit-ntp-627 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-ntp-357 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-357 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3557 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-628 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-628 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-358 + inet/filter/limit-ntp-628 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-628 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-358 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-358 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-628 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-628 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-358 + inet6/filter/limit-ntp-628 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-358 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-358 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3558 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-629 + inet/filter/limit-ntp-629 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-359 + inet/filter/limit-ntp-629 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-359 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-359 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-629 + inet6/filter/limit-ntp-629 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-359 + inet6/filter/logdrop-ntp-359 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-359 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3559 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-630 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-630 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-360 + inet/filter/limit-ntp-630 -j ACCEPT + inet/filter/logdrop-ntp-360 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-360 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-630 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-630 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-360 + inet6/filter/limit-ntp-630 -j ACCEPT + inet6/filter/logdrop-ntp-360 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-360 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3560 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-361 + inet/filter/logdrop-ntp-361 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-361 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-361 + inet6/filter/logdrop-ntp-361 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-361 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3561 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-632 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-632 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-362 + inet/filter/limit-ntp-632 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-632 -j ACCEPT + inet/filter/logdrop-ntp-362 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-362 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-632 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-632 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-362 + inet6/filter/limit-ntp-632 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-632 -j ACCEPT + inet6/filter/logdrop-ntp-362 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-362 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3562 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-633 + inet/filter/limit-ntp-633 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-363 + inet/filter/limit-ntp-633 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-363 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-363 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-633 + inet6/filter/limit-ntp-633 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-363 + inet6/filter/limit-ntp-633 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-363 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-363 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3563 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-634 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-634 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-364 + inet/filter/limit-ntp-634 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-634 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-634 -j ACCEPT + inet/filter/logdrop-ntp-364 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-364 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-634 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-634 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-364 + inet6/filter/limit-ntp-634 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-634 -j ACCEPT + inet6/filter/logdrop-ntp-364 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-364 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3564 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-635 + inet/filter/limit-ntp-635 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-365 + inet/filter/limit-ntp-635 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-635 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-365 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-365 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-635 + inet6/filter/limit-ntp-635 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-365 + inet6/filter/limit-ntp-635 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-365 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-365 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3565 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-636 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-636 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-366 + inet/filter/limit-ntp-636 -j ACCEPT + inet/filter/logdrop-ntp-366 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-366 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-636 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-636 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-366 + inet6/filter/limit-ntp-636 -j ACCEPT + inet6/filter/logdrop-ntp-366 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-366 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3566 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-367 + inet/filter/logdrop-ntp-367 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-367 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-367 + inet6/filter/logdrop-ntp-367 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-367 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3567 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-638 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-638 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-368 + inet/filter/limit-ntp-638 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-638 -j ACCEPT + inet/filter/logdrop-ntp-368 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-368 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-638 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-638 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-368 + inet6/filter/limit-ntp-638 -j ACCEPT + inet6/filter/logdrop-ntp-368 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-368 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3568 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-639 + inet/filter/limit-ntp-639 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-369 + inet/filter/limit-ntp-639 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-369 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-369 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-639 + inet6/filter/limit-ntp-639 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-369 + inet6/filter/logdrop-ntp-369 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-369 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3569 {"flow-limit":{"interval":5,"log":"mirror"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-640 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-640 -m recent --name limit-ntp-640 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-370 + inet/filter/limit-ntp-640 -m recent --name limit-ntp-640 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-370 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-370 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-370 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-640 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-640 -m recent --name limit-ntp-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-370 + inet6/filter/limit-ntp-640 -m recent --name limit-ntp-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-370 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-370 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3570 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-641 + inet/filter/limit-ntp-641 -m recent --name limit-ntp-641 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-371 + inet/filter/limit-ntp-641 -m recent --name limit-ntp-641 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-371 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-371 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-371 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-641 + inet6/filter/limit-ntp-641 -m recent --name limit-ntp-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-371 + inet6/filter/limit-ntp-641 -m recent --name limit-ntp-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-371 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-371 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3571 {"flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-642 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-642 -m recent --name limit-ntp-642 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-372 + inet/filter/limit-ntp-642 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-642 -m recent --name limit-ntp-642 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-372 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-372 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-372 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-642 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-642 -m recent --name limit-ntp-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-372 + inet6/filter/limit-ntp-642 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-642 -m recent --name limit-ntp-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-372 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-372 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3572 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-643 + inet/filter/limit-ntp-643 -m recent --name limit-ntp-643 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-373 + inet/filter/limit-ntp-643 -m recent --name limit-ntp-643 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-373 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-373 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-373 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-643 + inet6/filter/limit-ntp-643 -m recent --name limit-ntp-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-373 + inet6/filter/limit-ntp-643 -m recent --name limit-ntp-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-373 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-373 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3573 {"flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-644 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-644 -m recent --name limit-ntp-644 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-374 + inet/filter/limit-ntp-644 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-644 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-644 -m recent --name limit-ntp-644 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-374 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-374 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-374 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-644 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-644 -m recent --name limit-ntp-644 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-374 + inet6/filter/limit-ntp-644 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-644 -m recent --name limit-ntp-644 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-374 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-374 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3574 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-645 + inet/filter/limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-375 + inet/filter/limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-375 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-375 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-375 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-645 + inet6/filter/limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-375 + inet6/filter/limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-375 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-375 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3575 {"flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-646 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-646 -m recent --name limit-ntp-646 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-376 + inet/filter/limit-ntp-646 -m recent --name limit-ntp-646 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-376 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-376 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-376 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-646 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-646 -m recent --name limit-ntp-646 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-376 + inet6/filter/limit-ntp-646 -m recent --name limit-ntp-646 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-376 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-376 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3576 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-647 + inet/filter/limit-ntp-647 -m recent --name limit-ntp-647 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-377 + inet/filter/limit-ntp-647 -m recent --name limit-ntp-647 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-377 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-377 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-377 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-647 + inet6/filter/limit-ntp-647 -m recent --name limit-ntp-647 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-377 + inet6/filter/limit-ntp-647 -m recent --name limit-ntp-647 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-377 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-377 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3577 {"flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-648 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-648 -m recent --name limit-ntp-648 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-378 + inet/filter/limit-ntp-648 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-648 -m recent --name limit-ntp-648 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-378 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-378 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-378 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-648 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-648 -m recent --name limit-ntp-648 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-378 + inet6/filter/limit-ntp-648 -m recent --name limit-ntp-648 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-378 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-378 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3578 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-649 + inet/filter/limit-ntp-649 -m recent --name limit-ntp-649 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-379 + inet/filter/limit-ntp-649 -m recent --name limit-ntp-649 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-379 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-379 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-379 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-649 + inet6/filter/limit-ntp-649 -m recent --name limit-ntp-649 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-379 + inet6/filter/logdrop-ntp-379 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-379 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3579 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-650 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-650 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-380 + inet/filter/limit-ntp-650 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-380 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-380 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-380 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-650 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-380 + inet6/filter/limit-ntp-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-380 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-380 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3580 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-651 + inet/filter/limit-ntp-651 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-381 + inet/filter/limit-ntp-651 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-381 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-381 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-381 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-651 + inet6/filter/limit-ntp-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-381 + inet6/filter/limit-ntp-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-381 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-381 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3581 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-652 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-652 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-382 + inet/filter/limit-ntp-652 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-652 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-382 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-382 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-382 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-652 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-652 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-382 + inet6/filter/limit-ntp-652 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-652 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-382 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-382 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3582 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-653 + inet/filter/limit-ntp-653 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-383 + inet/filter/limit-ntp-653 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-383 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-383 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-383 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-653 + inet6/filter/limit-ntp-653 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-383 + inet6/filter/limit-ntp-653 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-383 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-383 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3583 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-654 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-654 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-384 + inet/filter/limit-ntp-654 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-654 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-654 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-384 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-384 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-384 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-654 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-654 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-384 + inet6/filter/limit-ntp-654 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-654 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-384 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-384 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3584 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-655 + inet/filter/limit-ntp-655 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-385 + inet/filter/limit-ntp-655 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-655 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-385 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-385 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-385 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-655 + inet6/filter/limit-ntp-655 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-385 + inet6/filter/limit-ntp-655 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-385 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-385 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3585 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-656 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-656 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-386 + inet/filter/limit-ntp-656 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-386 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-386 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-386 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-656 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-656 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-386 + inet6/filter/limit-ntp-656 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-386 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-386 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3586 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-657 + inet/filter/limit-ntp-657 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-387 + inet/filter/limit-ntp-657 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-387 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-387 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-387 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-657 + inet6/filter/limit-ntp-657 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-387 + inet6/filter/limit-ntp-657 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-387 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-387 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3587 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-658 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-658 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-388 + inet/filter/limit-ntp-658 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-658 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-388 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-388 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-388 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-658 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-658 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-388 + inet6/filter/limit-ntp-658 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-388 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-388 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3588 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-659 + inet/filter/limit-ntp-659 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-389 + inet/filter/limit-ntp-659 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-389 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-389 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-389 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-659 + inet6/filter/limit-ntp-659 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-389 + inet6/filter/logdrop-ntp-389 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-389 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3589 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-660 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-660 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-390 + inet/filter/limit-ntp-660 -j ACCEPT + inet/filter/logdrop-ntp-390 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-390 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-390 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-660 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-660 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-390 + inet6/filter/limit-ntp-660 -j ACCEPT + inet6/filter/logdrop-ntp-390 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-390 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3590 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-391 + inet/filter/logdrop-ntp-391 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-391 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-391 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-391 + inet6/filter/logdrop-ntp-391 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-391 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3591 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-662 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-662 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-392 + inet/filter/limit-ntp-662 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-662 -j ACCEPT + inet/filter/logdrop-ntp-392 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-392 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-392 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-662 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-662 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-392 + inet6/filter/limit-ntp-662 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-662 -j ACCEPT + inet6/filter/logdrop-ntp-392 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-392 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3592 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-663 + inet/filter/limit-ntp-663 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-393 + inet/filter/limit-ntp-663 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-393 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-393 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-393 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-663 + inet6/filter/limit-ntp-663 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-393 + inet6/filter/limit-ntp-663 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-393 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-393 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3593 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-664 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-664 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-394 + inet/filter/limit-ntp-664 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-664 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-664 -j ACCEPT + inet/filter/logdrop-ntp-394 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-394 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-394 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-664 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-664 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-394 + inet6/filter/limit-ntp-664 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-664 -j ACCEPT + inet6/filter/logdrop-ntp-394 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-394 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3594 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-665 + inet/filter/limit-ntp-665 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-395 + inet/filter/limit-ntp-665 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-665 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-395 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-395 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-395 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-665 + inet6/filter/limit-ntp-665 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-395 + inet6/filter/limit-ntp-665 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-395 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-395 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3595 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-666 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-666 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-396 + inet/filter/limit-ntp-666 -j ACCEPT + inet/filter/logdrop-ntp-396 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-396 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-396 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-666 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-666 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-396 + inet6/filter/limit-ntp-666 -j ACCEPT + inet6/filter/logdrop-ntp-396 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-396 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3596 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-397 + inet/filter/logdrop-ntp-397 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-397 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-397 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-397 + inet6/filter/logdrop-ntp-397 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-397 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3597 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-668 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-668 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-398 + inet/filter/limit-ntp-668 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-668 -j ACCEPT + inet/filter/logdrop-ntp-398 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-398 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-398 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-668 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-668 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-398 + inet6/filter/limit-ntp-668 -j ACCEPT + inet6/filter/logdrop-ntp-398 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-398 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3598 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-669 + inet/filter/limit-ntp-669 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-399 + inet/filter/limit-ntp-669 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-399 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-399 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-399 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-669 + inet6/filter/limit-ntp-669 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-399 + inet6/filter/logdrop-ntp-399 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-399 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3599 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-670 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-670 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-400 + inet/filter/limit-ntp-670 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-400 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-400 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-400 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-670 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-670 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-400 + inet6/filter/limit-ntp-670 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-400 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-400 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3600 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-671 + inet/filter/limit-ntp-671 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-401 + inet/filter/limit-ntp-671 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-401 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-401 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-401 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-671 + inet6/filter/limit-ntp-671 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-401 + inet6/filter/limit-ntp-671 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-401 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-401 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3601 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-672 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-672 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-402 + inet/filter/limit-ntp-672 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-672 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-402 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-402 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-402 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-672 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-672 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-402 + inet6/filter/limit-ntp-672 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-672 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-402 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-402 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3602 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-673 + inet/filter/limit-ntp-673 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-403 + inet/filter/limit-ntp-673 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-403 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-403 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-403 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-673 + inet6/filter/limit-ntp-673 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-403 + inet6/filter/limit-ntp-673 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-403 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-403 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3603 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-674 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-674 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-404 + inet/filter/limit-ntp-674 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-674 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-674 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-404 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-404 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-404 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-674 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-674 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-404 + inet6/filter/limit-ntp-674 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-674 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-404 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-404 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3604 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-675 + inet/filter/limit-ntp-675 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-405 + inet/filter/limit-ntp-675 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-675 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-405 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-405 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-405 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-675 + inet6/filter/limit-ntp-675 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-405 + inet6/filter/limit-ntp-675 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-405 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-405 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3605 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-676 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-676 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-406 + inet/filter/limit-ntp-676 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-406 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-406 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-406 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-676 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-676 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-406 + inet6/filter/limit-ntp-676 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-406 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-406 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3606 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-677 + inet/filter/limit-ntp-677 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-407 + inet/filter/limit-ntp-677 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-407 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-407 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-407 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-677 + inet6/filter/limit-ntp-677 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-407 + inet6/filter/limit-ntp-677 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-407 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-407 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3607 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-678 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-678 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-408 + inet/filter/limit-ntp-678 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-678 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-408 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-408 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-408 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-678 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-678 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-408 + inet6/filter/limit-ntp-678 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-408 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-408 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3608 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-679 + inet/filter/limit-ntp-679 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-409 + inet/filter/limit-ntp-679 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-409 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-409 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-409 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-679 + inet6/filter/limit-ntp-679 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-409 + inet6/filter/logdrop-ntp-409 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-409 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3609 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-680 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-680 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-410 + inet/filter/limit-ntp-680 -j ACCEPT + inet/filter/logdrop-ntp-410 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-410 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-410 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-680 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-680 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-410 + inet6/filter/limit-ntp-680 -j ACCEPT + inet6/filter/logdrop-ntp-410 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-410 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3610 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-411 + inet/filter/logdrop-ntp-411 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-411 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-411 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-411 + inet6/filter/logdrop-ntp-411 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-411 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3611 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-682 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-682 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-412 + inet/filter/limit-ntp-682 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-682 -j ACCEPT + inet/filter/logdrop-ntp-412 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-412 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-412 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-682 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-682 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-412 + inet6/filter/limit-ntp-682 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-682 -j ACCEPT + inet6/filter/logdrop-ntp-412 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-412 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3612 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-683 + inet/filter/limit-ntp-683 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-413 + inet/filter/limit-ntp-683 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-413 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-413 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-413 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-683 + inet6/filter/limit-ntp-683 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-413 + inet6/filter/limit-ntp-683 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-413 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-413 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3613 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-684 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-684 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-414 + inet/filter/limit-ntp-684 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-684 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-684 -j ACCEPT + inet/filter/logdrop-ntp-414 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-414 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-414 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-684 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-684 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-414 + inet6/filter/limit-ntp-684 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-684 -j ACCEPT + inet6/filter/logdrop-ntp-414 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-414 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3614 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-685 + inet/filter/limit-ntp-685 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-415 + inet/filter/limit-ntp-685 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-685 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-415 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-415 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-415 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-685 + inet6/filter/limit-ntp-685 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-415 + inet6/filter/limit-ntp-685 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-415 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-415 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3615 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-686 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-686 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-416 + inet/filter/limit-ntp-686 -j ACCEPT + inet/filter/logdrop-ntp-416 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-416 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-416 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-686 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-686 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-416 + inet6/filter/limit-ntp-686 -j ACCEPT + inet6/filter/logdrop-ntp-416 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-416 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3616 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-417 + inet/filter/logdrop-ntp-417 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-417 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-417 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-417 + inet6/filter/logdrop-ntp-417 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-417 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3617 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-688 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-688 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-418 + inet/filter/limit-ntp-688 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-688 -j ACCEPT + inet/filter/logdrop-ntp-418 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-418 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-418 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-688 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-688 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-418 + inet6/filter/limit-ntp-688 -j ACCEPT + inet6/filter/logdrop-ntp-418 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-418 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3618 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-689 + inet/filter/limit-ntp-689 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-419 + inet/filter/limit-ntp-689 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-419 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-419 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-419 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-689 + inet6/filter/limit-ntp-689 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-419 + inet6/filter/logdrop-ntp-419 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-419 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3619 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-690 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-690 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-420 + inet/filter/limit-ntp-690 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-420 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-420 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-420 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-690 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-690 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-420 + inet6/filter/limit-ntp-690 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-420 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-420 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3620 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-691 + inet/filter/limit-ntp-691 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-421 + inet/filter/limit-ntp-691 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-ntp-421 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-421 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-421 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-691 + inet6/filter/limit-ntp-691 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-421 + inet6/filter/limit-ntp-691 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-ntp-421 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-421 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3621 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-692 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-692 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-422 + inet/filter/limit-ntp-692 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-692 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-422 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-422 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-422 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-692 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-692 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-422 + inet6/filter/limit-ntp-692 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-692 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-422 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-422 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3622 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-693 + inet/filter/limit-ntp-693 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-423 + inet/filter/limit-ntp-693 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-423 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-423 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-423 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-693 + inet6/filter/limit-ntp-693 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-423 + inet6/filter/limit-ntp-693 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-423 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-423 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3623 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-694 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-694 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-424 + inet/filter/limit-ntp-694 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-694 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-694 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-424 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-424 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-424 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-694 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-694 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-424 + inet6/filter/limit-ntp-694 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-694 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-424 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-424 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3624 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-695 + inet/filter/limit-ntp-695 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-425 + inet/filter/limit-ntp-695 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-695 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-425 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-425 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-425 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-695 + inet6/filter/limit-ntp-695 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-425 + inet6/filter/limit-ntp-695 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-425 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-425 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3625 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-696 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-696 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-426 + inet/filter/limit-ntp-696 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-426 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-426 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-426 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-696 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-696 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-426 + inet6/filter/limit-ntp-696 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-426 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-426 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3626 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-697 + inet/filter/limit-ntp-697 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-427 + inet/filter/limit-ntp-697 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-ntp-427 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-427 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-427 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-697 + inet6/filter/limit-ntp-697 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-427 + inet6/filter/limit-ntp-697 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-ntp-427 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-427 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3627 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-698 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-698 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-428 + inet/filter/limit-ntp-698 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-698 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-428 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-428 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-428 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-698 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-698 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-428 + inet6/filter/limit-ntp-698 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-428 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-428 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3628 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-699 + inet/filter/limit-ntp-699 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-429 + inet/filter/limit-ntp-699 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-429 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-429 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-429 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-699 + inet6/filter/limit-ntp-699 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-429 + inet6/filter/logdrop-ntp-429 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-429 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3629 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-700 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-700 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-430 + inet/filter/limit-ntp-700 -j ACCEPT + inet/filter/logdrop-ntp-430 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-430 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-430 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-700 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-700 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-430 + inet6/filter/limit-ntp-700 -j ACCEPT + inet6/filter/logdrop-ntp-430 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-430 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3630 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-431 + inet/filter/logdrop-ntp-431 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-431 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-431 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-431 + inet6/filter/logdrop-ntp-431 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-431 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3631 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-702 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-702 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-432 + inet/filter/limit-ntp-702 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-702 -j ACCEPT + inet/filter/logdrop-ntp-432 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-432 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-432 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-702 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-702 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-432 + inet6/filter/limit-ntp-702 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-702 -j ACCEPT + inet6/filter/logdrop-ntp-432 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-432 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3632 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-703 + inet/filter/limit-ntp-703 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-433 + inet/filter/limit-ntp-703 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-433 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-433 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-433 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-703 + inet6/filter/limit-ntp-703 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-433 + inet6/filter/limit-ntp-703 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-433 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-433 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3633 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-704 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-704 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-434 + inet/filter/limit-ntp-704 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-704 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-704 -j ACCEPT + inet/filter/logdrop-ntp-434 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-434 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-434 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-704 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-704 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-434 + inet6/filter/limit-ntp-704 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-704 -j ACCEPT + inet6/filter/logdrop-ntp-434 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-434 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3634 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-705 + inet/filter/limit-ntp-705 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-435 + inet/filter/limit-ntp-705 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-705 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-435 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-435 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-435 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-705 + inet6/filter/limit-ntp-705 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-435 + inet6/filter/limit-ntp-705 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-435 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-435 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3635 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-706 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-706 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-436 + inet/filter/limit-ntp-706 -j ACCEPT + inet/filter/logdrop-ntp-436 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-436 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-436 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-706 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-706 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-436 + inet6/filter/limit-ntp-706 -j ACCEPT + inet6/filter/logdrop-ntp-436 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-436 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3636 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-437 + inet/filter/logdrop-ntp-437 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-437 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-437 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-437 + inet6/filter/logdrop-ntp-437 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-437 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3637 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-708 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-708 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-438 + inet/filter/limit-ntp-708 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-708 -j ACCEPT + inet/filter/logdrop-ntp-438 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-438 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-438 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-708 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-708 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-438 + inet6/filter/limit-ntp-708 -j ACCEPT + inet6/filter/logdrop-ntp-438 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-438 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3638 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-709 + inet/filter/limit-ntp-709 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-439 + inet/filter/limit-ntp-709 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-439 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-439 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-439 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-709 + inet6/filter/limit-ntp-709 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-439 + inet6/filter/logdrop-ntp-439 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-439 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3639 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-710 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-710 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-440 + inet/filter/limit-ntp-710 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-440 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-440 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-440 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-710 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-710 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-440 + inet6/filter/limit-ntp-710 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-440 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-440 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3640 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-711 + inet/filter/limit-ntp-711 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-441 + inet/filter/limit-ntp-711 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-ntp-441 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-441 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-441 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-711 + inet6/filter/limit-ntp-711 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-441 + inet6/filter/limit-ntp-711 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-ntp-441 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-441 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3641 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-712 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-712 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-442 + inet/filter/limit-ntp-712 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-712 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-442 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-442 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-442 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-712 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-712 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-442 + inet6/filter/limit-ntp-712 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-712 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-442 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-442 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3642 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-713 + inet/filter/limit-ntp-713 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-443 + inet/filter/limit-ntp-713 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-443 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-443 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-443 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-713 + inet6/filter/limit-ntp-713 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-443 + inet6/filter/limit-ntp-713 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-443 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-443 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3643 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-714 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-714 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-444 + inet/filter/limit-ntp-714 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-714 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-714 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-444 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-444 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-444 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-714 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-714 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-444 + inet6/filter/limit-ntp-714 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-714 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-444 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-444 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3644 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-715 + inet/filter/limit-ntp-715 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-445 + inet/filter/limit-ntp-715 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-715 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-445 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-445 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-445 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-715 + inet6/filter/limit-ntp-715 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-445 + inet6/filter/limit-ntp-715 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-445 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-445 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3645 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-716 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-716 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-446 + inet/filter/limit-ntp-716 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-446 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-446 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-446 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-716 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-716 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-446 + inet6/filter/limit-ntp-716 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-446 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-446 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3646 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-717 + inet/filter/limit-ntp-717 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-447 + inet/filter/limit-ntp-717 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-ntp-447 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-447 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-447 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-717 + inet6/filter/limit-ntp-717 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-447 + inet6/filter/limit-ntp-717 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-ntp-447 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-447 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3647 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-718 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-718 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-448 + inet/filter/limit-ntp-718 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-718 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-448 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-448 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-448 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-718 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-718 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-448 + inet6/filter/limit-ntp-718 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-448 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-448 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3648 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-719 + inet/filter/limit-ntp-719 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-449 + inet/filter/limit-ntp-719 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-449 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-449 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-449 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-719 + inet6/filter/limit-ntp-719 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-449 + inet6/filter/logdrop-ntp-449 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-449 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3649 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-720 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-720 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-450 + inet/filter/limit-ntp-720 -j ACCEPT + inet/filter/logdrop-ntp-450 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-450 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-450 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-720 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-720 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-450 + inet6/filter/limit-ntp-720 -j ACCEPT + inet6/filter/logdrop-ntp-450 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-450 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3650 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-451 + inet/filter/logdrop-ntp-451 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-451 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-451 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-451 + inet6/filter/logdrop-ntp-451 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-451 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3651 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-722 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-722 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-452 + inet/filter/limit-ntp-722 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-722 -j ACCEPT + inet/filter/logdrop-ntp-452 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-452 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-452 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-722 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-722 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-452 + inet6/filter/limit-ntp-722 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-722 -j ACCEPT + inet6/filter/logdrop-ntp-452 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-452 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3652 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-723 + inet/filter/limit-ntp-723 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-453 + inet/filter/limit-ntp-723 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-453 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-453 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-453 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-723 + inet6/filter/limit-ntp-723 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-453 + inet6/filter/limit-ntp-723 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-453 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-453 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3653 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-724 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-724 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-454 + inet/filter/limit-ntp-724 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-724 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-724 -j ACCEPT + inet/filter/logdrop-ntp-454 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-454 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-454 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-724 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-724 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-454 + inet6/filter/limit-ntp-724 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-724 -j ACCEPT + inet6/filter/logdrop-ntp-454 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-454 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3654 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-725 + inet/filter/limit-ntp-725 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-455 + inet/filter/limit-ntp-725 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-725 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-455 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-455 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-455 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-725 + inet6/filter/limit-ntp-725 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-455 + inet6/filter/limit-ntp-725 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-455 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-455 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3655 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-726 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-726 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-456 + inet/filter/limit-ntp-726 -j ACCEPT + inet/filter/logdrop-ntp-456 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-456 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-456 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-726 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-726 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-456 + inet6/filter/limit-ntp-726 -j ACCEPT + inet6/filter/logdrop-ntp-456 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-456 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3656 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-457 + inet/filter/logdrop-ntp-457 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-457 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-457 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-457 + inet6/filter/logdrop-ntp-457 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-457 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3657 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-728 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-728 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-458 + inet/filter/limit-ntp-728 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-728 -j ACCEPT + inet/filter/logdrop-ntp-458 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-458 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-458 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-728 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-728 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-458 + inet6/filter/limit-ntp-728 -j ACCEPT + inet6/filter/logdrop-ntp-458 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-458 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3658 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-729 + inet/filter/limit-ntp-729 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-459 + inet/filter/limit-ntp-729 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-459 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-ntp-459 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-459 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-729 + inet6/filter/limit-ntp-729 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-459 + inet6/filter/logdrop-ntp-459 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-459 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3659 {"flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-730 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-730 -m recent --name limit-ntp-730 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-730 -m recent --name limit-ntp-730 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-730 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-730 -m recent --name limit-ntp-730 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-730 -m recent --name limit-ntp-730 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3660 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-731 + inet/filter/limit-ntp-731 -m recent --name limit-ntp-731 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-731 -m recent --name limit-ntp-731 --rsource --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-731 + inet6/filter/limit-ntp-731 -m recent --name limit-ntp-731 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-731 -m recent --name limit-ntp-731 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3661 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-732 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-732 -m recent --name limit-ntp-732 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-732 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-732 -m recent --name limit-ntp-732 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-732 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-732 -m recent --name limit-ntp-732 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-732 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-732 -m recent --name limit-ntp-732 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3662 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-733 + inet/filter/limit-ntp-733 -m recent --name limit-ntp-733 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-733 -m recent --name limit-ntp-733 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-733 + inet6/filter/limit-ntp-733 -m recent --name limit-ntp-733 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-733 -m recent --name limit-ntp-733 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3663 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-734 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-734 -m recent --name limit-ntp-734 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-734 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-734 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-734 -m recent --name limit-ntp-734 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-734 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-734 -m recent --name limit-ntp-734 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-734 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-734 -m recent --name limit-ntp-734 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3664 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-735 + inet/filter/limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-735 + inet6/filter/limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3665 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-736 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-736 -m recent --name limit-ntp-736 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-736 -m recent --name limit-ntp-736 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-736 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-736 -m recent --name limit-ntp-736 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-736 -m recent --name limit-ntp-736 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3666 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-737 + inet/filter/limit-ntp-737 -m recent --name limit-ntp-737 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-737 -m recent --name limit-ntp-737 --rsource --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-737 + inet6/filter/limit-ntp-737 -m recent --name limit-ntp-737 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-737 -m recent --name limit-ntp-737 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3667 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-738 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-738 -m recent --name limit-ntp-738 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-738 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-738 -m recent --name limit-ntp-738 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-738 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-738 -m recent --name limit-ntp-738 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-738 -m recent --name limit-ntp-738 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3668 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-739 + inet/filter/limit-ntp-739 -m recent --name limit-ntp-739 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-739 -m recent --name limit-ntp-739 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-739 + inet6/filter/limit-ntp-739 -m recent --name limit-ntp-739 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3669 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-740 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-740 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-740 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-740 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-740 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-740 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3670 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-741 + inet/filter/limit-ntp-741 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-741 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-741 + inet6/filter/limit-ntp-741 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-741 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3671 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-742 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-742 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-742 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-742 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-742 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-742 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-742 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-742 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3672 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-743 + inet/filter/limit-ntp-743 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-743 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-743 + inet6/filter/limit-ntp-743 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-743 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3673 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-744 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-744 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-744 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-744 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-744 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-744 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-744 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-744 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-744 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3674 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-745 + inet/filter/limit-ntp-745 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-745 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-745 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-745 + inet6/filter/limit-ntp-745 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-745 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3675 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-746 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-746 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-746 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-746 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-746 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-746 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3676 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-747 + inet/filter/limit-ntp-747 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-747 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-747 + inet6/filter/limit-ntp-747 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-747 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3677 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-748 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-748 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-748 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-748 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-748 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-748 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-748 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3678 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-749 + inet/filter/limit-ntp-749 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-749 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-749 + inet6/filter/limit-ntp-749 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3679 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-750 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-750 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-750 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-750 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-750 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-750 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3680 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3681 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-752 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-752 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-752 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-752 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-752 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-752 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-752 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-752 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3682 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-753 + inet/filter/limit-ntp-753 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-753 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-753 + inet6/filter/limit-ntp-753 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-753 -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3683 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-754 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-754 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-754 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-754 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-754 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-754 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-754 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-754 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-754 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3684 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-755 + inet/filter/limit-ntp-755 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-755 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-755 -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-755 + inet6/filter/limit-ntp-755 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-755 -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3685 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-756 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-756 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-756 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-756 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-756 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-756 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3686 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3687 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-758 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-758 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-758 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-758 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-758 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-758 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-758 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3688 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-759 + inet/filter/limit-ntp-759 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-759 -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-759 + inet6/filter/limit-ntp-759 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3689 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-760 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-760 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-760 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-760 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-760 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-760 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3690 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-761 + inet/filter/limit-ntp-761 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-761 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-761 + inet6/filter/limit-ntp-761 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-761 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3691 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-762 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-762 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-762 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-762 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-762 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-762 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-762 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-762 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3692 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-763 + inet/filter/limit-ntp-763 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-763 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-763 + inet6/filter/limit-ntp-763 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-763 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3693 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-764 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-764 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-764 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-764 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-764 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-764 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-764 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-764 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-764 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3694 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-765 + inet/filter/limit-ntp-765 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-765 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-765 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-765 + inet6/filter/limit-ntp-765 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-765 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3695 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-766 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-766 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-766 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-766 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-766 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-766 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3696 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-767 + inet/filter/limit-ntp-767 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-767 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-767 + inet6/filter/limit-ntp-767 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-767 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3697 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-768 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-768 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-768 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-768 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-768 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-768 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-768 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3698 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-769 + inet/filter/limit-ntp-769 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-769 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-769 + inet6/filter/limit-ntp-769 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3699 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-770 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-770 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-770 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-770 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-770 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-770 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3700 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3701 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-772 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-772 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-772 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-772 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-772 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-772 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-772 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-772 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3702 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-773 + inet/filter/limit-ntp-773 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-773 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-773 + inet6/filter/limit-ntp-773 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-773 -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3703 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-774 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-774 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-774 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-774 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-774 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-774 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-774 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-774 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-774 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3704 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-775 + inet/filter/limit-ntp-775 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-775 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-775 -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-775 + inet6/filter/limit-ntp-775 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-775 -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3705 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-776 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-776 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-776 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-776 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-776 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-776 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3706 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3707 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-778 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-778 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-778 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-778 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-778 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-778 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-778 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3708 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-779 + inet/filter/limit-ntp-779 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-779 -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-779 + inet6/filter/limit-ntp-779 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3709 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-780 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-780 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-780 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-780 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-780 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-780 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3710 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-781 + inet/filter/limit-ntp-781 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-781 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-781 + inet6/filter/limit-ntp-781 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-781 -m recent --name user:C --rsource --mask fe00:: --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3711 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-782 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-782 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-782 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-782 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-782 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-782 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-782 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-782 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3712 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-783 + inet/filter/limit-ntp-783 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-783 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-783 + inet6/filter/limit-ntp-783 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-783 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3713 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-784 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-784 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-784 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-784 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-784 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-784 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-784 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-784 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-784 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3714 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-785 + inet/filter/limit-ntp-785 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-785 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-785 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-785 + inet6/filter/limit-ntp-785 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-785 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3715 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-786 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-786 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-786 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-786 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-786 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-786 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3716 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-787 + inet/filter/limit-ntp-787 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-787 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-787 + inet6/filter/limit-ntp-787 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-787 -m recent --name user:C --rsource --mask fe00:: --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3717 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-788 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-788 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-788 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-788 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-788 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-788 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-788 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3718 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-789 + inet/filter/limit-ntp-789 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-789 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-789 + inet6/filter/limit-ntp-789 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3719 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-790 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-790 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-790 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-790 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-790 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-790 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3720 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3721 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-792 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-792 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-792 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-792 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-792 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-792 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-792 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-792 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3722 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-793 + inet/filter/limit-ntp-793 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-793 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-793 + inet6/filter/limit-ntp-793 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-793 -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3723 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-794 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-794 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-794 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-794 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-794 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-794 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-794 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-794 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-794 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3724 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-795 + inet/filter/limit-ntp-795 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-795 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-795 -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-795 + inet6/filter/limit-ntp-795 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-795 -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3725 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-796 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-796 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-796 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-796 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-796 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-796 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3726 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3727 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-798 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-798 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-798 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-798 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-798 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-798 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-798 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3728 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-799 + inet/filter/limit-ntp-799 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-799 -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-799 + inet6/filter/limit-ntp-799 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3729 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-800 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-800 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-800 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-800 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-800 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-800 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3730 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-801 + inet/filter/limit-ntp-801 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-801 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-801 + inet6/filter/limit-ntp-801 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-801 -m recent --name user:C --rdest --mask fe00:: --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3731 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-802 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-802 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-802 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-802 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-802 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-802 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-802 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-802 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3732 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-803 + inet/filter/limit-ntp-803 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-803 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-803 + inet6/filter/limit-ntp-803 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-803 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3733 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-804 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-804 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-804 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-804 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-804 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-804 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-804 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-804 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-804 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3734 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-805 + inet/filter/limit-ntp-805 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-805 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-805 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-805 + inet6/filter/limit-ntp-805 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-805 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3735 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-806 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-806 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-806 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-806 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-806 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-806 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3736 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-807 + inet/filter/limit-ntp-807 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-807 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-807 + inet6/filter/limit-ntp-807 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-807 -m recent --name user:C --rdest --mask fe00:: --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3737 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-808 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-808 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-808 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-808 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-808 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-808 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-808 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3738 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-809 + inet/filter/limit-ntp-809 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-809 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-809 + inet6/filter/limit-ntp-809 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3739 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-810 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-810 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-810 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-810 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-810 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-810 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3740 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3741 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-812 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-812 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-812 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-812 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-812 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-812 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-812 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-812 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3742 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-813 + inet/filter/limit-ntp-813 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-813 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-813 + inet6/filter/limit-ntp-813 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-813 -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3743 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-814 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-814 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-814 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-814 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-814 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-814 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-814 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-814 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-814 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3744 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-815 + inet/filter/limit-ntp-815 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-815 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-815 -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-815 + inet6/filter/limit-ntp-815 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-815 -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3745 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-816 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-816 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-816 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-816 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-816 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-816 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3746 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3747 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-818 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-818 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-818 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-818 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-818 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-818 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-ntp-818 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3748 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-819 + inet/filter/limit-ntp-819 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-ntp-819 -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-819 + inet6/filter/limit-ntp-819 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3749 {"flow-limit":{"interval":5,"log":"ulog"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-820 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-820 -m recent --name limit-ntp-820 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-460 + inet/filter/limit-ntp-820 -m recent --name limit-ntp-820 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-460 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-460 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-820 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-820 -m recent --name limit-ntp-820 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-460 + inet6/filter/limit-ntp-820 -m recent --name limit-ntp-820 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-460 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3750 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-821 + inet/filter/limit-ntp-821 -m recent --name limit-ntp-821 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-461 + inet/filter/limit-ntp-821 -m recent --name limit-ntp-821 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-461 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-461 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-821 + inet6/filter/limit-ntp-821 -m recent --name limit-ntp-821 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-461 + inet6/filter/limit-ntp-821 -m recent --name limit-ntp-821 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-461 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3751 {"flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-822 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-822 -m recent --name limit-ntp-822 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-462 + inet/filter/limit-ntp-822 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-822 -m recent --name limit-ntp-822 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-462 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-462 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-822 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-822 -m recent --name limit-ntp-822 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-462 + inet6/filter/limit-ntp-822 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-822 -m recent --name limit-ntp-822 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-462 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3752 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-823 + inet/filter/limit-ntp-823 -m recent --name limit-ntp-823 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-463 + inet/filter/limit-ntp-823 -m recent --name limit-ntp-823 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-463 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-463 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-823 + inet6/filter/limit-ntp-823 -m recent --name limit-ntp-823 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-463 + inet6/filter/limit-ntp-823 -m recent --name limit-ntp-823 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-463 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3753 {"flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-824 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-824 -m recent --name limit-ntp-824 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-464 + inet/filter/limit-ntp-824 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-824 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-824 -m recent --name limit-ntp-824 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-464 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-464 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-824 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-824 -m recent --name limit-ntp-824 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-464 + inet6/filter/limit-ntp-824 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-824 -m recent --name limit-ntp-824 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-464 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3754 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-825 + inet/filter/limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-465 + inet/filter/limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-465 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-465 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-825 + inet6/filter/limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-465 + inet6/filter/limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-465 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3755 {"flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-826 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-826 -m recent --name limit-ntp-826 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-466 + inet/filter/limit-ntp-826 -m recent --name limit-ntp-826 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-466 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-466 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-826 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-826 -m recent --name limit-ntp-826 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-466 + inet6/filter/limit-ntp-826 -m recent --name limit-ntp-826 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-466 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3756 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-827 + inet/filter/limit-ntp-827 -m recent --name limit-ntp-827 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-467 + inet/filter/limit-ntp-827 -m recent --name limit-ntp-827 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-467 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-467 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-827 + inet6/filter/limit-ntp-827 -m recent --name limit-ntp-827 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-467 + inet6/filter/limit-ntp-827 -m recent --name limit-ntp-827 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-467 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3757 {"flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-828 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-828 -m recent --name limit-ntp-828 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-468 + inet/filter/limit-ntp-828 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-828 -m recent --name limit-ntp-828 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-468 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-468 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-828 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-828 -m recent --name limit-ntp-828 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-468 + inet6/filter/limit-ntp-828 -m recent --name limit-ntp-828 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-468 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3758 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-829 + inet/filter/limit-ntp-829 -m recent --name limit-ntp-829 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-469 + inet/filter/limit-ntp-829 -m recent --name limit-ntp-829 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-469 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-469 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-829 + inet6/filter/limit-ntp-829 -m recent --name limit-ntp-829 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-469 + inet6/filter/logdrop-ntp-469 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3759 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-830 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-830 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-470 + inet/filter/limit-ntp-830 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-470 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-470 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-830 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-830 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-470 + inet6/filter/limit-ntp-830 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-470 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3760 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-831 + inet/filter/limit-ntp-831 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-471 + inet/filter/limit-ntp-831 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-471 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-471 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-831 + inet6/filter/limit-ntp-831 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-471 + inet6/filter/limit-ntp-831 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-471 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3761 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-832 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-832 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-472 + inet/filter/limit-ntp-832 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-832 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-472 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-472 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-832 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-832 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-472 + inet6/filter/limit-ntp-832 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-832 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-472 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3762 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-833 + inet/filter/limit-ntp-833 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-473 + inet/filter/limit-ntp-833 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-473 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-473 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-833 + inet6/filter/limit-ntp-833 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-473 + inet6/filter/limit-ntp-833 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-473 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3763 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-834 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-834 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-474 + inet/filter/limit-ntp-834 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-834 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-834 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-474 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-474 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-834 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-834 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-474 + inet6/filter/limit-ntp-834 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-834 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-474 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3764 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-835 + inet/filter/limit-ntp-835 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-475 + inet/filter/limit-ntp-835 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-835 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-475 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-475 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-835 + inet6/filter/limit-ntp-835 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-475 + inet6/filter/limit-ntp-835 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-475 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3765 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-836 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-836 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-476 + inet/filter/limit-ntp-836 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-476 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-476 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-836 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-476 + inet6/filter/limit-ntp-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-476 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3766 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-837 + inet/filter/limit-ntp-837 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-477 + inet/filter/limit-ntp-837 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-477 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-477 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-837 + inet6/filter/limit-ntp-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-477 + inet6/filter/limit-ntp-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-477 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3767 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-838 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-838 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-478 + inet/filter/limit-ntp-838 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-838 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-478 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-478 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-838 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-478 + inet6/filter/limit-ntp-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-478 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3768 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-839 + inet/filter/limit-ntp-839 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-479 + inet/filter/limit-ntp-839 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-479 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-479 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-839 + inet6/filter/limit-ntp-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-479 + inet6/filter/logdrop-ntp-479 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3769 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-840 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-840 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-480 + inet/filter/limit-ntp-840 -j ACCEPT + inet/filter/logdrop-ntp-480 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-480 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-840 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-480 + inet6/filter/limit-ntp-840 -j ACCEPT + inet6/filter/logdrop-ntp-480 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3770 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-481 + inet/filter/logdrop-ntp-481 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-481 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-481 + inet6/filter/logdrop-ntp-481 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3771 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-842 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-842 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-482 + inet/filter/limit-ntp-842 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-842 -j ACCEPT + inet/filter/logdrop-ntp-482 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-482 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-842 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-842 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-482 + inet6/filter/limit-ntp-842 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-842 -j ACCEPT + inet6/filter/logdrop-ntp-482 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3772 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-843 + inet/filter/limit-ntp-843 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-483 + inet/filter/limit-ntp-843 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-483 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-483 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-843 + inet6/filter/limit-ntp-843 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-483 + inet6/filter/limit-ntp-843 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-483 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3773 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-844 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-844 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-484 + inet/filter/limit-ntp-844 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-844 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-844 -j ACCEPT + inet/filter/logdrop-ntp-484 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-484 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-844 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-844 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-484 + inet6/filter/limit-ntp-844 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-844 -j ACCEPT + inet6/filter/logdrop-ntp-484 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3774 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-845 + inet/filter/limit-ntp-845 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-485 + inet/filter/limit-ntp-845 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-845 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-485 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-485 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-845 + inet6/filter/limit-ntp-845 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-485 + inet6/filter/limit-ntp-845 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-485 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3775 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-846 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-846 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-486 + inet/filter/limit-ntp-846 -j ACCEPT + inet/filter/logdrop-ntp-486 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-486 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-846 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-846 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-486 + inet6/filter/limit-ntp-846 -j ACCEPT + inet6/filter/logdrop-ntp-486 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3776 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-487 + inet/filter/logdrop-ntp-487 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-487 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-487 + inet6/filter/logdrop-ntp-487 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3777 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-848 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-848 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-488 + inet/filter/limit-ntp-848 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-848 -j ACCEPT + inet/filter/logdrop-ntp-488 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-488 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-848 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-848 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-488 + inet6/filter/limit-ntp-848 -j ACCEPT + inet6/filter/logdrop-ntp-488 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3778 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-849 + inet/filter/limit-ntp-849 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-489 + inet/filter/limit-ntp-849 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-489 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-489 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-849 + inet6/filter/limit-ntp-849 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-489 + inet6/filter/logdrop-ntp-489 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3779 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-850 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-850 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-490 + inet/filter/limit-ntp-850 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-490 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-490 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-850 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-490 + inet6/filter/limit-ntp-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-490 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3780 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-851 + inet/filter/limit-ntp-851 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-491 + inet/filter/limit-ntp-851 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-491 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-491 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-851 + inet6/filter/limit-ntp-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-491 + inet6/filter/limit-ntp-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-491 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3781 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-852 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-852 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-492 + inet/filter/limit-ntp-852 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-852 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-492 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-492 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-852 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-492 + inet6/filter/limit-ntp-852 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-492 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3782 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-853 + inet/filter/limit-ntp-853 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-493 + inet/filter/limit-ntp-853 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-493 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-493 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-853 + inet6/filter/limit-ntp-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-493 + inet6/filter/limit-ntp-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-493 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3783 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-854 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-854 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-494 + inet/filter/limit-ntp-854 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-854 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-854 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-494 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-494 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-854 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-494 + inet6/filter/limit-ntp-854 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-494 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3784 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-855 + inet/filter/limit-ntp-855 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-495 + inet/filter/limit-ntp-855 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-855 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-495 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-495 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-855 + inet6/filter/limit-ntp-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-495 + inet6/filter/limit-ntp-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-495 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3785 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-856 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-856 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-496 + inet/filter/limit-ntp-856 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-496 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-496 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-856 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-496 + inet6/filter/limit-ntp-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-496 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3786 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-857 + inet/filter/limit-ntp-857 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-497 + inet/filter/limit-ntp-857 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-ntp-497 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-497 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-857 + inet6/filter/limit-ntp-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-497 + inet6/filter/limit-ntp-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-ntp-497 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3787 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-858 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-858 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-498 + inet/filter/limit-ntp-858 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-858 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-ntp-498 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-498 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-858 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-498 + inet6/filter/limit-ntp-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-ntp-498 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3788 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-859 + inet/filter/limit-ntp-859 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-499 + inet/filter/limit-ntp-859 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-499 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-499 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-859 + inet6/filter/limit-ntp-859 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-499 + inet6/filter/logdrop-ntp-499 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3789 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-860 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-860 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-500 + inet/filter/limit-ntp-860 -j ACCEPT + inet/filter/logdrop-ntp-500 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-500 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-860 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-860 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-500 + inet6/filter/limit-ntp-860 -j ACCEPT + inet6/filter/logdrop-ntp-500 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3790 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-501 + inet/filter/logdrop-ntp-501 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-501 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-501 + inet6/filter/logdrop-ntp-501 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3791 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-862 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-862 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-502 + inet/filter/limit-ntp-862 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-862 -j ACCEPT + inet/filter/logdrop-ntp-502 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-502 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-862 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-862 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-502 + inet6/filter/limit-ntp-862 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-862 -j ACCEPT + inet6/filter/logdrop-ntp-502 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3792 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-863 + inet/filter/limit-ntp-863 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-503 + inet/filter/limit-ntp-863 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-503 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-503 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-863 + inet6/filter/limit-ntp-863 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-503 + inet6/filter/limit-ntp-863 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-503 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3793 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-864 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-864 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-504 + inet/filter/limit-ntp-864 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-864 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-864 -j ACCEPT + inet/filter/logdrop-ntp-504 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-504 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-864 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-864 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-504 + inet6/filter/limit-ntp-864 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-864 -j ACCEPT + inet6/filter/logdrop-ntp-504 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3794 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-865 + inet/filter/limit-ntp-865 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-505 + inet/filter/limit-ntp-865 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-865 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-505 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-505 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-865 + inet6/filter/limit-ntp-865 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-505 + inet6/filter/limit-ntp-865 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-505 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3795 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-866 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-866 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-506 + inet/filter/limit-ntp-866 -j ACCEPT + inet/filter/logdrop-ntp-506 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-506 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-866 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-866 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-506 + inet6/filter/limit-ntp-866 -j ACCEPT + inet6/filter/logdrop-ntp-506 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3796 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-507 + inet/filter/logdrop-ntp-507 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-507 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-507 + inet6/filter/logdrop-ntp-507 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3797 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-868 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-868 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-508 + inet/filter/limit-ntp-868 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-868 -j ACCEPT + inet/filter/logdrop-ntp-508 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-508 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-868 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-868 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-508 + inet6/filter/limit-ntp-868 -j ACCEPT + inet6/filter/logdrop-ntp-508 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3798 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-869 + inet/filter/limit-ntp-869 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-509 + inet/filter/limit-ntp-869 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-509 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-509 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-869 + inet6/filter/limit-ntp-869 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-509 + inet6/filter/logdrop-ntp-509 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3799 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-870 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-870 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-510 + inet/filter/limit-ntp-870 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-510 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-510 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-870 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-870 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-510 + inet6/filter/limit-ntp-870 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-510 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3800 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-871 + inet/filter/limit-ntp-871 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-511 + inet/filter/limit-ntp-871 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-ntp-511 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-511 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-871 + inet6/filter/limit-ntp-871 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-511 + inet6/filter/limit-ntp-871 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-ntp-511 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3801 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-872 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-872 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-512 + inet/filter/limit-ntp-872 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-872 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-512 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-512 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-872 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-872 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-512 + inet6/filter/limit-ntp-872 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-872 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-512 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3802 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-873 + inet/filter/limit-ntp-873 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-513 + inet/filter/limit-ntp-873 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-513 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-513 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-873 + inet6/filter/limit-ntp-873 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-513 + inet6/filter/limit-ntp-873 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-513 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3803 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-874 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-874 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-514 + inet/filter/limit-ntp-874 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-874 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-874 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-514 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-514 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-874 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-874 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-514 + inet6/filter/limit-ntp-874 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-874 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-514 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3804 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-875 + inet/filter/limit-ntp-875 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-515 + inet/filter/limit-ntp-875 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-875 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-515 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-515 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-875 + inet6/filter/limit-ntp-875 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-515 + inet6/filter/limit-ntp-875 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-515 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3805 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-876 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-876 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-516 + inet/filter/limit-ntp-876 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-516 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-516 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-876 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-876 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-516 + inet6/filter/limit-ntp-876 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-516 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3806 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-877 + inet/filter/limit-ntp-877 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-517 + inet/filter/limit-ntp-877 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-ntp-517 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-517 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-877 + inet6/filter/limit-ntp-877 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-517 + inet6/filter/limit-ntp-877 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-ntp-517 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3807 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-878 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-878 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-518 + inet/filter/limit-ntp-878 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-878 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-518 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-518 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-878 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-878 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-518 + inet6/filter/limit-ntp-878 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-518 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3808 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-879 + inet/filter/limit-ntp-879 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-519 + inet/filter/limit-ntp-879 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-519 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-519 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-879 + inet6/filter/limit-ntp-879 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-519 + inet6/filter/logdrop-ntp-519 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3809 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-880 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-880 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-520 + inet/filter/limit-ntp-880 -j ACCEPT + inet/filter/logdrop-ntp-520 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-520 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-880 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-880 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-520 + inet6/filter/limit-ntp-880 -j ACCEPT + inet6/filter/logdrop-ntp-520 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3810 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-521 + inet/filter/logdrop-ntp-521 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-521 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-521 + inet6/filter/logdrop-ntp-521 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3811 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-882 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-882 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-522 + inet/filter/limit-ntp-882 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-882 -j ACCEPT + inet/filter/logdrop-ntp-522 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-522 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-882 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-882 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-522 + inet6/filter/limit-ntp-882 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-882 -j ACCEPT + inet6/filter/logdrop-ntp-522 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3812 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-883 + inet/filter/limit-ntp-883 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-523 + inet/filter/limit-ntp-883 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-523 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-523 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-883 + inet6/filter/limit-ntp-883 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-523 + inet6/filter/limit-ntp-883 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-523 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3813 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-884 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-884 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-524 + inet/filter/limit-ntp-884 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-884 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-884 -j ACCEPT + inet/filter/logdrop-ntp-524 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-524 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-884 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-884 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-524 + inet6/filter/limit-ntp-884 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-884 -j ACCEPT + inet6/filter/logdrop-ntp-524 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3814 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-885 + inet/filter/limit-ntp-885 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-525 + inet/filter/limit-ntp-885 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-885 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-525 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-525 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-885 + inet6/filter/limit-ntp-885 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-525 + inet6/filter/limit-ntp-885 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-525 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3815 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-886 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-886 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-526 + inet/filter/limit-ntp-886 -j ACCEPT + inet/filter/logdrop-ntp-526 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-526 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-886 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-886 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-526 + inet6/filter/limit-ntp-886 -j ACCEPT + inet6/filter/logdrop-ntp-526 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3816 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-527 + inet/filter/logdrop-ntp-527 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-527 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-527 + inet6/filter/logdrop-ntp-527 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3817 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-888 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-888 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-528 + inet/filter/limit-ntp-888 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-888 -j ACCEPT + inet/filter/logdrop-ntp-528 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-528 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-888 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-888 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-528 + inet6/filter/limit-ntp-888 -j ACCEPT + inet6/filter/logdrop-ntp-528 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3818 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-889 + inet/filter/limit-ntp-889 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-529 + inet/filter/limit-ntp-889 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-529 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-529 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-889 + inet6/filter/limit-ntp-889 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-529 + inet6/filter/logdrop-ntp-529 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3819 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-890 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-890 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-530 + inet/filter/limit-ntp-890 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-530 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-530 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-890 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-890 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-530 + inet6/filter/limit-ntp-890 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-530 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3820 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-891 + inet/filter/limit-ntp-891 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-531 + inet/filter/limit-ntp-891 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-ntp-531 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-531 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-891 + inet6/filter/limit-ntp-891 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-531 + inet6/filter/limit-ntp-891 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-ntp-531 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3821 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-892 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-892 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-532 + inet/filter/limit-ntp-892 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-892 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-532 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-532 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-892 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-892 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-532 + inet6/filter/limit-ntp-892 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-892 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-532 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3822 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-893 + inet/filter/limit-ntp-893 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-533 + inet/filter/limit-ntp-893 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-533 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-533 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-893 + inet6/filter/limit-ntp-893 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-533 + inet6/filter/limit-ntp-893 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-533 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3823 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-894 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-894 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-534 + inet/filter/limit-ntp-894 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-894 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-894 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-534 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-534 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-894 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-894 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-534 + inet6/filter/limit-ntp-894 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-894 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-534 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3824 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-895 + inet/filter/limit-ntp-895 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-535 + inet/filter/limit-ntp-895 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-895 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-535 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-535 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-895 + inet6/filter/limit-ntp-895 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-535 + inet6/filter/limit-ntp-895 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-535 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3825 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-896 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-896 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-536 + inet/filter/limit-ntp-896 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-536 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-536 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-896 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-896 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-536 + inet6/filter/limit-ntp-896 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-536 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3826 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-897 + inet/filter/limit-ntp-897 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-537 + inet/filter/limit-ntp-897 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-ntp-537 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-537 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-897 + inet6/filter/limit-ntp-897 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-537 + inet6/filter/limit-ntp-897 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-ntp-537 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3827 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-898 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-898 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-538 + inet/filter/limit-ntp-898 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-898 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-ntp-538 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-538 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-898 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-898 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-538 + inet6/filter/limit-ntp-898 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-ntp-538 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3828 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-899 + inet/filter/limit-ntp-899 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-539 + inet/filter/limit-ntp-899 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-539 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-539 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-899 + inet6/filter/limit-ntp-899 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-539 + inet6/filter/logdrop-ntp-539 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3829 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-900 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-900 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-540 + inet/filter/limit-ntp-900 -j ACCEPT + inet/filter/logdrop-ntp-540 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-540 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-900 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-900 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-540 + inet6/filter/limit-ntp-900 -j ACCEPT + inet6/filter/logdrop-ntp-540 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3830 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-541 + inet/filter/logdrop-ntp-541 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-541 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-541 + inet6/filter/logdrop-ntp-541 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3831 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-902 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-902 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-542 + inet/filter/limit-ntp-902 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-902 -j ACCEPT + inet/filter/logdrop-ntp-542 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-542 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-902 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-902 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-542 + inet6/filter/limit-ntp-902 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-902 -j ACCEPT + inet6/filter/logdrop-ntp-542 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3832 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-903 + inet/filter/limit-ntp-903 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-543 + inet/filter/limit-ntp-903 -m limit --limit 1/second -j LOG + inet/filter/logdrop-ntp-543 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-543 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-903 + inet6/filter/limit-ntp-903 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-543 + inet6/filter/limit-ntp-903 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-ntp-543 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3833 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-904 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-904 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-544 + inet/filter/limit-ntp-904 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-904 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-904 -j ACCEPT + inet/filter/logdrop-ntp-544 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-544 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-904 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-904 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-544 + inet6/filter/limit-ntp-904 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-904 -j ACCEPT + inet6/filter/logdrop-ntp-544 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3834 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-905 + inet/filter/limit-ntp-905 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-545 + inet/filter/limit-ntp-905 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-905 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-ntp-545 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-545 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-905 + inet6/filter/limit-ntp-905 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-545 + inet6/filter/limit-ntp-905 -j TEE --gateway fc00::2 + inet6/filter/logdrop-ntp-545 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3835 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-906 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-906 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-546 + inet/filter/limit-ntp-906 -j ACCEPT + inet/filter/logdrop-ntp-546 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-546 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-906 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-906 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-546 + inet6/filter/limit-ntp-906 -j ACCEPT + inet6/filter/logdrop-ntp-546 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3836 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-547 + inet/filter/logdrop-ntp-547 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-547 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-547 + inet6/filter/logdrop-ntp-547 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3837 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-908 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-908 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-548 + inet/filter/limit-ntp-908 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-908 -j ACCEPT + inet/filter/logdrop-ntp-548 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-548 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-908 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-908 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-548 + inet6/filter/limit-ntp-908 -j ACCEPT + inet6/filter/logdrop-ntp-548 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3838 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-909 + inet/filter/limit-ntp-909 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-549 + inet/filter/limit-ntp-909 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-549 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-ntp-549 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-909 + inet6/filter/limit-ntp-909 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-549 + inet6/filter/logdrop-ntp-549 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3839 {"flow-limit":150,"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-910 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-910 -j ACCEPT + inet/filter/limit-ntp-910 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-910 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-910 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-910 -j ACCEPT + inet6/filter/limit-ntp-910 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-910 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3840 {"action":"pass","flow-limit":150,"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-911 + inet/filter/limit-ntp-911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-911 -j RETURN + inet/filter/limit-ntp-911 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-911 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-911 + inet6/filter/limit-ntp-911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-911 -j RETURN + inet6/filter/limit-ntp-911 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-911 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3841 {"flow-limit":150,"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-912 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-912 -j logaccept-ntp-0 + inet/filter/limit-ntp-912 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-912 -j DROP + inet/filter/logaccept-ntp-0 -m limit --limit 1/second -j LOG + inet/filter/logaccept-ntp-0 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-912 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-912 -j logaccept-ntp-0 + inet6/filter/limit-ntp-912 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-912 -j DROP + inet6/filter/logaccept-ntp-0 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-ntp-0 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3842 {"flow-limit":150,"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-913 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-913 -j logaccept-ntp-1 + inet/filter/limit-ntp-913 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-913 -j DROP + inet/filter/logaccept-ntp-1 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-ntp-1 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-ntp-1 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-913 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-913 -j logaccept-ntp-1 + inet6/filter/limit-ntp-913 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-913 -j DROP + inet6/filter/logaccept-ntp-1 -j TEE --gateway fc00::2 + inet6/filter/logaccept-ntp-1 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3843 {"flow-limit":150,"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-914 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-914 -j ACCEPT + inet/filter/limit-ntp-914 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-914 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-914 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-914 -j ACCEPT + inet6/filter/limit-ntp-914 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-914 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3844 {"flow-limit":150,"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-915 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-915 -j logaccept-ntp-2 + inet/filter/limit-ntp-915 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-915 -j DROP + inet/filter/logaccept-ntp-2 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-ntp-2 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-915 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-915 -j logaccept-ntp-2 + inet6/filter/limit-ntp-915 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-915 -j DROP + inet6/filter/logaccept-ntp-2 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3845 {"flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-916 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-916 -j ACCEPT + inet/filter/limit-ntp-916 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-916 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-916 -j ACCEPT + inet6/filter/limit-ntp-916 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3846 {"action":"pass","flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-917 + inet/filter/limit-ntp-917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-917 -j RETURN + inet/filter/limit-ntp-917 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-917 + inet6/filter/limit-ntp-917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-917 -j RETURN + inet6/filter/limit-ntp-917 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3847 {"flow-limit":{"count":150,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-918 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-918 -j logaccept-ntp-3 + inet/filter/limit-ntp-918 -j DROP + inet/filter/logaccept-ntp-3 -m limit --limit 1/second -j LOG + inet/filter/logaccept-ntp-3 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-918 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-918 -j logaccept-ntp-3 + inet6/filter/limit-ntp-918 -j DROP + inet6/filter/logaccept-ntp-3 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-ntp-3 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3848 {"flow-limit":{"count":150,"log":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-919 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-919 -j logaccept-ntp-4 + inet/filter/limit-ntp-919 -j DROP + inet/filter/logaccept-ntp-4 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-ntp-4 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-ntp-4 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-919 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-919 -j logaccept-ntp-4 + inet6/filter/limit-ntp-919 -j DROP + inet6/filter/logaccept-ntp-4 -j TEE --gateway fc00::2 + inet6/filter/logaccept-ntp-4 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3849 {"flow-limit":{"count":150,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-920 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-920 -j ACCEPT + inet/filter/limit-ntp-920 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-920 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-920 -j ACCEPT + inet6/filter/limit-ntp-920 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3850 {"flow-limit":{"count":150,"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-921 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-921 -j logaccept-ntp-5 + inet/filter/limit-ntp-921 -j DROP + inet/filter/logaccept-ntp-5 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-ntp-5 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-921 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-921 -j logaccept-ntp-5 + inet6/filter/limit-ntp-921 -j DROP + inet6/filter/logaccept-ntp-5 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3851 {"flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-922 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-922 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-922 -j ACCEPT + inet/filter/limit-ntp-922 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-922 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-922 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-922 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-922 -j ACCEPT + inet6/filter/limit-ntp-922 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-922 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3852 {"action":"pass","flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-923 + inet/filter/limit-ntp-923 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-923 -j RETURN + inet/filter/limit-ntp-923 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-923 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-923 + inet6/filter/limit-ntp-923 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-923 -j RETURN + inet6/filter/limit-ntp-923 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-923 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3853 {"flow-limit":{"count":150},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-924 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-924 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-924 -j logaccept-ntp-6 + inet/filter/limit-ntp-924 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-924 -j DROP + inet/filter/logaccept-ntp-6 -m limit --limit 1/second -j LOG + inet/filter/logaccept-ntp-6 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-924 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-924 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-924 -j logaccept-ntp-6 + inet6/filter/limit-ntp-924 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-924 -j DROP + inet6/filter/logaccept-ntp-6 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-ntp-6 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3854 {"flow-limit":{"count":150},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-925 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-925 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-925 -j logaccept-ntp-7 + inet/filter/limit-ntp-925 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-925 -j DROP + inet/filter/logaccept-ntp-7 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-ntp-7 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-ntp-7 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-925 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-925 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-925 -j logaccept-ntp-7 + inet6/filter/limit-ntp-925 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-925 -j DROP + inet6/filter/logaccept-ntp-7 -j TEE --gateway fc00::2 + inet6/filter/logaccept-ntp-7 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3855 {"flow-limit":{"count":150},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-926 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-926 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-926 -j ACCEPT + inet/filter/limit-ntp-926 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-926 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-926 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-926 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-926 -j ACCEPT + inet6/filter/limit-ntp-926 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-926 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3856 {"flow-limit":{"count":150},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-927 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-927 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-927 -j logaccept-ntp-8 + inet/filter/limit-ntp-927 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-927 -j DROP + inet/filter/logaccept-ntp-8 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-ntp-8 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-927 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-927 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-927 -j logaccept-ntp-8 + inet6/filter/limit-ntp-927 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-927 -j DROP + inet6/filter/logaccept-ntp-8 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3857 {"flow-limit":{"count":150,"log":"mirror"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-928 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-928 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-928 -j ACCEPT + inet/filter/limit-ntp-928 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-928 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-928 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-928 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-928 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-928 -j ACCEPT + inet6/filter/limit-ntp-928 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-928 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3858 {"action":"pass","flow-limit":{"count":150,"log":"mirror"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-929 + inet/filter/limit-ntp-929 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-929 -j RETURN + inet/filter/limit-ntp-929 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-929 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-929 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-929 + inet6/filter/limit-ntp-929 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-929 -j RETURN + inet6/filter/limit-ntp-929 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-929 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3859 {"flow-limit":{"count":150,"log":"mirror"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-930 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-930 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-930 -j logaccept-ntp-9 + inet/filter/limit-ntp-930 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-930 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-930 -j DROP + inet/filter/logaccept-ntp-9 -m limit --limit 1/second -j LOG + inet/filter/logaccept-ntp-9 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-930 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-930 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-930 -j logaccept-ntp-9 + inet6/filter/limit-ntp-930 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-930 -j DROP + inet6/filter/logaccept-ntp-9 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-ntp-9 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3860 {"flow-limit":{"count":150,"log":"mirror"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-931 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-931 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-931 -j logaccept-ntp-10 + inet/filter/limit-ntp-931 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-931 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-931 -j DROP + inet/filter/logaccept-ntp-10 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-ntp-10 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-ntp-10 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-931 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-931 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-931 -j logaccept-ntp-10 + inet6/filter/limit-ntp-931 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-931 -j DROP + inet6/filter/logaccept-ntp-10 -j TEE --gateway fc00::2 + inet6/filter/logaccept-ntp-10 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3861 {"flow-limit":{"count":150,"log":"mirror"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-932 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-932 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-932 -j ACCEPT + inet/filter/limit-ntp-932 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-932 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-932 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-932 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-932 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-932 -j ACCEPT + inet6/filter/limit-ntp-932 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-932 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3862 {"flow-limit":{"count":150,"log":"mirror"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-933 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-933 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-933 -j logaccept-ntp-11 + inet/filter/limit-ntp-933 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-933 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-933 -j DROP + inet/filter/logaccept-ntp-11 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-ntp-11 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-933 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-933 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-933 -j logaccept-ntp-11 + inet6/filter/limit-ntp-933 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-933 -j DROP + inet6/filter/logaccept-ntp-11 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3863 {"flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-934 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-934 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-934 -j ACCEPT + inet/filter/limit-ntp-934 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-934 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-934 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-934 -j ACCEPT + inet6/filter/limit-ntp-934 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3864 {"action":"pass","flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-935 + inet/filter/limit-ntp-935 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-935 -j RETURN + inet/filter/limit-ntp-935 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-935 + inet6/filter/limit-ntp-935 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-935 -j RETURN + inet6/filter/limit-ntp-935 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3865 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-936 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-936 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-936 -j logaccept-ntp-12 + inet/filter/limit-ntp-936 -j DROP + inet/filter/logaccept-ntp-12 -m limit --limit 1/second -j LOG + inet/filter/logaccept-ntp-12 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-936 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-936 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-936 -j logaccept-ntp-12 + inet6/filter/limit-ntp-936 -j DROP + inet6/filter/logaccept-ntp-12 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-ntp-12 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3866 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-937 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-937 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-937 -j logaccept-ntp-13 + inet/filter/limit-ntp-937 -j DROP + inet/filter/logaccept-ntp-13 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-ntp-13 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-ntp-13 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-937 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-937 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-937 -j logaccept-ntp-13 + inet6/filter/limit-ntp-937 -j DROP + inet6/filter/logaccept-ntp-13 -j TEE --gateway fc00::2 + inet6/filter/logaccept-ntp-13 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3867 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-938 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-938 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-938 -j ACCEPT + inet/filter/limit-ntp-938 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-938 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-938 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-938 -j ACCEPT + inet6/filter/limit-ntp-938 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3868 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-939 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-939 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-939 -j logaccept-ntp-14 + inet/filter/limit-ntp-939 -j DROP + inet/filter/logaccept-ntp-14 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-ntp-14 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-939 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-939 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-939 -j logaccept-ntp-14 + inet6/filter/limit-ntp-939 -j DROP + inet6/filter/logaccept-ntp-14 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3869 {"flow-limit":{"count":150,"log":"ulog"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-940 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-940 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-940 -j ACCEPT + inet/filter/limit-ntp-940 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-940 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-940 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-940 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-940 -j ACCEPT + inet6/filter/limit-ntp-940 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3870 {"action":"pass","flow-limit":{"count":150,"log":"ulog"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-941 + inet/filter/limit-ntp-941 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-941 -j RETURN + inet/filter/limit-ntp-941 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-941 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-941 + inet6/filter/limit-ntp-941 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-941 -j RETURN + inet6/filter/limit-ntp-941 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3871 {"flow-limit":{"count":150,"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-942 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-942 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-942 -j logaccept-ntp-15 + inet/filter/limit-ntp-942 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-942 -j DROP + inet/filter/logaccept-ntp-15 -m limit --limit 1/second -j LOG + inet/filter/logaccept-ntp-15 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-942 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-942 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-942 -j logaccept-ntp-15 + inet6/filter/limit-ntp-942 -j DROP + inet6/filter/logaccept-ntp-15 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-ntp-15 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3872 {"flow-limit":{"count":150,"log":"ulog"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-943 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-943 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-943 -j logaccept-ntp-16 + inet/filter/limit-ntp-943 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-943 -j DROP + inet/filter/logaccept-ntp-16 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-ntp-16 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-ntp-16 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-943 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-943 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-943 -j logaccept-ntp-16 + inet6/filter/limit-ntp-943 -j DROP + inet6/filter/logaccept-ntp-16 -j TEE --gateway fc00::2 + inet6/filter/logaccept-ntp-16 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3873 {"flow-limit":{"count":150,"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-944 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-944 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-944 -j ACCEPT + inet/filter/limit-ntp-944 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-944 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-944 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-944 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-944 -j ACCEPT + inet6/filter/limit-ntp-944 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3874 {"flow-limit":{"count":150,"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-945 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-945 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-945 -j logaccept-ntp-17 + inet/filter/limit-ntp-945 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-945 -j DROP + inet/filter/logaccept-ntp-17 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-ntp-17 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-945 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-945 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-945 -j logaccept-ntp-17 + inet6/filter/limit-ntp-945 -j DROP + inet6/filter/logaccept-ntp-17 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3875 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-946 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-946 -j ACCEPT + inet/filter/limit-ntp-946 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-946 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-946 -j ACCEPT + inet6/filter/limit-ntp-946 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3876 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-947 + inet/filter/limit-ntp-947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-947 -j RETURN + inet/filter/limit-ntp-947 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-947 + inet6/filter/limit-ntp-947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-947 -j RETURN + inet6/filter/limit-ntp-947 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3877 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-948 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-948 -j logaccept-ntp-18 + inet/filter/limit-ntp-948 -j DROP + inet/filter/logaccept-ntp-18 -m limit --limit 1/second -j LOG + inet/filter/logaccept-ntp-18 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-948 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-948 -j logaccept-ntp-18 + inet6/filter/limit-ntp-948 -j DROP + inet6/filter/logaccept-ntp-18 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-ntp-18 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3878 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-949 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-949 -j logaccept-ntp-19 + inet/filter/limit-ntp-949 -j DROP + inet/filter/logaccept-ntp-19 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-ntp-19 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-ntp-19 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-949 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-949 -j logaccept-ntp-19 + inet6/filter/limit-ntp-949 -j DROP + inet6/filter/logaccept-ntp-19 -j TEE --gateway fc00::2 + inet6/filter/logaccept-ntp-19 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3879 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-950 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-950 -j ACCEPT + inet/filter/limit-ntp-950 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-950 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-950 -j ACCEPT + inet6/filter/limit-ntp-950 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3880 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-951 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-951 -j logaccept-ntp-20 + inet/filter/limit-ntp-951 -j DROP + inet/filter/logaccept-ntp-20 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-ntp-20 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-951 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-951 -j logaccept-ntp-20 + inet6/filter/limit-ntp-951 -j DROP + inet6/filter/logaccept-ntp-20 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3881 {"flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-952 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-952 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-952 -j ACCEPT + inet/filter/limit-ntp-952 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-952 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-952 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-952 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-952 -j ACCEPT + inet6/filter/limit-ntp-952 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-952 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3882 {"action":"pass","flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-953 + inet/filter/limit-ntp-953 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-953 -j RETURN + inet/filter/limit-ntp-953 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-953 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-953 + inet6/filter/limit-ntp-953 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-953 -j RETURN + inet6/filter/limit-ntp-953 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-953 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3883 {"flow-limit":{"count":150,"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-954 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-954 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-954 -j logaccept-ntp-21 + inet/filter/limit-ntp-954 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-954 -j DROP + inet/filter/logaccept-ntp-21 -m limit --limit 1/second -j LOG + inet/filter/logaccept-ntp-21 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-954 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-954 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-954 -j logaccept-ntp-21 + inet6/filter/limit-ntp-954 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-954 -j DROP + inet6/filter/logaccept-ntp-21 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-ntp-21 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3884 {"flow-limit":{"count":150,"interval":5},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-955 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-955 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-955 -j logaccept-ntp-22 + inet/filter/limit-ntp-955 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-955 -j DROP + inet/filter/logaccept-ntp-22 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-ntp-22 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-ntp-22 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-955 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-955 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-955 -j logaccept-ntp-22 + inet6/filter/limit-ntp-955 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-955 -j DROP + inet6/filter/logaccept-ntp-22 -j TEE --gateway fc00::2 + inet6/filter/logaccept-ntp-22 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3885 {"flow-limit":{"count":150,"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-956 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-956 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-956 -j ACCEPT + inet/filter/limit-ntp-956 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-956 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-956 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-956 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-956 -j ACCEPT + inet6/filter/limit-ntp-956 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-956 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3886 {"flow-limit":{"count":150,"interval":5},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-957 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-957 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-957 -j logaccept-ntp-23 + inet/filter/limit-ntp-957 -m limit --limit 1/second -j LOG + inet/filter/limit-ntp-957 -j DROP + inet/filter/logaccept-ntp-23 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-ntp-23 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-957 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-957 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-957 -j logaccept-ntp-23 + inet6/filter/limit-ntp-957 -m limit --limit 1/second -j LOG + inet6/filter/limit-ntp-957 -j DROP + inet6/filter/logaccept-ntp-23 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3887 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-958 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-958 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-958 -j ACCEPT + inet/filter/limit-ntp-958 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-958 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-958 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-958 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-958 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-958 -j ACCEPT + inet6/filter/limit-ntp-958 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-958 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3888 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"mirror"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-959 + inet/filter/limit-ntp-959 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-959 -j RETURN + inet/filter/limit-ntp-959 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-959 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-959 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-959 + inet6/filter/limit-ntp-959 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-959 -j RETURN + inet6/filter/limit-ntp-959 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-959 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3889 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-960 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-960 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-960 -j logaccept-ntp-24 + inet/filter/limit-ntp-960 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-960 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-960 -j DROP + inet/filter/logaccept-ntp-24 -m limit --limit 1/second -j LOG + inet/filter/logaccept-ntp-24 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-960 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-960 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-960 -j logaccept-ntp-24 + inet6/filter/limit-ntp-960 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-960 -j DROP + inet6/filter/logaccept-ntp-24 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-ntp-24 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3890 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-961 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-961 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-961 -j logaccept-ntp-25 + inet/filter/limit-ntp-961 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-961 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-961 -j DROP + inet/filter/logaccept-ntp-25 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-ntp-25 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-ntp-25 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-961 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-961 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-961 -j logaccept-ntp-25 + inet6/filter/limit-ntp-961 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-961 -j DROP + inet6/filter/logaccept-ntp-25 -j TEE --gateway fc00::2 + inet6/filter/logaccept-ntp-25 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3891 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-962 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-962 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-962 -j ACCEPT + inet/filter/limit-ntp-962 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-962 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-962 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-962 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-962 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-962 -j ACCEPT + inet6/filter/limit-ntp-962 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-962 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3892 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-963 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-963 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-963 -j logaccept-ntp-26 + inet/filter/limit-ntp-963 -j TEE --gateway 10.0.0.1 + inet/filter/limit-ntp-963 -j TEE --gateway 10.0.0.2 + inet/filter/limit-ntp-963 -j DROP + inet/filter/logaccept-ntp-26 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-ntp-26 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-963 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-963 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-963 -j logaccept-ntp-26 + inet6/filter/limit-ntp-963 -j TEE --gateway fc00::2 + inet6/filter/limit-ntp-963 -j DROP + inet6/filter/logaccept-ntp-26 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3893 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-964 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-964 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-964 -j ACCEPT + inet/filter/limit-ntp-964 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-964 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-964 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-964 -j ACCEPT + inet6/filter/limit-ntp-964 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3894 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-965 + inet/filter/limit-ntp-965 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-965 -j RETURN + inet/filter/limit-ntp-965 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-965 + inet6/filter/limit-ntp-965 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-965 -j RETURN + inet6/filter/limit-ntp-965 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3895 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-966 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-966 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-966 -j logaccept-ntp-27 + inet/filter/limit-ntp-966 -j DROP + inet/filter/logaccept-ntp-27 -m limit --limit 1/second -j LOG + inet/filter/logaccept-ntp-27 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-966 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-966 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-966 -j logaccept-ntp-27 + inet6/filter/limit-ntp-966 -j DROP + inet6/filter/logaccept-ntp-27 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-ntp-27 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3896 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-967 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-967 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-967 -j logaccept-ntp-28 + inet/filter/limit-ntp-967 -j DROP + inet/filter/logaccept-ntp-28 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-ntp-28 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-ntp-28 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-967 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-967 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-967 -j logaccept-ntp-28 + inet6/filter/limit-ntp-967 -j DROP + inet6/filter/logaccept-ntp-28 -j TEE --gateway fc00::2 + inet6/filter/logaccept-ntp-28 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3897 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-968 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-968 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-968 -j ACCEPT + inet/filter/limit-ntp-968 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-968 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-968 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-968 -j ACCEPT + inet6/filter/limit-ntp-968 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3898 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-969 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-969 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-969 -j logaccept-ntp-29 + inet/filter/limit-ntp-969 -j DROP + inet/filter/logaccept-ntp-29 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-ntp-29 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-969 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-969 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-969 -j logaccept-ntp-29 + inet6/filter/limit-ntp-969 -j DROP + inet6/filter/logaccept-ntp-29 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3899 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-970 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-970 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-970 -j ACCEPT + inet/filter/limit-ntp-970 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-970 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-970 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-970 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-970 -j ACCEPT + inet6/filter/limit-ntp-970 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3900 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-971 + inet/filter/limit-ntp-971 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-971 -j RETURN + inet/filter/limit-ntp-971 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-971 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-971 + inet6/filter/limit-ntp-971 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-971 -j RETURN + inet6/filter/limit-ntp-971 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3901 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-972 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-972 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-972 -j logaccept-ntp-30 + inet/filter/limit-ntp-972 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-972 -j DROP + inet/filter/logaccept-ntp-30 -m limit --limit 1/second -j LOG + inet/filter/logaccept-ntp-30 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-972 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-972 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-972 -j logaccept-ntp-30 + inet6/filter/limit-ntp-972 -j DROP + inet6/filter/logaccept-ntp-30 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-ntp-30 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3902 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-973 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-973 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-973 -j logaccept-ntp-31 + inet/filter/limit-ntp-973 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-973 -j DROP + inet/filter/logaccept-ntp-31 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-ntp-31 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-ntp-31 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-973 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-973 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-973 -j logaccept-ntp-31 + inet6/filter/limit-ntp-973 -j DROP + inet6/filter/logaccept-ntp-31 -j TEE --gateway fc00::2 + inet6/filter/logaccept-ntp-31 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3903 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-974 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-974 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-974 -j ACCEPT + inet/filter/limit-ntp-974 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-974 -j DROP + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-974 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-974 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-974 -j ACCEPT + inet6/filter/limit-ntp-974 -j DROP + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + +Filter 3904 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} +(filter-limit) + inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-975 + inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet/filter/limit-ntp-975 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-975 -j logaccept-ntp-32 + inet/filter/limit-ntp-975 -m limit --limit 12/minute -j ULOG + inet/filter/limit-ntp-975 -j DROP + inet/filter/logaccept-ntp-32 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-ntp-32 -j ACCEPT + inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack + inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-975 + inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT + inet6/filter/limit-ntp-975 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-975 -j logaccept-ntp-32 + inet6/filter/limit-ntp-975 -j DROP + inet6/filter/logaccept-ntp-32 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3905 {"update-limit":"A"} (filter-limit) @@ -59169,16 +59169,16 @@ Filter 3913 {} Filter 3914 {"action":"drop"} (log) - inet/filter/FORWARD -j logdrop-2200 - inet/filter/INPUT -j logdrop-2200 - inet/filter/OUTPUT -j logdrop-2200 - inet/filter/logdrop-2200 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2200 -j DROP - inet6/filter/FORWARD -j logdrop-2200 - inet6/filter/INPUT -j logdrop-2200 - inet6/filter/OUTPUT -j logdrop-2200 - inet6/filter/logdrop-2200 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2200 -j DROP + inet/filter/FORWARD -j logdrop-1650 + inet/filter/INPUT -j logdrop-1650 + inet/filter/OUTPUT -j logdrop-1650 + inet/filter/logdrop-1650 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1650 -j DROP + inet6/filter/FORWARD -j logdrop-1650 + inet6/filter/INPUT -j logdrop-1650 + inet6/filter/OUTPUT -j logdrop-1650 + inet6/filter/logdrop-1650 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1650 -j DROP Filter 3915 {"action":"pass"} (log) @@ -59218,29 +59218,29 @@ Filter 3918 {"action":"pass","log":false} Filter 3919 {"log":true} (log) - inet/filter/FORWARD -j logaccept-99 - inet/filter/INPUT -j logaccept-99 - inet/filter/OUTPUT -j logaccept-99 - inet/filter/logaccept-99 -m limit --limit 1/second -j LOG - inet/filter/logaccept-99 -j ACCEPT - inet6/filter/FORWARD -j logaccept-99 - inet6/filter/INPUT -j logaccept-99 - inet6/filter/OUTPUT -j logaccept-99 - inet6/filter/logaccept-99 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-99 -j ACCEPT + inet/filter/FORWARD -j logaccept-66 + inet/filter/INPUT -j logaccept-66 + inet/filter/OUTPUT -j logaccept-66 + inet/filter/logaccept-66 -m limit --limit 1/second -j LOG + inet/filter/logaccept-66 -j ACCEPT + inet6/filter/FORWARD -j logaccept-66 + inet6/filter/INPUT -j logaccept-66 + inet6/filter/OUTPUT -j logaccept-66 + inet6/filter/logaccept-66 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-66 -j ACCEPT Filter 3920 {"action":"drop","log":true} (log) - inet/filter/FORWARD -j logdrop-2201 - inet/filter/INPUT -j logdrop-2201 - inet/filter/OUTPUT -j logdrop-2201 - inet/filter/logdrop-2201 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2201 -j DROP - inet6/filter/FORWARD -j logdrop-2201 - inet6/filter/INPUT -j logdrop-2201 - inet6/filter/OUTPUT -j logdrop-2201 - inet6/filter/logdrop-2201 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2201 -j DROP + inet/filter/FORWARD -j logdrop-1651 + inet/filter/INPUT -j logdrop-1651 + inet/filter/OUTPUT -j logdrop-1651 + inet/filter/logdrop-1651 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1651 -j DROP + inet6/filter/FORWARD -j logdrop-1651 + inet6/filter/INPUT -j logdrop-1651 + inet6/filter/OUTPUT -j logdrop-1651 + inet6/filter/logdrop-1651 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1651 -j DROP Filter 3921 {"action":"pass","log":true} (log) @@ -59255,31 +59255,31 @@ Filter 3921 {"action":"pass","log":true} Filter 3922 {"log":"dual"} (log) - inet/filter/FORWARD -j logaccept-100 - inet/filter/INPUT -j logaccept-100 - inet/filter/OUTPUT -j logaccept-100 - inet/filter/logaccept-100 -j LOG - inet/filter/logaccept-100 -j ACCEPT - inet6/filter/FORWARD -j logaccept-100 - inet6/filter/INPUT -j logaccept-100 - inet6/filter/OUTPUT -j logaccept-100 - inet6/filter/logaccept-100 -j LOG - inet6/filter/logaccept-100 -j TEE --gateway fc00::1 - inet6/filter/logaccept-100 -j ACCEPT + inet/filter/FORWARD -j logaccept-67 + inet/filter/INPUT -j logaccept-67 + inet/filter/OUTPUT -j logaccept-67 + inet/filter/logaccept-67 -j LOG + inet/filter/logaccept-67 -j ACCEPT + inet6/filter/FORWARD -j logaccept-67 + inet6/filter/INPUT -j logaccept-67 + inet6/filter/OUTPUT -j logaccept-67 + inet6/filter/logaccept-67 -j LOG + inet6/filter/logaccept-67 -j TEE --gateway fc00::1 + inet6/filter/logaccept-67 -j ACCEPT Filter 3923 {"action":"drop","log":"dual"} (log) - inet/filter/FORWARD -j logdrop-2202 - inet/filter/INPUT -j logdrop-2202 - inet/filter/OUTPUT -j logdrop-2202 - inet/filter/logdrop-2202 -j LOG - inet/filter/logdrop-2202 -j DROP - inet6/filter/FORWARD -j logdrop-2202 - inet6/filter/INPUT -j logdrop-2202 - inet6/filter/OUTPUT -j logdrop-2202 - inet6/filter/logdrop-2202 -j LOG - inet6/filter/logdrop-2202 -j TEE --gateway fc00::1 - inet6/filter/logdrop-2202 -j DROP + inet/filter/FORWARD -j logdrop-1652 + inet/filter/INPUT -j logdrop-1652 + inet/filter/OUTPUT -j logdrop-1652 + inet/filter/logdrop-1652 -j LOG + inet/filter/logdrop-1652 -j DROP + inet6/filter/FORWARD -j logdrop-1652 + inet6/filter/INPUT -j logdrop-1652 + inet6/filter/OUTPUT -j logdrop-1652 + inet6/filter/logdrop-1652 -j LOG + inet6/filter/logdrop-1652 -j TEE --gateway fc00::1 + inet6/filter/logdrop-1652 -j DROP Filter 3924 {"action":"pass","log":"dual"} (log) @@ -59295,31 +59295,31 @@ Filter 3924 {"action":"pass","log":"dual"} Filter 3925 {"log":"mirror"} (log) - inet/filter/FORWARD -j logaccept-101 - inet/filter/INPUT -j logaccept-101 - inet/filter/OUTPUT -j logaccept-101 - inet/filter/logaccept-101 -j TEE --gateway 10.0.0.1 - inet/filter/logaccept-101 -j TEE --gateway 10.0.0.2 - inet/filter/logaccept-101 -j ACCEPT - inet6/filter/FORWARD -j logaccept-101 - inet6/filter/INPUT -j logaccept-101 - inet6/filter/OUTPUT -j logaccept-101 - inet6/filter/logaccept-101 -j TEE --gateway fc00::2 - inet6/filter/logaccept-101 -j ACCEPT + inet/filter/FORWARD -j logaccept-68 + inet/filter/INPUT -j logaccept-68 + inet/filter/OUTPUT -j logaccept-68 + inet/filter/logaccept-68 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-68 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-68 -j ACCEPT + inet6/filter/FORWARD -j logaccept-68 + inet6/filter/INPUT -j logaccept-68 + inet6/filter/OUTPUT -j logaccept-68 + inet6/filter/logaccept-68 -j TEE --gateway fc00::2 + inet6/filter/logaccept-68 -j ACCEPT Filter 3926 {"action":"drop","log":"mirror"} (log) - inet/filter/FORWARD -j logdrop-2203 - inet/filter/INPUT -j logdrop-2203 - inet/filter/OUTPUT -j logdrop-2203 - inet/filter/logdrop-2203 -j TEE --gateway 10.0.0.1 - inet/filter/logdrop-2203 -j TEE --gateway 10.0.0.2 - inet/filter/logdrop-2203 -j DROP - inet6/filter/FORWARD -j logdrop-2203 - inet6/filter/INPUT -j logdrop-2203 - inet6/filter/OUTPUT -j logdrop-2203 - inet6/filter/logdrop-2203 -j TEE --gateway fc00::2 - inet6/filter/logdrop-2203 -j DROP + inet/filter/FORWARD -j logdrop-1653 + inet/filter/INPUT -j logdrop-1653 + inet/filter/OUTPUT -j logdrop-1653 + inet/filter/logdrop-1653 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1653 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1653 -j DROP + inet6/filter/FORWARD -j logdrop-1653 + inet6/filter/INPUT -j logdrop-1653 + inet6/filter/OUTPUT -j logdrop-1653 + inet6/filter/logdrop-1653 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1653 -j DROP Filter 3927 {"action":"pass","log":"mirror"} (log) @@ -59362,27 +59362,27 @@ Filter 3930 {"action":"pass","log":"none"} Filter 3931 {"log":"ulog"} (log) - inet/filter/FORWARD -j logaccept-102 - inet/filter/INPUT -j logaccept-102 - inet/filter/OUTPUT -j logaccept-102 - inet/filter/logaccept-102 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-102 -j ACCEPT - inet6/filter/FORWARD -j logaccept-102 - inet6/filter/INPUT -j logaccept-102 - inet6/filter/OUTPUT -j logaccept-102 - inet6/filter/logaccept-102 -j ACCEPT + inet/filter/FORWARD -j logaccept-69 + inet/filter/INPUT -j logaccept-69 + inet/filter/OUTPUT -j logaccept-69 + inet/filter/logaccept-69 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-69 -j ACCEPT + inet6/filter/FORWARD -j logaccept-69 + inet6/filter/INPUT -j logaccept-69 + inet6/filter/OUTPUT -j logaccept-69 + inet6/filter/logaccept-69 -j ACCEPT Filter 3932 {"action":"drop","log":"ulog"} (log) - inet/filter/FORWARD -j logdrop-2204 - inet/filter/INPUT -j logdrop-2204 - inet/filter/OUTPUT -j logdrop-2204 - inet/filter/logdrop-2204 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2204 -j DROP - inet6/filter/FORWARD -j logdrop-2204 - inet6/filter/INPUT -j logdrop-2204 - inet6/filter/OUTPUT -j logdrop-2204 - inet6/filter/logdrop-2204 -j DROP + inet/filter/FORWARD -j logdrop-1654 + inet/filter/INPUT -j logdrop-1654 + inet/filter/OUTPUT -j logdrop-1654 + inet/filter/logdrop-1654 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1654 -j DROP + inet6/filter/FORWARD -j logdrop-1654 + inet6/filter/INPUT -j logdrop-1654 + inet6/filter/OUTPUT -j logdrop-1654 + inet6/filter/logdrop-1654 -j DROP Filter 3933 {"action":"pass","log":"ulog"} (log) @@ -61852,1011 +61852,115 @@ hash:net family inet :limit-2925 - [0:0] :limit-2926 - [0:0] :limit-2927 - [0:0] -:limit-2928 - [0:0] -:limit-2929 - [0:0] :limit-293 - [0:0] -:limit-2930 - [0:0] -:limit-2931 - [0:0] -:limit-2932 - [0:0] -:limit-2933 - [0:0] -:limit-2934 - [0:0] -:limit-2935 - [0:0] -:limit-2936 - [0:0] -:limit-2937 - [0:0] -:limit-2938 - [0:0] -:limit-2939 - [0:0] :limit-294 - [0:0] -:limit-2940 - [0:0] -:limit-2941 - [0:0] -:limit-2942 - [0:0] -:limit-2943 - [0:0] -:limit-2944 - [0:0] -:limit-2945 - [0:0] -:limit-2946 - [0:0] -:limit-2947 - [0:0] -:limit-2948 - [0:0] -:limit-2949 - [0:0] :limit-295 - [0:0] -:limit-2950 - [0:0] -:limit-2951 - [0:0] -:limit-2952 - [0:0] -:limit-2953 - [0:0] -:limit-2954 - [0:0] -:limit-2955 - [0:0] -:limit-2956 - [0:0] -:limit-2957 - [0:0] -:limit-2958 - [0:0] :limit-296 - [0:0] -:limit-2960 - [0:0] -:limit-2961 - [0:0] -:limit-2962 - [0:0] -:limit-2963 - [0:0] -:limit-2964 - [0:0] -:limit-2966 - [0:0] -:limit-2967 - [0:0] -:limit-2968 - [0:0] -:limit-2969 - [0:0] :limit-297 - [0:0] -:limit-2970 - [0:0] -:limit-2971 - [0:0] -:limit-2972 - [0:0] -:limit-2973 - [0:0] -:limit-2974 - [0:0] -:limit-2975 - [0:0] -:limit-2976 - [0:0] -:limit-2977 - [0:0] -:limit-2978 - [0:0] :limit-298 - [0:0] -:limit-2980 - [0:0] -:limit-2981 - [0:0] -:limit-2982 - [0:0] -:limit-2983 - [0:0] -:limit-2984 - [0:0] -:limit-2986 - [0:0] -:limit-2987 - [0:0] -:limit-2988 - [0:0] -:limit-2989 - [0:0] :limit-299 - [0:0] -:limit-2990 - [0:0] -:limit-2991 - [0:0] -:limit-2992 - [0:0] -:limit-2993 - [0:0] -:limit-2994 - [0:0] -:limit-2995 - [0:0] -:limit-2996 - [0:0] -:limit-2997 - [0:0] -:limit-2998 - [0:0] :limit-3 - [0:0] :limit-30 - [0:0] :limit-300 - [0:0] -:limit-3000 - [0:0] -:limit-3001 - [0:0] -:limit-3002 - [0:0] -:limit-3003 - [0:0] -:limit-3004 - [0:0] -:limit-3006 - [0:0] -:limit-3007 - [0:0] -:limit-3008 - [0:0] -:limit-3009 - [0:0] :limit-301 - [0:0] -:limit-3010 - [0:0] -:limit-3011 - [0:0] -:limit-3012 - [0:0] -:limit-3013 - [0:0] -:limit-3014 - [0:0] -:limit-3015 - [0:0] -:limit-3016 - [0:0] -:limit-3017 - [0:0] -:limit-3018 - [0:0] :limit-302 - [0:0] -:limit-3020 - [0:0] -:limit-3021 - [0:0] -:limit-3022 - [0:0] -:limit-3023 - [0:0] -:limit-3024 - [0:0] -:limit-3026 - [0:0] -:limit-3027 - [0:0] -:limit-3028 - [0:0] -:limit-3029 - [0:0] :limit-303 - [0:0] -:limit-3030 - [0:0] -:limit-3031 - [0:0] -:limit-3032 - [0:0] -:limit-3033 - [0:0] -:limit-3034 - [0:0] -:limit-3035 - [0:0] -:limit-3036 - [0:0] -:limit-3037 - [0:0] -:limit-3038 - [0:0] -:limit-3039 - [0:0] :limit-304 - [0:0] -:limit-3040 - [0:0] -:limit-3041 - [0:0] -:limit-3042 - [0:0] -:limit-3043 - [0:0] -:limit-3044 - [0:0] -:limit-3045 - [0:0] -:limit-3046 - [0:0] -:limit-3047 - [0:0] -:limit-3048 - [0:0] :limit-305 - [0:0] -:limit-3050 - [0:0] -:limit-3051 - [0:0] -:limit-3052 - [0:0] -:limit-3053 - [0:0] -:limit-3054 - [0:0] -:limit-3056 - [0:0] -:limit-3057 - [0:0] -:limit-3058 - [0:0] -:limit-3059 - [0:0] :limit-306 - [0:0] -:limit-3060 - [0:0] -:limit-3061 - [0:0] -:limit-3062 - [0:0] -:limit-3063 - [0:0] -:limit-3064 - [0:0] -:limit-3065 - [0:0] -:limit-3066 - [0:0] -:limit-3067 - [0:0] -:limit-3068 - [0:0] :limit-307 - [0:0] -:limit-3070 - [0:0] -:limit-3071 - [0:0] -:limit-3072 - [0:0] -:limit-3073 - [0:0] -:limit-3074 - [0:0] -:limit-3076 - [0:0] -:limit-3077 - [0:0] -:limit-3078 - [0:0] -:limit-3079 - [0:0] :limit-308 - [0:0] -:limit-3080 - [0:0] -:limit-3081 - [0:0] -:limit-3082 - [0:0] -:limit-3083 - [0:0] -:limit-3084 - [0:0] -:limit-3085 - [0:0] -:limit-3086 - [0:0] -:limit-3087 - [0:0] -:limit-3088 - [0:0] :limit-309 - [0:0] -:limit-3090 - [0:0] -:limit-3091 - [0:0] -:limit-3092 - [0:0] -:limit-3093 - [0:0] -:limit-3094 - [0:0] -:limit-3096 - [0:0] -:limit-3097 - [0:0] -:limit-3098 - [0:0] -:limit-3099 - [0:0] :limit-31 - [0:0] :limit-310 - [0:0] -:limit-3100 - [0:0] -:limit-3101 - [0:0] -:limit-3102 - [0:0] -:limit-3103 - [0:0] -:limit-3104 - [0:0] -:limit-3105 - [0:0] -:limit-3106 - [0:0] -:limit-3107 - [0:0] -:limit-3108 - [0:0] :limit-311 - [0:0] -:limit-3110 - [0:0] -:limit-3111 - [0:0] -:limit-3112 - [0:0] -:limit-3113 - [0:0] -:limit-3114 - [0:0] -:limit-3116 - [0:0] -:limit-3117 - [0:0] -:limit-3118 - [0:0] -:limit-3119 - [0:0] :limit-312 - [0:0] -:limit-3120 - [0:0] -:limit-3121 - [0:0] -:limit-3122 - [0:0] -:limit-3123 - [0:0] -:limit-3124 - [0:0] -:limit-3125 - [0:0] -:limit-3126 - [0:0] -:limit-3127 - [0:0] -:limit-3128 - [0:0] -:limit-3129 - [0:0] :limit-313 - [0:0] -:limit-3130 - [0:0] -:limit-3131 - [0:0] -:limit-3132 - [0:0] -:limit-3133 - [0:0] -:limit-3134 - [0:0] -:limit-3135 - [0:0] -:limit-3136 - [0:0] -:limit-3137 - [0:0] -:limit-3138 - [0:0] :limit-314 - [0:0] -:limit-3140 - [0:0] -:limit-3141 - [0:0] -:limit-3142 - [0:0] -:limit-3143 - [0:0] -:limit-3144 - [0:0] -:limit-3146 - [0:0] -:limit-3147 - [0:0] -:limit-3148 - [0:0] -:limit-3149 - [0:0] :limit-315 - [0:0] -:limit-3150 - [0:0] -:limit-3151 - [0:0] -:limit-3152 - [0:0] -:limit-3153 - [0:0] -:limit-3154 - [0:0] -:limit-3155 - [0:0] -:limit-3156 - [0:0] -:limit-3157 - [0:0] -:limit-3158 - [0:0] :limit-316 - [0:0] -:limit-3160 - [0:0] -:limit-3161 - [0:0] -:limit-3162 - [0:0] -:limit-3163 - [0:0] -:limit-3164 - [0:0] -:limit-3166 - [0:0] -:limit-3167 - [0:0] -:limit-3168 - [0:0] -:limit-3169 - [0:0] :limit-317 - [0:0] -:limit-3170 - [0:0] -:limit-3171 - [0:0] -:limit-3172 - [0:0] -:limit-3173 - [0:0] -:limit-3174 - [0:0] -:limit-3175 - [0:0] -:limit-3176 - [0:0] -:limit-3177 - [0:0] -:limit-3178 - [0:0] :limit-318 - [0:0] -:limit-3180 - [0:0] -:limit-3181 - [0:0] -:limit-3182 - [0:0] -:limit-3183 - [0:0] -:limit-3184 - [0:0] -:limit-3186 - [0:0] -:limit-3187 - [0:0] -:limit-3188 - [0:0] -:limit-3189 - [0:0] :limit-319 - [0:0] -:limit-3190 - [0:0] -:limit-3191 - [0:0] -:limit-3192 - [0:0] -:limit-3193 - [0:0] -:limit-3194 - [0:0] -:limit-3195 - [0:0] -:limit-3196 - [0:0] -:limit-3197 - [0:0] -:limit-3198 - [0:0] :limit-32 - [0:0] :limit-320 - [0:0] -:limit-3200 - [0:0] -:limit-3201 - [0:0] -:limit-3202 - [0:0] -:limit-3203 - [0:0] -:limit-3204 - [0:0] -:limit-3206 - [0:0] -:limit-3207 - [0:0] -:limit-3208 - [0:0] -:limit-3209 - [0:0] :limit-321 - [0:0] -:limit-3210 - [0:0] -:limit-3211 - [0:0] -:limit-3212 - [0:0] -:limit-3213 - [0:0] -:limit-3214 - [0:0] -:limit-3215 - [0:0] -:limit-3216 - [0:0] -:limit-3217 - [0:0] -:limit-3218 - [0:0] -:limit-3219 - [0:0] :limit-322 - [0:0] -:limit-3220 - [0:0] -:limit-3221 - [0:0] -:limit-3222 - [0:0] -:limit-3223 - [0:0] -:limit-3224 - [0:0] -:limit-3225 - [0:0] -:limit-3226 - [0:0] -:limit-3227 - [0:0] -:limit-3228 - [0:0] :limit-323 - [0:0] -:limit-3230 - [0:0] -:limit-3231 - [0:0] -:limit-3232 - [0:0] -:limit-3233 - [0:0] -:limit-3234 - [0:0] -:limit-3236 - [0:0] -:limit-3237 - [0:0] -:limit-3238 - [0:0] -:limit-3239 - [0:0] :limit-324 - [0:0] -:limit-3240 - [0:0] -:limit-3241 - [0:0] -:limit-3242 - [0:0] -:limit-3243 - [0:0] -:limit-3244 - [0:0] -:limit-3245 - [0:0] -:limit-3246 - [0:0] -:limit-3247 - [0:0] -:limit-3248 - [0:0] :limit-325 - [0:0] -:limit-3250 - [0:0] -:limit-3251 - [0:0] -:limit-3252 - [0:0] -:limit-3253 - [0:0] -:limit-3254 - [0:0] -:limit-3256 - [0:0] -:limit-3257 - [0:0] -:limit-3258 - [0:0] -:limit-3259 - [0:0] :limit-326 - [0:0] -:limit-3260 - [0:0] -:limit-3261 - [0:0] -:limit-3262 - [0:0] -:limit-3263 - [0:0] -:limit-3264 - [0:0] -:limit-3265 - [0:0] -:limit-3266 - [0:0] -:limit-3267 - [0:0] -:limit-3268 - [0:0] :limit-327 - [0:0] -:limit-3270 - [0:0] -:limit-3271 - [0:0] -:limit-3272 - [0:0] -:limit-3273 - [0:0] -:limit-3274 - [0:0] -:limit-3276 - [0:0] -:limit-3277 - [0:0] -:limit-3278 - [0:0] -:limit-3279 - [0:0] :limit-328 - [0:0] -:limit-3280 - [0:0] -:limit-3281 - [0:0] -:limit-3282 - [0:0] -:limit-3283 - [0:0] -:limit-3284 - [0:0] -:limit-3285 - [0:0] -:limit-3286 - [0:0] -:limit-3287 - [0:0] -:limit-3288 - [0:0] :limit-329 - [0:0] -:limit-3290 - [0:0] -:limit-3291 - [0:0] -:limit-3292 - [0:0] -:limit-3293 - [0:0] -:limit-3294 - [0:0] -:limit-3296 - [0:0] -:limit-3297 - [0:0] -:limit-3298 - [0:0] -:limit-3299 - [0:0] :limit-33 - [0:0] :limit-330 - [0:0] -:limit-3300 - [0:0] -:limit-3301 - [0:0] -:limit-3302 - [0:0] -:limit-3303 - [0:0] -:limit-3304 - [0:0] -:limit-3305 - [0:0] -:limit-3306 - [0:0] -:limit-3307 - [0:0] -:limit-3308 - [0:0] -:limit-3309 - [0:0] :limit-331 - [0:0] -:limit-3310 - [0:0] -:limit-3311 - [0:0] -:limit-3312 - [0:0] -:limit-3313 - [0:0] -:limit-3314 - [0:0] -:limit-3315 - [0:0] -:limit-3316 - [0:0] -:limit-3317 - [0:0] -:limit-3318 - [0:0] :limit-332 - [0:0] -:limit-3320 - [0:0] -:limit-3321 - [0:0] -:limit-3322 - [0:0] -:limit-3323 - [0:0] -:limit-3324 - [0:0] -:limit-3326 - [0:0] -:limit-3327 - [0:0] -:limit-3328 - [0:0] -:limit-3329 - [0:0] :limit-333 - [0:0] -:limit-3330 - [0:0] -:limit-3331 - [0:0] -:limit-3332 - [0:0] -:limit-3333 - [0:0] -:limit-3334 - [0:0] -:limit-3335 - [0:0] -:limit-3336 - [0:0] -:limit-3337 - [0:0] -:limit-3338 - [0:0] :limit-334 - [0:0] -:limit-3340 - [0:0] -:limit-3341 - [0:0] -:limit-3342 - [0:0] -:limit-3343 - [0:0] -:limit-3344 - [0:0] -:limit-3346 - [0:0] -:limit-3347 - [0:0] -:limit-3348 - [0:0] -:limit-3349 - [0:0] :limit-335 - [0:0] -:limit-3350 - [0:0] -:limit-3351 - [0:0] -:limit-3352 - [0:0] -:limit-3353 - [0:0] -:limit-3354 - [0:0] -:limit-3355 - [0:0] -:limit-3356 - [0:0] -:limit-3357 - [0:0] -:limit-3358 - [0:0] :limit-336 - [0:0] -:limit-3360 - [0:0] -:limit-3361 - [0:0] -:limit-3362 - [0:0] -:limit-3363 - [0:0] -:limit-3364 - [0:0] -:limit-3366 - [0:0] -:limit-3367 - [0:0] -:limit-3368 - [0:0] -:limit-3369 - [0:0] :limit-337 - [0:0] -:limit-3370 - [0:0] -:limit-3371 - [0:0] -:limit-3372 - [0:0] -:limit-3373 - [0:0] -:limit-3374 - [0:0] -:limit-3375 - [0:0] -:limit-3376 - [0:0] -:limit-3377 - [0:0] -:limit-3378 - [0:0] :limit-338 - [0:0] -:limit-3380 - [0:0] -:limit-3381 - [0:0] -:limit-3382 - [0:0] -:limit-3383 - [0:0] -:limit-3384 - [0:0] -:limit-3386 - [0:0] -:limit-3387 - [0:0] -:limit-3388 - [0:0] -:limit-3389 - [0:0] :limit-339 - [0:0] -:limit-3390 - [0:0] -:limit-3391 - [0:0] -:limit-3392 - [0:0] -:limit-3393 - [0:0] -:limit-3394 - [0:0] -:limit-3395 - [0:0] -:limit-3396 - [0:0] -:limit-3397 - [0:0] -:limit-3398 - [0:0] -:limit-3399 - [0:0] :limit-34 - [0:0] :limit-340 - [0:0] -:limit-3400 - [0:0] -:limit-3401 - [0:0] -:limit-3402 - [0:0] -:limit-3403 - [0:0] -:limit-3404 - [0:0] -:limit-3405 - [0:0] -:limit-3406 - [0:0] -:limit-3407 - [0:0] -:limit-3408 - [0:0] :limit-341 - [0:0] -:limit-3410 - [0:0] -:limit-3411 - [0:0] -:limit-3412 - [0:0] -:limit-3413 - [0:0] -:limit-3414 - [0:0] -:limit-3416 - [0:0] -:limit-3417 - [0:0] -:limit-3418 - [0:0] -:limit-3419 - [0:0] :limit-342 - [0:0] -:limit-3420 - [0:0] -:limit-3421 - [0:0] -:limit-3422 - [0:0] -:limit-3423 - [0:0] -:limit-3424 - [0:0] -:limit-3425 - [0:0] -:limit-3426 - [0:0] -:limit-3427 - [0:0] -:limit-3428 - [0:0] :limit-343 - [0:0] -:limit-3430 - [0:0] -:limit-3431 - [0:0] -:limit-3432 - [0:0] -:limit-3433 - [0:0] -:limit-3434 - [0:0] -:limit-3436 - [0:0] -:limit-3437 - [0:0] -:limit-3438 - [0:0] -:limit-3439 - [0:0] :limit-344 - [0:0] -:limit-3440 - [0:0] -:limit-3441 - [0:0] -:limit-3442 - [0:0] -:limit-3443 - [0:0] -:limit-3444 - [0:0] -:limit-3445 - [0:0] -:limit-3446 - [0:0] -:limit-3447 - [0:0] -:limit-3448 - [0:0] :limit-345 - [0:0] -:limit-3450 - [0:0] -:limit-3451 - [0:0] -:limit-3452 - [0:0] -:limit-3453 - [0:0] -:limit-3454 - [0:0] -:limit-3456 - [0:0] -:limit-3457 - [0:0] -:limit-3458 - [0:0] -:limit-3459 - [0:0] :limit-346 - [0:0] -:limit-3460 - [0:0] -:limit-3461 - [0:0] -:limit-3462 - [0:0] -:limit-3463 - [0:0] -:limit-3464 - [0:0] -:limit-3465 - [0:0] -:limit-3466 - [0:0] -:limit-3467 - [0:0] -:limit-3468 - [0:0] :limit-347 - [0:0] -:limit-3470 - [0:0] -:limit-3471 - [0:0] -:limit-3472 - [0:0] -:limit-3473 - [0:0] -:limit-3474 - [0:0] -:limit-3476 - [0:0] -:limit-3477 - [0:0] -:limit-3478 - [0:0] -:limit-3479 - [0:0] :limit-348 - [0:0] -:limit-3480 - [0:0] -:limit-3481 - [0:0] -:limit-3482 - [0:0] -:limit-3483 - [0:0] -:limit-3484 - [0:0] -:limit-3485 - [0:0] -:limit-3486 - [0:0] -:limit-3487 - [0:0] -:limit-3488 - [0:0] -:limit-3489 - [0:0] :limit-349 - [0:0] -:limit-3490 - [0:0] -:limit-3491 - [0:0] -:limit-3492 - [0:0] -:limit-3493 - [0:0] -:limit-3494 - [0:0] -:limit-3495 - [0:0] -:limit-3496 - [0:0] -:limit-3497 - [0:0] -:limit-3498 - [0:0] :limit-35 - [0:0] :limit-350 - [0:0] -:limit-3500 - [0:0] -:limit-3501 - [0:0] -:limit-3502 - [0:0] -:limit-3503 - [0:0] -:limit-3504 - [0:0] -:limit-3506 - [0:0] -:limit-3507 - [0:0] -:limit-3508 - [0:0] -:limit-3509 - [0:0] :limit-351 - [0:0] -:limit-3510 - [0:0] -:limit-3511 - [0:0] -:limit-3512 - [0:0] -:limit-3513 - [0:0] -:limit-3514 - [0:0] -:limit-3515 - [0:0] -:limit-3516 - [0:0] -:limit-3517 - [0:0] -:limit-3518 - [0:0] :limit-352 - [0:0] -:limit-3520 - [0:0] -:limit-3521 - [0:0] -:limit-3522 - [0:0] -:limit-3523 - [0:0] -:limit-3524 - [0:0] -:limit-3526 - [0:0] -:limit-3527 - [0:0] -:limit-3528 - [0:0] -:limit-3529 - [0:0] :limit-353 - [0:0] -:limit-3530 - [0:0] -:limit-3531 - [0:0] -:limit-3532 - [0:0] -:limit-3533 - [0:0] -:limit-3534 - [0:0] -:limit-3535 - [0:0] -:limit-3536 - [0:0] -:limit-3537 - [0:0] -:limit-3538 - [0:0] :limit-354 - [0:0] -:limit-3540 - [0:0] -:limit-3541 - [0:0] -:limit-3542 - [0:0] -:limit-3543 - [0:0] -:limit-3544 - [0:0] -:limit-3546 - [0:0] -:limit-3547 - [0:0] -:limit-3548 - [0:0] -:limit-3549 - [0:0] :limit-355 - [0:0] -:limit-3550 - [0:0] -:limit-3551 - [0:0] -:limit-3552 - [0:0] -:limit-3553 - [0:0] -:limit-3554 - [0:0] -:limit-3555 - [0:0] -:limit-3556 - [0:0] -:limit-3557 - [0:0] -:limit-3558 - [0:0] :limit-356 - [0:0] -:limit-3560 - [0:0] -:limit-3561 - [0:0] -:limit-3562 - [0:0] -:limit-3563 - [0:0] -:limit-3564 - [0:0] -:limit-3566 - [0:0] -:limit-3567 - [0:0] -:limit-3568 - [0:0] -:limit-3569 - [0:0] :limit-357 - [0:0] -:limit-3570 - [0:0] -:limit-3571 - [0:0] -:limit-3572 - [0:0] -:limit-3573 - [0:0] -:limit-3574 - [0:0] -:limit-3575 - [0:0] -:limit-3576 - [0:0] -:limit-3577 - [0:0] -:limit-3578 - [0:0] -:limit-3579 - [0:0] :limit-358 - [0:0] -:limit-3580 - [0:0] -:limit-3581 - [0:0] -:limit-3582 - [0:0] -:limit-3583 - [0:0] -:limit-3584 - [0:0] -:limit-3585 - [0:0] -:limit-3586 - [0:0] -:limit-3587 - [0:0] -:limit-3588 - [0:0] :limit-359 - [0:0] -:limit-3590 - [0:0] -:limit-3591 - [0:0] -:limit-3592 - [0:0] -:limit-3593 - [0:0] -:limit-3594 - [0:0] -:limit-3596 - [0:0] -:limit-3597 - [0:0] -:limit-3598 - [0:0] -:limit-3599 - [0:0] :limit-36 - [0:0] :limit-360 - [0:0] -:limit-3600 - [0:0] -:limit-3601 - [0:0] -:limit-3602 - [0:0] -:limit-3603 - [0:0] -:limit-3604 - [0:0] -:limit-3605 - [0:0] -:limit-3606 - [0:0] -:limit-3607 - [0:0] -:limit-3608 - [0:0] :limit-361 - [0:0] -:limit-3610 - [0:0] -:limit-3611 - [0:0] -:limit-3612 - [0:0] -:limit-3613 - [0:0] -:limit-3614 - [0:0] -:limit-3616 - [0:0] -:limit-3617 - [0:0] -:limit-3618 - [0:0] -:limit-3619 - [0:0] :limit-362 - [0:0] -:limit-3620 - [0:0] -:limit-3621 - [0:0] -:limit-3622 - [0:0] -:limit-3623 - [0:0] -:limit-3624 - [0:0] -:limit-3625 - [0:0] -:limit-3626 - [0:0] -:limit-3627 - [0:0] -:limit-3628 - [0:0] :limit-363 - [0:0] -:limit-3630 - [0:0] -:limit-3631 - [0:0] -:limit-3632 - [0:0] -:limit-3633 - [0:0] -:limit-3634 - [0:0] -:limit-3636 - [0:0] -:limit-3637 - [0:0] -:limit-3638 - [0:0] -:limit-3639 - [0:0] :limit-364 - [0:0] -:limit-3640 - [0:0] -:limit-3641 - [0:0] -:limit-3642 - [0:0] -:limit-3643 - [0:0] -:limit-3644 - [0:0] -:limit-3645 - [0:0] -:limit-3646 - [0:0] -:limit-3647 - [0:0] -:limit-3648 - [0:0] :limit-365 - [0:0] -:limit-3650 - [0:0] -:limit-3651 - [0:0] -:limit-3652 - [0:0] -:limit-3653 - [0:0] -:limit-3654 - [0:0] -:limit-3656 - [0:0] -:limit-3657 - [0:0] -:limit-3658 - [0:0] -:limit-3659 - [0:0] :limit-366 - [0:0] -:limit-3660 - [0:0] -:limit-3661 - [0:0] -:limit-3662 - [0:0] -:limit-3663 - [0:0] -:limit-3664 - [0:0] -:limit-3665 - [0:0] -:limit-3666 - [0:0] -:limit-3667 - [0:0] -:limit-3668 - [0:0] -:limit-3669 - [0:0] :limit-367 - [0:0] -:limit-3670 - [0:0] -:limit-3671 - [0:0] -:limit-3672 - [0:0] -:limit-3673 - [0:0] -:limit-3674 - [0:0] -:limit-3675 - [0:0] -:limit-3676 - [0:0] -:limit-3677 - [0:0] -:limit-3678 - [0:0] :limit-368 - [0:0] -:limit-3680 - [0:0] -:limit-3681 - [0:0] -:limit-3682 - [0:0] -:limit-3683 - [0:0] -:limit-3684 - [0:0] -:limit-3686 - [0:0] -:limit-3687 - [0:0] -:limit-3688 - [0:0] -:limit-3689 - [0:0] :limit-369 - [0:0] -:limit-3690 - [0:0] -:limit-3691 - [0:0] -:limit-3692 - [0:0] -:limit-3693 - [0:0] -:limit-3694 - [0:0] -:limit-3695 - [0:0] -:limit-3696 - [0:0] -:limit-3697 - [0:0] -:limit-3698 - [0:0] :limit-37 - [0:0] :limit-370 - [0:0] -:limit-3700 - [0:0] -:limit-3701 - [0:0] -:limit-3702 - [0:0] -:limit-3703 - [0:0] -:limit-3704 - [0:0] -:limit-3706 - [0:0] -:limit-3707 - [0:0] -:limit-3708 - [0:0] -:limit-3709 - [0:0] :limit-371 - [0:0] -:limit-3710 - [0:0] -:limit-3711 - [0:0] -:limit-3712 - [0:0] -:limit-3713 - [0:0] -:limit-3714 - [0:0] -:limit-3715 - [0:0] -:limit-3716 - [0:0] -:limit-3717 - [0:0] -:limit-3718 - [0:0] :limit-372 - [0:0] -:limit-3720 - [0:0] -:limit-3721 - [0:0] -:limit-3722 - [0:0] -:limit-3723 - [0:0] -:limit-3724 - [0:0] -:limit-3726 - [0:0] -:limit-3727 - [0:0] -:limit-3728 - [0:0] -:limit-3729 - [0:0] :limit-373 - [0:0] -:limit-3730 - [0:0] -:limit-3731 - [0:0] -:limit-3732 - [0:0] -:limit-3733 - [0:0] -:limit-3734 - [0:0] -:limit-3735 - [0:0] -:limit-3736 - [0:0] -:limit-3737 - [0:0] -:limit-3738 - [0:0] :limit-374 - [0:0] -:limit-3740 - [0:0] -:limit-3741 - [0:0] -:limit-3742 - [0:0] -:limit-3743 - [0:0] -:limit-3744 - [0:0] -:limit-3746 - [0:0] -:limit-3747 - [0:0] -:limit-3748 - [0:0] -:limit-3749 - [0:0] :limit-375 - [0:0] -:limit-3750 - [0:0] -:limit-3751 - [0:0] -:limit-3752 - [0:0] -:limit-3753 - [0:0] -:limit-3754 - [0:0] -:limit-3755 - [0:0] -:limit-3756 - [0:0] -:limit-3757 - [0:0] -:limit-3758 - [0:0] -:limit-3759 - [0:0] :limit-376 - [0:0] -:limit-3760 - [0:0] -:limit-3761 - [0:0] -:limit-3762 - [0:0] -:limit-3763 - [0:0] -:limit-3764 - [0:0] -:limit-3765 - [0:0] -:limit-3766 - [0:0] -:limit-3767 - [0:0] -:limit-3768 - [0:0] :limit-377 - [0:0] -:limit-3770 - [0:0] -:limit-3771 - [0:0] -:limit-3772 - [0:0] -:limit-3773 - [0:0] -:limit-3774 - [0:0] -:limit-3776 - [0:0] -:limit-3777 - [0:0] -:limit-3778 - [0:0] -:limit-3779 - [0:0] :limit-378 - [0:0] -:limit-3780 - [0:0] -:limit-3781 - [0:0] -:limit-3782 - [0:0] -:limit-3783 - [0:0] -:limit-3784 - [0:0] -:limit-3785 - [0:0] -:limit-3786 - [0:0] -:limit-3787 - [0:0] -:limit-3788 - [0:0] :limit-379 - [0:0] -:limit-3790 - [0:0] -:limit-3791 - [0:0] -:limit-3792 - [0:0] -:limit-3793 - [0:0] -:limit-3794 - [0:0] -:limit-3796 - [0:0] -:limit-3797 - [0:0] -:limit-3798 - [0:0] -:limit-3799 - [0:0] :limit-38 - [0:0] :limit-380 - [0:0] -:limit-3800 - [0:0] -:limit-3801 - [0:0] -:limit-3802 - [0:0] -:limit-3803 - [0:0] -:limit-3804 - [0:0] -:limit-3805 - [0:0] -:limit-3806 - [0:0] -:limit-3807 - [0:0] -:limit-3808 - [0:0] :limit-381 - [0:0] -:limit-3810 - [0:0] -:limit-3811 - [0:0] -:limit-3812 - [0:0] -:limit-3813 - [0:0] -:limit-3814 - [0:0] -:limit-3816 - [0:0] -:limit-3817 - [0:0] -:limit-3818 - [0:0] -:limit-3819 - [0:0] :limit-382 - [0:0] -:limit-3820 - [0:0] -:limit-3821 - [0:0] -:limit-3822 - [0:0] -:limit-3823 - [0:0] -:limit-3824 - [0:0] -:limit-3825 - [0:0] -:limit-3826 - [0:0] -:limit-3827 - [0:0] -:limit-3828 - [0:0] :limit-383 - [0:0] -:limit-3830 - [0:0] -:limit-3831 - [0:0] -:limit-3832 - [0:0] -:limit-3833 - [0:0] -:limit-3834 - [0:0] -:limit-3836 - [0:0] -:limit-3837 - [0:0] -:limit-3838 - [0:0] -:limit-3839 - [0:0] :limit-384 - [0:0] -:limit-3840 - [0:0] -:limit-3841 - [0:0] -:limit-3842 - [0:0] -:limit-3843 - [0:0] -:limit-3844 - [0:0] -:limit-3845 - [0:0] -:limit-3846 - [0:0] -:limit-3847 - [0:0] -:limit-3848 - [0:0] -:limit-3849 - [0:0] :limit-385 - [0:0] -:limit-3850 - [0:0] -:limit-3851 - [0:0] -:limit-3852 - [0:0] -:limit-3853 - [0:0] -:limit-3854 - [0:0] -:limit-3855 - [0:0] -:limit-3856 - [0:0] -:limit-3857 - [0:0] -:limit-3858 - [0:0] -:limit-3859 - [0:0] :limit-386 - [0:0] -:limit-3860 - [0:0] -:limit-3861 - [0:0] -:limit-3862 - [0:0] -:limit-3863 - [0:0] -:limit-3864 - [0:0] -:limit-3865 - [0:0] -:limit-3866 - [0:0] -:limit-3867 - [0:0] -:limit-3868 - [0:0] -:limit-3869 - [0:0] :limit-387 - [0:0] -:limit-3870 - [0:0] -:limit-3871 - [0:0] -:limit-3872 - [0:0] -:limit-3873 - [0:0] -:limit-3874 - [0:0] -:limit-3875 - [0:0] -:limit-3876 - [0:0] -:limit-3877 - [0:0] -:limit-3878 - [0:0] -:limit-3879 - [0:0] :limit-388 - [0:0] -:limit-3880 - [0:0] -:limit-3881 - [0:0] -:limit-3882 - [0:0] -:limit-3883 - [0:0] -:limit-3884 - [0:0] -:limit-3885 - [0:0] -:limit-3886 - [0:0] -:limit-3887 - [0:0] -:limit-3888 - [0:0] -:limit-3889 - [0:0] :limit-389 - [0:0] -:limit-3890 - [0:0] -:limit-3891 - [0:0] -:limit-3892 - [0:0] -:limit-3893 - [0:0] -:limit-3894 - [0:0] -:limit-3895 - [0:0] -:limit-3896 - [0:0] -:limit-3897 - [0:0] -:limit-3898 - [0:0] -:limit-3899 - [0:0] :limit-39 - [0:0] :limit-390 - [0:0] -:limit-3900 - [0:0] -:limit-3901 - [0:0] -:limit-3902 - [0:0] -:limit-3903 - [0:0] :limit-391 - [0:0] :limit-392 - [0:0] :limit-393 - [0:0] @@ -63532,12 +62636,905 @@ hash:net family inet :limit-997 - [0:0] :limit-998 - [0:0] :limit-999 - [0:0] +:limit-ntp-0 - [0:0] +:limit-ntp-1 - [0:0] +:limit-ntp-10 - [0:0] +:limit-ntp-100 - [0:0] +:limit-ntp-101 - [0:0] +:limit-ntp-102 - [0:0] +:limit-ntp-103 - [0:0] +:limit-ntp-104 - [0:0] +:limit-ntp-105 - [0:0] +:limit-ntp-106 - [0:0] +:limit-ntp-107 - [0:0] +:limit-ntp-108 - [0:0] +:limit-ntp-109 - [0:0] +:limit-ntp-11 - [0:0] +:limit-ntp-110 - [0:0] +:limit-ntp-111 - [0:0] +:limit-ntp-112 - [0:0] +:limit-ntp-113 - [0:0] +:limit-ntp-114 - [0:0] +:limit-ntp-115 - [0:0] +:limit-ntp-116 - [0:0] +:limit-ntp-117 - [0:0] +:limit-ntp-118 - [0:0] +:limit-ntp-119 - [0:0] +:limit-ntp-12 - [0:0] +:limit-ntp-120 - [0:0] +:limit-ntp-122 - [0:0] +:limit-ntp-123 - [0:0] +:limit-ntp-124 - [0:0] +:limit-ntp-125 - [0:0] +:limit-ntp-126 - [0:0] +:limit-ntp-128 - [0:0] +:limit-ntp-129 - [0:0] +:limit-ntp-13 - [0:0] +:limit-ntp-130 - [0:0] +:limit-ntp-131 - [0:0] +:limit-ntp-132 - [0:0] +:limit-ntp-133 - [0:0] +:limit-ntp-134 - [0:0] +:limit-ntp-135 - [0:0] +:limit-ntp-136 - [0:0] +:limit-ntp-137 - [0:0] +:limit-ntp-138 - [0:0] +:limit-ntp-139 - [0:0] +:limit-ntp-14 - [0:0] +:limit-ntp-140 - [0:0] +:limit-ntp-142 - [0:0] +:limit-ntp-143 - [0:0] +:limit-ntp-144 - [0:0] +:limit-ntp-145 - [0:0] +:limit-ntp-146 - [0:0] +:limit-ntp-148 - [0:0] +:limit-ntp-149 - [0:0] +:limit-ntp-15 - [0:0] +:limit-ntp-150 - [0:0] +:limit-ntp-151 - [0:0] +:limit-ntp-152 - [0:0] +:limit-ntp-153 - [0:0] +:limit-ntp-154 - [0:0] +:limit-ntp-155 - [0:0] +:limit-ntp-156 - [0:0] +:limit-ntp-157 - [0:0] +:limit-ntp-158 - [0:0] +:limit-ntp-159 - [0:0] +:limit-ntp-16 - [0:0] +:limit-ntp-160 - [0:0] +:limit-ntp-162 - [0:0] +:limit-ntp-163 - [0:0] +:limit-ntp-164 - [0:0] +:limit-ntp-165 - [0:0] +:limit-ntp-166 - [0:0] +:limit-ntp-168 - [0:0] +:limit-ntp-169 - [0:0] +:limit-ntp-17 - [0:0] +:limit-ntp-170 - [0:0] +:limit-ntp-171 - [0:0] +:limit-ntp-172 - [0:0] +:limit-ntp-173 - [0:0] +:limit-ntp-174 - [0:0] +:limit-ntp-175 - [0:0] +:limit-ntp-176 - [0:0] +:limit-ntp-177 - [0:0] +:limit-ntp-178 - [0:0] +:limit-ntp-179 - [0:0] +:limit-ntp-18 - [0:0] +:limit-ntp-180 - [0:0] +:limit-ntp-182 - [0:0] +:limit-ntp-183 - [0:0] +:limit-ntp-184 - [0:0] +:limit-ntp-185 - [0:0] +:limit-ntp-186 - [0:0] +:limit-ntp-188 - [0:0] +:limit-ntp-189 - [0:0] +:limit-ntp-19 - [0:0] +:limit-ntp-190 - [0:0] +:limit-ntp-191 - [0:0] +:limit-ntp-192 - [0:0] +:limit-ntp-193 - [0:0] +:limit-ntp-194 - [0:0] +:limit-ntp-195 - [0:0] +:limit-ntp-196 - [0:0] +:limit-ntp-197 - [0:0] +:limit-ntp-198 - [0:0] +:limit-ntp-199 - [0:0] +:limit-ntp-2 - [0:0] +:limit-ntp-20 - [0:0] +:limit-ntp-200 - [0:0] +:limit-ntp-201 - [0:0] +:limit-ntp-202 - [0:0] +:limit-ntp-203 - [0:0] +:limit-ntp-204 - [0:0] +:limit-ntp-205 - [0:0] +:limit-ntp-206 - [0:0] +:limit-ntp-207 - [0:0] +:limit-ntp-208 - [0:0] +:limit-ntp-209 - [0:0] +:limit-ntp-21 - [0:0] +:limit-ntp-210 - [0:0] +:limit-ntp-212 - [0:0] +:limit-ntp-213 - [0:0] +:limit-ntp-214 - [0:0] +:limit-ntp-215 - [0:0] +:limit-ntp-216 - [0:0] +:limit-ntp-218 - [0:0] +:limit-ntp-219 - [0:0] +:limit-ntp-22 - [0:0] +:limit-ntp-220 - [0:0] +:limit-ntp-221 - [0:0] +:limit-ntp-222 - [0:0] +:limit-ntp-223 - [0:0] +:limit-ntp-224 - [0:0] +:limit-ntp-225 - [0:0] +:limit-ntp-226 - [0:0] +:limit-ntp-227 - [0:0] +:limit-ntp-228 - [0:0] +:limit-ntp-229 - [0:0] +:limit-ntp-23 - [0:0] +:limit-ntp-230 - [0:0] +:limit-ntp-232 - [0:0] +:limit-ntp-233 - [0:0] +:limit-ntp-234 - [0:0] +:limit-ntp-235 - [0:0] +:limit-ntp-236 - [0:0] +:limit-ntp-238 - [0:0] +:limit-ntp-239 - [0:0] +:limit-ntp-24 - [0:0] +:limit-ntp-240 - [0:0] +:limit-ntp-241 - [0:0] +:limit-ntp-242 - [0:0] +:limit-ntp-243 - [0:0] +:limit-ntp-244 - [0:0] +:limit-ntp-245 - [0:0] +:limit-ntp-246 - [0:0] +:limit-ntp-247 - [0:0] +:limit-ntp-248 - [0:0] +:limit-ntp-249 - [0:0] +:limit-ntp-25 - [0:0] +:limit-ntp-250 - [0:0] +:limit-ntp-252 - [0:0] +:limit-ntp-253 - [0:0] +:limit-ntp-254 - [0:0] +:limit-ntp-255 - [0:0] +:limit-ntp-256 - [0:0] +:limit-ntp-258 - [0:0] +:limit-ntp-259 - [0:0] +:limit-ntp-26 - [0:0] +:limit-ntp-260 - [0:0] +:limit-ntp-261 - [0:0] +:limit-ntp-262 - [0:0] +:limit-ntp-263 - [0:0] +:limit-ntp-264 - [0:0] +:limit-ntp-265 - [0:0] +:limit-ntp-266 - [0:0] +:limit-ntp-267 - [0:0] +:limit-ntp-268 - [0:0] +:limit-ntp-269 - [0:0] +:limit-ntp-27 - [0:0] +:limit-ntp-270 - [0:0] +:limit-ntp-272 - [0:0] +:limit-ntp-273 - [0:0] +:limit-ntp-274 - [0:0] +:limit-ntp-275 - [0:0] +:limit-ntp-276 - [0:0] +:limit-ntp-278 - [0:0] +:limit-ntp-279 - [0:0] +:limit-ntp-28 - [0:0] +:limit-ntp-280 - [0:0] +:limit-ntp-281 - [0:0] +:limit-ntp-282 - [0:0] +:limit-ntp-283 - [0:0] +:limit-ntp-284 - [0:0] +:limit-ntp-285 - [0:0] +:limit-ntp-286 - [0:0] +:limit-ntp-287 - [0:0] +:limit-ntp-288 - [0:0] +:limit-ntp-289 - [0:0] +:limit-ntp-29 - [0:0] +:limit-ntp-290 - [0:0] +:limit-ntp-291 - [0:0] +:limit-ntp-292 - [0:0] +:limit-ntp-293 - [0:0] +:limit-ntp-294 - [0:0] +:limit-ntp-295 - [0:0] +:limit-ntp-296 - [0:0] +:limit-ntp-297 - [0:0] +:limit-ntp-298 - [0:0] +:limit-ntp-299 - [0:0] +:limit-ntp-3 - [0:0] +:limit-ntp-30 - [0:0] +:limit-ntp-300 - [0:0] +:limit-ntp-302 - [0:0] +:limit-ntp-303 - [0:0] +:limit-ntp-304 - [0:0] +:limit-ntp-305 - [0:0] +:limit-ntp-306 - [0:0] +:limit-ntp-308 - [0:0] +:limit-ntp-309 - [0:0] +:limit-ntp-310 - [0:0] +:limit-ntp-311 - [0:0] +:limit-ntp-312 - [0:0] +:limit-ntp-313 - [0:0] +:limit-ntp-314 - [0:0] +:limit-ntp-315 - [0:0] +:limit-ntp-316 - [0:0] +:limit-ntp-317 - [0:0] +:limit-ntp-318 - [0:0] +:limit-ntp-319 - [0:0] +:limit-ntp-32 - [0:0] +:limit-ntp-320 - [0:0] +:limit-ntp-322 - [0:0] +:limit-ntp-323 - [0:0] +:limit-ntp-324 - [0:0] +:limit-ntp-325 - [0:0] +:limit-ntp-326 - [0:0] +:limit-ntp-328 - [0:0] +:limit-ntp-329 - [0:0] +:limit-ntp-33 - [0:0] +:limit-ntp-330 - [0:0] +:limit-ntp-331 - [0:0] +:limit-ntp-332 - [0:0] +:limit-ntp-333 - [0:0] +:limit-ntp-334 - [0:0] +:limit-ntp-335 - [0:0] +:limit-ntp-336 - [0:0] +:limit-ntp-337 - [0:0] +:limit-ntp-338 - [0:0] +:limit-ntp-339 - [0:0] +:limit-ntp-34 - [0:0] +:limit-ntp-340 - [0:0] +:limit-ntp-342 - [0:0] +:limit-ntp-343 - [0:0] +:limit-ntp-344 - [0:0] +:limit-ntp-345 - [0:0] +:limit-ntp-346 - [0:0] +:limit-ntp-348 - [0:0] +:limit-ntp-349 - [0:0] +:limit-ntp-35 - [0:0] +:limit-ntp-350 - [0:0] +:limit-ntp-351 - [0:0] +:limit-ntp-352 - [0:0] +:limit-ntp-353 - [0:0] +:limit-ntp-354 - [0:0] +:limit-ntp-355 - [0:0] +:limit-ntp-356 - [0:0] +:limit-ntp-357 - [0:0] +:limit-ntp-358 - [0:0] +:limit-ntp-359 - [0:0] +:limit-ntp-36 - [0:0] +:limit-ntp-360 - [0:0] +:limit-ntp-362 - [0:0] +:limit-ntp-363 - [0:0] +:limit-ntp-364 - [0:0] +:limit-ntp-365 - [0:0] +:limit-ntp-366 - [0:0] +:limit-ntp-368 - [0:0] +:limit-ntp-369 - [0:0] +:limit-ntp-370 - [0:0] +:limit-ntp-371 - [0:0] +:limit-ntp-372 - [0:0] +:limit-ntp-373 - [0:0] +:limit-ntp-374 - [0:0] +:limit-ntp-375 - [0:0] +:limit-ntp-376 - [0:0] +:limit-ntp-377 - [0:0] +:limit-ntp-378 - [0:0] +:limit-ntp-379 - [0:0] +:limit-ntp-38 - [0:0] +:limit-ntp-380 - [0:0] +:limit-ntp-381 - [0:0] +:limit-ntp-382 - [0:0] +:limit-ntp-383 - [0:0] +:limit-ntp-384 - [0:0] +:limit-ntp-385 - [0:0] +:limit-ntp-386 - [0:0] +:limit-ntp-387 - [0:0] +:limit-ntp-388 - [0:0] +:limit-ntp-389 - [0:0] +:limit-ntp-39 - [0:0] +:limit-ntp-390 - [0:0] +:limit-ntp-392 - [0:0] +:limit-ntp-393 - [0:0] +:limit-ntp-394 - [0:0] +:limit-ntp-395 - [0:0] +:limit-ntp-396 - [0:0] +:limit-ntp-398 - [0:0] +:limit-ntp-399 - [0:0] +:limit-ntp-4 - [0:0] +:limit-ntp-40 - [0:0] +:limit-ntp-400 - [0:0] +:limit-ntp-401 - [0:0] +:limit-ntp-402 - [0:0] +:limit-ntp-403 - [0:0] +:limit-ntp-404 - [0:0] +:limit-ntp-405 - [0:0] +:limit-ntp-406 - [0:0] +:limit-ntp-407 - [0:0] +:limit-ntp-408 - [0:0] +:limit-ntp-409 - [0:0] +:limit-ntp-41 - [0:0] +:limit-ntp-410 - [0:0] +:limit-ntp-412 - [0:0] +:limit-ntp-413 - [0:0] +:limit-ntp-414 - [0:0] +:limit-ntp-415 - [0:0] +:limit-ntp-416 - [0:0] +:limit-ntp-418 - [0:0] +:limit-ntp-419 - [0:0] +:limit-ntp-42 - [0:0] +:limit-ntp-420 - [0:0] +:limit-ntp-421 - [0:0] +:limit-ntp-422 - [0:0] +:limit-ntp-423 - [0:0] +:limit-ntp-424 - [0:0] +:limit-ntp-425 - [0:0] +:limit-ntp-426 - [0:0] +:limit-ntp-427 - [0:0] +:limit-ntp-428 - [0:0] +:limit-ntp-429 - [0:0] +:limit-ntp-43 - [0:0] +:limit-ntp-430 - [0:0] +:limit-ntp-432 - [0:0] +:limit-ntp-433 - [0:0] +:limit-ntp-434 - [0:0] +:limit-ntp-435 - [0:0] +:limit-ntp-436 - [0:0] +:limit-ntp-438 - [0:0] +:limit-ntp-439 - [0:0] +:limit-ntp-44 - [0:0] +:limit-ntp-440 - [0:0] +:limit-ntp-441 - [0:0] +:limit-ntp-442 - [0:0] +:limit-ntp-443 - [0:0] +:limit-ntp-444 - [0:0] +:limit-ntp-445 - [0:0] +:limit-ntp-446 - [0:0] +:limit-ntp-447 - [0:0] +:limit-ntp-448 - [0:0] +:limit-ntp-449 - [0:0] +:limit-ntp-45 - [0:0] +:limit-ntp-450 - [0:0] +:limit-ntp-452 - [0:0] +:limit-ntp-453 - [0:0] +:limit-ntp-454 - [0:0] +:limit-ntp-455 - [0:0] +:limit-ntp-456 - [0:0] +:limit-ntp-458 - [0:0] +:limit-ntp-459 - [0:0] +:limit-ntp-46 - [0:0] +:limit-ntp-460 - [0:0] +:limit-ntp-461 - [0:0] +:limit-ntp-462 - [0:0] +:limit-ntp-463 - [0:0] +:limit-ntp-464 - [0:0] +:limit-ntp-465 - [0:0] +:limit-ntp-466 - [0:0] +:limit-ntp-467 - [0:0] +:limit-ntp-468 - [0:0] +:limit-ntp-469 - [0:0] +:limit-ntp-47 - [0:0] +:limit-ntp-470 - [0:0] +:limit-ntp-471 - [0:0] +:limit-ntp-472 - [0:0] +:limit-ntp-473 - [0:0] +:limit-ntp-474 - [0:0] +:limit-ntp-475 - [0:0] +:limit-ntp-476 - [0:0] +:limit-ntp-477 - [0:0] +:limit-ntp-478 - [0:0] +:limit-ntp-479 - [0:0] +:limit-ntp-48 - [0:0] +:limit-ntp-480 - [0:0] +:limit-ntp-482 - [0:0] +:limit-ntp-483 - [0:0] +:limit-ntp-484 - [0:0] +:limit-ntp-485 - [0:0] +:limit-ntp-486 - [0:0] +:limit-ntp-488 - [0:0] +:limit-ntp-489 - [0:0] +:limit-ntp-49 - [0:0] +:limit-ntp-490 - [0:0] +:limit-ntp-491 - [0:0] +:limit-ntp-492 - [0:0] +:limit-ntp-493 - [0:0] +:limit-ntp-494 - [0:0] +:limit-ntp-495 - [0:0] +:limit-ntp-496 - [0:0] +:limit-ntp-497 - [0:0] +:limit-ntp-498 - [0:0] +:limit-ntp-499 - [0:0] +:limit-ntp-5 - [0:0] +:limit-ntp-50 - [0:0] +:limit-ntp-500 - [0:0] +:limit-ntp-502 - [0:0] +:limit-ntp-503 - [0:0] +:limit-ntp-504 - [0:0] +:limit-ntp-505 - [0:0] +:limit-ntp-506 - [0:0] +:limit-ntp-508 - [0:0] +:limit-ntp-509 - [0:0] +:limit-ntp-510 - [0:0] +:limit-ntp-511 - [0:0] +:limit-ntp-512 - [0:0] +:limit-ntp-513 - [0:0] +:limit-ntp-514 - [0:0] +:limit-ntp-515 - [0:0] +:limit-ntp-516 - [0:0] +:limit-ntp-517 - [0:0] +:limit-ntp-518 - [0:0] +:limit-ntp-519 - [0:0] +:limit-ntp-52 - [0:0] +:limit-ntp-520 - [0:0] +:limit-ntp-522 - [0:0] +:limit-ntp-523 - [0:0] +:limit-ntp-524 - [0:0] +:limit-ntp-525 - [0:0] +:limit-ntp-526 - [0:0] +:limit-ntp-528 - [0:0] +:limit-ntp-529 - [0:0] +:limit-ntp-53 - [0:0] +:limit-ntp-530 - [0:0] +:limit-ntp-531 - [0:0] +:limit-ntp-532 - [0:0] +:limit-ntp-533 - [0:0] +:limit-ntp-534 - [0:0] +:limit-ntp-535 - [0:0] +:limit-ntp-536 - [0:0] +:limit-ntp-537 - [0:0] +:limit-ntp-538 - [0:0] +:limit-ntp-539 - [0:0] +:limit-ntp-54 - [0:0] +:limit-ntp-540 - [0:0] +:limit-ntp-542 - [0:0] +:limit-ntp-543 - [0:0] +:limit-ntp-544 - [0:0] +:limit-ntp-545 - [0:0] +:limit-ntp-546 - [0:0] +:limit-ntp-548 - [0:0] +:limit-ntp-549 - [0:0] +:limit-ntp-55 - [0:0] +:limit-ntp-550 - [0:0] +:limit-ntp-551 - [0:0] +:limit-ntp-552 - [0:0] +:limit-ntp-553 - [0:0] +:limit-ntp-554 - [0:0] +:limit-ntp-555 - [0:0] +:limit-ntp-556 - [0:0] +:limit-ntp-557 - [0:0] +:limit-ntp-558 - [0:0] +:limit-ntp-559 - [0:0] +:limit-ntp-56 - [0:0] +:limit-ntp-560 - [0:0] +:limit-ntp-561 - [0:0] +:limit-ntp-562 - [0:0] +:limit-ntp-563 - [0:0] +:limit-ntp-564 - [0:0] +:limit-ntp-565 - [0:0] +:limit-ntp-566 - [0:0] +:limit-ntp-567 - [0:0] +:limit-ntp-568 - [0:0] +:limit-ntp-569 - [0:0] +:limit-ntp-570 - [0:0] +:limit-ntp-572 - [0:0] +:limit-ntp-573 - [0:0] +:limit-ntp-574 - [0:0] +:limit-ntp-575 - [0:0] +:limit-ntp-576 - [0:0] +:limit-ntp-578 - [0:0] +:limit-ntp-579 - [0:0] +:limit-ntp-58 - [0:0] +:limit-ntp-580 - [0:0] +:limit-ntp-581 - [0:0] +:limit-ntp-582 - [0:0] +:limit-ntp-583 - [0:0] +:limit-ntp-584 - [0:0] +:limit-ntp-585 - [0:0] +:limit-ntp-586 - [0:0] +:limit-ntp-587 - [0:0] +:limit-ntp-588 - [0:0] +:limit-ntp-589 - [0:0] +:limit-ntp-59 - [0:0] +:limit-ntp-590 - [0:0] +:limit-ntp-592 - [0:0] +:limit-ntp-593 - [0:0] +:limit-ntp-594 - [0:0] +:limit-ntp-595 - [0:0] +:limit-ntp-596 - [0:0] +:limit-ntp-598 - [0:0] +:limit-ntp-599 - [0:0] +:limit-ntp-6 - [0:0] +:limit-ntp-60 - [0:0] +:limit-ntp-600 - [0:0] +:limit-ntp-601 - [0:0] +:limit-ntp-602 - [0:0] +:limit-ntp-603 - [0:0] +:limit-ntp-604 - [0:0] +:limit-ntp-605 - [0:0] +:limit-ntp-606 - [0:0] +:limit-ntp-607 - [0:0] +:limit-ntp-608 - [0:0] +:limit-ntp-609 - [0:0] +:limit-ntp-61 - [0:0] +:limit-ntp-610 - [0:0] +:limit-ntp-612 - [0:0] +:limit-ntp-613 - [0:0] +:limit-ntp-614 - [0:0] +:limit-ntp-615 - [0:0] +:limit-ntp-616 - [0:0] +:limit-ntp-618 - [0:0] +:limit-ntp-619 - [0:0] +:limit-ntp-62 - [0:0] +:limit-ntp-620 - [0:0] +:limit-ntp-621 - [0:0] +:limit-ntp-622 - [0:0] +:limit-ntp-623 - [0:0] +:limit-ntp-624 - [0:0] +:limit-ntp-625 - [0:0] +:limit-ntp-626 - [0:0] +:limit-ntp-627 - [0:0] +:limit-ntp-628 - [0:0] +:limit-ntp-629 - [0:0] +:limit-ntp-63 - [0:0] +:limit-ntp-630 - [0:0] +:limit-ntp-632 - [0:0] +:limit-ntp-633 - [0:0] +:limit-ntp-634 - [0:0] +:limit-ntp-635 - [0:0] +:limit-ntp-636 - [0:0] +:limit-ntp-638 - [0:0] +:limit-ntp-639 - [0:0] +:limit-ntp-64 - [0:0] +:limit-ntp-640 - [0:0] +:limit-ntp-641 - [0:0] +:limit-ntp-642 - [0:0] +:limit-ntp-643 - [0:0] +:limit-ntp-644 - [0:0] +:limit-ntp-645 - [0:0] +:limit-ntp-646 - [0:0] +:limit-ntp-647 - [0:0] +:limit-ntp-648 - [0:0] +:limit-ntp-649 - [0:0] +:limit-ntp-65 - [0:0] +:limit-ntp-650 - [0:0] +:limit-ntp-651 - [0:0] +:limit-ntp-652 - [0:0] +:limit-ntp-653 - [0:0] +:limit-ntp-654 - [0:0] +:limit-ntp-655 - [0:0] +:limit-ntp-656 - [0:0] +:limit-ntp-657 - [0:0] +:limit-ntp-658 - [0:0] +:limit-ntp-659 - [0:0] +:limit-ntp-66 - [0:0] +:limit-ntp-660 - [0:0] +:limit-ntp-662 - [0:0] +:limit-ntp-663 - [0:0] +:limit-ntp-664 - [0:0] +:limit-ntp-665 - [0:0] +:limit-ntp-666 - [0:0] +:limit-ntp-668 - [0:0] +:limit-ntp-669 - [0:0] +:limit-ntp-67 - [0:0] +:limit-ntp-670 - [0:0] +:limit-ntp-671 - [0:0] +:limit-ntp-672 - [0:0] +:limit-ntp-673 - [0:0] +:limit-ntp-674 - [0:0] +:limit-ntp-675 - [0:0] +:limit-ntp-676 - [0:0] +:limit-ntp-677 - [0:0] +:limit-ntp-678 - [0:0] +:limit-ntp-679 - [0:0] +:limit-ntp-68 - [0:0] +:limit-ntp-680 - [0:0] +:limit-ntp-682 - [0:0] +:limit-ntp-683 - [0:0] +:limit-ntp-684 - [0:0] +:limit-ntp-685 - [0:0] +:limit-ntp-686 - [0:0] +:limit-ntp-688 - [0:0] +:limit-ntp-689 - [0:0] +:limit-ntp-69 - [0:0] +:limit-ntp-690 - [0:0] +:limit-ntp-691 - [0:0] +:limit-ntp-692 - [0:0] +:limit-ntp-693 - [0:0] +:limit-ntp-694 - [0:0] +:limit-ntp-695 - [0:0] +:limit-ntp-696 - [0:0] +:limit-ntp-697 - [0:0] +:limit-ntp-698 - [0:0] +:limit-ntp-699 - [0:0] +:limit-ntp-7 - [0:0] +:limit-ntp-70 - [0:0] +:limit-ntp-700 - [0:0] +:limit-ntp-702 - [0:0] +:limit-ntp-703 - [0:0] +:limit-ntp-704 - [0:0] +:limit-ntp-705 - [0:0] +:limit-ntp-706 - [0:0] +:limit-ntp-708 - [0:0] +:limit-ntp-709 - [0:0] +:limit-ntp-710 - [0:0] +:limit-ntp-711 - [0:0] +:limit-ntp-712 - [0:0] +:limit-ntp-713 - [0:0] +:limit-ntp-714 - [0:0] +:limit-ntp-715 - [0:0] +:limit-ntp-716 - [0:0] +:limit-ntp-717 - [0:0] +:limit-ntp-718 - [0:0] +:limit-ntp-719 - [0:0] +:limit-ntp-72 - [0:0] +:limit-ntp-720 - [0:0] +:limit-ntp-722 - [0:0] +:limit-ntp-723 - [0:0] +:limit-ntp-724 - [0:0] +:limit-ntp-725 - [0:0] +:limit-ntp-726 - [0:0] +:limit-ntp-728 - [0:0] +:limit-ntp-729 - [0:0] +:limit-ntp-73 - [0:0] +:limit-ntp-730 - [0:0] +:limit-ntp-731 - [0:0] +:limit-ntp-732 - [0:0] +:limit-ntp-733 - [0:0] +:limit-ntp-734 - [0:0] +:limit-ntp-735 - [0:0] +:limit-ntp-736 - [0:0] +:limit-ntp-737 - [0:0] +:limit-ntp-738 - [0:0] +:limit-ntp-739 - [0:0] +:limit-ntp-74 - [0:0] +:limit-ntp-740 - [0:0] +:limit-ntp-741 - [0:0] +:limit-ntp-742 - [0:0] +:limit-ntp-743 - [0:0] +:limit-ntp-744 - [0:0] +:limit-ntp-745 - [0:0] +:limit-ntp-746 - [0:0] +:limit-ntp-747 - [0:0] +:limit-ntp-748 - [0:0] +:limit-ntp-749 - [0:0] +:limit-ntp-75 - [0:0] +:limit-ntp-750 - [0:0] +:limit-ntp-752 - [0:0] +:limit-ntp-753 - [0:0] +:limit-ntp-754 - [0:0] +:limit-ntp-755 - [0:0] +:limit-ntp-756 - [0:0] +:limit-ntp-758 - [0:0] +:limit-ntp-759 - [0:0] +:limit-ntp-76 - [0:0] +:limit-ntp-760 - [0:0] +:limit-ntp-761 - [0:0] +:limit-ntp-762 - [0:0] +:limit-ntp-763 - [0:0] +:limit-ntp-764 - [0:0] +:limit-ntp-765 - [0:0] +:limit-ntp-766 - [0:0] +:limit-ntp-767 - [0:0] +:limit-ntp-768 - [0:0] +:limit-ntp-769 - [0:0] +:limit-ntp-770 - [0:0] +:limit-ntp-772 - [0:0] +:limit-ntp-773 - [0:0] +:limit-ntp-774 - [0:0] +:limit-ntp-775 - [0:0] +:limit-ntp-776 - [0:0] +:limit-ntp-778 - [0:0] +:limit-ntp-779 - [0:0] +:limit-ntp-78 - [0:0] +:limit-ntp-780 - [0:0] +:limit-ntp-781 - [0:0] +:limit-ntp-782 - [0:0] +:limit-ntp-783 - [0:0] +:limit-ntp-784 - [0:0] +:limit-ntp-785 - [0:0] +:limit-ntp-786 - [0:0] +:limit-ntp-787 - [0:0] +:limit-ntp-788 - [0:0] +:limit-ntp-789 - [0:0] +:limit-ntp-79 - [0:0] +:limit-ntp-790 - [0:0] +:limit-ntp-792 - [0:0] +:limit-ntp-793 - [0:0] +:limit-ntp-794 - [0:0] +:limit-ntp-795 - [0:0] +:limit-ntp-796 - [0:0] +:limit-ntp-798 - [0:0] +:limit-ntp-799 - [0:0] +:limit-ntp-8 - [0:0] +:limit-ntp-80 - [0:0] +:limit-ntp-800 - [0:0] +:limit-ntp-801 - [0:0] +:limit-ntp-802 - [0:0] +:limit-ntp-803 - [0:0] +:limit-ntp-804 - [0:0] +:limit-ntp-805 - [0:0] +:limit-ntp-806 - [0:0] +:limit-ntp-807 - [0:0] +:limit-ntp-808 - [0:0] +:limit-ntp-809 - [0:0] +:limit-ntp-81 - [0:0] +:limit-ntp-810 - [0:0] +:limit-ntp-812 - [0:0] +:limit-ntp-813 - [0:0] +:limit-ntp-814 - [0:0] +:limit-ntp-815 - [0:0] +:limit-ntp-816 - [0:0] +:limit-ntp-818 - [0:0] +:limit-ntp-819 - [0:0] +:limit-ntp-82 - [0:0] +:limit-ntp-820 - [0:0] +:limit-ntp-821 - [0:0] +:limit-ntp-822 - [0:0] +:limit-ntp-823 - [0:0] +:limit-ntp-824 - [0:0] +:limit-ntp-825 - [0:0] +:limit-ntp-826 - [0:0] +:limit-ntp-827 - [0:0] +:limit-ntp-828 - [0:0] +:limit-ntp-829 - [0:0] +:limit-ntp-83 - [0:0] +:limit-ntp-830 - [0:0] +:limit-ntp-831 - [0:0] +:limit-ntp-832 - [0:0] +:limit-ntp-833 - [0:0] +:limit-ntp-834 - [0:0] +:limit-ntp-835 - [0:0] +:limit-ntp-836 - [0:0] +:limit-ntp-837 - [0:0] +:limit-ntp-838 - [0:0] +:limit-ntp-839 - [0:0] +:limit-ntp-84 - [0:0] +:limit-ntp-840 - [0:0] +:limit-ntp-842 - [0:0] +:limit-ntp-843 - [0:0] +:limit-ntp-844 - [0:0] +:limit-ntp-845 - [0:0] +:limit-ntp-846 - [0:0] +:limit-ntp-848 - [0:0] +:limit-ntp-849 - [0:0] +:limit-ntp-85 - [0:0] +:limit-ntp-850 - [0:0] +:limit-ntp-851 - [0:0] +:limit-ntp-852 - [0:0] +:limit-ntp-853 - [0:0] +:limit-ntp-854 - [0:0] +:limit-ntp-855 - [0:0] +:limit-ntp-856 - [0:0] +:limit-ntp-857 - [0:0] +:limit-ntp-858 - [0:0] +:limit-ntp-859 - [0:0] +:limit-ntp-86 - [0:0] +:limit-ntp-860 - [0:0] +:limit-ntp-862 - [0:0] +:limit-ntp-863 - [0:0] +:limit-ntp-864 - [0:0] +:limit-ntp-865 - [0:0] +:limit-ntp-866 - [0:0] +:limit-ntp-868 - [0:0] +:limit-ntp-869 - [0:0] +:limit-ntp-87 - [0:0] +:limit-ntp-870 - [0:0] +:limit-ntp-871 - [0:0] +:limit-ntp-872 - [0:0] +:limit-ntp-873 - [0:0] +:limit-ntp-874 - [0:0] +:limit-ntp-875 - [0:0] +:limit-ntp-876 - [0:0] +:limit-ntp-877 - [0:0] +:limit-ntp-878 - [0:0] +:limit-ntp-879 - [0:0] +:limit-ntp-88 - [0:0] +:limit-ntp-880 - [0:0] +:limit-ntp-882 - [0:0] +:limit-ntp-883 - [0:0] +:limit-ntp-884 - [0:0] +:limit-ntp-885 - [0:0] +:limit-ntp-886 - [0:0] +:limit-ntp-888 - [0:0] +:limit-ntp-889 - [0:0] +:limit-ntp-89 - [0:0] +:limit-ntp-890 - [0:0] +:limit-ntp-891 - [0:0] +:limit-ntp-892 - [0:0] +:limit-ntp-893 - [0:0] +:limit-ntp-894 - [0:0] +:limit-ntp-895 - [0:0] +:limit-ntp-896 - [0:0] +:limit-ntp-897 - [0:0] +:limit-ntp-898 - [0:0] +:limit-ntp-899 - [0:0] +:limit-ntp-9 - [0:0] +:limit-ntp-90 - [0:0] +:limit-ntp-900 - [0:0] +:limit-ntp-902 - [0:0] +:limit-ntp-903 - [0:0] +:limit-ntp-904 - [0:0] +:limit-ntp-905 - [0:0] +:limit-ntp-906 - [0:0] +:limit-ntp-908 - [0:0] +:limit-ntp-909 - [0:0] +:limit-ntp-910 - [0:0] +:limit-ntp-911 - [0:0] +:limit-ntp-912 - [0:0] +:limit-ntp-913 - [0:0] +:limit-ntp-914 - [0:0] +:limit-ntp-915 - [0:0] +:limit-ntp-916 - [0:0] +:limit-ntp-917 - [0:0] +:limit-ntp-918 - [0:0] +:limit-ntp-919 - [0:0] +:limit-ntp-92 - [0:0] +:limit-ntp-920 - [0:0] +:limit-ntp-921 - [0:0] +:limit-ntp-922 - [0:0] +:limit-ntp-923 - [0:0] +:limit-ntp-924 - [0:0] +:limit-ntp-925 - [0:0] +:limit-ntp-926 - [0:0] +:limit-ntp-927 - [0:0] +:limit-ntp-928 - [0:0] +:limit-ntp-929 - [0:0] +:limit-ntp-93 - [0:0] +:limit-ntp-930 - [0:0] +:limit-ntp-931 - [0:0] +:limit-ntp-932 - [0:0] +:limit-ntp-933 - [0:0] +:limit-ntp-934 - [0:0] +:limit-ntp-935 - [0:0] +:limit-ntp-936 - [0:0] +:limit-ntp-937 - [0:0] +:limit-ntp-938 - [0:0] +:limit-ntp-939 - [0:0] +:limit-ntp-94 - [0:0] +:limit-ntp-940 - [0:0] +:limit-ntp-941 - [0:0] +:limit-ntp-942 - [0:0] +:limit-ntp-943 - [0:0] +:limit-ntp-944 - [0:0] +:limit-ntp-945 - [0:0] +:limit-ntp-946 - [0:0] +:limit-ntp-947 - [0:0] +:limit-ntp-948 - [0:0] +:limit-ntp-949 - [0:0] +:limit-ntp-95 - [0:0] +:limit-ntp-950 - [0:0] +:limit-ntp-951 - [0:0] +:limit-ntp-952 - [0:0] +:limit-ntp-953 - [0:0] +:limit-ntp-954 - [0:0] +:limit-ntp-955 - [0:0] +:limit-ntp-956 - [0:0] +:limit-ntp-957 - [0:0] +:limit-ntp-958 - [0:0] +:limit-ntp-959 - [0:0] +:limit-ntp-96 - [0:0] +:limit-ntp-960 - [0:0] +:limit-ntp-961 - [0:0] +:limit-ntp-962 - [0:0] +:limit-ntp-963 - [0:0] +:limit-ntp-964 - [0:0] +:limit-ntp-965 - [0:0] +:limit-ntp-966 - [0:0] +:limit-ntp-967 - [0:0] +:limit-ntp-968 - [0:0] +:limit-ntp-969 - [0:0] +:limit-ntp-970 - [0:0] +:limit-ntp-971 - [0:0] +:limit-ntp-972 - [0:0] +:limit-ntp-973 - [0:0] +:limit-ntp-974 - [0:0] +:limit-ntp-975 - [0:0] +:limit-ntp-98 - [0:0] +:limit-ntp-99 - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] :logaccept-10 - [0:0] -:logaccept-100 - [0:0] -:logaccept-101 - [0:0] -:logaccept-102 - [0:0] :logaccept-11 - [0:0] :logaccept-12 - [0:0] :logaccept-13 - [0:0] @@ -63603,38 +63600,8 @@ hash:net family inet :logaccept-68 - [0:0] :logaccept-69 - [0:0] :logaccept-7 - [0:0] -:logaccept-70 - [0:0] -:logaccept-71 - [0:0] -:logaccept-72 - [0:0] -:logaccept-73 - [0:0] -:logaccept-74 - [0:0] -:logaccept-75 - [0:0] -:logaccept-76 - [0:0] -:logaccept-77 - [0:0] -:logaccept-78 - [0:0] -:logaccept-79 - [0:0] :logaccept-8 - [0:0] -:logaccept-80 - [0:0] -:logaccept-81 - [0:0] -:logaccept-82 - [0:0] -:logaccept-83 - [0:0] -:logaccept-84 - [0:0] -:logaccept-85 - [0:0] -:logaccept-86 - [0:0] -:logaccept-87 - [0:0] -:logaccept-88 - [0:0] -:logaccept-89 - [0:0] :logaccept-9 - [0:0] -:logaccept-90 - [0:0] -:logaccept-91 - [0:0] -:logaccept-92 - [0:0] -:logaccept-93 - [0:0] -:logaccept-94 - [0:0] -:logaccept-95 - [0:0] -:logaccept-96 - [0:0] -:logaccept-97 - [0:0] -:logaccept-98 - [0:0] -:logaccept-99 - [0:0] :logaccept-final-0 - [0:0] :logaccept-final-1 - [0:0] :logaccept-final-10 - [0:0] @@ -63941,6 +63908,39 @@ hash:net family inet :logaccept-final-97 - [0:0] :logaccept-final-98 - [0:0] :logaccept-final-99 - [0:0] +:logaccept-ntp-0 - [0:0] +:logaccept-ntp-1 - [0:0] +:logaccept-ntp-10 - [0:0] +:logaccept-ntp-11 - [0:0] +:logaccept-ntp-12 - [0:0] +:logaccept-ntp-13 - [0:0] +:logaccept-ntp-14 - [0:0] +:logaccept-ntp-15 - [0:0] +:logaccept-ntp-16 - [0:0] +:logaccept-ntp-17 - [0:0] +:logaccept-ntp-18 - [0:0] +:logaccept-ntp-19 - [0:0] +:logaccept-ntp-2 - [0:0] +:logaccept-ntp-20 - [0:0] +:logaccept-ntp-21 - [0:0] +:logaccept-ntp-22 - [0:0] +:logaccept-ntp-23 - [0:0] +:logaccept-ntp-24 - [0:0] +:logaccept-ntp-25 - [0:0] +:logaccept-ntp-26 - [0:0] +:logaccept-ntp-27 - [0:0] +:logaccept-ntp-28 - [0:0] +:logaccept-ntp-29 - [0:0] +:logaccept-ntp-3 - [0:0] +:logaccept-ntp-30 - [0:0] +:logaccept-ntp-31 - [0:0] +:logaccept-ntp-32 - [0:0] +:logaccept-ntp-4 - [0:0] +:logaccept-ntp-5 - [0:0] +:logaccept-ntp-6 - [0:0] +:logaccept-ntp-7 - [0:0] +:logaccept-ntp-8 - [0:0] +:logaccept-ntp-9 - [0:0] :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-10 - [0:0] @@ -64671,618 +64671,68 @@ hash:net family inet :logdrop-1652 - [0:0] :logdrop-1653 - [0:0] :logdrop-1654 - [0:0] -:logdrop-1655 - [0:0] -:logdrop-1656 - [0:0] -:logdrop-1657 - [0:0] -:logdrop-1658 - [0:0] -:logdrop-1659 - [0:0] :logdrop-166 - [0:0] -:logdrop-1660 - [0:0] -:logdrop-1661 - [0:0] -:logdrop-1662 - [0:0] -:logdrop-1663 - [0:0] -:logdrop-1664 - [0:0] -:logdrop-1665 - [0:0] -:logdrop-1666 - [0:0] -:logdrop-1667 - [0:0] -:logdrop-1668 - [0:0] -:logdrop-1669 - [0:0] :logdrop-167 - [0:0] -:logdrop-1670 - [0:0] -:logdrop-1671 - [0:0] -:logdrop-1672 - [0:0] -:logdrop-1673 - [0:0] -:logdrop-1674 - [0:0] -:logdrop-1675 - [0:0] -:logdrop-1676 - [0:0] -:logdrop-1677 - [0:0] -:logdrop-1678 - [0:0] -:logdrop-1679 - [0:0] :logdrop-168 - [0:0] -:logdrop-1680 - [0:0] -:logdrop-1681 - [0:0] -:logdrop-1682 - [0:0] -:logdrop-1683 - [0:0] -:logdrop-1684 - [0:0] -:logdrop-1685 - [0:0] -:logdrop-1686 - [0:0] -:logdrop-1687 - [0:0] -:logdrop-1688 - [0:0] -:logdrop-1689 - [0:0] :logdrop-169 - [0:0] -:logdrop-1690 - [0:0] -:logdrop-1691 - [0:0] -:logdrop-1692 - [0:0] -:logdrop-1693 - [0:0] -:logdrop-1694 - [0:0] -:logdrop-1695 - [0:0] -:logdrop-1696 - [0:0] -:logdrop-1697 - [0:0] -:logdrop-1698 - [0:0] -:logdrop-1699 - [0:0] :logdrop-17 - [0:0] :logdrop-170 - [0:0] -:logdrop-1700 - [0:0] -:logdrop-1701 - [0:0] -:logdrop-1702 - [0:0] -:logdrop-1703 - [0:0] -:logdrop-1704 - [0:0] -:logdrop-1705 - [0:0] -:logdrop-1706 - [0:0] -:logdrop-1707 - [0:0] -:logdrop-1708 - [0:0] -:logdrop-1709 - [0:0] :logdrop-171 - [0:0] -:logdrop-1710 - [0:0] -:logdrop-1711 - [0:0] -:logdrop-1712 - [0:0] -:logdrop-1713 - [0:0] -:logdrop-1714 - [0:0] -:logdrop-1715 - [0:0] -:logdrop-1716 - [0:0] -:logdrop-1717 - [0:0] -:logdrop-1718 - [0:0] -:logdrop-1719 - [0:0] :logdrop-172 - [0:0] -:logdrop-1720 - [0:0] -:logdrop-1721 - [0:0] -:logdrop-1722 - [0:0] -:logdrop-1723 - [0:0] -:logdrop-1724 - [0:0] -:logdrop-1725 - [0:0] -:logdrop-1726 - [0:0] -:logdrop-1727 - [0:0] -:logdrop-1728 - [0:0] -:logdrop-1729 - [0:0] :logdrop-173 - [0:0] -:logdrop-1730 - [0:0] -:logdrop-1731 - [0:0] -:logdrop-1732 - [0:0] -:logdrop-1733 - [0:0] -:logdrop-1734 - [0:0] -:logdrop-1735 - [0:0] -:logdrop-1736 - [0:0] -:logdrop-1737 - [0:0] -:logdrop-1738 - [0:0] -:logdrop-1739 - [0:0] :logdrop-174 - [0:0] -:logdrop-1740 - [0:0] -:logdrop-1741 - [0:0] -:logdrop-1742 - [0:0] -:logdrop-1743 - [0:0] -:logdrop-1744 - [0:0] -:logdrop-1745 - [0:0] -:logdrop-1746 - [0:0] -:logdrop-1747 - [0:0] -:logdrop-1748 - [0:0] -:logdrop-1749 - [0:0] :logdrop-175 - [0:0] -:logdrop-1750 - [0:0] -:logdrop-1751 - [0:0] -:logdrop-1752 - [0:0] -:logdrop-1753 - [0:0] -:logdrop-1754 - [0:0] -:logdrop-1755 - [0:0] -:logdrop-1756 - [0:0] -:logdrop-1757 - [0:0] -:logdrop-1758 - [0:0] -:logdrop-1759 - [0:0] :logdrop-176 - [0:0] -:logdrop-1760 - [0:0] -:logdrop-1761 - [0:0] -:logdrop-1762 - [0:0] -:logdrop-1763 - [0:0] -:logdrop-1764 - [0:0] -:logdrop-1765 - [0:0] -:logdrop-1766 - [0:0] -:logdrop-1767 - [0:0] -:logdrop-1768 - [0:0] -:logdrop-1769 - [0:0] :logdrop-177 - [0:0] -:logdrop-1770 - [0:0] -:logdrop-1771 - [0:0] -:logdrop-1772 - [0:0] -:logdrop-1773 - [0:0] -:logdrop-1774 - [0:0] -:logdrop-1775 - [0:0] -:logdrop-1776 - [0:0] -:logdrop-1777 - [0:0] -:logdrop-1778 - [0:0] -:logdrop-1779 - [0:0] :logdrop-178 - [0:0] -:logdrop-1780 - [0:0] -:logdrop-1781 - [0:0] -:logdrop-1782 - [0:0] -:logdrop-1783 - [0:0] -:logdrop-1784 - [0:0] -:logdrop-1785 - [0:0] -:logdrop-1786 - [0:0] -:logdrop-1787 - [0:0] -:logdrop-1788 - [0:0] -:logdrop-1789 - [0:0] :logdrop-179 - [0:0] -:logdrop-1790 - [0:0] -:logdrop-1791 - [0:0] -:logdrop-1792 - [0:0] -:logdrop-1793 - [0:0] -:logdrop-1794 - [0:0] -:logdrop-1795 - [0:0] -:logdrop-1796 - [0:0] -:logdrop-1797 - [0:0] -:logdrop-1798 - [0:0] -:logdrop-1799 - [0:0] :logdrop-18 - [0:0] :logdrop-180 - [0:0] -:logdrop-1800 - [0:0] -:logdrop-1801 - [0:0] -:logdrop-1802 - [0:0] -:logdrop-1803 - [0:0] -:logdrop-1804 - [0:0] -:logdrop-1805 - [0:0] -:logdrop-1806 - [0:0] -:logdrop-1807 - [0:0] -:logdrop-1808 - [0:0] -:logdrop-1809 - [0:0] :logdrop-181 - [0:0] -:logdrop-1810 - [0:0] -:logdrop-1811 - [0:0] -:logdrop-1812 - [0:0] -:logdrop-1813 - [0:0] -:logdrop-1814 - [0:0] -:logdrop-1815 - [0:0] -:logdrop-1816 - [0:0] -:logdrop-1817 - [0:0] -:logdrop-1818 - [0:0] -:logdrop-1819 - [0:0] :logdrop-182 - [0:0] -:logdrop-1820 - [0:0] -:logdrop-1821 - [0:0] -:logdrop-1822 - [0:0] -:logdrop-1823 - [0:0] -:logdrop-1824 - [0:0] -:logdrop-1825 - [0:0] -:logdrop-1826 - [0:0] -:logdrop-1827 - [0:0] -:logdrop-1828 - [0:0] -:logdrop-1829 - [0:0] :logdrop-183 - [0:0] -:logdrop-1830 - [0:0] -:logdrop-1831 - [0:0] -:logdrop-1832 - [0:0] -:logdrop-1833 - [0:0] -:logdrop-1834 - [0:0] -:logdrop-1835 - [0:0] -:logdrop-1836 - [0:0] -:logdrop-1837 - [0:0] -:logdrop-1838 - [0:0] -:logdrop-1839 - [0:0] :logdrop-184 - [0:0] -:logdrop-1840 - [0:0] -:logdrop-1841 - [0:0] -:logdrop-1842 - [0:0] -:logdrop-1843 - [0:0] -:logdrop-1844 - [0:0] -:logdrop-1845 - [0:0] -:logdrop-1846 - [0:0] -:logdrop-1847 - [0:0] -:logdrop-1848 - [0:0] -:logdrop-1849 - [0:0] :logdrop-185 - [0:0] -:logdrop-1850 - [0:0] -:logdrop-1851 - [0:0] -:logdrop-1852 - [0:0] -:logdrop-1853 - [0:0] -:logdrop-1854 - [0:0] -:logdrop-1855 - [0:0] -:logdrop-1856 - [0:0] -:logdrop-1857 - [0:0] -:logdrop-1858 - [0:0] -:logdrop-1859 - [0:0] :logdrop-186 - [0:0] -:logdrop-1860 - [0:0] -:logdrop-1861 - [0:0] -:logdrop-1862 - [0:0] -:logdrop-1863 - [0:0] -:logdrop-1864 - [0:0] -:logdrop-1865 - [0:0] -:logdrop-1866 - [0:0] -:logdrop-1867 - [0:0] -:logdrop-1868 - [0:0] -:logdrop-1869 - [0:0] :logdrop-187 - [0:0] -:logdrop-1870 - [0:0] -:logdrop-1871 - [0:0] -:logdrop-1872 - [0:0] -:logdrop-1873 - [0:0] -:logdrop-1874 - [0:0] -:logdrop-1875 - [0:0] -:logdrop-1876 - [0:0] -:logdrop-1877 - [0:0] -:logdrop-1878 - [0:0] -:logdrop-1879 - [0:0] :logdrop-188 - [0:0] -:logdrop-1880 - [0:0] -:logdrop-1881 - [0:0] -:logdrop-1882 - [0:0] -:logdrop-1883 - [0:0] -:logdrop-1884 - [0:0] -:logdrop-1885 - [0:0] -:logdrop-1886 - [0:0] -:logdrop-1887 - [0:0] -:logdrop-1888 - [0:0] -:logdrop-1889 - [0:0] :logdrop-189 - [0:0] -:logdrop-1890 - [0:0] -:logdrop-1891 - [0:0] -:logdrop-1892 - [0:0] -:logdrop-1893 - [0:0] -:logdrop-1894 - [0:0] -:logdrop-1895 - [0:0] -:logdrop-1896 - [0:0] -:logdrop-1897 - [0:0] -:logdrop-1898 - [0:0] -:logdrop-1899 - [0:0] :logdrop-19 - [0:0] :logdrop-190 - [0:0] -:logdrop-1900 - [0:0] -:logdrop-1901 - [0:0] -:logdrop-1902 - [0:0] -:logdrop-1903 - [0:0] -:logdrop-1904 - [0:0] -:logdrop-1905 - [0:0] -:logdrop-1906 - [0:0] -:logdrop-1907 - [0:0] -:logdrop-1908 - [0:0] -:logdrop-1909 - [0:0] :logdrop-191 - [0:0] -:logdrop-1910 - [0:0] -:logdrop-1911 - [0:0] -:logdrop-1912 - [0:0] -:logdrop-1913 - [0:0] -:logdrop-1914 - [0:0] -:logdrop-1915 - [0:0] -:logdrop-1916 - [0:0] -:logdrop-1917 - [0:0] -:logdrop-1918 - [0:0] -:logdrop-1919 - [0:0] :logdrop-192 - [0:0] -:logdrop-1920 - [0:0] -:logdrop-1921 - [0:0] -:logdrop-1922 - [0:0] -:logdrop-1923 - [0:0] -:logdrop-1924 - [0:0] -:logdrop-1925 - [0:0] -:logdrop-1926 - [0:0] -:logdrop-1927 - [0:0] -:logdrop-1928 - [0:0] -:logdrop-1929 - [0:0] :logdrop-193 - [0:0] -:logdrop-1930 - [0:0] -:logdrop-1931 - [0:0] -:logdrop-1932 - [0:0] -:logdrop-1933 - [0:0] -:logdrop-1934 - [0:0] -:logdrop-1935 - [0:0] -:logdrop-1936 - [0:0] -:logdrop-1937 - [0:0] -:logdrop-1938 - [0:0] -:logdrop-1939 - [0:0] :logdrop-194 - [0:0] -:logdrop-1940 - [0:0] -:logdrop-1941 - [0:0] -:logdrop-1942 - [0:0] -:logdrop-1943 - [0:0] -:logdrop-1944 - [0:0] -:logdrop-1945 - [0:0] -:logdrop-1946 - [0:0] -:logdrop-1947 - [0:0] -:logdrop-1948 - [0:0] -:logdrop-1949 - [0:0] :logdrop-195 - [0:0] -:logdrop-1950 - [0:0] -:logdrop-1951 - [0:0] -:logdrop-1952 - [0:0] -:logdrop-1953 - [0:0] -:logdrop-1954 - [0:0] -:logdrop-1955 - [0:0] -:logdrop-1956 - [0:0] -:logdrop-1957 - [0:0] -:logdrop-1958 - [0:0] -:logdrop-1959 - [0:0] :logdrop-196 - [0:0] -:logdrop-1960 - [0:0] -:logdrop-1961 - [0:0] -:logdrop-1962 - [0:0] -:logdrop-1963 - [0:0] -:logdrop-1964 - [0:0] -:logdrop-1965 - [0:0] -:logdrop-1966 - [0:0] -:logdrop-1967 - [0:0] -:logdrop-1968 - [0:0] -:logdrop-1969 - [0:0] :logdrop-197 - [0:0] -:logdrop-1970 - [0:0] -:logdrop-1971 - [0:0] -:logdrop-1972 - [0:0] -:logdrop-1973 - [0:0] -:logdrop-1974 - [0:0] -:logdrop-1975 - [0:0] -:logdrop-1976 - [0:0] -:logdrop-1977 - [0:0] -:logdrop-1978 - [0:0] -:logdrop-1979 - [0:0] :logdrop-198 - [0:0] -:logdrop-1980 - [0:0] -:logdrop-1981 - [0:0] -:logdrop-1982 - [0:0] -:logdrop-1983 - [0:0] -:logdrop-1984 - [0:0] -:logdrop-1985 - [0:0] -:logdrop-1986 - [0:0] -:logdrop-1987 - [0:0] -:logdrop-1988 - [0:0] -:logdrop-1989 - [0:0] :logdrop-199 - [0:0] -:logdrop-1990 - [0:0] -:logdrop-1991 - [0:0] -:logdrop-1992 - [0:0] -:logdrop-1993 - [0:0] -:logdrop-1994 - [0:0] -:logdrop-1995 - [0:0] -:logdrop-1996 - [0:0] -:logdrop-1997 - [0:0] -:logdrop-1998 - [0:0] -:logdrop-1999 - [0:0] :logdrop-2 - [0:0] :logdrop-20 - [0:0] :logdrop-200 - [0:0] -:logdrop-2000 - [0:0] -:logdrop-2001 - [0:0] -:logdrop-2002 - [0:0] -:logdrop-2003 - [0:0] -:logdrop-2004 - [0:0] -:logdrop-2005 - [0:0] -:logdrop-2006 - [0:0] -:logdrop-2007 - [0:0] -:logdrop-2008 - [0:0] -:logdrop-2009 - [0:0] :logdrop-201 - [0:0] -:logdrop-2010 - [0:0] -:logdrop-2011 - [0:0] -:logdrop-2012 - [0:0] -:logdrop-2013 - [0:0] -:logdrop-2014 - [0:0] -:logdrop-2015 - [0:0] -:logdrop-2016 - [0:0] -:logdrop-2017 - [0:0] -:logdrop-2018 - [0:0] -:logdrop-2019 - [0:0] :logdrop-202 - [0:0] -:logdrop-2020 - [0:0] -:logdrop-2021 - [0:0] -:logdrop-2022 - [0:0] -:logdrop-2023 - [0:0] -:logdrop-2024 - [0:0] -:logdrop-2025 - [0:0] -:logdrop-2026 - [0:0] -:logdrop-2027 - [0:0] -:logdrop-2028 - [0:0] -:logdrop-2029 - [0:0] :logdrop-203 - [0:0] -:logdrop-2030 - [0:0] -:logdrop-2031 - [0:0] -:logdrop-2032 - [0:0] -:logdrop-2033 - [0:0] -:logdrop-2034 - [0:0] -:logdrop-2035 - [0:0] -:logdrop-2036 - [0:0] -:logdrop-2037 - [0:0] -:logdrop-2038 - [0:0] -:logdrop-2039 - [0:0] :logdrop-204 - [0:0] -:logdrop-2040 - [0:0] -:logdrop-2041 - [0:0] -:logdrop-2042 - [0:0] -:logdrop-2043 - [0:0] -:logdrop-2044 - [0:0] -:logdrop-2045 - [0:0] -:logdrop-2046 - [0:0] -:logdrop-2047 - [0:0] -:logdrop-2048 - [0:0] -:logdrop-2049 - [0:0] :logdrop-205 - [0:0] -:logdrop-2050 - [0:0] -:logdrop-2051 - [0:0] -:logdrop-2052 - [0:0] -:logdrop-2053 - [0:0] -:logdrop-2054 - [0:0] -:logdrop-2055 - [0:0] -:logdrop-2056 - [0:0] -:logdrop-2057 - [0:0] -:logdrop-2058 - [0:0] -:logdrop-2059 - [0:0] :logdrop-206 - [0:0] -:logdrop-2060 - [0:0] -:logdrop-2061 - [0:0] -:logdrop-2062 - [0:0] -:logdrop-2063 - [0:0] -:logdrop-2064 - [0:0] -:logdrop-2065 - [0:0] -:logdrop-2066 - [0:0] -:logdrop-2067 - [0:0] -:logdrop-2068 - [0:0] -:logdrop-2069 - [0:0] :logdrop-207 - [0:0] -:logdrop-2070 - [0:0] -:logdrop-2071 - [0:0] -:logdrop-2072 - [0:0] -:logdrop-2073 - [0:0] -:logdrop-2074 - [0:0] -:logdrop-2075 - [0:0] -:logdrop-2076 - [0:0] -:logdrop-2077 - [0:0] -:logdrop-2078 - [0:0] -:logdrop-2079 - [0:0] :logdrop-208 - [0:0] -:logdrop-2080 - [0:0] -:logdrop-2081 - [0:0] -:logdrop-2082 - [0:0] -:logdrop-2083 - [0:0] -:logdrop-2084 - [0:0] -:logdrop-2085 - [0:0] -:logdrop-2086 - [0:0] -:logdrop-2087 - [0:0] -:logdrop-2088 - [0:0] -:logdrop-2089 - [0:0] :logdrop-209 - [0:0] -:logdrop-2090 - [0:0] -:logdrop-2091 - [0:0] -:logdrop-2092 - [0:0] -:logdrop-2093 - [0:0] -:logdrop-2094 - [0:0] -:logdrop-2095 - [0:0] -:logdrop-2096 - [0:0] -:logdrop-2097 - [0:0] -:logdrop-2098 - [0:0] -:logdrop-2099 - [0:0] :logdrop-21 - [0:0] :logdrop-210 - [0:0] -:logdrop-2100 - [0:0] -:logdrop-2101 - [0:0] -:logdrop-2102 - [0:0] -:logdrop-2103 - [0:0] -:logdrop-2104 - [0:0] -:logdrop-2105 - [0:0] -:logdrop-2106 - [0:0] -:logdrop-2107 - [0:0] -:logdrop-2108 - [0:0] -:logdrop-2109 - [0:0] :logdrop-211 - [0:0] -:logdrop-2110 - [0:0] -:logdrop-2111 - [0:0] -:logdrop-2112 - [0:0] -:logdrop-2113 - [0:0] -:logdrop-2114 - [0:0] -:logdrop-2115 - [0:0] -:logdrop-2116 - [0:0] -:logdrop-2117 - [0:0] -:logdrop-2118 - [0:0] -:logdrop-2119 - [0:0] :logdrop-212 - [0:0] -:logdrop-2120 - [0:0] -:logdrop-2121 - [0:0] -:logdrop-2122 - [0:0] -:logdrop-2123 - [0:0] -:logdrop-2124 - [0:0] -:logdrop-2125 - [0:0] -:logdrop-2126 - [0:0] -:logdrop-2127 - [0:0] -:logdrop-2128 - [0:0] -:logdrop-2129 - [0:0] :logdrop-213 - [0:0] -:logdrop-2130 - [0:0] -:logdrop-2131 - [0:0] -:logdrop-2132 - [0:0] -:logdrop-2133 - [0:0] -:logdrop-2134 - [0:0] -:logdrop-2135 - [0:0] -:logdrop-2136 - [0:0] -:logdrop-2137 - [0:0] -:logdrop-2138 - [0:0] -:logdrop-2139 - [0:0] :logdrop-214 - [0:0] -:logdrop-2140 - [0:0] -:logdrop-2141 - [0:0] -:logdrop-2142 - [0:0] -:logdrop-2143 - [0:0] -:logdrop-2144 - [0:0] -:logdrop-2145 - [0:0] -:logdrop-2146 - [0:0] -:logdrop-2147 - [0:0] -:logdrop-2148 - [0:0] -:logdrop-2149 - [0:0] :logdrop-215 - [0:0] -:logdrop-2150 - [0:0] -:logdrop-2151 - [0:0] -:logdrop-2152 - [0:0] -:logdrop-2153 - [0:0] -:logdrop-2154 - [0:0] -:logdrop-2155 - [0:0] -:logdrop-2156 - [0:0] -:logdrop-2157 - [0:0] -:logdrop-2158 - [0:0] -:logdrop-2159 - [0:0] :logdrop-216 - [0:0] -:logdrop-2160 - [0:0] -:logdrop-2161 - [0:0] -:logdrop-2162 - [0:0] -:logdrop-2163 - [0:0] -:logdrop-2164 - [0:0] -:logdrop-2165 - [0:0] -:logdrop-2166 - [0:0] -:logdrop-2167 - [0:0] -:logdrop-2168 - [0:0] -:logdrop-2169 - [0:0] :logdrop-217 - [0:0] -:logdrop-2170 - [0:0] -:logdrop-2171 - [0:0] -:logdrop-2172 - [0:0] -:logdrop-2173 - [0:0] -:logdrop-2174 - [0:0] -:logdrop-2175 - [0:0] -:logdrop-2176 - [0:0] -:logdrop-2177 - [0:0] -:logdrop-2178 - [0:0] -:logdrop-2179 - [0:0] :logdrop-218 - [0:0] -:logdrop-2180 - [0:0] -:logdrop-2181 - [0:0] -:logdrop-2182 - [0:0] -:logdrop-2183 - [0:0] -:logdrop-2184 - [0:0] -:logdrop-2185 - [0:0] -:logdrop-2186 - [0:0] -:logdrop-2187 - [0:0] -:logdrop-2188 - [0:0] -:logdrop-2189 - [0:0] :logdrop-219 - [0:0] -:logdrop-2190 - [0:0] -:logdrop-2191 - [0:0] -:logdrop-2192 - [0:0] -:logdrop-2193 - [0:0] -:logdrop-2194 - [0:0] -:logdrop-2195 - [0:0] -:logdrop-2196 - [0:0] -:logdrop-2197 - [0:0] -:logdrop-2198 - [0:0] -:logdrop-2199 - [0:0] :logdrop-22 - [0:0] :logdrop-220 - [0:0] -:logdrop-2200 - [0:0] -:logdrop-2201 - [0:0] -:logdrop-2202 - [0:0] -:logdrop-2203 - [0:0] -:logdrop-2204 - [0:0] :logdrop-221 - [0:0] :logdrop-222 - [0:0] :logdrop-223 - [0:0] @@ -66146,6 +65596,556 @@ hash:net family inet :logdrop-997 - [0:0] :logdrop-998 - [0:0] :logdrop-999 - [0:0] +:logdrop-ntp-0 - [0:0] +:logdrop-ntp-1 - [0:0] +:logdrop-ntp-10 - [0:0] +:logdrop-ntp-100 - [0:0] +:logdrop-ntp-101 - [0:0] +:logdrop-ntp-102 - [0:0] +:logdrop-ntp-103 - [0:0] +:logdrop-ntp-104 - [0:0] +:logdrop-ntp-105 - [0:0] +:logdrop-ntp-106 - [0:0] +:logdrop-ntp-107 - [0:0] +:logdrop-ntp-108 - [0:0] +:logdrop-ntp-109 - [0:0] +:logdrop-ntp-11 - [0:0] +:logdrop-ntp-110 - [0:0] +:logdrop-ntp-111 - [0:0] +:logdrop-ntp-112 - [0:0] +:logdrop-ntp-113 - [0:0] +:logdrop-ntp-114 - [0:0] +:logdrop-ntp-115 - [0:0] +:logdrop-ntp-116 - [0:0] +:logdrop-ntp-117 - [0:0] +:logdrop-ntp-118 - [0:0] +:logdrop-ntp-119 - [0:0] +:logdrop-ntp-12 - [0:0] +:logdrop-ntp-120 - [0:0] +:logdrop-ntp-121 - [0:0] +:logdrop-ntp-122 - [0:0] +:logdrop-ntp-123 - [0:0] +:logdrop-ntp-124 - [0:0] +:logdrop-ntp-125 - [0:0] +:logdrop-ntp-126 - [0:0] +:logdrop-ntp-127 - [0:0] +:logdrop-ntp-128 - [0:0] +:logdrop-ntp-129 - [0:0] +:logdrop-ntp-13 - [0:0] +:logdrop-ntp-130 - [0:0] +:logdrop-ntp-131 - [0:0] +:logdrop-ntp-132 - [0:0] +:logdrop-ntp-133 - [0:0] +:logdrop-ntp-134 - [0:0] +:logdrop-ntp-135 - [0:0] +:logdrop-ntp-136 - [0:0] +:logdrop-ntp-137 - [0:0] +:logdrop-ntp-138 - [0:0] +:logdrop-ntp-139 - [0:0] +:logdrop-ntp-14 - [0:0] +:logdrop-ntp-140 - [0:0] +:logdrop-ntp-141 - [0:0] +:logdrop-ntp-142 - [0:0] +:logdrop-ntp-143 - [0:0] +:logdrop-ntp-144 - [0:0] +:logdrop-ntp-145 - [0:0] +:logdrop-ntp-146 - [0:0] +:logdrop-ntp-147 - [0:0] +:logdrop-ntp-148 - [0:0] +:logdrop-ntp-149 - [0:0] +:logdrop-ntp-15 - [0:0] +:logdrop-ntp-150 - [0:0] +:logdrop-ntp-151 - [0:0] +:logdrop-ntp-152 - [0:0] +:logdrop-ntp-153 - [0:0] +:logdrop-ntp-154 - [0:0] +:logdrop-ntp-155 - [0:0] +:logdrop-ntp-156 - [0:0] +:logdrop-ntp-157 - [0:0] +:logdrop-ntp-158 - [0:0] +:logdrop-ntp-159 - [0:0] +:logdrop-ntp-16 - [0:0] +:logdrop-ntp-160 - [0:0] +:logdrop-ntp-161 - [0:0] +:logdrop-ntp-162 - [0:0] +:logdrop-ntp-163 - [0:0] +:logdrop-ntp-164 - [0:0] +:logdrop-ntp-165 - [0:0] +:logdrop-ntp-166 - [0:0] +:logdrop-ntp-167 - [0:0] +:logdrop-ntp-168 - [0:0] +:logdrop-ntp-169 - [0:0] +:logdrop-ntp-17 - [0:0] +:logdrop-ntp-170 - [0:0] +:logdrop-ntp-171 - [0:0] +:logdrop-ntp-172 - [0:0] +:logdrop-ntp-173 - [0:0] +:logdrop-ntp-174 - [0:0] +:logdrop-ntp-175 - [0:0] +:logdrop-ntp-176 - [0:0] +:logdrop-ntp-177 - [0:0] +:logdrop-ntp-178 - [0:0] +:logdrop-ntp-179 - [0:0] +:logdrop-ntp-18 - [0:0] +:logdrop-ntp-180 - [0:0] +:logdrop-ntp-181 - [0:0] +:logdrop-ntp-182 - [0:0] +:logdrop-ntp-183 - [0:0] +:logdrop-ntp-184 - [0:0] +:logdrop-ntp-185 - [0:0] +:logdrop-ntp-186 - [0:0] +:logdrop-ntp-187 - [0:0] +:logdrop-ntp-188 - [0:0] +:logdrop-ntp-189 - [0:0] +:logdrop-ntp-19 - [0:0] +:logdrop-ntp-190 - [0:0] +:logdrop-ntp-191 - [0:0] +:logdrop-ntp-192 - [0:0] +:logdrop-ntp-193 - [0:0] +:logdrop-ntp-194 - [0:0] +:logdrop-ntp-195 - [0:0] +:logdrop-ntp-196 - [0:0] +:logdrop-ntp-197 - [0:0] +:logdrop-ntp-198 - [0:0] +:logdrop-ntp-199 - [0:0] +:logdrop-ntp-2 - [0:0] +:logdrop-ntp-20 - [0:0] +:logdrop-ntp-200 - [0:0] +:logdrop-ntp-201 - [0:0] +:logdrop-ntp-202 - [0:0] +:logdrop-ntp-203 - [0:0] +:logdrop-ntp-204 - [0:0] +:logdrop-ntp-205 - [0:0] +:logdrop-ntp-206 - [0:0] +:logdrop-ntp-207 - [0:0] +:logdrop-ntp-208 - [0:0] +:logdrop-ntp-209 - [0:0] +:logdrop-ntp-21 - [0:0] +:logdrop-ntp-210 - [0:0] +:logdrop-ntp-211 - [0:0] +:logdrop-ntp-212 - [0:0] +:logdrop-ntp-213 - [0:0] +:logdrop-ntp-214 - [0:0] +:logdrop-ntp-215 - [0:0] +:logdrop-ntp-216 - [0:0] +:logdrop-ntp-217 - [0:0] +:logdrop-ntp-218 - [0:0] +:logdrop-ntp-219 - [0:0] +:logdrop-ntp-22 - [0:0] +:logdrop-ntp-220 - [0:0] +:logdrop-ntp-221 - [0:0] +:logdrop-ntp-222 - [0:0] +:logdrop-ntp-223 - [0:0] +:logdrop-ntp-224 - [0:0] +:logdrop-ntp-225 - [0:0] +:logdrop-ntp-226 - [0:0] +:logdrop-ntp-227 - [0:0] +:logdrop-ntp-228 - [0:0] +:logdrop-ntp-229 - [0:0] +:logdrop-ntp-23 - [0:0] +:logdrop-ntp-230 - [0:0] +:logdrop-ntp-231 - [0:0] +:logdrop-ntp-232 - [0:0] +:logdrop-ntp-233 - [0:0] +:logdrop-ntp-234 - [0:0] +:logdrop-ntp-235 - [0:0] +:logdrop-ntp-236 - [0:0] +:logdrop-ntp-237 - [0:0] +:logdrop-ntp-238 - [0:0] +:logdrop-ntp-239 - [0:0] +:logdrop-ntp-24 - [0:0] +:logdrop-ntp-240 - [0:0] +:logdrop-ntp-241 - [0:0] +:logdrop-ntp-242 - [0:0] +:logdrop-ntp-243 - [0:0] +:logdrop-ntp-244 - [0:0] +:logdrop-ntp-245 - [0:0] +:logdrop-ntp-246 - [0:0] +:logdrop-ntp-247 - [0:0] +:logdrop-ntp-248 - [0:0] +:logdrop-ntp-249 - [0:0] +:logdrop-ntp-25 - [0:0] +:logdrop-ntp-250 - [0:0] +:logdrop-ntp-251 - [0:0] +:logdrop-ntp-252 - [0:0] +:logdrop-ntp-253 - [0:0] +:logdrop-ntp-254 - [0:0] +:logdrop-ntp-255 - [0:0] +:logdrop-ntp-256 - [0:0] +:logdrop-ntp-257 - [0:0] +:logdrop-ntp-258 - [0:0] +:logdrop-ntp-259 - [0:0] +:logdrop-ntp-26 - [0:0] +:logdrop-ntp-260 - [0:0] +:logdrop-ntp-261 - [0:0] +:logdrop-ntp-262 - [0:0] +:logdrop-ntp-263 - [0:0] +:logdrop-ntp-264 - [0:0] +:logdrop-ntp-265 - [0:0] +:logdrop-ntp-266 - [0:0] +:logdrop-ntp-267 - [0:0] +:logdrop-ntp-268 - [0:0] +:logdrop-ntp-269 - [0:0] +:logdrop-ntp-27 - [0:0] +:logdrop-ntp-270 - [0:0] +:logdrop-ntp-271 - [0:0] +:logdrop-ntp-272 - [0:0] +:logdrop-ntp-273 - [0:0] +:logdrop-ntp-274 - [0:0] +:logdrop-ntp-275 - [0:0] +:logdrop-ntp-276 - [0:0] +:logdrop-ntp-277 - [0:0] +:logdrop-ntp-278 - [0:0] +:logdrop-ntp-279 - [0:0] +:logdrop-ntp-28 - [0:0] +:logdrop-ntp-280 - [0:0] +:logdrop-ntp-281 - [0:0] +:logdrop-ntp-282 - [0:0] +:logdrop-ntp-283 - [0:0] +:logdrop-ntp-284 - [0:0] +:logdrop-ntp-285 - [0:0] +:logdrop-ntp-286 - [0:0] +:logdrop-ntp-287 - [0:0] +:logdrop-ntp-288 - [0:0] +:logdrop-ntp-289 - [0:0] +:logdrop-ntp-29 - [0:0] +:logdrop-ntp-290 - [0:0] +:logdrop-ntp-291 - [0:0] +:logdrop-ntp-292 - [0:0] +:logdrop-ntp-293 - [0:0] +:logdrop-ntp-294 - [0:0] +:logdrop-ntp-295 - [0:0] +:logdrop-ntp-296 - [0:0] +:logdrop-ntp-297 - [0:0] +:logdrop-ntp-298 - [0:0] +:logdrop-ntp-299 - [0:0] +:logdrop-ntp-3 - [0:0] +:logdrop-ntp-30 - [0:0] +:logdrop-ntp-300 - [0:0] +:logdrop-ntp-301 - [0:0] +:logdrop-ntp-302 - [0:0] +:logdrop-ntp-303 - [0:0] +:logdrop-ntp-304 - [0:0] +:logdrop-ntp-305 - [0:0] +:logdrop-ntp-306 - [0:0] +:logdrop-ntp-307 - [0:0] +:logdrop-ntp-308 - [0:0] +:logdrop-ntp-309 - [0:0] +:logdrop-ntp-31 - [0:0] +:logdrop-ntp-310 - [0:0] +:logdrop-ntp-311 - [0:0] +:logdrop-ntp-312 - [0:0] +:logdrop-ntp-313 - [0:0] +:logdrop-ntp-314 - [0:0] +:logdrop-ntp-315 - [0:0] +:logdrop-ntp-316 - [0:0] +:logdrop-ntp-317 - [0:0] +:logdrop-ntp-318 - [0:0] +:logdrop-ntp-319 - [0:0] +:logdrop-ntp-32 - [0:0] +:logdrop-ntp-320 - [0:0] +:logdrop-ntp-321 - [0:0] +:logdrop-ntp-322 - [0:0] +:logdrop-ntp-323 - [0:0] +:logdrop-ntp-324 - [0:0] +:logdrop-ntp-325 - [0:0] +:logdrop-ntp-326 - [0:0] +:logdrop-ntp-327 - [0:0] +:logdrop-ntp-328 - [0:0] +:logdrop-ntp-329 - [0:0] +:logdrop-ntp-33 - [0:0] +:logdrop-ntp-330 - [0:0] +:logdrop-ntp-331 - [0:0] +:logdrop-ntp-332 - [0:0] +:logdrop-ntp-333 - [0:0] +:logdrop-ntp-334 - [0:0] +:logdrop-ntp-335 - [0:0] +:logdrop-ntp-336 - [0:0] +:logdrop-ntp-337 - [0:0] +:logdrop-ntp-338 - [0:0] +:logdrop-ntp-339 - [0:0] +:logdrop-ntp-34 - [0:0] +:logdrop-ntp-340 - [0:0] +:logdrop-ntp-341 - [0:0] +:logdrop-ntp-342 - [0:0] +:logdrop-ntp-343 - [0:0] +:logdrop-ntp-344 - [0:0] +:logdrop-ntp-345 - [0:0] +:logdrop-ntp-346 - [0:0] +:logdrop-ntp-347 - [0:0] +:logdrop-ntp-348 - [0:0] +:logdrop-ntp-349 - [0:0] +:logdrop-ntp-35 - [0:0] +:logdrop-ntp-350 - [0:0] +:logdrop-ntp-351 - [0:0] +:logdrop-ntp-352 - [0:0] +:logdrop-ntp-353 - [0:0] +:logdrop-ntp-354 - [0:0] +:logdrop-ntp-355 - [0:0] +:logdrop-ntp-356 - [0:0] +:logdrop-ntp-357 - [0:0] +:logdrop-ntp-358 - [0:0] +:logdrop-ntp-359 - [0:0] +:logdrop-ntp-36 - [0:0] +:logdrop-ntp-360 - [0:0] +:logdrop-ntp-361 - [0:0] +:logdrop-ntp-362 - [0:0] +:logdrop-ntp-363 - [0:0] +:logdrop-ntp-364 - [0:0] +:logdrop-ntp-365 - [0:0] +:logdrop-ntp-366 - [0:0] +:logdrop-ntp-367 - [0:0] +:logdrop-ntp-368 - [0:0] +:logdrop-ntp-369 - [0:0] +:logdrop-ntp-37 - [0:0] +:logdrop-ntp-370 - [0:0] +:logdrop-ntp-371 - [0:0] +:logdrop-ntp-372 - [0:0] +:logdrop-ntp-373 - [0:0] +:logdrop-ntp-374 - [0:0] +:logdrop-ntp-375 - [0:0] +:logdrop-ntp-376 - [0:0] +:logdrop-ntp-377 - [0:0] +:logdrop-ntp-378 - [0:0] +:logdrop-ntp-379 - [0:0] +:logdrop-ntp-38 - [0:0] +:logdrop-ntp-380 - [0:0] +:logdrop-ntp-381 - [0:0] +:logdrop-ntp-382 - [0:0] +:logdrop-ntp-383 - [0:0] +:logdrop-ntp-384 - [0:0] +:logdrop-ntp-385 - [0:0] +:logdrop-ntp-386 - [0:0] +:logdrop-ntp-387 - [0:0] +:logdrop-ntp-388 - [0:0] +:logdrop-ntp-389 - [0:0] +:logdrop-ntp-39 - [0:0] +:logdrop-ntp-390 - [0:0] +:logdrop-ntp-391 - [0:0] +:logdrop-ntp-392 - [0:0] +:logdrop-ntp-393 - [0:0] +:logdrop-ntp-394 - [0:0] +:logdrop-ntp-395 - [0:0] +:logdrop-ntp-396 - [0:0] +:logdrop-ntp-397 - [0:0] +:logdrop-ntp-398 - [0:0] +:logdrop-ntp-399 - [0:0] +:logdrop-ntp-4 - [0:0] +:logdrop-ntp-40 - [0:0] +:logdrop-ntp-400 - [0:0] +:logdrop-ntp-401 - [0:0] +:logdrop-ntp-402 - [0:0] +:logdrop-ntp-403 - [0:0] +:logdrop-ntp-404 - [0:0] +:logdrop-ntp-405 - [0:0] +:logdrop-ntp-406 - [0:0] +:logdrop-ntp-407 - [0:0] +:logdrop-ntp-408 - [0:0] +:logdrop-ntp-409 - [0:0] +:logdrop-ntp-41 - [0:0] +:logdrop-ntp-410 - [0:0] +:logdrop-ntp-411 - [0:0] +:logdrop-ntp-412 - [0:0] +:logdrop-ntp-413 - [0:0] +:logdrop-ntp-414 - [0:0] +:logdrop-ntp-415 - [0:0] +:logdrop-ntp-416 - [0:0] +:logdrop-ntp-417 - [0:0] +:logdrop-ntp-418 - [0:0] +:logdrop-ntp-419 - [0:0] +:logdrop-ntp-42 - [0:0] +:logdrop-ntp-420 - [0:0] +:logdrop-ntp-421 - [0:0] +:logdrop-ntp-422 - [0:0] +:logdrop-ntp-423 - [0:0] +:logdrop-ntp-424 - [0:0] +:logdrop-ntp-425 - [0:0] +:logdrop-ntp-426 - [0:0] +:logdrop-ntp-427 - [0:0] +:logdrop-ntp-428 - [0:0] +:logdrop-ntp-429 - [0:0] +:logdrop-ntp-43 - [0:0] +:logdrop-ntp-430 - [0:0] +:logdrop-ntp-431 - [0:0] +:logdrop-ntp-432 - [0:0] +:logdrop-ntp-433 - [0:0] +:logdrop-ntp-434 - [0:0] +:logdrop-ntp-435 - [0:0] +:logdrop-ntp-436 - [0:0] +:logdrop-ntp-437 - [0:0] +:logdrop-ntp-438 - [0:0] +:logdrop-ntp-439 - [0:0] +:logdrop-ntp-44 - [0:0] +:logdrop-ntp-440 - [0:0] +:logdrop-ntp-441 - [0:0] +:logdrop-ntp-442 - [0:0] +:logdrop-ntp-443 - [0:0] +:logdrop-ntp-444 - [0:0] +:logdrop-ntp-445 - [0:0] +:logdrop-ntp-446 - [0:0] +:logdrop-ntp-447 - [0:0] +:logdrop-ntp-448 - [0:0] +:logdrop-ntp-449 - [0:0] +:logdrop-ntp-45 - [0:0] +:logdrop-ntp-450 - [0:0] +:logdrop-ntp-451 - [0:0] +:logdrop-ntp-452 - [0:0] +:logdrop-ntp-453 - [0:0] +:logdrop-ntp-454 - [0:0] +:logdrop-ntp-455 - [0:0] +:logdrop-ntp-456 - [0:0] +:logdrop-ntp-457 - [0:0] +:logdrop-ntp-458 - [0:0] +:logdrop-ntp-459 - [0:0] +:logdrop-ntp-46 - [0:0] +:logdrop-ntp-460 - [0:0] +:logdrop-ntp-461 - [0:0] +:logdrop-ntp-462 - [0:0] +:logdrop-ntp-463 - [0:0] +:logdrop-ntp-464 - [0:0] +:logdrop-ntp-465 - [0:0] +:logdrop-ntp-466 - [0:0] +:logdrop-ntp-467 - [0:0] +:logdrop-ntp-468 - [0:0] +:logdrop-ntp-469 - [0:0] +:logdrop-ntp-47 - [0:0] +:logdrop-ntp-470 - [0:0] +:logdrop-ntp-471 - [0:0] +:logdrop-ntp-472 - [0:0] +:logdrop-ntp-473 - [0:0] +:logdrop-ntp-474 - [0:0] +:logdrop-ntp-475 - [0:0] +:logdrop-ntp-476 - [0:0] +:logdrop-ntp-477 - [0:0] +:logdrop-ntp-478 - [0:0] +:logdrop-ntp-479 - [0:0] +:logdrop-ntp-48 - [0:0] +:logdrop-ntp-480 - [0:0] +:logdrop-ntp-481 - [0:0] +:logdrop-ntp-482 - [0:0] +:logdrop-ntp-483 - [0:0] +:logdrop-ntp-484 - [0:0] +:logdrop-ntp-485 - [0:0] +:logdrop-ntp-486 - [0:0] +:logdrop-ntp-487 - [0:0] +:logdrop-ntp-488 - [0:0] +:logdrop-ntp-489 - [0:0] +:logdrop-ntp-49 - [0:0] +:logdrop-ntp-490 - [0:0] +:logdrop-ntp-491 - [0:0] +:logdrop-ntp-492 - [0:0] +:logdrop-ntp-493 - [0:0] +:logdrop-ntp-494 - [0:0] +:logdrop-ntp-495 - [0:0] +:logdrop-ntp-496 - [0:0] +:logdrop-ntp-497 - [0:0] +:logdrop-ntp-498 - [0:0] +:logdrop-ntp-499 - [0:0] +:logdrop-ntp-5 - [0:0] +:logdrop-ntp-50 - [0:0] +:logdrop-ntp-500 - [0:0] +:logdrop-ntp-501 - [0:0] +:logdrop-ntp-502 - [0:0] +:logdrop-ntp-503 - [0:0] +:logdrop-ntp-504 - [0:0] +:logdrop-ntp-505 - [0:0] +:logdrop-ntp-506 - [0:0] +:logdrop-ntp-507 - [0:0] +:logdrop-ntp-508 - [0:0] +:logdrop-ntp-509 - [0:0] +:logdrop-ntp-51 - [0:0] +:logdrop-ntp-510 - [0:0] +:logdrop-ntp-511 - [0:0] +:logdrop-ntp-512 - [0:0] +:logdrop-ntp-513 - [0:0] +:logdrop-ntp-514 - [0:0] +:logdrop-ntp-515 - [0:0] +:logdrop-ntp-516 - [0:0] +:logdrop-ntp-517 - [0:0] +:logdrop-ntp-518 - [0:0] +:logdrop-ntp-519 - [0:0] +:logdrop-ntp-52 - [0:0] +:logdrop-ntp-520 - [0:0] +:logdrop-ntp-521 - [0:0] +:logdrop-ntp-522 - [0:0] +:logdrop-ntp-523 - [0:0] +:logdrop-ntp-524 - [0:0] +:logdrop-ntp-525 - [0:0] +:logdrop-ntp-526 - [0:0] +:logdrop-ntp-527 - [0:0] +:logdrop-ntp-528 - [0:0] +:logdrop-ntp-529 - [0:0] +:logdrop-ntp-53 - [0:0] +:logdrop-ntp-530 - [0:0] +:logdrop-ntp-531 - [0:0] +:logdrop-ntp-532 - [0:0] +:logdrop-ntp-533 - [0:0] +:logdrop-ntp-534 - [0:0] +:logdrop-ntp-535 - [0:0] +:logdrop-ntp-536 - [0:0] +:logdrop-ntp-537 - [0:0] +:logdrop-ntp-538 - [0:0] +:logdrop-ntp-539 - [0:0] +:logdrop-ntp-54 - [0:0] +:logdrop-ntp-540 - [0:0] +:logdrop-ntp-541 - [0:0] +:logdrop-ntp-542 - [0:0] +:logdrop-ntp-543 - [0:0] +:logdrop-ntp-544 - [0:0] +:logdrop-ntp-545 - [0:0] +:logdrop-ntp-546 - [0:0] +:logdrop-ntp-547 - [0:0] +:logdrop-ntp-548 - [0:0] +:logdrop-ntp-549 - [0:0] +:logdrop-ntp-55 - [0:0] +:logdrop-ntp-56 - [0:0] +:logdrop-ntp-57 - [0:0] +:logdrop-ntp-58 - [0:0] +:logdrop-ntp-59 - [0:0] +:logdrop-ntp-6 - [0:0] +:logdrop-ntp-60 - [0:0] +:logdrop-ntp-61 - [0:0] +:logdrop-ntp-62 - [0:0] +:logdrop-ntp-63 - [0:0] +:logdrop-ntp-64 - [0:0] +:logdrop-ntp-65 - [0:0] +:logdrop-ntp-66 - [0:0] +:logdrop-ntp-67 - [0:0] +:logdrop-ntp-68 - [0:0] +:logdrop-ntp-69 - [0:0] +:logdrop-ntp-7 - [0:0] +:logdrop-ntp-70 - [0:0] +:logdrop-ntp-71 - [0:0] +:logdrop-ntp-72 - [0:0] +:logdrop-ntp-73 - [0:0] +:logdrop-ntp-74 - [0:0] +:logdrop-ntp-75 - [0:0] +:logdrop-ntp-76 - [0:0] +:logdrop-ntp-77 - [0:0] +:logdrop-ntp-78 - [0:0] +:logdrop-ntp-79 - [0:0] +:logdrop-ntp-8 - [0:0] +:logdrop-ntp-80 - [0:0] +:logdrop-ntp-81 - [0:0] +:logdrop-ntp-82 - [0:0] +:logdrop-ntp-83 - [0:0] +:logdrop-ntp-84 - [0:0] +:logdrop-ntp-85 - [0:0] +:logdrop-ntp-86 - [0:0] +:logdrop-ntp-87 - [0:0] +:logdrop-ntp-88 - [0:0] +:logdrop-ntp-89 - [0:0] +:logdrop-ntp-9 - [0:0] +:logdrop-ntp-90 - [0:0] +:logdrop-ntp-91 - [0:0] +:logdrop-ntp-92 - [0:0] +:logdrop-ntp-93 - [0:0] +:logdrop-ntp-94 - [0:0] +:logdrop-ntp-95 - [0:0] +:logdrop-ntp-96 - [0:0] +:logdrop-ntp-97 - [0:0] +:logdrop-ntp-98 - [0:0] +:logdrop-ntp-99 - [0:0] :logpass-0 - [0:0] :logpass-1 - [0:0] :logpass-2 - [0:0] @@ -68622,25 +68622,25 @@ hash:net family inet -A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set -A FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set -A FORWARD -j ACCEPT --A FORWARD -j logdrop-2200 +-A FORWARD -j logdrop-1650 -A FORWARD -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-99 --A FORWARD -j logdrop-2201 +-A FORWARD -j logaccept-66 +-A FORWARD -j logdrop-1651 -A FORWARD -j logpass-0 --A FORWARD -j logaccept-100 --A FORWARD -j logdrop-2202 +-A FORWARD -j logaccept-67 +-A FORWARD -j logdrop-1652 -A FORWARD -j logpass-1 --A FORWARD -j logaccept-101 --A FORWARD -j logdrop-2203 +-A FORWARD -j logaccept-68 +-A FORWARD -j logdrop-1653 -A FORWARD -j logpass-2 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-102 --A FORWARD -j logdrop-2204 +-A FORWARD -j logaccept-69 +-A FORWARD -j logdrop-1654 -A FORWARD -j logpass-3 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT @@ -70186,982 +70186,982 @@ hash:net family inet -A INPUT -j logaccept-final-304 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-305 --A INPUT -i eth0 -j limit-2928 --A INPUT -i eth0 -j limit-2929 --A INPUT -i eth0 -j limit-2930 --A INPUT -i eth0 -j limit-2931 --A INPUT -i eth0 -j limit-2932 --A INPUT -i eth0 -j limit-2933 --A INPUT -i eth0 -j limit-2934 --A INPUT -i eth0 -j limit-2935 --A INPUT -i eth0 -j limit-2936 --A INPUT -i eth0 -j limit-2937 --A INPUT -i eth0 -j limit-2938 --A INPUT -i eth0 -j limit-2939 --A INPUT -i eth0 -j limit-2940 --A INPUT -i eth0 -j limit-2941 --A INPUT -i eth0 -j limit-2942 --A INPUT -i eth0 -j limit-2943 --A INPUT -i eth0 -j limit-2944 --A INPUT -i eth0 -j limit-2945 --A INPUT -i eth0 -j limit-2946 --A INPUT -i eth0 -j limit-2947 --A INPUT -i eth0 -j limit-2948 --A INPUT -i eth0 -j limit-2949 --A INPUT -i eth0 -j limit-2950 --A INPUT -i eth0 -j limit-2951 --A INPUT -i eth0 -j limit-2952 --A INPUT -i eth0 -j limit-2953 --A INPUT -i eth0 -j limit-2954 --A INPUT -i eth0 -j limit-2955 --A INPUT -i eth0 -j limit-2956 --A INPUT -i eth0 -j limit-2957 --A INPUT -i eth0 -j limit-2958 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2960 --A INPUT -i eth0 -j limit-2961 --A INPUT -i eth0 -j limit-2962 --A INPUT -i eth0 -j limit-2963 --A INPUT -i eth0 -j limit-2964 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2966 --A INPUT -i eth0 -j limit-2967 --A INPUT -i eth0 -j limit-2968 --A INPUT -i eth0 -j limit-2969 --A INPUT -i eth0 -j limit-2970 --A INPUT -i eth0 -j limit-2971 --A INPUT -i eth0 -j limit-2972 --A INPUT -i eth0 -j limit-2973 --A INPUT -i eth0 -j limit-2974 --A INPUT -i eth0 -j limit-2975 --A INPUT -i eth0 -j limit-2976 --A INPUT -i eth0 -j limit-2977 --A INPUT -i eth0 -j limit-2978 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2980 --A INPUT -i eth0 -j limit-2981 --A INPUT -i eth0 -j limit-2982 --A INPUT -i eth0 -j limit-2983 --A INPUT -i eth0 -j limit-2984 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2986 --A INPUT -i eth0 -j limit-2987 --A INPUT -i eth0 -j limit-2988 --A INPUT -i eth0 -j limit-2989 --A INPUT -i eth0 -j limit-2990 --A INPUT -i eth0 -j limit-2991 --A INPUT -i eth0 -j limit-2992 --A INPUT -i eth0 -j limit-2993 --A INPUT -i eth0 -j limit-2994 --A INPUT -i eth0 -j limit-2995 --A INPUT -i eth0 -j limit-2996 --A INPUT -i eth0 -j limit-2997 --A INPUT -i eth0 -j limit-2998 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3000 --A INPUT -i eth0 -j limit-3001 --A INPUT -i eth0 -j limit-3002 --A INPUT -i eth0 -j limit-3003 --A INPUT -i eth0 -j limit-3004 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3006 --A INPUT -i eth0 -j limit-3007 --A INPUT -i eth0 -j limit-3008 --A INPUT -i eth0 -j limit-3009 --A INPUT -i eth0 -j limit-3010 --A INPUT -i eth0 -j limit-3011 --A INPUT -i eth0 -j limit-3012 --A INPUT -i eth0 -j limit-3013 --A INPUT -i eth0 -j limit-3014 --A INPUT -i eth0 -j limit-3015 --A INPUT -i eth0 -j limit-3016 --A INPUT -i eth0 -j limit-3017 --A INPUT -i eth0 -j limit-3018 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3020 --A INPUT -i eth0 -j limit-3021 --A INPUT -i eth0 -j limit-3022 --A INPUT -i eth0 -j limit-3023 --A INPUT -i eth0 -j limit-3024 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3026 --A INPUT -i eth0 -j limit-3027 --A INPUT -i eth0 -j limit-3028 --A INPUT -i eth0 -j limit-3029 --A INPUT -i eth0 -j limit-3030 --A INPUT -i eth0 -j limit-3031 --A INPUT -i eth0 -j limit-3032 --A INPUT -i eth0 -j limit-3033 --A INPUT -i eth0 -j limit-3034 --A INPUT -i eth0 -j limit-3035 --A INPUT -i eth0 -j limit-3036 --A INPUT -i eth0 -j limit-3037 --A INPUT -i eth0 -j limit-3038 --A INPUT -i eth0 -j limit-3039 --A INPUT -i eth0 -j limit-3040 --A INPUT -i eth0 -j limit-3041 --A INPUT -i eth0 -j limit-3042 --A INPUT -i eth0 -j limit-3043 --A INPUT -i eth0 -j limit-3044 --A INPUT -i eth0 -j limit-3045 --A INPUT -i eth0 -j limit-3046 --A INPUT -i eth0 -j limit-3047 --A INPUT -i eth0 -j limit-3048 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1681 --A INPUT -i eth0 -j limit-3050 --A INPUT -i eth0 -j limit-3051 --A INPUT -i eth0 -j limit-3052 --A INPUT -i eth0 -j limit-3053 --A INPUT -i eth0 -j limit-3054 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1687 --A INPUT -i eth0 -j limit-3056 --A INPUT -i eth0 -j limit-3057 --A INPUT -i eth0 -j limit-3058 --A INPUT -i eth0 -j limit-3059 --A INPUT -i eth0 -j limit-3060 --A INPUT -i eth0 -j limit-3061 --A INPUT -i eth0 -j limit-3062 --A INPUT -i eth0 -j limit-3063 --A INPUT -i eth0 -j limit-3064 --A INPUT -i eth0 -j limit-3065 --A INPUT -i eth0 -j limit-3066 --A INPUT -i eth0 -j limit-3067 --A INPUT -i eth0 -j limit-3068 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1701 --A INPUT -i eth0 -j limit-3070 --A INPUT -i eth0 -j limit-3071 --A INPUT -i eth0 -j limit-3072 --A INPUT -i eth0 -j limit-3073 --A INPUT -i eth0 -j limit-3074 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1707 --A INPUT -i eth0 -j limit-3076 --A INPUT -i eth0 -j limit-3077 --A INPUT -i eth0 -j limit-3078 --A INPUT -i eth0 -j limit-3079 --A INPUT -i eth0 -j limit-3080 --A INPUT -i eth0 -j limit-3081 --A INPUT -i eth0 -j limit-3082 --A INPUT -i eth0 -j limit-3083 --A INPUT -i eth0 -j limit-3084 --A INPUT -i eth0 -j limit-3085 --A INPUT -i eth0 -j limit-3086 --A INPUT -i eth0 -j limit-3087 --A INPUT -i eth0 -j limit-3088 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1721 --A INPUT -i eth0 -j limit-3090 --A INPUT -i eth0 -j limit-3091 --A INPUT -i eth0 -j limit-3092 --A INPUT -i eth0 -j limit-3093 --A INPUT -i eth0 -j limit-3094 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1727 --A INPUT -i eth0 -j limit-3096 --A INPUT -i eth0 -j limit-3097 --A INPUT -i eth0 -j limit-3098 --A INPUT -i eth0 -j limit-3099 --A INPUT -i eth0 -j limit-3100 --A INPUT -i eth0 -j limit-3101 --A INPUT -i eth0 -j limit-3102 --A INPUT -i eth0 -j limit-3103 --A INPUT -i eth0 -j limit-3104 --A INPUT -i eth0 -j limit-3105 --A INPUT -i eth0 -j limit-3106 --A INPUT -i eth0 -j limit-3107 --A INPUT -i eth0 -j limit-3108 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1741 --A INPUT -i eth0 -j limit-3110 --A INPUT -i eth0 -j limit-3111 --A INPUT -i eth0 -j limit-3112 --A INPUT -i eth0 -j limit-3113 --A INPUT -i eth0 -j limit-3114 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1747 --A INPUT -i eth0 -j limit-3116 --A INPUT -i eth0 -j limit-3117 --A INPUT -i eth0 -j limit-3118 --A INPUT -i eth0 -j limit-3119 --A INPUT -i eth0 -j limit-3120 --A INPUT -i eth0 -j limit-3121 --A INPUT -i eth0 -j limit-3122 --A INPUT -i eth0 -j limit-3123 --A INPUT -i eth0 -j limit-3124 --A INPUT -i eth0 -j limit-3125 --A INPUT -i eth0 -j limit-3126 --A INPUT -i eth0 -j limit-3127 --A INPUT -i eth0 -j limit-3128 --A INPUT -i eth0 -j limit-3129 --A INPUT -i eth0 -j limit-3130 --A INPUT -i eth0 -j limit-3131 --A INPUT -i eth0 -j limit-3132 --A INPUT -i eth0 -j limit-3133 --A INPUT -i eth0 -j limit-3134 --A INPUT -i eth0 -j limit-3135 --A INPUT -i eth0 -j limit-3136 --A INPUT -i eth0 -j limit-3137 --A INPUT -i eth0 -j limit-3138 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1771 --A INPUT -i eth0 -j limit-3140 --A INPUT -i eth0 -j limit-3141 --A INPUT -i eth0 -j limit-3142 --A INPUT -i eth0 -j limit-3143 --A INPUT -i eth0 -j limit-3144 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1777 --A INPUT -i eth0 -j limit-3146 --A INPUT -i eth0 -j limit-3147 --A INPUT -i eth0 -j limit-3148 --A INPUT -i eth0 -j limit-3149 --A INPUT -i eth0 -j limit-3150 --A INPUT -i eth0 -j limit-3151 --A INPUT -i eth0 -j limit-3152 --A INPUT -i eth0 -j limit-3153 --A INPUT -i eth0 -j limit-3154 --A INPUT -i eth0 -j limit-3155 --A INPUT -i eth0 -j limit-3156 --A INPUT -i eth0 -j limit-3157 --A INPUT -i eth0 -j limit-3158 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1791 --A INPUT -i eth0 -j limit-3160 --A INPUT -i eth0 -j limit-3161 --A INPUT -i eth0 -j limit-3162 --A INPUT -i eth0 -j limit-3163 --A INPUT -i eth0 -j limit-3164 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1797 --A INPUT -i eth0 -j limit-3166 --A INPUT -i eth0 -j limit-3167 --A INPUT -i eth0 -j limit-3168 --A INPUT -i eth0 -j limit-3169 --A INPUT -i eth0 -j limit-3170 --A INPUT -i eth0 -j limit-3171 --A INPUT -i eth0 -j limit-3172 --A INPUT -i eth0 -j limit-3173 --A INPUT -i eth0 -j limit-3174 --A INPUT -i eth0 -j limit-3175 --A INPUT -i eth0 -j limit-3176 --A INPUT -i eth0 -j limit-3177 --A INPUT -i eth0 -j limit-3178 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1811 --A INPUT -i eth0 -j limit-3180 --A INPUT -i eth0 -j limit-3181 --A INPUT -i eth0 -j limit-3182 --A INPUT -i eth0 -j limit-3183 --A INPUT -i eth0 -j limit-3184 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1817 --A INPUT -i eth0 -j limit-3186 --A INPUT -i eth0 -j limit-3187 --A INPUT -i eth0 -j limit-3188 --A INPUT -i eth0 -j limit-3189 --A INPUT -i eth0 -j limit-3190 --A INPUT -i eth0 -j limit-3191 --A INPUT -i eth0 -j limit-3192 --A INPUT -i eth0 -j limit-3193 --A INPUT -i eth0 -j limit-3194 --A INPUT -i eth0 -j limit-3195 --A INPUT -i eth0 -j limit-3196 --A INPUT -i eth0 -j limit-3197 --A INPUT -i eth0 -j limit-3198 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1831 --A INPUT -i eth0 -j limit-3200 --A INPUT -i eth0 -j limit-3201 --A INPUT -i eth0 -j limit-3202 --A INPUT -i eth0 -j limit-3203 --A INPUT -i eth0 -j limit-3204 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1837 --A INPUT -i eth0 -j limit-3206 --A INPUT -i eth0 -j limit-3207 --A INPUT -i eth0 -j limit-3208 --A INPUT -i eth0 -j limit-3209 --A INPUT -i eth0 -j limit-3210 --A INPUT -i eth0 -j limit-3211 --A INPUT -i eth0 -j limit-3212 --A INPUT -i eth0 -j limit-3213 --A INPUT -i eth0 -j limit-3214 --A INPUT -i eth0 -j limit-3215 --A INPUT -i eth0 -j limit-3216 --A INPUT -i eth0 -j limit-3217 --A INPUT -i eth0 -j limit-3218 --A INPUT -i eth0 -j limit-3219 --A INPUT -i eth0 -j limit-3220 --A INPUT -i eth0 -j limit-3221 --A INPUT -i eth0 -j limit-3222 --A INPUT -i eth0 -j limit-3223 --A INPUT -i eth0 -j limit-3224 --A INPUT -i eth0 -j limit-3225 --A INPUT -i eth0 -j limit-3226 --A INPUT -i eth0 -j limit-3227 --A INPUT -i eth0 -j limit-3228 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3230 --A INPUT -i eth0 -j limit-3231 --A INPUT -i eth0 -j limit-3232 --A INPUT -i eth0 -j limit-3233 --A INPUT -i eth0 -j limit-3234 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3236 --A INPUT -i eth0 -j limit-3237 --A INPUT -i eth0 -j limit-3238 --A INPUT -i eth0 -j limit-3239 --A INPUT -i eth0 -j limit-3240 --A INPUT -i eth0 -j limit-3241 --A INPUT -i eth0 -j limit-3242 --A INPUT -i eth0 -j limit-3243 --A INPUT -i eth0 -j limit-3244 --A INPUT -i eth0 -j limit-3245 --A INPUT -i eth0 -j limit-3246 --A INPUT -i eth0 -j limit-3247 --A INPUT -i eth0 -j limit-3248 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3250 --A INPUT -i eth0 -j limit-3251 --A INPUT -i eth0 -j limit-3252 --A INPUT -i eth0 -j limit-3253 --A INPUT -i eth0 -j limit-3254 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3256 --A INPUT -i eth0 -j limit-3257 --A INPUT -i eth0 -j limit-3258 --A INPUT -i eth0 -j limit-3259 --A INPUT -i eth0 -j limit-3260 --A INPUT -i eth0 -j limit-3261 --A INPUT -i eth0 -j limit-3262 --A INPUT -i eth0 -j limit-3263 --A INPUT -i eth0 -j limit-3264 --A INPUT -i eth0 -j limit-3265 --A INPUT -i eth0 -j limit-3266 --A INPUT -i eth0 -j limit-3267 --A INPUT -i eth0 -j limit-3268 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3270 --A INPUT -i eth0 -j limit-3271 --A INPUT -i eth0 -j limit-3272 --A INPUT -i eth0 -j limit-3273 --A INPUT -i eth0 -j limit-3274 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3276 --A INPUT -i eth0 -j limit-3277 --A INPUT -i eth0 -j limit-3278 --A INPUT -i eth0 -j limit-3279 --A INPUT -i eth0 -j limit-3280 --A INPUT -i eth0 -j limit-3281 --A INPUT -i eth0 -j limit-3282 --A INPUT -i eth0 -j limit-3283 --A INPUT -i eth0 -j limit-3284 --A INPUT -i eth0 -j limit-3285 --A INPUT -i eth0 -j limit-3286 --A INPUT -i eth0 -j limit-3287 --A INPUT -i eth0 -j limit-3288 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3290 --A INPUT -i eth0 -j limit-3291 --A INPUT -i eth0 -j limit-3292 --A INPUT -i eth0 -j limit-3293 --A INPUT -i eth0 -j limit-3294 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3296 --A INPUT -i eth0 -j limit-3297 --A INPUT -i eth0 -j limit-3298 --A INPUT -i eth0 -j limit-3299 --A INPUT -i eth0 -j limit-3300 --A INPUT -i eth0 -j limit-3301 --A INPUT -i eth0 -j limit-3302 --A INPUT -i eth0 -j limit-3303 --A INPUT -i eth0 -j limit-3304 --A INPUT -i eth0 -j limit-3305 --A INPUT -i eth0 -j limit-3306 --A INPUT -i eth0 -j limit-3307 --A INPUT -i eth0 -j limit-3308 --A INPUT -i eth0 -j limit-3309 --A INPUT -i eth0 -j limit-3310 --A INPUT -i eth0 -j limit-3311 --A INPUT -i eth0 -j limit-3312 --A INPUT -i eth0 -j limit-3313 --A INPUT -i eth0 -j limit-3314 --A INPUT -i eth0 -j limit-3315 --A INPUT -i eth0 -j limit-3316 --A INPUT -i eth0 -j limit-3317 --A INPUT -i eth0 -j limit-3318 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1861 --A INPUT -i eth0 -j limit-3320 --A INPUT -i eth0 -j limit-3321 --A INPUT -i eth0 -j limit-3322 --A INPUT -i eth0 -j limit-3323 --A INPUT -i eth0 -j limit-3324 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1867 --A INPUT -i eth0 -j limit-3326 --A INPUT -i eth0 -j limit-3327 --A INPUT -i eth0 -j limit-3328 --A INPUT -i eth0 -j limit-3329 --A INPUT -i eth0 -j limit-3330 --A INPUT -i eth0 -j limit-3331 --A INPUT -i eth0 -j limit-3332 --A INPUT -i eth0 -j limit-3333 --A INPUT -i eth0 -j limit-3334 --A INPUT -i eth0 -j limit-3335 --A INPUT -i eth0 -j limit-3336 --A INPUT -i eth0 -j limit-3337 --A INPUT -i eth0 -j limit-3338 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1881 --A INPUT -i eth0 -j limit-3340 --A INPUT -i eth0 -j limit-3341 --A INPUT -i eth0 -j limit-3342 --A INPUT -i eth0 -j limit-3343 --A INPUT -i eth0 -j limit-3344 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1887 --A INPUT -i eth0 -j limit-3346 --A INPUT -i eth0 -j limit-3347 --A INPUT -i eth0 -j limit-3348 --A INPUT -i eth0 -j limit-3349 --A INPUT -i eth0 -j limit-3350 --A INPUT -i eth0 -j limit-3351 --A INPUT -i eth0 -j limit-3352 --A INPUT -i eth0 -j limit-3353 --A INPUT -i eth0 -j limit-3354 --A INPUT -i eth0 -j limit-3355 --A INPUT -i eth0 -j limit-3356 --A INPUT -i eth0 -j limit-3357 --A INPUT -i eth0 -j limit-3358 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1901 --A INPUT -i eth0 -j limit-3360 --A INPUT -i eth0 -j limit-3361 --A INPUT -i eth0 -j limit-3362 --A INPUT -i eth0 -j limit-3363 --A INPUT -i eth0 -j limit-3364 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1907 --A INPUT -i eth0 -j limit-3366 --A INPUT -i eth0 -j limit-3367 --A INPUT -i eth0 -j limit-3368 --A INPUT -i eth0 -j limit-3369 --A INPUT -i eth0 -j limit-3370 --A INPUT -i eth0 -j limit-3371 --A INPUT -i eth0 -j limit-3372 --A INPUT -i eth0 -j limit-3373 --A INPUT -i eth0 -j limit-3374 --A INPUT -i eth0 -j limit-3375 --A INPUT -i eth0 -j limit-3376 --A INPUT -i eth0 -j limit-3377 --A INPUT -i eth0 -j limit-3378 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1921 --A INPUT -i eth0 -j limit-3380 --A INPUT -i eth0 -j limit-3381 --A INPUT -i eth0 -j limit-3382 --A INPUT -i eth0 -j limit-3383 --A INPUT -i eth0 -j limit-3384 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1927 --A INPUT -i eth0 -j limit-3386 --A INPUT -i eth0 -j limit-3387 --A INPUT -i eth0 -j limit-3388 --A INPUT -i eth0 -j limit-3389 --A INPUT -i eth0 -j limit-3390 --A INPUT -i eth0 -j limit-3391 --A INPUT -i eth0 -j limit-3392 --A INPUT -i eth0 -j limit-3393 --A INPUT -i eth0 -j limit-3394 --A INPUT -i eth0 -j limit-3395 --A INPUT -i eth0 -j limit-3396 --A INPUT -i eth0 -j limit-3397 --A INPUT -i eth0 -j limit-3398 --A INPUT -i eth0 -j limit-3399 --A INPUT -i eth0 -j limit-3400 --A INPUT -i eth0 -j limit-3401 --A INPUT -i eth0 -j limit-3402 --A INPUT -i eth0 -j limit-3403 --A INPUT -i eth0 -j limit-3404 --A INPUT -i eth0 -j limit-3405 --A INPUT -i eth0 -j limit-3406 --A INPUT -i eth0 -j limit-3407 --A INPUT -i eth0 -j limit-3408 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3410 --A INPUT -i eth0 -j limit-3411 --A INPUT -i eth0 -j limit-3412 --A INPUT -i eth0 -j limit-3413 --A INPUT -i eth0 -j limit-3414 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3416 --A INPUT -i eth0 -j limit-3417 --A INPUT -i eth0 -j limit-3418 --A INPUT -i eth0 -j limit-3419 --A INPUT -i eth0 -j limit-3420 --A INPUT -i eth0 -j limit-3421 --A INPUT -i eth0 -j limit-3422 --A INPUT -i eth0 -j limit-3423 --A INPUT -i eth0 -j limit-3424 --A INPUT -i eth0 -j limit-3425 --A INPUT -i eth0 -j limit-3426 --A INPUT -i eth0 -j limit-3427 --A INPUT -i eth0 -j limit-3428 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3430 --A INPUT -i eth0 -j limit-3431 --A INPUT -i eth0 -j limit-3432 --A INPUT -i eth0 -j limit-3433 --A INPUT -i eth0 -j limit-3434 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3436 --A INPUT -i eth0 -j limit-3437 --A INPUT -i eth0 -j limit-3438 --A INPUT -i eth0 -j limit-3439 --A INPUT -i eth0 -j limit-3440 --A INPUT -i eth0 -j limit-3441 --A INPUT -i eth0 -j limit-3442 --A INPUT -i eth0 -j limit-3443 --A INPUT -i eth0 -j limit-3444 --A INPUT -i eth0 -j limit-3445 --A INPUT -i eth0 -j limit-3446 --A INPUT -i eth0 -j limit-3447 --A INPUT -i eth0 -j limit-3448 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3450 --A INPUT -i eth0 -j limit-3451 --A INPUT -i eth0 -j limit-3452 --A INPUT -i eth0 -j limit-3453 --A INPUT -i eth0 -j limit-3454 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3456 --A INPUT -i eth0 -j limit-3457 --A INPUT -i eth0 -j limit-3458 --A INPUT -i eth0 -j limit-3459 --A INPUT -i eth0 -j limit-3460 --A INPUT -i eth0 -j limit-3461 --A INPUT -i eth0 -j limit-3462 --A INPUT -i eth0 -j limit-3463 --A INPUT -i eth0 -j limit-3464 --A INPUT -i eth0 -j limit-3465 --A INPUT -i eth0 -j limit-3466 --A INPUT -i eth0 -j limit-3467 --A INPUT -i eth0 -j limit-3468 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3470 --A INPUT -i eth0 -j limit-3471 --A INPUT -i eth0 -j limit-3472 --A INPUT -i eth0 -j limit-3473 --A INPUT -i eth0 -j limit-3474 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3476 --A INPUT -i eth0 -j limit-3477 --A INPUT -i eth0 -j limit-3478 --A INPUT -i eth0 -j limit-3479 --A INPUT -i eth0 -j limit-3480 --A INPUT -i eth0 -j limit-3481 --A INPUT -i eth0 -j limit-3482 --A INPUT -i eth0 -j limit-3483 --A INPUT -i eth0 -j limit-3484 --A INPUT -i eth0 -j limit-3485 --A INPUT -i eth0 -j limit-3486 --A INPUT -i eth0 -j limit-3487 --A INPUT -i eth0 -j limit-3488 --A INPUT -i eth0 -j limit-3489 --A INPUT -i eth0 -j limit-3490 --A INPUT -i eth0 -j limit-3491 --A INPUT -i eth0 -j limit-3492 --A INPUT -i eth0 -j limit-3493 --A INPUT -i eth0 -j limit-3494 --A INPUT -i eth0 -j limit-3495 --A INPUT -i eth0 -j limit-3496 --A INPUT -i eth0 -j limit-3497 --A INPUT -i eth0 -j limit-3498 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1951 --A INPUT -i eth0 -j limit-3500 --A INPUT -i eth0 -j limit-3501 --A INPUT -i eth0 -j limit-3502 --A INPUT -i eth0 -j limit-3503 --A INPUT -i eth0 -j limit-3504 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1957 --A INPUT -i eth0 -j limit-3506 --A INPUT -i eth0 -j limit-3507 --A INPUT -i eth0 -j limit-3508 --A INPUT -i eth0 -j limit-3509 --A INPUT -i eth0 -j limit-3510 --A INPUT -i eth0 -j limit-3511 --A INPUT -i eth0 -j limit-3512 --A INPUT -i eth0 -j limit-3513 --A INPUT -i eth0 -j limit-3514 --A INPUT -i eth0 -j limit-3515 --A INPUT -i eth0 -j limit-3516 --A INPUT -i eth0 -j limit-3517 --A INPUT -i eth0 -j limit-3518 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1971 --A INPUT -i eth0 -j limit-3520 --A INPUT -i eth0 -j limit-3521 --A INPUT -i eth0 -j limit-3522 --A INPUT -i eth0 -j limit-3523 --A INPUT -i eth0 -j limit-3524 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1977 --A INPUT -i eth0 -j limit-3526 --A INPUT -i eth0 -j limit-3527 --A INPUT -i eth0 -j limit-3528 --A INPUT -i eth0 -j limit-3529 --A INPUT -i eth0 -j limit-3530 --A INPUT -i eth0 -j limit-3531 --A INPUT -i eth0 -j limit-3532 --A INPUT -i eth0 -j limit-3533 --A INPUT -i eth0 -j limit-3534 --A INPUT -i eth0 -j limit-3535 --A INPUT -i eth0 -j limit-3536 --A INPUT -i eth0 -j limit-3537 --A INPUT -i eth0 -j limit-3538 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1991 --A INPUT -i eth0 -j limit-3540 --A INPUT -i eth0 -j limit-3541 --A INPUT -i eth0 -j limit-3542 --A INPUT -i eth0 -j limit-3543 --A INPUT -i eth0 -j limit-3544 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1997 --A INPUT -i eth0 -j limit-3546 --A INPUT -i eth0 -j limit-3547 --A INPUT -i eth0 -j limit-3548 --A INPUT -i eth0 -j limit-3549 --A INPUT -i eth0 -j limit-3550 --A INPUT -i eth0 -j limit-3551 --A INPUT -i eth0 -j limit-3552 --A INPUT -i eth0 -j limit-3553 --A INPUT -i eth0 -j limit-3554 --A INPUT -i eth0 -j limit-3555 --A INPUT -i eth0 -j limit-3556 --A INPUT -i eth0 -j limit-3557 --A INPUT -i eth0 -j limit-3558 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2011 --A INPUT -i eth0 -j limit-3560 --A INPUT -i eth0 -j limit-3561 --A INPUT -i eth0 -j limit-3562 --A INPUT -i eth0 -j limit-3563 --A INPUT -i eth0 -j limit-3564 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2017 --A INPUT -i eth0 -j limit-3566 --A INPUT -i eth0 -j limit-3567 --A INPUT -i eth0 -j limit-3568 --A INPUT -i eth0 -j limit-3569 --A INPUT -i eth0 -j limit-3570 --A INPUT -i eth0 -j limit-3571 --A INPUT -i eth0 -j limit-3572 --A INPUT -i eth0 -j limit-3573 --A INPUT -i eth0 -j limit-3574 --A INPUT -i eth0 -j limit-3575 --A INPUT -i eth0 -j limit-3576 --A INPUT -i eth0 -j limit-3577 --A INPUT -i eth0 -j limit-3578 --A INPUT -i eth0 -j limit-3579 --A INPUT -i eth0 -j limit-3580 --A INPUT -i eth0 -j limit-3581 --A INPUT -i eth0 -j limit-3582 --A INPUT -i eth0 -j limit-3583 --A INPUT -i eth0 -j limit-3584 --A INPUT -i eth0 -j limit-3585 --A INPUT -i eth0 -j limit-3586 --A INPUT -i eth0 -j limit-3587 --A INPUT -i eth0 -j limit-3588 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2041 --A INPUT -i eth0 -j limit-3590 --A INPUT -i eth0 -j limit-3591 --A INPUT -i eth0 -j limit-3592 --A INPUT -i eth0 -j limit-3593 --A INPUT -i eth0 -j limit-3594 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2047 --A INPUT -i eth0 -j limit-3596 --A INPUT -i eth0 -j limit-3597 --A INPUT -i eth0 -j limit-3598 --A INPUT -i eth0 -j limit-3599 --A INPUT -i eth0 -j limit-3600 --A INPUT -i eth0 -j limit-3601 --A INPUT -i eth0 -j limit-3602 --A INPUT -i eth0 -j limit-3603 --A INPUT -i eth0 -j limit-3604 --A INPUT -i eth0 -j limit-3605 --A INPUT -i eth0 -j limit-3606 --A INPUT -i eth0 -j limit-3607 --A INPUT -i eth0 -j limit-3608 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2061 --A INPUT -i eth0 -j limit-3610 --A INPUT -i eth0 -j limit-3611 --A INPUT -i eth0 -j limit-3612 --A INPUT -i eth0 -j limit-3613 --A INPUT -i eth0 -j limit-3614 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2067 --A INPUT -i eth0 -j limit-3616 --A INPUT -i eth0 -j limit-3617 --A INPUT -i eth0 -j limit-3618 --A INPUT -i eth0 -j limit-3619 --A INPUT -i eth0 -j limit-3620 --A INPUT -i eth0 -j limit-3621 --A INPUT -i eth0 -j limit-3622 --A INPUT -i eth0 -j limit-3623 --A INPUT -i eth0 -j limit-3624 --A INPUT -i eth0 -j limit-3625 --A INPUT -i eth0 -j limit-3626 --A INPUT -i eth0 -j limit-3627 --A INPUT -i eth0 -j limit-3628 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2081 --A INPUT -i eth0 -j limit-3630 --A INPUT -i eth0 -j limit-3631 --A INPUT -i eth0 -j limit-3632 --A INPUT -i eth0 -j limit-3633 --A INPUT -i eth0 -j limit-3634 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2087 --A INPUT -i eth0 -j limit-3636 --A INPUT -i eth0 -j limit-3637 --A INPUT -i eth0 -j limit-3638 --A INPUT -i eth0 -j limit-3639 --A INPUT -i eth0 -j limit-3640 --A INPUT -i eth0 -j limit-3641 --A INPUT -i eth0 -j limit-3642 --A INPUT -i eth0 -j limit-3643 --A INPUT -i eth0 -j limit-3644 --A INPUT -i eth0 -j limit-3645 --A INPUT -i eth0 -j limit-3646 --A INPUT -i eth0 -j limit-3647 --A INPUT -i eth0 -j limit-3648 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2101 --A INPUT -i eth0 -j limit-3650 --A INPUT -i eth0 -j limit-3651 --A INPUT -i eth0 -j limit-3652 --A INPUT -i eth0 -j limit-3653 --A INPUT -i eth0 -j limit-3654 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2107 --A INPUT -i eth0 -j limit-3656 --A INPUT -i eth0 -j limit-3657 --A INPUT -i eth0 -j limit-3658 --A INPUT -i eth0 -j limit-3659 --A INPUT -i eth0 -j limit-3660 --A INPUT -i eth0 -j limit-3661 --A INPUT -i eth0 -j limit-3662 --A INPUT -i eth0 -j limit-3663 --A INPUT -i eth0 -j limit-3664 --A INPUT -i eth0 -j limit-3665 --A INPUT -i eth0 -j limit-3666 --A INPUT -i eth0 -j limit-3667 --A INPUT -i eth0 -j limit-3668 --A INPUT -i eth0 -j limit-3669 --A INPUT -i eth0 -j limit-3670 --A INPUT -i eth0 -j limit-3671 --A INPUT -i eth0 -j limit-3672 --A INPUT -i eth0 -j limit-3673 --A INPUT -i eth0 -j limit-3674 --A INPUT -i eth0 -j limit-3675 --A INPUT -i eth0 -j limit-3676 --A INPUT -i eth0 -j limit-3677 --A INPUT -i eth0 -j limit-3678 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3680 --A INPUT -i eth0 -j limit-3681 --A INPUT -i eth0 -j limit-3682 --A INPUT -i eth0 -j limit-3683 --A INPUT -i eth0 -j limit-3684 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3686 --A INPUT -i eth0 -j limit-3687 --A INPUT -i eth0 -j limit-3688 --A INPUT -i eth0 -j limit-3689 --A INPUT -i eth0 -j limit-3690 --A INPUT -i eth0 -j limit-3691 --A INPUT -i eth0 -j limit-3692 --A INPUT -i eth0 -j limit-3693 --A INPUT -i eth0 -j limit-3694 --A INPUT -i eth0 -j limit-3695 --A INPUT -i eth0 -j limit-3696 --A INPUT -i eth0 -j limit-3697 --A INPUT -i eth0 -j limit-3698 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3700 --A INPUT -i eth0 -j limit-3701 --A INPUT -i eth0 -j limit-3702 --A INPUT -i eth0 -j limit-3703 --A INPUT -i eth0 -j limit-3704 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3706 --A INPUT -i eth0 -j limit-3707 --A INPUT -i eth0 -j limit-3708 --A INPUT -i eth0 -j limit-3709 --A INPUT -i eth0 -j limit-3710 --A INPUT -i eth0 -j limit-3711 --A INPUT -i eth0 -j limit-3712 --A INPUT -i eth0 -j limit-3713 --A INPUT -i eth0 -j limit-3714 --A INPUT -i eth0 -j limit-3715 --A INPUT -i eth0 -j limit-3716 --A INPUT -i eth0 -j limit-3717 --A INPUT -i eth0 -j limit-3718 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3720 --A INPUT -i eth0 -j limit-3721 --A INPUT -i eth0 -j limit-3722 --A INPUT -i eth0 -j limit-3723 --A INPUT -i eth0 -j limit-3724 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3726 --A INPUT -i eth0 -j limit-3727 --A INPUT -i eth0 -j limit-3728 --A INPUT -i eth0 -j limit-3729 --A INPUT -i eth0 -j limit-3730 --A INPUT -i eth0 -j limit-3731 --A INPUT -i eth0 -j limit-3732 --A INPUT -i eth0 -j limit-3733 --A INPUT -i eth0 -j limit-3734 --A INPUT -i eth0 -j limit-3735 --A INPUT -i eth0 -j limit-3736 --A INPUT -i eth0 -j limit-3737 --A INPUT -i eth0 -j limit-3738 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3740 --A INPUT -i eth0 -j limit-3741 --A INPUT -i eth0 -j limit-3742 --A INPUT -i eth0 -j limit-3743 --A INPUT -i eth0 -j limit-3744 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3746 --A INPUT -i eth0 -j limit-3747 --A INPUT -i eth0 -j limit-3748 --A INPUT -i eth0 -j limit-3749 --A INPUT -i eth0 -j limit-3750 --A INPUT -i eth0 -j limit-3751 --A INPUT -i eth0 -j limit-3752 --A INPUT -i eth0 -j limit-3753 --A INPUT -i eth0 -j limit-3754 --A INPUT -i eth0 -j limit-3755 --A INPUT -i eth0 -j limit-3756 --A INPUT -i eth0 -j limit-3757 --A INPUT -i eth0 -j limit-3758 --A INPUT -i eth0 -j limit-3759 --A INPUT -i eth0 -j limit-3760 --A INPUT -i eth0 -j limit-3761 --A INPUT -i eth0 -j limit-3762 --A INPUT -i eth0 -j limit-3763 --A INPUT -i eth0 -j limit-3764 --A INPUT -i eth0 -j limit-3765 --A INPUT -i eth0 -j limit-3766 --A INPUT -i eth0 -j limit-3767 --A INPUT -i eth0 -j limit-3768 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2131 --A INPUT -i eth0 -j limit-3770 --A INPUT -i eth0 -j limit-3771 --A INPUT -i eth0 -j limit-3772 --A INPUT -i eth0 -j limit-3773 --A INPUT -i eth0 -j limit-3774 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2137 --A INPUT -i eth0 -j limit-3776 --A INPUT -i eth0 -j limit-3777 --A INPUT -i eth0 -j limit-3778 --A INPUT -i eth0 -j limit-3779 --A INPUT -i eth0 -j limit-3780 --A INPUT -i eth0 -j limit-3781 --A INPUT -i eth0 -j limit-3782 --A INPUT -i eth0 -j limit-3783 --A INPUT -i eth0 -j limit-3784 --A INPUT -i eth0 -j limit-3785 --A INPUT -i eth0 -j limit-3786 --A INPUT -i eth0 -j limit-3787 --A INPUT -i eth0 -j limit-3788 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2151 --A INPUT -i eth0 -j limit-3790 --A INPUT -i eth0 -j limit-3791 --A INPUT -i eth0 -j limit-3792 --A INPUT -i eth0 -j limit-3793 --A INPUT -i eth0 -j limit-3794 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2157 --A INPUT -i eth0 -j limit-3796 --A INPUT -i eth0 -j limit-3797 --A INPUT -i eth0 -j limit-3798 --A INPUT -i eth0 -j limit-3799 --A INPUT -i eth0 -j limit-3800 --A INPUT -i eth0 -j limit-3801 --A INPUT -i eth0 -j limit-3802 --A INPUT -i eth0 -j limit-3803 --A INPUT -i eth0 -j limit-3804 --A INPUT -i eth0 -j limit-3805 --A INPUT -i eth0 -j limit-3806 --A INPUT -i eth0 -j limit-3807 --A INPUT -i eth0 -j limit-3808 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2171 --A INPUT -i eth0 -j limit-3810 --A INPUT -i eth0 -j limit-3811 --A INPUT -i eth0 -j limit-3812 --A INPUT -i eth0 -j limit-3813 --A INPUT -i eth0 -j limit-3814 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2177 --A INPUT -i eth0 -j limit-3816 --A INPUT -i eth0 -j limit-3817 --A INPUT -i eth0 -j limit-3818 --A INPUT -i eth0 -j limit-3819 --A INPUT -i eth0 -j limit-3820 --A INPUT -i eth0 -j limit-3821 --A INPUT -i eth0 -j limit-3822 --A INPUT -i eth0 -j limit-3823 --A INPUT -i eth0 -j limit-3824 --A INPUT -i eth0 -j limit-3825 --A INPUT -i eth0 -j limit-3826 --A INPUT -i eth0 -j limit-3827 --A INPUT -i eth0 -j limit-3828 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2191 --A INPUT -i eth0 -j limit-3830 --A INPUT -i eth0 -j limit-3831 --A INPUT -i eth0 -j limit-3832 --A INPUT -i eth0 -j limit-3833 --A INPUT -i eth0 -j limit-3834 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2197 --A INPUT -i eth0 -j limit-3836 --A INPUT -i eth0 -j limit-3837 --A INPUT -i eth0 -j limit-3838 --A INPUT -i eth0 -j limit-3839 --A INPUT -i eth0 -j limit-3840 --A INPUT -i eth0 -j limit-3841 --A INPUT -i eth0 -j limit-3842 --A INPUT -i eth0 -j limit-3843 --A INPUT -i eth0 -j limit-3844 --A INPUT -i eth0 -j limit-3845 --A INPUT -i eth0 -j limit-3846 --A INPUT -i eth0 -j limit-3847 --A INPUT -i eth0 -j limit-3848 --A INPUT -i eth0 -j limit-3849 --A INPUT -i eth0 -j limit-3850 --A INPUT -i eth0 -j limit-3851 --A INPUT -i eth0 -j limit-3852 --A INPUT -i eth0 -j limit-3853 --A INPUT -i eth0 -j limit-3854 --A INPUT -i eth0 -j limit-3855 --A INPUT -i eth0 -j limit-3856 --A INPUT -i eth0 -j limit-3857 --A INPUT -i eth0 -j limit-3858 --A INPUT -i eth0 -j limit-3859 --A INPUT -i eth0 -j limit-3860 --A INPUT -i eth0 -j limit-3861 --A INPUT -i eth0 -j limit-3862 --A INPUT -i eth0 -j limit-3863 --A INPUT -i eth0 -j limit-3864 --A INPUT -i eth0 -j limit-3865 --A INPUT -i eth0 -j limit-3866 --A INPUT -i eth0 -j limit-3867 --A INPUT -i eth0 -j limit-3868 --A INPUT -i eth0 -j limit-3869 --A INPUT -i eth0 -j limit-3870 --A INPUT -i eth0 -j limit-3871 --A INPUT -i eth0 -j limit-3872 --A INPUT -i eth0 -j limit-3873 --A INPUT -i eth0 -j limit-3874 --A INPUT -i eth0 -j limit-3875 --A INPUT -i eth0 -j limit-3876 --A INPUT -i eth0 -j limit-3877 --A INPUT -i eth0 -j limit-3878 --A INPUT -i eth0 -j limit-3879 --A INPUT -i eth0 -j limit-3880 --A INPUT -i eth0 -j limit-3881 --A INPUT -i eth0 -j limit-3882 --A INPUT -i eth0 -j limit-3883 --A INPUT -i eth0 -j limit-3884 --A INPUT -i eth0 -j limit-3885 --A INPUT -i eth0 -j limit-3886 --A INPUT -i eth0 -j limit-3887 --A INPUT -i eth0 -j limit-3888 --A INPUT -i eth0 -j limit-3889 --A INPUT -i eth0 -j limit-3890 --A INPUT -i eth0 -j limit-3891 --A INPUT -i eth0 -j limit-3892 --A INPUT -i eth0 -j limit-3893 --A INPUT -i eth0 -j limit-3894 --A INPUT -i eth0 -j limit-3895 --A INPUT -i eth0 -j limit-3896 --A INPUT -i eth0 -j limit-3897 --A INPUT -i eth0 -j limit-3898 --A INPUT -i eth0 -j limit-3899 --A INPUT -i eth0 -j limit-3900 --A INPUT -i eth0 -j limit-3901 --A INPUT -i eth0 -j limit-3902 --A INPUT -i eth0 -j limit-3903 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-0 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-1 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-2 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-3 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-4 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-5 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-6 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-7 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-8 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-9 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-10 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-11 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-12 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-13 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-14 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-15 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-16 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-17 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-18 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-19 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-20 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-21 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-22 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-23 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-24 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-25 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-26 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-27 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-28 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-29 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-30 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-32 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-33 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-34 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-35 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-36 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-38 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-39 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-40 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-41 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-42 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-43 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-44 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-45 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-46 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-47 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-48 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-49 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-50 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-52 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-53 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-54 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-55 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-56 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-58 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-59 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-60 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-61 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-62 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-63 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-64 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-65 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-66 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-67 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-68 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-69 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-70 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-72 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-73 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-74 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-75 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-76 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-78 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-79 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-80 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-81 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-82 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-83 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-84 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-85 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-86 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-87 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-88 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-89 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-90 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-92 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-93 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-94 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-95 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-96 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-98 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-99 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-100 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-101 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-102 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-103 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-104 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-105 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-106 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-107 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-108 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-109 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-110 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-111 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-112 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-113 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-114 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-115 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-116 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-117 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-118 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-119 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-120 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-31 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-122 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-123 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-124 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-125 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-126 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-37 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-128 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-129 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-130 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-131 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-132 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-133 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-134 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-135 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-136 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-137 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-138 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-139 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-140 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-51 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-142 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-143 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-144 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-145 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-146 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-57 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-148 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-149 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-150 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-151 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-152 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-153 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-154 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-155 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-156 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-157 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-158 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-159 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-160 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-71 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-162 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-163 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-164 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-165 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-166 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-77 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-168 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-169 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-170 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-171 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-172 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-173 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-174 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-175 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-176 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-177 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-178 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-179 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-180 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-91 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-182 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-183 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-184 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-185 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-186 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-97 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-188 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-189 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-190 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-191 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-192 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-193 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-194 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-195 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-196 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-197 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-198 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-199 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-200 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-201 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-202 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-203 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-204 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-205 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-206 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-207 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-208 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-209 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-210 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-121 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-212 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-213 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-214 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-215 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-216 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-127 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-218 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-219 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-220 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-221 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-222 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-223 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-224 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-225 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-226 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-227 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-228 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-229 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-230 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-141 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-232 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-233 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-234 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-235 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-236 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-147 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-238 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-239 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-240 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-241 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-242 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-243 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-244 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-245 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-246 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-247 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-248 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-249 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-250 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-161 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-252 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-253 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-254 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-255 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-256 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-167 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-258 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-259 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-260 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-261 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-262 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-263 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-264 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-265 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-266 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-267 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-268 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-269 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-270 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-181 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-272 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-273 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-274 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-275 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-276 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-187 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-278 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-279 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-280 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-281 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-282 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-283 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-284 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-285 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-286 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-287 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-288 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-289 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-290 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-291 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-292 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-293 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-294 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-295 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-296 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-297 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-298 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-299 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-300 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-302 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-303 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-304 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-305 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-306 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-308 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-309 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-310 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-311 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-312 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-313 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-314 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-315 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-316 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-317 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-318 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-319 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-320 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-322 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-323 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-324 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-325 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-326 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-328 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-329 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-330 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-331 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-332 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-333 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-334 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-335 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-336 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-337 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-338 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-339 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-340 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-342 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-343 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-344 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-345 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-346 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-348 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-349 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-350 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-351 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-352 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-353 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-354 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-355 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-356 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-357 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-358 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-359 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-360 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-362 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-363 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-364 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-365 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-366 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-368 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-369 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-370 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-371 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-372 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-373 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-374 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-375 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-376 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-377 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-378 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-379 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-380 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-381 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-382 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-383 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-384 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-385 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-386 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-387 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-388 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-389 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-390 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-211 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-392 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-393 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-394 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-395 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-396 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-217 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-398 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-399 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-400 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-401 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-402 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-403 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-404 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-405 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-406 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-407 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-408 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-409 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-410 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-231 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-412 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-413 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-414 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-415 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-416 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-237 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-418 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-419 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-420 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-421 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-422 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-423 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-424 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-425 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-426 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-427 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-428 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-429 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-430 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-251 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-432 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-433 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-434 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-435 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-436 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-257 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-438 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-439 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-440 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-441 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-442 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-443 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-444 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-445 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-446 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-447 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-448 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-449 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-450 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-271 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-452 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-453 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-454 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-455 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-456 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-277 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-458 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-459 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-460 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-461 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-462 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-463 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-464 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-465 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-466 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-467 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-468 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-469 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-470 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-471 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-472 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-473 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-474 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-475 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-476 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-477 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-478 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-479 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-480 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-482 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-483 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-484 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-485 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-486 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-488 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-489 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-490 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-491 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-492 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-493 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-494 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-495 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-496 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-497 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-498 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-499 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-500 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-502 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-503 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-504 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-505 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-506 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-508 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-509 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-510 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-511 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-512 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-513 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-514 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-515 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-516 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-517 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-518 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-519 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-520 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-522 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-523 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-524 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-525 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-526 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-528 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-529 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-530 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-531 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-532 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-533 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-534 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-535 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-536 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-537 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-538 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-539 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-540 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-542 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-543 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-544 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-545 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-546 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-548 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-549 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-550 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-551 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-552 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-553 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-554 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-555 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-556 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-557 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-558 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-559 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-560 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-561 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-562 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-563 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-564 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-565 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-566 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-567 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-568 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-569 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-570 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-301 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-572 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-573 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-574 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-575 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-576 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-307 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-578 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-579 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-580 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-581 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-582 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-583 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-584 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-585 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-586 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-587 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-588 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-589 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-590 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-321 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-592 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-593 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-594 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-595 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-596 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-327 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-598 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-599 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-600 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-601 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-602 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-603 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-604 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-605 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-606 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-607 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-608 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-609 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-610 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-341 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-612 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-613 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-614 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-615 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-616 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-347 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-618 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-619 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-620 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-621 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-622 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-623 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-624 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-625 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-626 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-627 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-628 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-629 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-630 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-361 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-632 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-633 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-634 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-635 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-636 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-367 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-638 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-639 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-640 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-641 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-642 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-643 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-644 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-645 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-646 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-647 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-648 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-649 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-650 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-651 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-652 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-653 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-654 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-655 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-656 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-657 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-658 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-659 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-660 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-391 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-662 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-663 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-664 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-665 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-666 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-397 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-668 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-669 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-670 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-671 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-672 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-673 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-674 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-675 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-676 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-677 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-678 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-679 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-680 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-411 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-682 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-683 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-684 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-685 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-686 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-417 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-688 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-689 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-690 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-691 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-692 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-693 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-694 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-695 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-696 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-697 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-698 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-699 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-700 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-431 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-702 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-703 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-704 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-705 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-706 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-437 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-708 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-709 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-710 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-711 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-712 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-713 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-714 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-715 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-716 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-717 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-718 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-719 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-720 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-451 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-722 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-723 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-724 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-725 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-726 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-457 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-728 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-729 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-730 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-731 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-732 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-733 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-734 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-735 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-736 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-737 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-738 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-739 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-740 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-741 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-742 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-743 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-744 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-745 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-746 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-747 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-748 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-749 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-750 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-752 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-753 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-754 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-755 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-756 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-758 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-759 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-760 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-761 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-762 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-763 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-764 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-765 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-766 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-767 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-768 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-769 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-770 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-772 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-773 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-774 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-775 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-776 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-778 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-779 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-780 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-781 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-782 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-783 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-784 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-785 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-786 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-787 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-788 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-789 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-790 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-792 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-793 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-794 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-795 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-796 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-798 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-799 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-800 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-801 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-802 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-803 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-804 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-805 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-806 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-807 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-808 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-809 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-810 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-812 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-813 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-814 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-815 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-816 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-818 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-819 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-820 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-821 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-822 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-823 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-824 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-825 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-826 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-827 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-828 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-829 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-830 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-831 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-832 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-833 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-834 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-835 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-836 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-837 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-838 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-839 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-840 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-481 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-842 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-843 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-844 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-845 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-846 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-487 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-848 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-849 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-850 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-851 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-852 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-853 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-854 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-855 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-856 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-857 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-858 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-859 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-860 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-501 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-862 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-863 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-864 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-865 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-866 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-507 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-868 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-869 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-870 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-871 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-872 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-873 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-874 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-875 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-876 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-877 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-878 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-879 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-880 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-521 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-882 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-883 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-884 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-885 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-886 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-527 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-888 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-889 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-890 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-891 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-892 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-893 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-894 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-895 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-896 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-897 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-898 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-899 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-900 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-541 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-902 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-903 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-904 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-905 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-906 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-547 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-908 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-909 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-910 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-911 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-912 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-913 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-914 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-915 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-916 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-917 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-918 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-919 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-920 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-921 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-922 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-923 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-924 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-925 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-926 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-927 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-928 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-929 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-930 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-931 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-932 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-933 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-934 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-935 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-936 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-937 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-938 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-939 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-940 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-941 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-942 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-943 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-944 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-945 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-946 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-947 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-948 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-949 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-950 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-951 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-952 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-953 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-954 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-955 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-956 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-957 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-958 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-959 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-960 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-961 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-962 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-963 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-964 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-965 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-966 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-967 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-968 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-969 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-970 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-971 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-972 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-973 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-974 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-975 -A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set -A INPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set -A INPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set @@ -71169,25 +71169,25 @@ hash:net family inet -A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set -A INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set -A INPUT -j ACCEPT --A INPUT -j logdrop-2200 +-A INPUT -j logdrop-1650 -A INPUT -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-99 --A INPUT -j logdrop-2201 +-A INPUT -j logaccept-66 +-A INPUT -j logdrop-1651 -A INPUT -j logpass-0 --A INPUT -j logaccept-100 --A INPUT -j logdrop-2202 +-A INPUT -j logaccept-67 +-A INPUT -j logdrop-1652 -A INPUT -j logpass-1 --A INPUT -j logaccept-101 --A INPUT -j logdrop-2203 +-A INPUT -j logaccept-68 +-A INPUT -j logdrop-1653 -A INPUT -j logpass-2 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-102 --A INPUT -j logdrop-2204 +-A INPUT -j logaccept-69 +-A INPUT -j logdrop-1654 -A INPUT -j logpass-3 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT @@ -74634,516 +74634,516 @@ hash:net family inet -A OUTPUT -j logaccept-final-304 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-305 --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set -A OUTPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set -A OUTPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set @@ -75151,25 +75151,25 @@ hash:net family inet -A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set -A OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set -A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-2200 +-A OUTPUT -j logdrop-1650 -A OUTPUT -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-99 --A OUTPUT -j logdrop-2201 +-A OUTPUT -j logaccept-66 +-A OUTPUT -j logdrop-1651 -A OUTPUT -j logpass-0 --A OUTPUT -j logaccept-100 --A OUTPUT -j logdrop-2202 +-A OUTPUT -j logaccept-67 +-A OUTPUT -j logdrop-1652 -A OUTPUT -j logpass-1 --A OUTPUT -j logaccept-101 --A OUTPUT -j logdrop-2203 +-A OUTPUT -j logaccept-68 +-A OUTPUT -j logdrop-1653 -A OUTPUT -j logpass-2 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-102 --A OUTPUT -j logdrop-2204 +-A OUTPUT -j logaccept-69 +-A OUTPUT -j logdrop-1654 -A OUTPUT -j logpass-3 -A OUTPUT -m limit --limit 12/minute -j ULOG -A OUTPUT -j ACCEPT @@ -79760,2569 +79760,268 @@ hash:net family inet -A limit-2927 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2927 -j RETURN -A limit-2927 -m limit --limit 12/minute -j ULOG -A limit-2927 -j DROP --A limit-2928 -m recent --name limit-2928 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1650 --A limit-2928 -m recent --name limit-2928 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2929 -m recent --name limit-2929 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1651 --A limit-2929 -m recent --name limit-2929 --rsource --mask 255.255.255.255 --set -A limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2930 -m recent --name limit-2930 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1652 --A limit-2930 -m limit --limit 1/second -j LOG --A limit-2930 -m recent --name limit-2930 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2931 -m recent --name limit-2931 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1653 --A limit-2931 -m recent --name limit-2931 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2932 -m recent --name limit-2932 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1654 --A limit-2932 -j TEE --gateway 10.0.0.1 --A limit-2932 -j TEE --gateway 10.0.0.2 --A limit-2932 -m recent --name limit-2932 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2933 -m recent --name limit-2933 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1655 --A limit-2933 -m recent --name limit-2933 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-2933 -m recent --name limit-2933 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-2934 -m recent --name limit-2934 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1656 --A limit-2934 -m recent --name limit-2934 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2935 -m recent --name limit-2935 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1657 --A limit-2935 -m recent --name limit-2935 --rsource --mask 255.255.255.255 --set --A limit-2936 -m recent --name limit-2936 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1658 --A limit-2936 -m limit --limit 12/minute -j ULOG --A limit-2936 -m recent --name limit-2936 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2937 -m recent --name limit-2937 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1659 --A limit-2937 -m recent --name limit-2937 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2938 -m recent --name limit-2938 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2938 -m recent --name limit-2938 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2939 -m recent --name limit-2939 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2939 -m recent --name limit-2939 --rsource --mask 255.255.255.255 --set -A limit-294 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-294 -j TEE --gateway 10.0.0.1 -A limit-294 -j TEE --gateway 10.0.0.2 -A limit-294 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2940 -m recent --name limit-2940 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2940 -m limit --limit 1/second -j LOG --A limit-2940 -m recent --name limit-2940 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2941 -m recent --name limit-2941 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2941 -m recent --name limit-2941 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2942 -m recent --name limit-2942 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2942 -j TEE --gateway 10.0.0.1 --A limit-2942 -j TEE --gateway 10.0.0.2 --A limit-2942 -m recent --name limit-2942 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2943 -m recent --name limit-2943 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2943 -m recent --name limit-2943 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-2943 -m recent --name limit-2943 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-2944 -m recent --name limit-2944 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2944 -m recent --name limit-2944 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2945 -m recent --name limit-2945 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2945 -m recent --name limit-2945 --rsource --mask 255.255.255.255 --set --A limit-2946 -m recent --name limit-2946 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2946 -m limit --limit 12/minute -j ULOG --A limit-2946 -m recent --name limit-2946 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2947 -m recent --name limit-2947 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2947 -m recent --name limit-2947 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2948 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2948 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2949 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2949 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-2950 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2950 -m limit --limit 1/second -j LOG --A limit-2950 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2951 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2951 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2952 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2952 -j TEE --gateway 10.0.0.1 --A limit-2952 -j TEE --gateway 10.0.0.2 --A limit-2952 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2953 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2953 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-2953 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-2954 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2954 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2955 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2955 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2956 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2956 -m limit --limit 12/minute -j ULOG --A limit-2956 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2957 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2957 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2958 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2958 -j ACCEPT -A limit-296 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-296 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2960 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2960 -m limit --limit 1/second -j LOG --A limit-2960 -j ACCEPT --A limit-2961 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2961 -m limit --limit 1/second -j LOG --A limit-2962 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2962 -j TEE --gateway 10.0.0.1 --A limit-2962 -j TEE --gateway 10.0.0.2 --A limit-2962 -j ACCEPT --A limit-2963 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2963 -j TEE --gateway 10.0.0.1 --A limit-2963 -j TEE --gateway 10.0.0.2 --A limit-2964 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2964 -j ACCEPT --A limit-2966 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2966 -m limit --limit 12/minute -j ULOG --A limit-2966 -j ACCEPT --A limit-2967 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2967 -m limit --limit 12/minute -j ULOG --A limit-2968 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2968 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2969 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2969 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-297 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-297 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2970 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2970 -m limit --limit 1/second -j LOG --A limit-2970 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2971 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2971 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2972 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2972 -j TEE --gateway 10.0.0.1 --A limit-2972 -j TEE --gateway 10.0.0.2 --A limit-2972 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2973 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2973 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-2973 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-2974 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2974 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2975 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2975 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2976 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2976 -m limit --limit 12/minute -j ULOG --A limit-2976 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2977 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2977 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2978 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2978 -j ACCEPT -A limit-298 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-298 -m limit --limit 12/minute -j ULOG -A limit-298 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2980 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2980 -m limit --limit 1/second -j LOG --A limit-2980 -j ACCEPT --A limit-2981 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2981 -m limit --limit 1/second -j LOG --A limit-2982 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2982 -j TEE --gateway 10.0.0.1 --A limit-2982 -j TEE --gateway 10.0.0.2 --A limit-2982 -j ACCEPT --A limit-2983 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2983 -j TEE --gateway 10.0.0.1 --A limit-2983 -j TEE --gateway 10.0.0.2 --A limit-2984 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2984 -j ACCEPT --A limit-2986 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2986 -m limit --limit 12/minute -j ULOG --A limit-2986 -j ACCEPT --A limit-2987 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2987 -m limit --limit 12/minute -j ULOG --A limit-2988 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2988 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2989 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2989 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-299 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-299 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2990 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2990 -m limit --limit 1/second -j LOG --A limit-2990 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2991 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2991 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2992 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2992 -j TEE --gateway 10.0.0.1 --A limit-2992 -j TEE --gateway 10.0.0.2 --A limit-2992 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2993 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2993 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-2993 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-2994 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2994 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2995 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2995 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2996 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2996 -m limit --limit 12/minute -j ULOG --A limit-2996 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2997 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2997 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2998 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2998 -j ACCEPT -A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-3 -A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-30 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-30 -j ACCEPT -A limit-300 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-300 -j ACCEPT --A limit-3000 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3000 -m limit --limit 1/second -j LOG --A limit-3000 -j ACCEPT --A limit-3001 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3001 -m limit --limit 1/second -j LOG --A limit-3002 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3002 -j TEE --gateway 10.0.0.1 --A limit-3002 -j TEE --gateway 10.0.0.2 --A limit-3002 -j ACCEPT --A limit-3003 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3003 -j TEE --gateway 10.0.0.1 --A limit-3003 -j TEE --gateway 10.0.0.2 --A limit-3004 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3004 -j ACCEPT --A limit-3006 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3006 -m limit --limit 12/minute -j ULOG --A limit-3006 -j ACCEPT --A limit-3007 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3007 -m limit --limit 12/minute -j ULOG --A limit-3008 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3008 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3009 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3009 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-301 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3010 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3010 -m limit --limit 1/second -j LOG --A limit-3010 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3011 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3011 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3012 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3012 -j TEE --gateway 10.0.0.1 --A limit-3012 -j TEE --gateway 10.0.0.2 --A limit-3012 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3013 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3013 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3013 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3014 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3014 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3015 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3015 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-3016 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3016 -m limit --limit 12/minute -j ULOG --A limit-3016 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3017 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3017 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3018 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3018 -j ACCEPT -A limit-302 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-302 -m limit --limit 1/second -j LOG -A limit-302 -j ACCEPT --A limit-3020 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3020 -m limit --limit 1/second -j LOG --A limit-3020 -j ACCEPT --A limit-3021 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3021 -m limit --limit 1/second -j LOG --A limit-3022 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3022 -j TEE --gateway 10.0.0.1 --A limit-3022 -j TEE --gateway 10.0.0.2 --A limit-3022 -j ACCEPT --A limit-3023 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3023 -j TEE --gateway 10.0.0.1 --A limit-3023 -j TEE --gateway 10.0.0.2 --A limit-3024 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3024 -j ACCEPT --A limit-3026 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3026 -m limit --limit 12/minute -j ULOG --A limit-3026 -j ACCEPT --A limit-3027 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3027 -m limit --limit 12/minute -j ULOG --A limit-3028 -m recent --name limit-3028 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1660 --A limit-3028 -m recent --name limit-3028 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3029 -m recent --name limit-3029 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1661 --A limit-3029 -m recent --name limit-3029 --rsource --mask 255.255.255.255 --set -A limit-303 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-303 -m limit --limit 1/second -j LOG --A limit-3030 -m recent --name limit-3030 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1662 --A limit-3030 -m limit --limit 1/second -j LOG --A limit-3030 -m recent --name limit-3030 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3031 -m recent --name limit-3031 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1663 --A limit-3031 -m recent --name limit-3031 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3032 -m recent --name limit-3032 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1664 --A limit-3032 -j TEE --gateway 10.0.0.1 --A limit-3032 -j TEE --gateway 10.0.0.2 --A limit-3032 -m recent --name limit-3032 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3033 -m recent --name limit-3033 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1665 --A limit-3033 -m recent --name limit-3033 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3033 -m recent --name limit-3033 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3034 -m recent --name limit-3034 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1666 --A limit-3034 -m recent --name limit-3034 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3035 -m recent --name limit-3035 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1667 --A limit-3035 -m recent --name limit-3035 --rsource --mask 255.255.255.255 --set --A limit-3036 -m recent --name limit-3036 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1668 --A limit-3036 -m limit --limit 12/minute -j ULOG --A limit-3036 -m recent --name limit-3036 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3037 -m recent --name limit-3037 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1669 --A limit-3037 -m recent --name limit-3037 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3038 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1670 --A limit-3038 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3039 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1671 --A limit-3039 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-304 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-304 -j TEE --gateway 10.0.0.1 -A limit-304 -j TEE --gateway 10.0.0.2 -A limit-304 -j ACCEPT --A limit-3040 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1672 --A limit-3040 -m limit --limit 1/second -j LOG --A limit-3040 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3041 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1673 --A limit-3041 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3042 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1674 --A limit-3042 -j TEE --gateway 10.0.0.1 --A limit-3042 -j TEE --gateway 10.0.0.2 --A limit-3042 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3043 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1675 --A limit-3043 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3043 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3044 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1676 --A limit-3044 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3045 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1677 --A limit-3045 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-3046 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1678 --A limit-3046 -m limit --limit 12/minute -j ULOG --A limit-3046 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3047 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1679 --A limit-3047 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3048 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1680 --A limit-3048 -j ACCEPT -A limit-305 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-305 -j TEE --gateway 10.0.0.1 -A limit-305 -j TEE --gateway 10.0.0.2 --A limit-3050 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1682 --A limit-3050 -m limit --limit 1/second -j LOG --A limit-3050 -j ACCEPT --A limit-3051 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1683 --A limit-3051 -m limit --limit 1/second -j LOG --A limit-3052 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1684 --A limit-3052 -j TEE --gateway 10.0.0.1 --A limit-3052 -j TEE --gateway 10.0.0.2 --A limit-3052 -j ACCEPT --A limit-3053 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1685 --A limit-3053 -j TEE --gateway 10.0.0.1 --A limit-3053 -j TEE --gateway 10.0.0.2 --A limit-3054 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1686 --A limit-3054 -j ACCEPT --A limit-3056 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1688 --A limit-3056 -m limit --limit 12/minute -j ULOG --A limit-3056 -j ACCEPT --A limit-3057 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1689 --A limit-3057 -m limit --limit 12/minute -j ULOG --A limit-3058 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1690 --A limit-3058 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3059 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1691 --A limit-3059 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-306 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-306 -j ACCEPT --A limit-3060 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1692 --A limit-3060 -m limit --limit 1/second -j LOG --A limit-3060 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3061 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1693 --A limit-3061 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3062 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1694 --A limit-3062 -j TEE --gateway 10.0.0.1 --A limit-3062 -j TEE --gateway 10.0.0.2 --A limit-3062 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3063 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1695 --A limit-3063 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3063 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3064 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1696 --A limit-3064 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3065 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1697 --A limit-3065 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3066 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1698 --A limit-3066 -m limit --limit 12/minute -j ULOG --A limit-3066 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3067 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1699 --A limit-3067 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3068 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1700 --A limit-3068 -j ACCEPT -A limit-307 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3070 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1702 --A limit-3070 -m limit --limit 1/second -j LOG --A limit-3070 -j ACCEPT --A limit-3071 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1703 --A limit-3071 -m limit --limit 1/second -j LOG --A limit-3072 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1704 --A limit-3072 -j TEE --gateway 10.0.0.1 --A limit-3072 -j TEE --gateway 10.0.0.2 --A limit-3072 -j ACCEPT --A limit-3073 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1705 --A limit-3073 -j TEE --gateway 10.0.0.1 --A limit-3073 -j TEE --gateway 10.0.0.2 --A limit-3074 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1706 --A limit-3074 -j ACCEPT --A limit-3076 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1708 --A limit-3076 -m limit --limit 12/minute -j ULOG --A limit-3076 -j ACCEPT --A limit-3077 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1709 --A limit-3077 -m limit --limit 12/minute -j ULOG --A limit-3078 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1710 --A limit-3078 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3079 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1711 --A limit-3079 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-308 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-308 -m limit --limit 12/minute -j ULOG -A limit-308 -j ACCEPT --A limit-3080 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1712 --A limit-3080 -m limit --limit 1/second -j LOG --A limit-3080 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3081 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1713 --A limit-3081 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3082 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1714 --A limit-3082 -j TEE --gateway 10.0.0.1 --A limit-3082 -j TEE --gateway 10.0.0.2 --A limit-3082 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3083 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1715 --A limit-3083 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3083 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3084 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1716 --A limit-3084 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3085 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1717 --A limit-3085 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-3086 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1718 --A limit-3086 -m limit --limit 12/minute -j ULOG --A limit-3086 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3087 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1719 --A limit-3087 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3088 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1720 --A limit-3088 -j ACCEPT -A limit-309 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-309 -m limit --limit 12/minute -j ULOG --A limit-3090 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1722 --A limit-3090 -m limit --limit 1/second -j LOG --A limit-3090 -j ACCEPT --A limit-3091 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1723 --A limit-3091 -m limit --limit 1/second -j LOG --A limit-3092 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1724 --A limit-3092 -j TEE --gateway 10.0.0.1 --A limit-3092 -j TEE --gateway 10.0.0.2 --A limit-3092 -j ACCEPT --A limit-3093 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1725 --A limit-3093 -j TEE --gateway 10.0.0.1 --A limit-3093 -j TEE --gateway 10.0.0.2 --A limit-3094 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1726 --A limit-3094 -j ACCEPT --A limit-3096 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1728 --A limit-3096 -m limit --limit 12/minute -j ULOG --A limit-3096 -j ACCEPT --A limit-3097 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1729 --A limit-3097 -m limit --limit 12/minute -j ULOG --A limit-3098 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1730 --A limit-3098 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3099 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1731 --A limit-3099 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-31 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-310 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-310 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3100 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1732 --A limit-3100 -m limit --limit 1/second -j LOG --A limit-3100 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3101 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1733 --A limit-3101 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3102 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1734 --A limit-3102 -j TEE --gateway 10.0.0.1 --A limit-3102 -j TEE --gateway 10.0.0.2 --A limit-3102 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3103 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1735 --A limit-3103 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3103 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3104 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1736 --A limit-3104 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3105 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1737 --A limit-3105 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-3106 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1738 --A limit-3106 -m limit --limit 12/minute -j ULOG --A limit-3106 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3107 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1739 --A limit-3107 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3108 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1740 --A limit-3108 -j ACCEPT -A limit-311 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-311 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3110 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1742 --A limit-3110 -m limit --limit 1/second -j LOG --A limit-3110 -j ACCEPT --A limit-3111 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1743 --A limit-3111 -m limit --limit 1/second -j LOG --A limit-3112 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1744 --A limit-3112 -j TEE --gateway 10.0.0.1 --A limit-3112 -j TEE --gateway 10.0.0.2 --A limit-3112 -j ACCEPT --A limit-3113 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1745 --A limit-3113 -j TEE --gateway 10.0.0.1 --A limit-3113 -j TEE --gateway 10.0.0.2 --A limit-3114 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1746 --A limit-3114 -j ACCEPT --A limit-3116 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1748 --A limit-3116 -m limit --limit 12/minute -j ULOG --A limit-3116 -j ACCEPT --A limit-3117 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1749 --A limit-3117 -m limit --limit 12/minute -j ULOG --A limit-3118 -m recent --name limit-3118 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1750 --A limit-3118 -m recent --name limit-3118 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3119 -m recent --name limit-3119 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1751 --A limit-3119 -m recent --name limit-3119 --rsource --mask 255.255.255.255 --set -A limit-312 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-312 -m limit --limit 1/second -j LOG -A limit-312 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3120 -m recent --name limit-3120 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1752 --A limit-3120 -m limit --limit 1/second -j LOG --A limit-3120 -m recent --name limit-3120 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3121 -m recent --name limit-3121 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1753 --A limit-3121 -m recent --name limit-3121 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3122 -m recent --name limit-3122 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1754 --A limit-3122 -j TEE --gateway 10.0.0.1 --A limit-3122 -j TEE --gateway 10.0.0.2 --A limit-3122 -m recent --name limit-3122 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3123 -m recent --name limit-3123 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1755 --A limit-3123 -m recent --name limit-3123 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3123 -m recent --name limit-3123 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3124 -m recent --name limit-3124 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1756 --A limit-3124 -m recent --name limit-3124 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3125 -m recent --name limit-3125 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1757 --A limit-3125 -m recent --name limit-3125 --rsource --mask 255.255.255.255 --set --A limit-3126 -m recent --name limit-3126 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1758 --A limit-3126 -m limit --limit 12/minute -j ULOG --A limit-3126 -m recent --name limit-3126 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3127 -m recent --name limit-3127 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1759 --A limit-3127 -m recent --name limit-3127 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3128 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1760 --A limit-3128 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3129 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1761 --A limit-3129 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-313 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-313 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3130 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1762 --A limit-3130 -m limit --limit 1/second -j LOG --A limit-3130 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3131 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1763 --A limit-3131 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3132 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1764 --A limit-3132 -j TEE --gateway 10.0.0.1 --A limit-3132 -j TEE --gateway 10.0.0.2 --A limit-3132 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3133 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1765 --A limit-3133 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3133 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3134 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1766 --A limit-3134 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3135 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1767 --A limit-3135 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-3136 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1768 --A limit-3136 -m limit --limit 12/minute -j ULOG --A limit-3136 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3137 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1769 --A limit-3137 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3138 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1770 --A limit-3138 -j ACCEPT -A limit-314 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-314 -j TEE --gateway 10.0.0.1 -A limit-314 -j TEE --gateway 10.0.0.2 -A limit-314 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3140 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1772 --A limit-3140 -m limit --limit 1/second -j LOG --A limit-3140 -j ACCEPT --A limit-3141 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1773 --A limit-3141 -m limit --limit 1/second -j LOG --A limit-3142 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1774 --A limit-3142 -j TEE --gateway 10.0.0.1 --A limit-3142 -j TEE --gateway 10.0.0.2 --A limit-3142 -j ACCEPT --A limit-3143 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1775 --A limit-3143 -j TEE --gateway 10.0.0.1 --A limit-3143 -j TEE --gateway 10.0.0.2 --A limit-3144 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1776 --A limit-3144 -j ACCEPT --A limit-3146 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1778 --A limit-3146 -m limit --limit 12/minute -j ULOG --A limit-3146 -j ACCEPT --A limit-3147 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1779 --A limit-3147 -m limit --limit 12/minute -j ULOG --A limit-3148 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1780 --A limit-3148 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3149 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1781 --A limit-3149 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-315 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-315 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-315 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3150 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1782 --A limit-3150 -m limit --limit 1/second -j LOG --A limit-3150 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3151 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1783 --A limit-3151 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3152 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1784 --A limit-3152 -j TEE --gateway 10.0.0.1 --A limit-3152 -j TEE --gateway 10.0.0.2 --A limit-3152 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3153 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1785 --A limit-3153 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3153 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3154 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1786 --A limit-3154 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3155 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1787 --A limit-3155 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3156 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1788 --A limit-3156 -m limit --limit 12/minute -j ULOG --A limit-3156 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3157 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1789 --A limit-3157 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3158 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1790 --A limit-3158 -j ACCEPT -A limit-316 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-316 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3160 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1792 --A limit-3160 -m limit --limit 1/second -j LOG --A limit-3160 -j ACCEPT --A limit-3161 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1793 --A limit-3161 -m limit --limit 1/second -j LOG --A limit-3162 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1794 --A limit-3162 -j TEE --gateway 10.0.0.1 --A limit-3162 -j TEE --gateway 10.0.0.2 --A limit-3162 -j ACCEPT --A limit-3163 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1795 --A limit-3163 -j TEE --gateway 10.0.0.1 --A limit-3163 -j TEE --gateway 10.0.0.2 --A limit-3164 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1796 --A limit-3164 -j ACCEPT --A limit-3166 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1798 --A limit-3166 -m limit --limit 12/minute -j ULOG --A limit-3166 -j ACCEPT --A limit-3167 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1799 --A limit-3167 -m limit --limit 12/minute -j ULOG --A limit-3168 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1800 --A limit-3168 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3169 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1801 --A limit-3169 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-317 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-317 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3170 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1802 --A limit-3170 -m limit --limit 1/second -j LOG --A limit-3170 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3171 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1803 --A limit-3171 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3172 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1804 --A limit-3172 -j TEE --gateway 10.0.0.1 --A limit-3172 -j TEE --gateway 10.0.0.2 --A limit-3172 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3173 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1805 --A limit-3173 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3173 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3174 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1806 --A limit-3174 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3175 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1807 --A limit-3175 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-3176 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1808 --A limit-3176 -m limit --limit 12/minute -j ULOG --A limit-3176 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3177 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1809 --A limit-3177 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3178 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1810 --A limit-3178 -j ACCEPT -A limit-318 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-318 -m limit --limit 12/minute -j ULOG -A limit-318 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3180 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1812 --A limit-3180 -m limit --limit 1/second -j LOG --A limit-3180 -j ACCEPT --A limit-3181 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1813 --A limit-3181 -m limit --limit 1/second -j LOG --A limit-3182 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1814 --A limit-3182 -j TEE --gateway 10.0.0.1 --A limit-3182 -j TEE --gateway 10.0.0.2 --A limit-3182 -j ACCEPT --A limit-3183 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1815 --A limit-3183 -j TEE --gateway 10.0.0.1 --A limit-3183 -j TEE --gateway 10.0.0.2 --A limit-3184 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1816 --A limit-3184 -j ACCEPT --A limit-3186 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1818 --A limit-3186 -m limit --limit 12/minute -j ULOG --A limit-3186 -j ACCEPT --A limit-3187 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1819 --A limit-3187 -m limit --limit 12/minute -j ULOG --A limit-3188 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1820 --A limit-3188 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3189 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1821 --A limit-3189 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-319 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-319 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3190 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1822 --A limit-3190 -m limit --limit 1/second -j LOG --A limit-3190 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3191 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1823 --A limit-3191 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3192 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1824 --A limit-3192 -j TEE --gateway 10.0.0.1 --A limit-3192 -j TEE --gateway 10.0.0.2 --A limit-3192 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3193 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1825 --A limit-3193 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3193 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3194 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1826 --A limit-3194 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3195 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1827 --A limit-3195 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-3196 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1828 --A limit-3196 -m limit --limit 12/minute -j ULOG --A limit-3196 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3197 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1829 --A limit-3197 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3198 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1830 --A limit-3198 -j ACCEPT -A limit-32 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-32 -m limit --limit 1/second -j LOG -A limit-32 -j ACCEPT -A limit-320 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-320 -j ACCEPT --A limit-3200 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1832 --A limit-3200 -m limit --limit 1/second -j LOG --A limit-3200 -j ACCEPT --A limit-3201 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1833 --A limit-3201 -m limit --limit 1/second -j LOG --A limit-3202 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1834 --A limit-3202 -j TEE --gateway 10.0.0.1 --A limit-3202 -j TEE --gateway 10.0.0.2 --A limit-3202 -j ACCEPT --A limit-3203 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1835 --A limit-3203 -j TEE --gateway 10.0.0.1 --A limit-3203 -j TEE --gateway 10.0.0.2 --A limit-3204 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1836 --A limit-3204 -j ACCEPT --A limit-3206 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1838 --A limit-3206 -m limit --limit 12/minute -j ULOG --A limit-3206 -j ACCEPT --A limit-3207 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1839 --A limit-3207 -m limit --limit 12/minute -j ULOG --A limit-3208 -m recent --name limit-3208 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3208 -m recent --name limit-3208 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3209 -m recent --name limit-3209 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3209 -m recent --name limit-3209 --rsource --mask 255.255.255.255 --set -A limit-321 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3210 -m recent --name limit-3210 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3210 -m limit --limit 1/second -j LOG --A limit-3210 -m recent --name limit-3210 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3211 -m recent --name limit-3211 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3211 -m recent --name limit-3211 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3212 -m recent --name limit-3212 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3212 -j TEE --gateway 10.0.0.1 --A limit-3212 -j TEE --gateway 10.0.0.2 --A limit-3212 -m recent --name limit-3212 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3213 -m recent --name limit-3213 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3213 -m recent --name limit-3213 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3213 -m recent --name limit-3213 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3214 -m recent --name limit-3214 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3214 -m recent --name limit-3214 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3215 -m recent --name limit-3215 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3215 -m recent --name limit-3215 --rsource --mask 255.255.255.255 --set --A limit-3216 -m recent --name limit-3216 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3216 -m limit --limit 12/minute -j ULOG --A limit-3216 -m recent --name limit-3216 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3217 -m recent --name limit-3217 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3217 -m recent --name limit-3217 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3218 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3218 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3219 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3219 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-322 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-322 -m limit --limit 1/second -j LOG -A limit-322 -j ACCEPT --A limit-3220 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3220 -m limit --limit 1/second -j LOG --A limit-3220 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3221 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3221 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3222 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3222 -j TEE --gateway 10.0.0.1 --A limit-3222 -j TEE --gateway 10.0.0.2 --A limit-3222 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3223 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3223 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3223 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3224 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3224 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3225 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3225 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-3226 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3226 -m limit --limit 12/minute -j ULOG --A limit-3226 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3227 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3227 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3228 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3228 -j ACCEPT -A limit-323 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-323 -m limit --limit 1/second -j LOG --A limit-3230 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3230 -m limit --limit 1/second -j LOG --A limit-3230 -j ACCEPT --A limit-3231 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3231 -m limit --limit 1/second -j LOG --A limit-3232 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3232 -j TEE --gateway 10.0.0.1 --A limit-3232 -j TEE --gateway 10.0.0.2 --A limit-3232 -j ACCEPT --A limit-3233 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3233 -j TEE --gateway 10.0.0.1 --A limit-3233 -j TEE --gateway 10.0.0.2 --A limit-3234 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3234 -j ACCEPT --A limit-3236 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3236 -m limit --limit 12/minute -j ULOG --A limit-3236 -j ACCEPT --A limit-3237 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3237 -m limit --limit 12/minute -j ULOG --A limit-3238 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3238 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3239 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3239 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-324 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-324 -j TEE --gateway 10.0.0.1 -A limit-324 -j TEE --gateway 10.0.0.2 -A limit-324 -j ACCEPT --A limit-3240 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3240 -m limit --limit 1/second -j LOG --A limit-3240 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3241 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3241 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3242 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3242 -j TEE --gateway 10.0.0.1 --A limit-3242 -j TEE --gateway 10.0.0.2 --A limit-3242 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3243 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3243 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3243 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3244 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3244 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3245 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3245 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3246 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3246 -m limit --limit 12/minute -j ULOG --A limit-3246 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3247 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3247 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3248 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3248 -j ACCEPT -A limit-325 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-325 -j TEE --gateway 10.0.0.1 -A limit-325 -j TEE --gateway 10.0.0.2 --A limit-3250 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3250 -m limit --limit 1/second -j LOG --A limit-3250 -j ACCEPT --A limit-3251 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3251 -m limit --limit 1/second -j LOG --A limit-3252 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3252 -j TEE --gateway 10.0.0.1 --A limit-3252 -j TEE --gateway 10.0.0.2 --A limit-3252 -j ACCEPT --A limit-3253 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3253 -j TEE --gateway 10.0.0.1 --A limit-3253 -j TEE --gateway 10.0.0.2 --A limit-3254 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3254 -j ACCEPT --A limit-3256 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3256 -m limit --limit 12/minute -j ULOG --A limit-3256 -j ACCEPT --A limit-3257 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3257 -m limit --limit 12/minute -j ULOG --A limit-3258 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3258 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3259 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3259 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-326 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-326 -j ACCEPT --A limit-3260 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3260 -m limit --limit 1/second -j LOG --A limit-3260 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3261 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3261 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3262 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3262 -j TEE --gateway 10.0.0.1 --A limit-3262 -j TEE --gateway 10.0.0.2 --A limit-3262 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3263 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3263 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3263 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3264 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3264 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3265 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3265 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-3266 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3266 -m limit --limit 12/minute -j ULOG --A limit-3266 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3267 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3267 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3268 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3268 -j ACCEPT -A limit-327 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3270 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3270 -m limit --limit 1/second -j LOG --A limit-3270 -j ACCEPT --A limit-3271 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3271 -m limit --limit 1/second -j LOG --A limit-3272 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3272 -j TEE --gateway 10.0.0.1 --A limit-3272 -j TEE --gateway 10.0.0.2 --A limit-3272 -j ACCEPT --A limit-3273 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3273 -j TEE --gateway 10.0.0.1 --A limit-3273 -j TEE --gateway 10.0.0.2 --A limit-3274 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3274 -j ACCEPT --A limit-3276 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3276 -m limit --limit 12/minute -j ULOG --A limit-3276 -j ACCEPT --A limit-3277 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3277 -m limit --limit 12/minute -j ULOG --A limit-3278 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3278 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3279 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3279 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-328 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-328 -m limit --limit 12/minute -j ULOG -A limit-328 -j ACCEPT --A limit-3280 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3280 -m limit --limit 1/second -j LOG --A limit-3280 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3281 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3281 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3282 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3282 -j TEE --gateway 10.0.0.1 --A limit-3282 -j TEE --gateway 10.0.0.2 --A limit-3282 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3283 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3283 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3283 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3284 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3284 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3285 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3285 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-3286 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3286 -m limit --limit 12/minute -j ULOG --A limit-3286 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3287 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3287 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3288 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3288 -j ACCEPT -A limit-329 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-329 -m limit --limit 12/minute -j ULOG --A limit-3290 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3290 -m limit --limit 1/second -j LOG --A limit-3290 -j ACCEPT --A limit-3291 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3291 -m limit --limit 1/second -j LOG --A limit-3292 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3292 -j TEE --gateway 10.0.0.1 --A limit-3292 -j TEE --gateway 10.0.0.2 --A limit-3292 -j ACCEPT --A limit-3293 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3293 -j TEE --gateway 10.0.0.1 --A limit-3293 -j TEE --gateway 10.0.0.2 --A limit-3294 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3294 -j ACCEPT --A limit-3296 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3296 -m limit --limit 12/minute -j ULOG --A limit-3296 -j ACCEPT --A limit-3297 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3297 -m limit --limit 12/minute -j ULOG --A limit-3298 -m recent --name limit-3298 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1840 --A limit-3298 -m recent --name limit-3298 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3299 -m recent --name limit-3299 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1841 --A limit-3299 -m recent --name limit-3299 --rsource --mask 255.255.255.255 --set -A limit-33 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-33 -m limit --limit 1/second -j LOG -A limit-330 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-330 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3300 -m recent --name limit-3300 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1842 --A limit-3300 -m limit --limit 1/second -j LOG --A limit-3300 -m recent --name limit-3300 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3301 -m recent --name limit-3301 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1843 --A limit-3301 -m recent --name limit-3301 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3302 -m recent --name limit-3302 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1844 --A limit-3302 -j TEE --gateway 10.0.0.1 --A limit-3302 -j TEE --gateway 10.0.0.2 --A limit-3302 -m recent --name limit-3302 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3303 -m recent --name limit-3303 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1845 --A limit-3303 -m recent --name limit-3303 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3303 -m recent --name limit-3303 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3304 -m recent --name limit-3304 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1846 --A limit-3304 -m recent --name limit-3304 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3305 -m recent --name limit-3305 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1847 --A limit-3305 -m recent --name limit-3305 --rsource --mask 255.255.255.255 --set --A limit-3306 -m recent --name limit-3306 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1848 --A limit-3306 -m limit --limit 12/minute -j ULOG --A limit-3306 -m recent --name limit-3306 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3307 -m recent --name limit-3307 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1849 --A limit-3307 -m recent --name limit-3307 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3308 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1850 --A limit-3308 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3309 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1851 --A limit-3309 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-331 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-331 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-3310 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1852 --A limit-3310 -m limit --limit 1/second -j LOG --A limit-3310 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3311 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1853 --A limit-3311 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3312 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1854 --A limit-3312 -j TEE --gateway 10.0.0.1 --A limit-3312 -j TEE --gateway 10.0.0.2 --A limit-3312 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3313 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1855 --A limit-3313 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3313 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3314 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1856 --A limit-3314 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3315 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1857 --A limit-3315 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-3316 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1858 --A limit-3316 -m limit --limit 12/minute -j ULOG --A limit-3316 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3317 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1859 --A limit-3317 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3318 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1860 --A limit-3318 -j ACCEPT -A limit-332 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-332 -m limit --limit 1/second -j LOG -A limit-332 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3320 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1862 --A limit-3320 -m limit --limit 1/second -j LOG --A limit-3320 -j ACCEPT --A limit-3321 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1863 --A limit-3321 -m limit --limit 1/second -j LOG --A limit-3322 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1864 --A limit-3322 -j TEE --gateway 10.0.0.1 --A limit-3322 -j TEE --gateway 10.0.0.2 --A limit-3322 -j ACCEPT --A limit-3323 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1865 --A limit-3323 -j TEE --gateway 10.0.0.1 --A limit-3323 -j TEE --gateway 10.0.0.2 --A limit-3324 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1866 --A limit-3324 -j ACCEPT --A limit-3326 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1868 --A limit-3326 -m limit --limit 12/minute -j ULOG --A limit-3326 -j ACCEPT --A limit-3327 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1869 --A limit-3327 -m limit --limit 12/minute -j ULOG --A limit-3328 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1870 --A limit-3328 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3329 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1871 --A limit-3329 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-333 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-333 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3330 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1872 --A limit-3330 -m limit --limit 1/second -j LOG --A limit-3330 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3331 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1873 --A limit-3331 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3332 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1874 --A limit-3332 -j TEE --gateway 10.0.0.1 --A limit-3332 -j TEE --gateway 10.0.0.2 --A limit-3332 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3333 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1875 --A limit-3333 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3333 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3334 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1876 --A limit-3334 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3335 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1877 --A limit-3335 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3336 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1878 --A limit-3336 -m limit --limit 12/minute -j ULOG --A limit-3336 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3337 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1879 --A limit-3337 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3338 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1880 --A limit-3338 -j ACCEPT -A limit-334 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-334 -j TEE --gateway 10.0.0.1 -A limit-334 -j TEE --gateway 10.0.0.2 -A limit-334 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3340 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1882 --A limit-3340 -m limit --limit 1/second -j LOG --A limit-3340 -j ACCEPT --A limit-3341 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1883 --A limit-3341 -m limit --limit 1/second -j LOG --A limit-3342 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1884 --A limit-3342 -j TEE --gateway 10.0.0.1 --A limit-3342 -j TEE --gateway 10.0.0.2 --A limit-3342 -j ACCEPT --A limit-3343 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1885 --A limit-3343 -j TEE --gateway 10.0.0.1 --A limit-3343 -j TEE --gateway 10.0.0.2 --A limit-3344 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1886 --A limit-3344 -j ACCEPT --A limit-3346 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1888 --A limit-3346 -m limit --limit 12/minute -j ULOG --A limit-3346 -j ACCEPT --A limit-3347 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1889 --A limit-3347 -m limit --limit 12/minute -j ULOG --A limit-3348 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1890 --A limit-3348 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3349 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1891 --A limit-3349 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-335 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-335 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-335 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3350 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1892 --A limit-3350 -m limit --limit 1/second -j LOG --A limit-3350 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3351 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1893 --A limit-3351 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3352 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1894 --A limit-3352 -j TEE --gateway 10.0.0.1 --A limit-3352 -j TEE --gateway 10.0.0.2 --A limit-3352 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3353 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1895 --A limit-3353 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3353 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3354 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1896 --A limit-3354 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3355 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1897 --A limit-3355 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-3356 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1898 --A limit-3356 -m limit --limit 12/minute -j ULOG --A limit-3356 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3357 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1899 --A limit-3357 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3358 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1900 --A limit-3358 -j ACCEPT -A limit-336 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-336 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3360 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1902 --A limit-3360 -m limit --limit 1/second -j LOG --A limit-3360 -j ACCEPT --A limit-3361 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1903 --A limit-3361 -m limit --limit 1/second -j LOG --A limit-3362 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1904 --A limit-3362 -j TEE --gateway 10.0.0.1 --A limit-3362 -j TEE --gateway 10.0.0.2 --A limit-3362 -j ACCEPT --A limit-3363 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1905 --A limit-3363 -j TEE --gateway 10.0.0.1 --A limit-3363 -j TEE --gateway 10.0.0.2 --A limit-3364 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1906 --A limit-3364 -j ACCEPT --A limit-3366 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1908 --A limit-3366 -m limit --limit 12/minute -j ULOG --A limit-3366 -j ACCEPT --A limit-3367 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1909 --A limit-3367 -m limit --limit 12/minute -j ULOG --A limit-3368 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1910 --A limit-3368 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3369 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1911 --A limit-3369 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-337 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-337 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-3370 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1912 --A limit-3370 -m limit --limit 1/second -j LOG --A limit-3370 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3371 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1913 --A limit-3371 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3372 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1914 --A limit-3372 -j TEE --gateway 10.0.0.1 --A limit-3372 -j TEE --gateway 10.0.0.2 --A limit-3372 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3373 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1915 --A limit-3373 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3373 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3374 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1916 --A limit-3374 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3375 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1917 --A limit-3375 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-3376 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1918 --A limit-3376 -m limit --limit 12/minute -j ULOG --A limit-3376 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3377 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1919 --A limit-3377 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3378 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1920 --A limit-3378 -j ACCEPT -A limit-338 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-338 -m limit --limit 12/minute -j ULOG -A limit-338 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3380 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1922 --A limit-3380 -m limit --limit 1/second -j LOG --A limit-3380 -j ACCEPT --A limit-3381 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1923 --A limit-3381 -m limit --limit 1/second -j LOG --A limit-3382 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1924 --A limit-3382 -j TEE --gateway 10.0.0.1 --A limit-3382 -j TEE --gateway 10.0.0.2 --A limit-3382 -j ACCEPT --A limit-3383 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1925 --A limit-3383 -j TEE --gateway 10.0.0.1 --A limit-3383 -j TEE --gateway 10.0.0.2 --A limit-3384 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1926 --A limit-3384 -j ACCEPT --A limit-3386 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1928 --A limit-3386 -m limit --limit 12/minute -j ULOG --A limit-3386 -j ACCEPT --A limit-3387 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1929 --A limit-3387 -m limit --limit 12/minute -j ULOG --A limit-3388 -m recent --name limit-3388 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3388 -m recent --name limit-3388 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3389 -m recent --name limit-3389 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3389 -m recent --name limit-3389 --rsource --mask 255.255.255.255 --set -A limit-339 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-339 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3390 -m recent --name limit-3390 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3390 -m limit --limit 1/second -j LOG --A limit-3390 -m recent --name limit-3390 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3391 -m recent --name limit-3391 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3391 -m recent --name limit-3391 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3392 -m recent --name limit-3392 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3392 -j TEE --gateway 10.0.0.1 --A limit-3392 -j TEE --gateway 10.0.0.2 --A limit-3392 -m recent --name limit-3392 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3393 -m recent --name limit-3393 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3393 -m recent --name limit-3393 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3393 -m recent --name limit-3393 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3394 -m recent --name limit-3394 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3394 -m recent --name limit-3394 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3395 -m recent --name limit-3395 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3395 -m recent --name limit-3395 --rsource --mask 255.255.255.255 --set --A limit-3396 -m recent --name limit-3396 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3396 -m limit --limit 12/minute -j ULOG --A limit-3396 -m recent --name limit-3396 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3397 -m recent --name limit-3397 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3397 -m recent --name limit-3397 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3398 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3398 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3399 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3399 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-34 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-34 -j TEE --gateway 10.0.0.1 -A limit-34 -j TEE --gateway 10.0.0.2 -A limit-34 -j ACCEPT -A limit-340 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-340 -j ACCEPT --A limit-3400 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3400 -m limit --limit 1/second -j LOG --A limit-3400 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3401 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3401 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3402 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3402 -j TEE --gateway 10.0.0.1 --A limit-3402 -j TEE --gateway 10.0.0.2 --A limit-3402 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3403 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3403 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3403 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3404 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3404 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3405 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3405 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-3406 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3406 -m limit --limit 12/minute -j ULOG --A limit-3406 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3407 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3407 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3408 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3408 -j ACCEPT -A limit-341 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3410 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3410 -m limit --limit 1/second -j LOG --A limit-3410 -j ACCEPT --A limit-3411 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3411 -m limit --limit 1/second -j LOG --A limit-3412 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3412 -j TEE --gateway 10.0.0.1 --A limit-3412 -j TEE --gateway 10.0.0.2 --A limit-3412 -j ACCEPT --A limit-3413 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3413 -j TEE --gateway 10.0.0.1 --A limit-3413 -j TEE --gateway 10.0.0.2 --A limit-3414 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3414 -j ACCEPT --A limit-3416 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3416 -m limit --limit 12/minute -j ULOG --A limit-3416 -j ACCEPT --A limit-3417 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3417 -m limit --limit 12/minute -j ULOG --A limit-3418 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3418 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3419 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3419 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-342 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-342 -m limit --limit 1/second -j LOG -A limit-342 -j ACCEPT --A limit-3420 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3420 -m limit --limit 1/second -j LOG --A limit-3420 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3421 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3421 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3422 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3422 -j TEE --gateway 10.0.0.1 --A limit-3422 -j TEE --gateway 10.0.0.2 --A limit-3422 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3423 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3423 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3423 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3424 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3424 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3425 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3425 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3426 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3426 -m limit --limit 12/minute -j ULOG --A limit-3426 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3427 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3427 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3428 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3428 -j ACCEPT -A limit-343 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-343 -m limit --limit 1/second -j LOG --A limit-3430 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3430 -m limit --limit 1/second -j LOG --A limit-3430 -j ACCEPT --A limit-3431 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3431 -m limit --limit 1/second -j LOG --A limit-3432 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3432 -j TEE --gateway 10.0.0.1 --A limit-3432 -j TEE --gateway 10.0.0.2 --A limit-3432 -j ACCEPT --A limit-3433 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3433 -j TEE --gateway 10.0.0.1 --A limit-3433 -j TEE --gateway 10.0.0.2 --A limit-3434 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3434 -j ACCEPT --A limit-3436 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3436 -m limit --limit 12/minute -j ULOG --A limit-3436 -j ACCEPT --A limit-3437 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3437 -m limit --limit 12/minute -j ULOG --A limit-3438 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3438 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3439 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3439 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-344 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-344 -j TEE --gateway 10.0.0.1 -A limit-344 -j TEE --gateway 10.0.0.2 -A limit-344 -j ACCEPT --A limit-3440 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3440 -m limit --limit 1/second -j LOG --A limit-3440 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3441 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3441 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3442 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3442 -j TEE --gateway 10.0.0.1 --A limit-3442 -j TEE --gateway 10.0.0.2 --A limit-3442 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3443 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3443 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3443 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3444 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3444 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3445 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3445 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-3446 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3446 -m limit --limit 12/minute -j ULOG --A limit-3446 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3447 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3447 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3448 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3448 -j ACCEPT -A limit-345 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-345 -j TEE --gateway 10.0.0.1 -A limit-345 -j TEE --gateway 10.0.0.2 --A limit-3450 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3450 -m limit --limit 1/second -j LOG --A limit-3450 -j ACCEPT --A limit-3451 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3451 -m limit --limit 1/second -j LOG --A limit-3452 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3452 -j TEE --gateway 10.0.0.1 --A limit-3452 -j TEE --gateway 10.0.0.2 --A limit-3452 -j ACCEPT --A limit-3453 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3453 -j TEE --gateway 10.0.0.1 --A limit-3453 -j TEE --gateway 10.0.0.2 --A limit-3454 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3454 -j ACCEPT --A limit-3456 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3456 -m limit --limit 12/minute -j ULOG --A limit-3456 -j ACCEPT --A limit-3457 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3457 -m limit --limit 12/minute -j ULOG --A limit-3458 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3458 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3459 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3459 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-346 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-346 -j ACCEPT --A limit-3460 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3460 -m limit --limit 1/second -j LOG --A limit-3460 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3461 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3461 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3462 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3462 -j TEE --gateway 10.0.0.1 --A limit-3462 -j TEE --gateway 10.0.0.2 --A limit-3462 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3463 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3464 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3464 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3465 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3465 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-3466 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3466 -m limit --limit 12/minute -j ULOG --A limit-3466 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3467 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3467 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3468 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3468 -j ACCEPT -A limit-347 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3470 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3470 -m limit --limit 1/second -j LOG --A limit-3470 -j ACCEPT --A limit-3471 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3471 -m limit --limit 1/second -j LOG --A limit-3472 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3472 -j TEE --gateway 10.0.0.1 --A limit-3472 -j TEE --gateway 10.0.0.2 --A limit-3472 -j ACCEPT --A limit-3473 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3473 -j TEE --gateway 10.0.0.1 --A limit-3473 -j TEE --gateway 10.0.0.2 --A limit-3474 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3474 -j ACCEPT --A limit-3476 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3476 -m limit --limit 12/minute -j ULOG --A limit-3476 -j ACCEPT --A limit-3477 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3477 -m limit --limit 12/minute -j ULOG --A limit-3478 -m recent --name limit-3478 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1930 --A limit-3478 -m recent --name limit-3478 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3479 -m recent --name limit-3479 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1931 --A limit-3479 -m recent --name limit-3479 --rsource --mask 255.255.255.255 --set -A limit-348 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-348 -m limit --limit 12/minute -j ULOG -A limit-348 -j ACCEPT --A limit-3480 -m recent --name limit-3480 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1932 --A limit-3480 -m limit --limit 1/second -j LOG --A limit-3480 -m recent --name limit-3480 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3481 -m recent --name limit-3481 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1933 --A limit-3481 -m recent --name limit-3481 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3482 -m recent --name limit-3482 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1934 --A limit-3482 -j TEE --gateway 10.0.0.1 --A limit-3482 -j TEE --gateway 10.0.0.2 --A limit-3482 -m recent --name limit-3482 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3483 -m recent --name limit-3483 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1935 --A limit-3483 -m recent --name limit-3483 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3483 -m recent --name limit-3483 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3484 -m recent --name limit-3484 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1936 --A limit-3484 -m recent --name limit-3484 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3485 -m recent --name limit-3485 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1937 --A limit-3485 -m recent --name limit-3485 --rsource --mask 255.255.255.255 --set --A limit-3486 -m recent --name limit-3486 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1938 --A limit-3486 -m limit --limit 12/minute -j ULOG --A limit-3486 -m recent --name limit-3486 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3487 -m recent --name limit-3487 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1939 --A limit-3487 -m recent --name limit-3487 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3488 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1940 --A limit-3488 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3489 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1941 --A limit-3489 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-349 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-349 -m limit --limit 12/minute -j ULOG --A limit-3490 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1942 --A limit-3490 -m limit --limit 1/second -j LOG --A limit-3490 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3491 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1943 --A limit-3491 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3492 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1944 --A limit-3492 -j TEE --gateway 10.0.0.1 --A limit-3492 -j TEE --gateway 10.0.0.2 --A limit-3492 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3493 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1945 --A limit-3493 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3493 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3494 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1946 --A limit-3494 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3495 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1947 --A limit-3495 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-3496 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1948 --A limit-3496 -m limit --limit 12/minute -j ULOG --A limit-3496 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3497 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1949 --A limit-3497 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3498 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1950 --A limit-3498 -j ACCEPT -A limit-35 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-35 -j TEE --gateway 10.0.0.1 -A limit-35 -j TEE --gateway 10.0.0.2 -A limit-350 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-350 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3500 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1952 --A limit-3500 -m limit --limit 1/second -j LOG --A limit-3500 -j ACCEPT --A limit-3501 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1953 --A limit-3501 -m limit --limit 1/second -j LOG --A limit-3502 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1954 --A limit-3502 -j TEE --gateway 10.0.0.1 --A limit-3502 -j TEE --gateway 10.0.0.2 --A limit-3502 -j ACCEPT --A limit-3503 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1955 --A limit-3503 -j TEE --gateway 10.0.0.1 --A limit-3503 -j TEE --gateway 10.0.0.2 --A limit-3504 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1956 --A limit-3504 -j ACCEPT --A limit-3506 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1958 --A limit-3506 -m limit --limit 12/minute -j ULOG --A limit-3506 -j ACCEPT --A limit-3507 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1959 --A limit-3507 -m limit --limit 12/minute -j ULOG --A limit-3508 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1960 --A limit-3508 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3509 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1961 --A limit-3509 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-351 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-351 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-3510 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1962 --A limit-3510 -m limit --limit 1/second -j LOG --A limit-3510 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3511 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1963 --A limit-3511 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3512 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1964 --A limit-3512 -j TEE --gateway 10.0.0.1 --A limit-3512 -j TEE --gateway 10.0.0.2 --A limit-3512 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3513 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1965 --A limit-3513 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3513 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3514 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1966 --A limit-3514 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3515 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1967 --A limit-3515 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3516 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1968 --A limit-3516 -m limit --limit 12/minute -j ULOG --A limit-3516 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3517 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1969 --A limit-3517 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3518 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1970 --A limit-3518 -j ACCEPT -A limit-352 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-352 -m limit --limit 1/second -j LOG -A limit-352 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3520 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1972 --A limit-3520 -m limit --limit 1/second -j LOG --A limit-3520 -j ACCEPT --A limit-3521 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1973 --A limit-3521 -m limit --limit 1/second -j LOG --A limit-3522 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1974 --A limit-3522 -j TEE --gateway 10.0.0.1 --A limit-3522 -j TEE --gateway 10.0.0.2 --A limit-3522 -j ACCEPT --A limit-3523 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1975 --A limit-3523 -j TEE --gateway 10.0.0.1 --A limit-3523 -j TEE --gateway 10.0.0.2 --A limit-3524 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1976 --A limit-3524 -j ACCEPT --A limit-3526 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1978 --A limit-3526 -m limit --limit 12/minute -j ULOG --A limit-3526 -j ACCEPT --A limit-3527 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1979 --A limit-3527 -m limit --limit 12/minute -j ULOG --A limit-3528 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1980 --A limit-3528 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3529 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1981 --A limit-3529 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-353 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-353 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3530 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1982 --A limit-3530 -m limit --limit 1/second -j LOG --A limit-3530 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3531 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1983 --A limit-3531 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3532 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1984 --A limit-3532 -j TEE --gateway 10.0.0.1 --A limit-3532 -j TEE --gateway 10.0.0.2 --A limit-3532 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3533 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1985 --A limit-3533 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3533 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3534 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1986 --A limit-3534 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3535 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1987 --A limit-3535 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-3536 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1988 --A limit-3536 -m limit --limit 12/minute -j ULOG --A limit-3536 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3537 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1989 --A limit-3537 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3538 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1990 --A limit-3538 -j ACCEPT -A limit-354 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-354 -j TEE --gateway 10.0.0.1 -A limit-354 -j TEE --gateway 10.0.0.2 -A limit-354 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3540 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1992 --A limit-3540 -m limit --limit 1/second -j LOG --A limit-3540 -j ACCEPT --A limit-3541 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1993 --A limit-3541 -m limit --limit 1/second -j LOG --A limit-3542 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1994 --A limit-3542 -j TEE --gateway 10.0.0.1 --A limit-3542 -j TEE --gateway 10.0.0.2 --A limit-3542 -j ACCEPT --A limit-3543 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1995 --A limit-3543 -j TEE --gateway 10.0.0.1 --A limit-3543 -j TEE --gateway 10.0.0.2 --A limit-3544 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1996 --A limit-3544 -j ACCEPT --A limit-3546 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1998 --A limit-3546 -m limit --limit 12/minute -j ULOG --A limit-3546 -j ACCEPT --A limit-3547 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1999 --A limit-3547 -m limit --limit 12/minute -j ULOG --A limit-3548 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2000 --A limit-3548 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3549 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2001 --A limit-3549 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3550 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2002 --A limit-3550 -m limit --limit 1/second -j LOG --A limit-3550 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3551 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2003 --A limit-3551 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3552 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2004 --A limit-3552 -j TEE --gateway 10.0.0.1 --A limit-3552 -j TEE --gateway 10.0.0.2 --A limit-3552 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3553 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2005 --A limit-3553 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3553 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3554 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2006 --A limit-3554 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3555 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2007 --A limit-3555 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-3556 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2008 --A limit-3556 -m limit --limit 12/minute -j ULOG --A limit-3556 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3557 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2009 --A limit-3557 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3558 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2010 --A limit-3558 -j ACCEPT -A limit-356 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-356 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3560 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2012 --A limit-3560 -m limit --limit 1/second -j LOG --A limit-3560 -j ACCEPT --A limit-3561 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2013 --A limit-3561 -m limit --limit 1/second -j LOG --A limit-3562 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2014 --A limit-3562 -j TEE --gateway 10.0.0.1 --A limit-3562 -j TEE --gateway 10.0.0.2 --A limit-3562 -j ACCEPT --A limit-3563 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2015 --A limit-3563 -j TEE --gateway 10.0.0.1 --A limit-3563 -j TEE --gateway 10.0.0.2 --A limit-3564 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2016 --A limit-3564 -j ACCEPT --A limit-3566 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2018 --A limit-3566 -m limit --limit 12/minute -j ULOG --A limit-3566 -j ACCEPT --A limit-3567 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2019 --A limit-3567 -m limit --limit 12/minute -j ULOG --A limit-3568 -m recent --name limit-3568 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2020 --A limit-3568 -m recent --name limit-3568 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3569 -m recent --name limit-3569 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2021 --A limit-3569 -m recent --name limit-3569 --rsource --mask 255.255.255.255 --set -A limit-357 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-357 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-3570 -m recent --name limit-3570 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2022 --A limit-3570 -m limit --limit 1/second -j LOG --A limit-3570 -m recent --name limit-3570 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3571 -m recent --name limit-3571 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2023 --A limit-3571 -m recent --name limit-3571 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3572 -m recent --name limit-3572 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2024 --A limit-3572 -j TEE --gateway 10.0.0.1 --A limit-3572 -j TEE --gateway 10.0.0.2 --A limit-3572 -m recent --name limit-3572 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3573 -m recent --name limit-3573 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2025 --A limit-3573 -m recent --name limit-3573 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3573 -m recent --name limit-3573 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3574 -m recent --name limit-3574 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2026 --A limit-3574 -m recent --name limit-3574 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3575 -m recent --name limit-3575 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2027 --A limit-3575 -m recent --name limit-3575 --rsource --mask 255.255.255.255 --set --A limit-3576 -m recent --name limit-3576 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2028 --A limit-3576 -m limit --limit 12/minute -j ULOG --A limit-3576 -m recent --name limit-3576 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3577 -m recent --name limit-3577 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2029 --A limit-3577 -m recent --name limit-3577 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3578 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2030 --A limit-3578 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3579 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2031 --A limit-3579 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-358 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-358 -m limit --limit 12/minute -j ULOG -A limit-358 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3580 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2032 --A limit-3580 -m limit --limit 1/second -j LOG --A limit-3580 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3581 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2033 --A limit-3581 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3582 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2034 --A limit-3582 -j TEE --gateway 10.0.0.1 --A limit-3582 -j TEE --gateway 10.0.0.2 --A limit-3582 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3583 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2035 --A limit-3583 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3583 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3584 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2036 --A limit-3584 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3585 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2037 --A limit-3585 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-3586 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2038 --A limit-3586 -m limit --limit 12/minute -j ULOG --A limit-3586 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3587 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2039 --A limit-3587 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3588 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2040 --A limit-3588 -j ACCEPT -A limit-359 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-359 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3590 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2042 --A limit-3590 -m limit --limit 1/second -j LOG --A limit-3590 -j ACCEPT --A limit-3591 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2043 --A limit-3591 -m limit --limit 1/second -j LOG --A limit-3592 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2044 --A limit-3592 -j TEE --gateway 10.0.0.1 --A limit-3592 -j TEE --gateway 10.0.0.2 --A limit-3592 -j ACCEPT --A limit-3593 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2045 --A limit-3593 -j TEE --gateway 10.0.0.1 --A limit-3593 -j TEE --gateway 10.0.0.2 --A limit-3594 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2046 --A limit-3594 -j ACCEPT --A limit-3596 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2048 --A limit-3596 -m limit --limit 12/minute -j ULOG --A limit-3596 -j ACCEPT --A limit-3597 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2049 --A limit-3597 -m limit --limit 12/minute -j ULOG --A limit-3598 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2050 --A limit-3598 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3599 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2051 --A limit-3599 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-36 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-36 -j ACCEPT -A limit-360 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-360 -j ACCEPT --A limit-3600 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2052 --A limit-3600 -m limit --limit 1/second -j LOG --A limit-3600 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3601 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2053 --A limit-3601 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3602 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2054 --A limit-3602 -j TEE --gateway 10.0.0.1 --A limit-3602 -j TEE --gateway 10.0.0.2 --A limit-3602 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3603 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2055 --A limit-3603 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3603 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3604 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2056 --A limit-3604 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3605 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2057 --A limit-3605 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3606 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2058 --A limit-3606 -m limit --limit 12/minute -j ULOG --A limit-3606 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3607 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2059 --A limit-3607 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3608 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2060 --A limit-3608 -j ACCEPT -A limit-361 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3610 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2062 --A limit-3610 -m limit --limit 1/second -j LOG --A limit-3610 -j ACCEPT --A limit-3611 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2063 --A limit-3611 -m limit --limit 1/second -j LOG --A limit-3612 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2064 --A limit-3612 -j TEE --gateway 10.0.0.1 --A limit-3612 -j TEE --gateway 10.0.0.2 --A limit-3612 -j ACCEPT --A limit-3613 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2065 --A limit-3613 -j TEE --gateway 10.0.0.1 --A limit-3613 -j TEE --gateway 10.0.0.2 --A limit-3614 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2066 --A limit-3614 -j ACCEPT --A limit-3616 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2068 --A limit-3616 -m limit --limit 12/minute -j ULOG --A limit-3616 -j ACCEPT --A limit-3617 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2069 --A limit-3617 -m limit --limit 12/minute -j ULOG --A limit-3618 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2070 --A limit-3618 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3619 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2071 --A limit-3619 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-362 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-362 -m limit --limit 1/second -j LOG -A limit-362 -j ACCEPT --A limit-3620 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2072 --A limit-3620 -m limit --limit 1/second -j LOG --A limit-3620 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3621 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2073 --A limit-3621 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3622 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2074 --A limit-3622 -j TEE --gateway 10.0.0.1 --A limit-3622 -j TEE --gateway 10.0.0.2 --A limit-3622 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3623 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2075 --A limit-3623 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3623 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3624 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2076 --A limit-3624 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3625 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2077 --A limit-3625 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-3626 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2078 --A limit-3626 -m limit --limit 12/minute -j ULOG --A limit-3626 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3627 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2079 --A limit-3627 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3628 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2080 --A limit-3628 -j ACCEPT -A limit-363 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-363 -m limit --limit 1/second -j LOG --A limit-3630 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2082 --A limit-3630 -m limit --limit 1/second -j LOG --A limit-3630 -j ACCEPT --A limit-3631 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2083 --A limit-3631 -m limit --limit 1/second -j LOG --A limit-3632 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2084 --A limit-3632 -j TEE --gateway 10.0.0.1 --A limit-3632 -j TEE --gateway 10.0.0.2 --A limit-3632 -j ACCEPT --A limit-3633 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2085 --A limit-3633 -j TEE --gateway 10.0.0.1 --A limit-3633 -j TEE --gateway 10.0.0.2 --A limit-3634 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2086 --A limit-3634 -j ACCEPT --A limit-3636 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2088 --A limit-3636 -m limit --limit 12/minute -j ULOG --A limit-3636 -j ACCEPT --A limit-3637 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2089 --A limit-3637 -m limit --limit 12/minute -j ULOG --A limit-3638 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2090 --A limit-3638 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3639 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2091 --A limit-3639 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-364 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-364 -j TEE --gateway 10.0.0.1 -A limit-364 -j TEE --gateway 10.0.0.2 -A limit-364 -j ACCEPT --A limit-3640 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2092 --A limit-3640 -m limit --limit 1/second -j LOG --A limit-3640 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3641 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2093 --A limit-3641 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3642 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2094 --A limit-3642 -j TEE --gateway 10.0.0.1 --A limit-3642 -j TEE --gateway 10.0.0.2 --A limit-3642 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3643 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2095 --A limit-3643 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3643 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3644 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2096 --A limit-3644 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3645 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2097 --A limit-3645 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-3646 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2098 --A limit-3646 -m limit --limit 12/minute -j ULOG --A limit-3646 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3647 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2099 --A limit-3647 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3648 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2100 --A limit-3648 -j ACCEPT -A limit-365 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-365 -j TEE --gateway 10.0.0.1 -A limit-365 -j TEE --gateway 10.0.0.2 --A limit-3650 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2102 --A limit-3650 -m limit --limit 1/second -j LOG --A limit-3650 -j ACCEPT --A limit-3651 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2103 --A limit-3651 -m limit --limit 1/second -j LOG --A limit-3652 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2104 --A limit-3652 -j TEE --gateway 10.0.0.1 --A limit-3652 -j TEE --gateway 10.0.0.2 --A limit-3652 -j ACCEPT --A limit-3653 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2105 --A limit-3653 -j TEE --gateway 10.0.0.1 --A limit-3653 -j TEE --gateway 10.0.0.2 --A limit-3654 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2106 --A limit-3654 -j ACCEPT --A limit-3656 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2108 --A limit-3656 -m limit --limit 12/minute -j ULOG --A limit-3656 -j ACCEPT --A limit-3657 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2109 --A limit-3657 -m limit --limit 12/minute -j ULOG --A limit-3658 -m recent --name limit-3658 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3658 -m recent --name limit-3658 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3659 -m recent --name limit-3659 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3659 -m recent --name limit-3659 --rsource --mask 255.255.255.255 --set -A limit-366 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-366 -j ACCEPT --A limit-3660 -m recent --name limit-3660 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3660 -m limit --limit 1/second -j LOG --A limit-3660 -m recent --name limit-3660 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3661 -m recent --name limit-3661 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3661 -m recent --name limit-3661 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3662 -m recent --name limit-3662 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3662 -j TEE --gateway 10.0.0.1 --A limit-3662 -j TEE --gateway 10.0.0.2 --A limit-3662 -m recent --name limit-3662 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3663 -m recent --name limit-3663 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3663 -m recent --name limit-3663 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3663 -m recent --name limit-3663 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3664 -m recent --name limit-3664 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3664 -m recent --name limit-3664 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3665 -m recent --name limit-3665 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3665 -m recent --name limit-3665 --rsource --mask 255.255.255.255 --set --A limit-3666 -m recent --name limit-3666 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3666 -m limit --limit 12/minute -j ULOG --A limit-3666 -m recent --name limit-3666 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3667 -m recent --name limit-3667 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3667 -m recent --name limit-3667 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3668 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3668 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3669 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3669 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-367 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3670 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3670 -m limit --limit 1/second -j LOG --A limit-3670 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3671 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3671 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3672 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3672 -j TEE --gateway 10.0.0.1 --A limit-3672 -j TEE --gateway 10.0.0.2 --A limit-3672 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3673 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3673 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3673 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3674 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3674 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3675 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3675 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-3676 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3676 -m limit --limit 12/minute -j ULOG --A limit-3676 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3677 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3677 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3678 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3678 -j ACCEPT -A limit-368 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-368 -m limit --limit 12/minute -j ULOG -A limit-368 -j ACCEPT --A limit-3680 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3680 -m limit --limit 1/second -j LOG --A limit-3680 -j ACCEPT --A limit-3681 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3681 -m limit --limit 1/second -j LOG --A limit-3682 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3682 -j TEE --gateway 10.0.0.1 --A limit-3682 -j TEE --gateway 10.0.0.2 --A limit-3682 -j ACCEPT --A limit-3683 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3683 -j TEE --gateway 10.0.0.1 --A limit-3683 -j TEE --gateway 10.0.0.2 --A limit-3684 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3684 -j ACCEPT --A limit-3686 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3686 -m limit --limit 12/minute -j ULOG --A limit-3686 -j ACCEPT --A limit-3687 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3687 -m limit --limit 12/minute -j ULOG --A limit-3688 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3688 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3689 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3689 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-369 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-369 -m limit --limit 12/minute -j ULOG --A limit-3690 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3690 -m limit --limit 1/second -j LOG --A limit-3690 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3691 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3691 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3692 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3692 -j TEE --gateway 10.0.0.1 --A limit-3692 -j TEE --gateway 10.0.0.2 --A limit-3692 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3693 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3693 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3693 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3694 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3694 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3695 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3695 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3696 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3696 -m limit --limit 12/minute -j ULOG --A limit-3696 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3697 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3697 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3698 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3698 -j ACCEPT -A limit-37 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-370 -m recent --name limit-370 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-190 -A limit-370 -m recent --name limit-370 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3700 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3700 -m limit --limit 1/second -j LOG --A limit-3700 -j ACCEPT --A limit-3701 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3701 -m limit --limit 1/second -j LOG --A limit-3702 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3702 -j TEE --gateway 10.0.0.1 --A limit-3702 -j TEE --gateway 10.0.0.2 --A limit-3702 -j ACCEPT --A limit-3703 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3703 -j TEE --gateway 10.0.0.1 --A limit-3703 -j TEE --gateway 10.0.0.2 --A limit-3704 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3704 -j ACCEPT --A limit-3706 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3706 -m limit --limit 12/minute -j ULOG --A limit-3706 -j ACCEPT --A limit-3707 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3707 -m limit --limit 12/minute -j ULOG --A limit-3708 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3708 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3709 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3709 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-191 -A limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --set --A limit-3710 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3710 -m limit --limit 1/second -j LOG --A limit-3710 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3711 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3711 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3712 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3712 -j TEE --gateway 10.0.0.1 --A limit-3712 -j TEE --gateway 10.0.0.2 --A limit-3712 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3713 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3713 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3713 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3714 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3714 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3715 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3715 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-3716 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3716 -m limit --limit 12/minute -j ULOG --A limit-3716 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3717 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3717 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3718 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3718 -j ACCEPT -A limit-372 -m recent --name limit-372 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-192 -A limit-372 -m limit --limit 1/second -j LOG -A limit-372 -m recent --name limit-372 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3720 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3720 -m limit --limit 1/second -j LOG --A limit-3720 -j ACCEPT --A limit-3721 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3721 -m limit --limit 1/second -j LOG --A limit-3722 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3722 -j TEE --gateway 10.0.0.1 --A limit-3722 -j TEE --gateway 10.0.0.2 --A limit-3722 -j ACCEPT --A limit-3723 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3723 -j TEE --gateway 10.0.0.1 --A limit-3723 -j TEE --gateway 10.0.0.2 --A limit-3724 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3724 -j ACCEPT --A limit-3726 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3726 -m limit --limit 12/minute -j ULOG --A limit-3726 -j ACCEPT --A limit-3727 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3727 -m limit --limit 12/minute -j ULOG --A limit-3728 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3728 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3729 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3729 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-193 -A limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3730 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3730 -m limit --limit 1/second -j LOG --A limit-3730 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3731 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3731 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3732 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3732 -j TEE --gateway 10.0.0.1 --A limit-3732 -j TEE --gateway 10.0.0.2 --A limit-3732 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3733 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3733 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3733 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3734 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3734 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3735 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3735 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-3736 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3736 -m limit --limit 12/minute -j ULOG --A limit-3736 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3737 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3737 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3738 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3738 -j ACCEPT -A limit-374 -m recent --name limit-374 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-194 -A limit-374 -j TEE --gateway 10.0.0.1 -A limit-374 -j TEE --gateway 10.0.0.2 -A limit-374 -m recent --name limit-374 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3740 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3740 -m limit --limit 1/second -j LOG --A limit-3740 -j ACCEPT --A limit-3741 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3741 -m limit --limit 1/second -j LOG --A limit-3742 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3742 -j TEE --gateway 10.0.0.1 --A limit-3742 -j TEE --gateway 10.0.0.2 --A limit-3742 -j ACCEPT --A limit-3743 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3743 -j TEE --gateway 10.0.0.1 --A limit-3743 -j TEE --gateway 10.0.0.2 --A limit-3744 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3744 -j ACCEPT --A limit-3746 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3746 -m limit --limit 12/minute -j ULOG --A limit-3746 -j ACCEPT --A limit-3747 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3747 -m limit --limit 12/minute -j ULOG --A limit-3748 -m recent --name limit-3748 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2110 --A limit-3748 -m recent --name limit-3748 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3749 -m recent --name limit-3749 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2111 --A limit-3749 -m recent --name limit-3749 --rsource --mask 255.255.255.255 --set -A limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-195 -A limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3750 -m recent --name limit-3750 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2112 --A limit-3750 -m limit --limit 1/second -j LOG --A limit-3750 -m recent --name limit-3750 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3751 -m recent --name limit-3751 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2113 --A limit-3751 -m recent --name limit-3751 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3752 -m recent --name limit-3752 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2114 --A limit-3752 -j TEE --gateway 10.0.0.1 --A limit-3752 -j TEE --gateway 10.0.0.2 --A limit-3752 -m recent --name limit-3752 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3753 -m recent --name limit-3753 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2115 --A limit-3753 -m recent --name limit-3753 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3753 -m recent --name limit-3753 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3754 -m recent --name limit-3754 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2116 --A limit-3754 -m recent --name limit-3754 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3755 -m recent --name limit-3755 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2117 --A limit-3755 -m recent --name limit-3755 --rsource --mask 255.255.255.255 --set --A limit-3756 -m recent --name limit-3756 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2118 --A limit-3756 -m limit --limit 12/minute -j ULOG --A limit-3756 -m recent --name limit-3756 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3757 -m recent --name limit-3757 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2119 --A limit-3757 -m recent --name limit-3757 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3758 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2120 --A limit-3758 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3759 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2121 --A limit-3759 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-376 -m recent --name limit-376 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-196 -A limit-376 -m recent --name limit-376 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3760 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2122 --A limit-3760 -m limit --limit 1/second -j LOG --A limit-3760 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3761 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2123 --A limit-3761 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3762 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2124 --A limit-3762 -j TEE --gateway 10.0.0.1 --A limit-3762 -j TEE --gateway 10.0.0.2 --A limit-3762 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3763 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2125 --A limit-3763 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3763 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3764 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2126 --A limit-3764 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3765 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2127 --A limit-3765 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-3766 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2128 --A limit-3766 -m limit --limit 12/minute -j ULOG --A limit-3766 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3767 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2129 --A limit-3767 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3768 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2130 --A limit-3768 -j ACCEPT -A limit-377 -m recent --name limit-377 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-197 -A limit-377 -m recent --name limit-377 --rsource --mask 255.255.255.255 --set --A limit-3770 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2132 --A limit-3770 -m limit --limit 1/second -j LOG --A limit-3770 -j ACCEPT --A limit-3771 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2133 --A limit-3771 -m limit --limit 1/second -j LOG --A limit-3772 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2134 --A limit-3772 -j TEE --gateway 10.0.0.1 --A limit-3772 -j TEE --gateway 10.0.0.2 --A limit-3772 -j ACCEPT --A limit-3773 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2135 --A limit-3773 -j TEE --gateway 10.0.0.1 --A limit-3773 -j TEE --gateway 10.0.0.2 --A limit-3774 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2136 --A limit-3774 -j ACCEPT --A limit-3776 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2138 --A limit-3776 -m limit --limit 12/minute -j ULOG --A limit-3776 -j ACCEPT --A limit-3777 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2139 --A limit-3777 -m limit --limit 12/minute -j ULOG --A limit-3778 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2140 --A limit-3778 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3779 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2141 --A limit-3779 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-378 -m recent --name limit-378 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-198 -A limit-378 -m limit --limit 12/minute -j ULOG -A limit-378 -m recent --name limit-378 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3780 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2142 --A limit-3780 -m limit --limit 1/second -j LOG --A limit-3780 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3781 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2143 --A limit-3781 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3782 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2144 --A limit-3782 -j TEE --gateway 10.0.0.1 --A limit-3782 -j TEE --gateway 10.0.0.2 --A limit-3782 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3783 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2145 --A limit-3783 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3783 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3784 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2146 --A limit-3784 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3785 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2147 --A limit-3785 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3786 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2148 --A limit-3786 -m limit --limit 12/minute -j ULOG --A limit-3786 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3787 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2149 --A limit-3787 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3788 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2150 --A limit-3788 -j ACCEPT -A limit-379 -m recent --name limit-379 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-199 -A limit-379 -m recent --name limit-379 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3790 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2152 --A limit-3790 -m limit --limit 1/second -j LOG --A limit-3790 -j ACCEPT --A limit-3791 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2153 --A limit-3791 -m limit --limit 1/second -j LOG --A limit-3792 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2154 --A limit-3792 -j TEE --gateway 10.0.0.1 --A limit-3792 -j TEE --gateway 10.0.0.2 --A limit-3792 -j ACCEPT --A limit-3793 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2155 --A limit-3793 -j TEE --gateway 10.0.0.1 --A limit-3793 -j TEE --gateway 10.0.0.2 --A limit-3794 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2156 --A limit-3794 -j ACCEPT --A limit-3796 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2158 --A limit-3796 -m limit --limit 12/minute -j ULOG --A limit-3796 -j ACCEPT --A limit-3797 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2159 --A limit-3797 -m limit --limit 12/minute -j ULOG --A limit-3798 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2160 --A limit-3798 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3799 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2161 --A limit-3799 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-38 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-38 -m limit --limit 12/minute -j ULOG -A limit-38 -j ACCEPT -A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-200 -A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3800 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2162 --A limit-3800 -m limit --limit 1/second -j LOG --A limit-3800 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3801 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2163 --A limit-3801 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3802 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2164 --A limit-3802 -j TEE --gateway 10.0.0.1 --A limit-3802 -j TEE --gateway 10.0.0.2 --A limit-3802 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3803 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2165 --A limit-3803 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3803 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3804 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2166 --A limit-3804 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3805 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2167 --A limit-3805 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-3806 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2168 --A limit-3806 -m limit --limit 12/minute -j ULOG --A limit-3806 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3807 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2169 --A limit-3807 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3808 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2170 --A limit-3808 -j ACCEPT -A limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-201 -A limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-3810 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2172 --A limit-3810 -m limit --limit 1/second -j LOG --A limit-3810 -j ACCEPT --A limit-3811 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2173 --A limit-3811 -m limit --limit 1/second -j LOG --A limit-3812 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2174 --A limit-3812 -j TEE --gateway 10.0.0.1 --A limit-3812 -j TEE --gateway 10.0.0.2 --A limit-3812 -j ACCEPT --A limit-3813 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2175 --A limit-3813 -j TEE --gateway 10.0.0.1 --A limit-3813 -j TEE --gateway 10.0.0.2 --A limit-3814 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2176 --A limit-3814 -j ACCEPT --A limit-3816 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2178 --A limit-3816 -m limit --limit 12/minute -j ULOG --A limit-3816 -j ACCEPT --A limit-3817 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2179 --A limit-3817 -m limit --limit 12/minute -j ULOG --A limit-3818 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2180 --A limit-3818 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3819 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2181 --A limit-3819 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-382 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-202 -A limit-382 -m limit --limit 1/second -j LOG -A limit-382 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3820 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2182 --A limit-3820 -m limit --limit 1/second -j LOG --A limit-3820 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3821 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2183 --A limit-3821 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3822 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2184 --A limit-3822 -j TEE --gateway 10.0.0.1 --A limit-3822 -j TEE --gateway 10.0.0.2 --A limit-3822 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3823 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2185 --A limit-3823 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3823 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3824 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2186 --A limit-3824 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3825 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2187 --A limit-3825 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-3826 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2188 --A limit-3826 -m limit --limit 12/minute -j ULOG --A limit-3826 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3827 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2189 --A limit-3827 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3828 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2190 --A limit-3828 -j ACCEPT -A limit-383 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-203 -A limit-383 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3830 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2192 --A limit-3830 -m limit --limit 1/second -j LOG --A limit-3830 -j ACCEPT --A limit-3831 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2193 --A limit-3831 -m limit --limit 1/second -j LOG --A limit-3832 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2194 --A limit-3832 -j TEE --gateway 10.0.0.1 --A limit-3832 -j TEE --gateway 10.0.0.2 --A limit-3832 -j ACCEPT --A limit-3833 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2195 --A limit-3833 -j TEE --gateway 10.0.0.1 --A limit-3833 -j TEE --gateway 10.0.0.2 --A limit-3834 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2196 --A limit-3834 -j ACCEPT --A limit-3836 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2198 --A limit-3836 -m limit --limit 12/minute -j ULOG --A limit-3836 -j ACCEPT --A limit-3837 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2199 --A limit-3837 -m limit --limit 12/minute -j ULOG --A limit-3838 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3838 -j ACCEPT --A limit-3838 -m limit --limit 1/second -j LOG --A limit-3838 -j DROP --A limit-3839 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3839 -j RETURN --A limit-3839 -m limit --limit 1/second -j LOG --A limit-3839 -j DROP -A limit-384 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-204 -A limit-384 -j TEE --gateway 10.0.0.1 -A limit-384 -j TEE --gateway 10.0.0.2 -A limit-384 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3840 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3840 -j logaccept-66 --A limit-3840 -m limit --limit 1/second -j LOG --A limit-3840 -j DROP --A limit-3841 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3841 -j logaccept-67 --A limit-3841 -m limit --limit 1/second -j LOG --A limit-3841 -j DROP --A limit-3842 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3842 -j ACCEPT --A limit-3842 -m limit --limit 1/second -j LOG --A limit-3842 -j DROP --A limit-3843 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3843 -j logaccept-68 --A limit-3843 -m limit --limit 1/second -j LOG --A limit-3843 -j DROP --A limit-3844 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3844 -j ACCEPT --A limit-3844 -j DROP --A limit-3845 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3845 -j RETURN --A limit-3845 -j DROP --A limit-3846 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3846 -j logaccept-69 --A limit-3846 -j DROP --A limit-3847 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3847 -j logaccept-70 --A limit-3847 -j DROP --A limit-3848 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3848 -j ACCEPT --A limit-3848 -j DROP --A limit-3849 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3849 -j logaccept-71 --A limit-3849 -j DROP -A limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-205 -A limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3850 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3850 -j ACCEPT --A limit-3850 -m limit --limit 1/second -j LOG --A limit-3850 -j DROP --A limit-3851 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3851 -j RETURN --A limit-3851 -m limit --limit 1/second -j LOG --A limit-3851 -j DROP --A limit-3852 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3852 -j logaccept-72 --A limit-3852 -m limit --limit 1/second -j LOG --A limit-3852 -j DROP --A limit-3853 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3853 -j logaccept-73 --A limit-3853 -m limit --limit 1/second -j LOG --A limit-3853 -j DROP --A limit-3854 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3854 -j ACCEPT --A limit-3854 -m limit --limit 1/second -j LOG --A limit-3854 -j DROP --A limit-3855 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3855 -j logaccept-74 --A limit-3855 -m limit --limit 1/second -j LOG --A limit-3855 -j DROP --A limit-3856 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3856 -j ACCEPT --A limit-3856 -j TEE --gateway 10.0.0.1 --A limit-3856 -j TEE --gateway 10.0.0.2 --A limit-3856 -j DROP --A limit-3857 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3857 -j RETURN --A limit-3857 -j TEE --gateway 10.0.0.1 --A limit-3857 -j TEE --gateway 10.0.0.2 --A limit-3857 -j DROP --A limit-3858 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3858 -j logaccept-75 --A limit-3858 -j TEE --gateway 10.0.0.1 --A limit-3858 -j TEE --gateway 10.0.0.2 --A limit-3858 -j DROP --A limit-3859 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3859 -j logaccept-76 --A limit-3859 -j TEE --gateway 10.0.0.1 --A limit-3859 -j TEE --gateway 10.0.0.2 --A limit-3859 -j DROP -A limit-386 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-206 -A limit-386 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3860 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3860 -j ACCEPT --A limit-3860 -j TEE --gateway 10.0.0.1 --A limit-3860 -j TEE --gateway 10.0.0.2 --A limit-3860 -j DROP --A limit-3861 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3861 -j logaccept-77 --A limit-3861 -j TEE --gateway 10.0.0.1 --A limit-3861 -j TEE --gateway 10.0.0.2 --A limit-3861 -j DROP --A limit-3862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3862 -j ACCEPT --A limit-3862 -j DROP --A limit-3863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3863 -j RETURN --A limit-3863 -j DROP --A limit-3864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3864 -j logaccept-78 --A limit-3864 -j DROP --A limit-3865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3865 -j logaccept-79 --A limit-3865 -j DROP --A limit-3866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3866 -j ACCEPT --A limit-3866 -j DROP --A limit-3867 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3867 -j logaccept-80 --A limit-3867 -j DROP --A limit-3868 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3868 -j ACCEPT --A limit-3868 -m limit --limit 12/minute -j ULOG --A limit-3868 -j DROP --A limit-3869 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3869 -j RETURN --A limit-3869 -m limit --limit 12/minute -j ULOG --A limit-3869 -j DROP -A limit-387 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-207 -A limit-387 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-3870 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3870 -j logaccept-81 --A limit-3870 -m limit --limit 12/minute -j ULOG --A limit-3870 -j DROP --A limit-3871 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3871 -j logaccept-82 --A limit-3871 -m limit --limit 12/minute -j ULOG --A limit-3871 -j DROP --A limit-3872 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3872 -j ACCEPT --A limit-3872 -m limit --limit 12/minute -j ULOG --A limit-3872 -j DROP --A limit-3873 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3873 -j logaccept-83 --A limit-3873 -m limit --limit 12/minute -j ULOG --A limit-3873 -j DROP --A limit-3874 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3874 -j ACCEPT --A limit-3874 -j DROP --A limit-3875 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3875 -j RETURN --A limit-3875 -j DROP --A limit-3876 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3876 -j logaccept-84 --A limit-3876 -j DROP --A limit-3877 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3877 -j logaccept-85 --A limit-3877 -j DROP --A limit-3878 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3878 -j ACCEPT --A limit-3878 -j DROP --A limit-3879 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3879 -j logaccept-86 --A limit-3879 -j DROP -A limit-388 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-208 -A limit-388 -m limit --limit 12/minute -j ULOG -A limit-388 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3880 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3880 -j ACCEPT --A limit-3880 -m limit --limit 1/second -j LOG --A limit-3880 -j DROP --A limit-3881 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3881 -j RETURN --A limit-3881 -m limit --limit 1/second -j LOG --A limit-3881 -j DROP --A limit-3882 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3882 -j logaccept-87 --A limit-3882 -m limit --limit 1/second -j LOG --A limit-3882 -j DROP --A limit-3883 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3883 -j logaccept-88 --A limit-3883 -m limit --limit 1/second -j LOG --A limit-3883 -j DROP --A limit-3884 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3884 -j ACCEPT --A limit-3884 -m limit --limit 1/second -j LOG --A limit-3884 -j DROP --A limit-3885 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3885 -j logaccept-89 --A limit-3885 -m limit --limit 1/second -j LOG --A limit-3885 -j DROP --A limit-3886 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3886 -j ACCEPT --A limit-3886 -j TEE --gateway 10.0.0.1 --A limit-3886 -j TEE --gateway 10.0.0.2 --A limit-3886 -j DROP --A limit-3887 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3887 -j RETURN --A limit-3887 -j TEE --gateway 10.0.0.1 --A limit-3887 -j TEE --gateway 10.0.0.2 --A limit-3887 -j DROP --A limit-3888 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3888 -j logaccept-90 --A limit-3888 -j TEE --gateway 10.0.0.1 --A limit-3888 -j TEE --gateway 10.0.0.2 --A limit-3888 -j DROP --A limit-3889 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3889 -j logaccept-91 --A limit-3889 -j TEE --gateway 10.0.0.1 --A limit-3889 -j TEE --gateway 10.0.0.2 --A limit-3889 -j DROP -A limit-389 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-209 -A limit-389 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3890 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3890 -j ACCEPT --A limit-3890 -j TEE --gateway 10.0.0.1 --A limit-3890 -j TEE --gateway 10.0.0.2 --A limit-3890 -j DROP --A limit-3891 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3891 -j logaccept-92 --A limit-3891 -j TEE --gateway 10.0.0.1 --A limit-3891 -j TEE --gateway 10.0.0.2 --A limit-3891 -j DROP --A limit-3892 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3892 -j ACCEPT --A limit-3892 -j DROP --A limit-3893 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3893 -j RETURN --A limit-3893 -j DROP --A limit-3894 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3894 -j logaccept-93 --A limit-3894 -j DROP --A limit-3895 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3895 -j logaccept-94 --A limit-3895 -j DROP --A limit-3896 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3896 -j ACCEPT --A limit-3896 -j DROP --A limit-3897 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3897 -j logaccept-95 --A limit-3897 -j DROP --A limit-3898 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3898 -j ACCEPT --A limit-3898 -m limit --limit 12/minute -j ULOG --A limit-3898 -j DROP --A limit-3899 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3899 -j RETURN --A limit-3899 -m limit --limit 12/minute -j ULOG --A limit-3899 -j DROP -A limit-39 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-39 -m limit --limit 12/minute -j ULOG -A limit-390 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-210 -A limit-390 -j ACCEPT --A limit-3900 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3900 -j logaccept-96 --A limit-3900 -m limit --limit 12/minute -j ULOG --A limit-3900 -j DROP --A limit-3901 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3901 -j logaccept-97 --A limit-3901 -m limit --limit 12/minute -j ULOG --A limit-3901 -j DROP --A limit-3902 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3902 -j ACCEPT --A limit-3902 -m limit --limit 12/minute -j ULOG --A limit-3902 -j DROP --A limit-3903 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3903 -j logaccept-98 --A limit-3903 -m limit --limit 12/minute -j ULOG --A limit-3903 -j DROP -A limit-391 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-211 -A limit-392 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-212 -A limit-392 -m limit --limit 1/second -j LOG @@ -83978,6 +81677,2307 @@ hash:net family inet -A limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-0 -m recent --name limit-ntp-0 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-0 +-A limit-ntp-0 -m recent --name limit-ntp-0 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-1 -m recent --name limit-ntp-1 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-1 +-A limit-ntp-1 -m recent --name limit-ntp-1 --rsource --mask 255.255.255.255 --set +-A limit-ntp-10 -m recent --name limit-ntp-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-10 -m recent --name limit-ntp-10 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-100 -m recent --name limit-ntp-100 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-10 +-A limit-ntp-100 -m recent --name limit-ntp-100 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-101 -m recent --name limit-ntp-101 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-11 +-A limit-ntp-101 -m recent --name limit-ntp-101 --rsource --mask 255.255.255.255 --set +-A limit-ntp-102 -m recent --name limit-ntp-102 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-12 +-A limit-ntp-102 -m limit --limit 1/second -j LOG +-A limit-ntp-102 -m recent --name limit-ntp-102 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-103 -m recent --name limit-ntp-103 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-13 +-A limit-ntp-103 -m recent --name limit-ntp-103 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-104 -m recent --name limit-ntp-104 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-14 +-A limit-ntp-104 -j TEE --gateway 10.0.0.1 +-A limit-ntp-104 -j TEE --gateway 10.0.0.2 +-A limit-ntp-104 -m recent --name limit-ntp-104 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-15 +-A limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-106 -m recent --name limit-ntp-106 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-16 +-A limit-ntp-106 -m recent --name limit-ntp-106 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-107 -m recent --name limit-ntp-107 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-17 +-A limit-ntp-107 -m recent --name limit-ntp-107 --rsource --mask 255.255.255.255 --set +-A limit-ntp-108 -m recent --name limit-ntp-108 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-18 +-A limit-ntp-108 -m limit --limit 12/minute -j ULOG +-A limit-ntp-108 -m recent --name limit-ntp-108 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-109 -m recent --name limit-ntp-109 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-19 +-A limit-ntp-109 -m recent --name limit-ntp-109 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-11 -m recent --name limit-ntp-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-11 -m recent --name limit-ntp-11 --rsource --mask 255.255.255.255 --set +-A limit-ntp-110 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-20 +-A limit-ntp-110 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-111 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-21 +-A limit-ntp-111 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-112 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-22 +-A limit-ntp-112 -m limit --limit 1/second -j LOG +-A limit-ntp-112 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-113 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-23 +-A limit-ntp-113 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-114 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-24 +-A limit-ntp-114 -j TEE --gateway 10.0.0.1 +-A limit-ntp-114 -j TEE --gateway 10.0.0.2 +-A limit-ntp-114 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-115 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-25 +-A limit-ntp-115 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-115 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-116 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-26 +-A limit-ntp-116 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-117 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-27 +-A limit-ntp-117 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-118 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-28 +-A limit-ntp-118 -m limit --limit 12/minute -j ULOG +-A limit-ntp-118 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-119 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-29 +-A limit-ntp-119 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-12 -m recent --name limit-ntp-12 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-12 -m limit --limit 1/second -j LOG +-A limit-ntp-12 -m recent --name limit-ntp-12 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-120 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-30 +-A limit-ntp-120 -j ACCEPT +-A limit-ntp-122 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-32 +-A limit-ntp-122 -m limit --limit 1/second -j LOG +-A limit-ntp-122 -j ACCEPT +-A limit-ntp-123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-33 +-A limit-ntp-123 -m limit --limit 1/second -j LOG +-A limit-ntp-124 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-34 +-A limit-ntp-124 -j TEE --gateway 10.0.0.1 +-A limit-ntp-124 -j TEE --gateway 10.0.0.2 +-A limit-ntp-124 -j ACCEPT +-A limit-ntp-125 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-35 +-A limit-ntp-125 -j TEE --gateway 10.0.0.1 +-A limit-ntp-125 -j TEE --gateway 10.0.0.2 +-A limit-ntp-126 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-36 +-A limit-ntp-126 -j ACCEPT +-A limit-ntp-128 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-38 +-A limit-ntp-128 -m limit --limit 12/minute -j ULOG +-A limit-ntp-128 -j ACCEPT +-A limit-ntp-129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-39 +-A limit-ntp-129 -m limit --limit 12/minute -j ULOG +-A limit-ntp-13 -m recent --name limit-ntp-13 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-13 -m recent --name limit-ntp-13 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-130 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-40 +-A limit-ntp-130 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-131 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-41 +-A limit-ntp-131 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-132 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-42 +-A limit-ntp-132 -m limit --limit 1/second -j LOG +-A limit-ntp-132 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-133 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-43 +-A limit-ntp-133 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-134 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-44 +-A limit-ntp-134 -j TEE --gateway 10.0.0.1 +-A limit-ntp-134 -j TEE --gateway 10.0.0.2 +-A limit-ntp-134 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-135 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-45 +-A limit-ntp-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-136 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-46 +-A limit-ntp-136 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-137 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-47 +-A limit-ntp-137 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-138 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-48 +-A limit-ntp-138 -m limit --limit 12/minute -j ULOG +-A limit-ntp-138 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-139 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-49 +-A limit-ntp-139 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-14 -m recent --name limit-ntp-14 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-14 -j TEE --gateway 10.0.0.1 +-A limit-ntp-14 -j TEE --gateway 10.0.0.2 +-A limit-ntp-14 -m recent --name limit-ntp-14 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-140 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-50 +-A limit-ntp-140 -j ACCEPT +-A limit-ntp-142 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-52 +-A limit-ntp-142 -m limit --limit 1/second -j LOG +-A limit-ntp-142 -j ACCEPT +-A limit-ntp-143 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-53 +-A limit-ntp-143 -m limit --limit 1/second -j LOG +-A limit-ntp-144 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-54 +-A limit-ntp-144 -j TEE --gateway 10.0.0.1 +-A limit-ntp-144 -j TEE --gateway 10.0.0.2 +-A limit-ntp-144 -j ACCEPT +-A limit-ntp-145 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-55 +-A limit-ntp-145 -j TEE --gateway 10.0.0.1 +-A limit-ntp-145 -j TEE --gateway 10.0.0.2 +-A limit-ntp-146 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-56 +-A limit-ntp-146 -j ACCEPT +-A limit-ntp-148 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-58 +-A limit-ntp-148 -m limit --limit 12/minute -j ULOG +-A limit-ntp-148 -j ACCEPT +-A limit-ntp-149 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-59 +-A limit-ntp-149 -m limit --limit 12/minute -j ULOG +-A limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-150 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-60 +-A limit-ntp-150 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-151 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-61 +-A limit-ntp-151 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-152 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-62 +-A limit-ntp-152 -m limit --limit 1/second -j LOG +-A limit-ntp-152 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-153 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-63 +-A limit-ntp-153 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-154 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-64 +-A limit-ntp-154 -j TEE --gateway 10.0.0.1 +-A limit-ntp-154 -j TEE --gateway 10.0.0.2 +-A limit-ntp-154 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-155 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-65 +-A limit-ntp-155 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-155 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-156 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-66 +-A limit-ntp-156 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-157 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-67 +-A limit-ntp-157 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-158 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-68 +-A limit-ntp-158 -m limit --limit 12/minute -j ULOG +-A limit-ntp-158 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-159 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-69 +-A limit-ntp-159 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-16 -m recent --name limit-ntp-16 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-16 -m recent --name limit-ntp-16 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-160 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-70 +-A limit-ntp-160 -j ACCEPT +-A limit-ntp-162 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-72 +-A limit-ntp-162 -m limit --limit 1/second -j LOG +-A limit-ntp-162 -j ACCEPT +-A limit-ntp-163 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-73 +-A limit-ntp-163 -m limit --limit 1/second -j LOG +-A limit-ntp-164 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-74 +-A limit-ntp-164 -j TEE --gateway 10.0.0.1 +-A limit-ntp-164 -j TEE --gateway 10.0.0.2 +-A limit-ntp-164 -j ACCEPT +-A limit-ntp-165 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-75 +-A limit-ntp-165 -j TEE --gateway 10.0.0.1 +-A limit-ntp-165 -j TEE --gateway 10.0.0.2 +-A limit-ntp-166 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-76 +-A limit-ntp-166 -j ACCEPT +-A limit-ntp-168 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-78 +-A limit-ntp-168 -m limit --limit 12/minute -j ULOG +-A limit-ntp-168 -j ACCEPT +-A limit-ntp-169 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-79 +-A limit-ntp-169 -m limit --limit 12/minute -j ULOG +-A limit-ntp-17 -m recent --name limit-ntp-17 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-17 -m recent --name limit-ntp-17 --rsource --mask 255.255.255.255 --set +-A limit-ntp-170 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-80 +-A limit-ntp-170 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-171 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-81 +-A limit-ntp-171 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-172 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-82 +-A limit-ntp-172 -m limit --limit 1/second -j LOG +-A limit-ntp-172 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-173 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-83 +-A limit-ntp-173 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-174 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-84 +-A limit-ntp-174 -j TEE --gateway 10.0.0.1 +-A limit-ntp-174 -j TEE --gateway 10.0.0.2 +-A limit-ntp-174 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-175 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-85 +-A limit-ntp-175 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-175 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-176 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-86 +-A limit-ntp-176 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-177 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-87 +-A limit-ntp-177 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-178 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-88 +-A limit-ntp-178 -m limit --limit 12/minute -j ULOG +-A limit-ntp-178 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-179 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-89 +-A limit-ntp-179 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-18 -m recent --name limit-ntp-18 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-18 -m limit --limit 12/minute -j ULOG +-A limit-ntp-18 -m recent --name limit-ntp-18 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-180 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-90 +-A limit-ntp-180 -j ACCEPT +-A limit-ntp-182 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-92 +-A limit-ntp-182 -m limit --limit 1/second -j LOG +-A limit-ntp-182 -j ACCEPT +-A limit-ntp-183 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-93 +-A limit-ntp-183 -m limit --limit 1/second -j LOG +-A limit-ntp-184 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-94 +-A limit-ntp-184 -j TEE --gateway 10.0.0.1 +-A limit-ntp-184 -j TEE --gateway 10.0.0.2 +-A limit-ntp-184 -j ACCEPT +-A limit-ntp-185 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-95 +-A limit-ntp-185 -j TEE --gateway 10.0.0.1 +-A limit-ntp-185 -j TEE --gateway 10.0.0.2 +-A limit-ntp-186 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-96 +-A limit-ntp-186 -j ACCEPT +-A limit-ntp-188 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-98 +-A limit-ntp-188 -m limit --limit 12/minute -j ULOG +-A limit-ntp-188 -j ACCEPT +-A limit-ntp-189 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-99 +-A limit-ntp-189 -m limit --limit 12/minute -j ULOG +-A limit-ntp-19 -m recent --name limit-ntp-19 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-19 -m recent --name limit-ntp-19 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-190 -m recent --name limit-ntp-190 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-100 +-A limit-ntp-190 -m recent --name limit-ntp-190 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-191 -m recent --name limit-ntp-191 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-101 +-A limit-ntp-191 -m recent --name limit-ntp-191 --rsource --mask 255.255.255.255 --set +-A limit-ntp-192 -m recent --name limit-ntp-192 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-102 +-A limit-ntp-192 -m limit --limit 1/second -j LOG +-A limit-ntp-192 -m recent --name limit-ntp-192 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-193 -m recent --name limit-ntp-193 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-103 +-A limit-ntp-193 -m recent --name limit-ntp-193 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-194 -m recent --name limit-ntp-194 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-104 +-A limit-ntp-194 -j TEE --gateway 10.0.0.1 +-A limit-ntp-194 -j TEE --gateway 10.0.0.2 +-A limit-ntp-194 -m recent --name limit-ntp-194 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-105 +-A limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-196 -m recent --name limit-ntp-196 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-106 +-A limit-ntp-196 -m recent --name limit-ntp-196 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-197 -m recent --name limit-ntp-197 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-107 +-A limit-ntp-197 -m recent --name limit-ntp-197 --rsource --mask 255.255.255.255 --set +-A limit-ntp-198 -m recent --name limit-ntp-198 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-108 +-A limit-ntp-198 -m limit --limit 12/minute -j ULOG +-A limit-ntp-198 -m recent --name limit-ntp-198 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-199 -m recent --name limit-ntp-199 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-109 +-A limit-ntp-199 -m recent --name limit-ntp-199 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-2 -m recent --name limit-ntp-2 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-2 +-A limit-ntp-2 -m limit --limit 1/second -j LOG +-A limit-ntp-2 -m recent --name limit-ntp-2 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-20 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-20 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-200 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-110 +-A limit-ntp-200 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-201 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-111 +-A limit-ntp-201 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-202 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-112 +-A limit-ntp-202 -m limit --limit 1/second -j LOG +-A limit-ntp-202 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-203 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-113 +-A limit-ntp-203 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-204 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-114 +-A limit-ntp-204 -j TEE --gateway 10.0.0.1 +-A limit-ntp-204 -j TEE --gateway 10.0.0.2 +-A limit-ntp-204 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-205 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-115 +-A limit-ntp-205 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-205 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-206 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-116 +-A limit-ntp-206 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-207 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-117 +-A limit-ntp-207 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-208 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-118 +-A limit-ntp-208 -m limit --limit 12/minute -j ULOG +-A limit-ntp-208 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-209 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-119 +-A limit-ntp-209 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-21 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-21 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-210 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-120 +-A limit-ntp-210 -j ACCEPT +-A limit-ntp-212 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-122 +-A limit-ntp-212 -m limit --limit 1/second -j LOG +-A limit-ntp-212 -j ACCEPT +-A limit-ntp-213 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-123 +-A limit-ntp-213 -m limit --limit 1/second -j LOG +-A limit-ntp-214 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-124 +-A limit-ntp-214 -j TEE --gateway 10.0.0.1 +-A limit-ntp-214 -j TEE --gateway 10.0.0.2 +-A limit-ntp-214 -j ACCEPT +-A limit-ntp-215 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-125 +-A limit-ntp-215 -j TEE --gateway 10.0.0.1 +-A limit-ntp-215 -j TEE --gateway 10.0.0.2 +-A limit-ntp-216 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-126 +-A limit-ntp-216 -j ACCEPT +-A limit-ntp-218 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-128 +-A limit-ntp-218 -m limit --limit 12/minute -j ULOG +-A limit-ntp-218 -j ACCEPT +-A limit-ntp-219 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-129 +-A limit-ntp-219 -m limit --limit 12/minute -j ULOG +-A limit-ntp-22 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-22 -m limit --limit 1/second -j LOG +-A limit-ntp-22 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-220 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-130 +-A limit-ntp-220 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-221 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-131 +-A limit-ntp-221 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-222 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-132 +-A limit-ntp-222 -m limit --limit 1/second -j LOG +-A limit-ntp-222 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-223 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-133 +-A limit-ntp-223 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-224 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-134 +-A limit-ntp-224 -j TEE --gateway 10.0.0.1 +-A limit-ntp-224 -j TEE --gateway 10.0.0.2 +-A limit-ntp-224 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-225 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-135 +-A limit-ntp-225 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-225 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-226 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-136 +-A limit-ntp-226 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-227 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-137 +-A limit-ntp-227 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-228 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-138 +-A limit-ntp-228 -m limit --limit 12/minute -j ULOG +-A limit-ntp-228 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-229 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-139 +-A limit-ntp-229 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-23 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-23 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-230 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-140 +-A limit-ntp-230 -j ACCEPT +-A limit-ntp-232 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-142 +-A limit-ntp-232 -m limit --limit 1/second -j LOG +-A limit-ntp-232 -j ACCEPT +-A limit-ntp-233 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-143 +-A limit-ntp-233 -m limit --limit 1/second -j LOG +-A limit-ntp-234 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-144 +-A limit-ntp-234 -j TEE --gateway 10.0.0.1 +-A limit-ntp-234 -j TEE --gateway 10.0.0.2 +-A limit-ntp-234 -j ACCEPT +-A limit-ntp-235 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-145 +-A limit-ntp-235 -j TEE --gateway 10.0.0.1 +-A limit-ntp-235 -j TEE --gateway 10.0.0.2 +-A limit-ntp-236 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-146 +-A limit-ntp-236 -j ACCEPT +-A limit-ntp-238 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-148 +-A limit-ntp-238 -m limit --limit 12/minute -j ULOG +-A limit-ntp-238 -j ACCEPT +-A limit-ntp-239 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-149 +-A limit-ntp-239 -m limit --limit 12/minute -j ULOG +-A limit-ntp-24 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-24 -j TEE --gateway 10.0.0.1 +-A limit-ntp-24 -j TEE --gateway 10.0.0.2 +-A limit-ntp-24 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-240 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-150 +-A limit-ntp-240 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-241 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-151 +-A limit-ntp-241 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-242 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-152 +-A limit-ntp-242 -m limit --limit 1/second -j LOG +-A limit-ntp-242 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-243 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-153 +-A limit-ntp-243 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-244 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-154 +-A limit-ntp-244 -j TEE --gateway 10.0.0.1 +-A limit-ntp-244 -j TEE --gateway 10.0.0.2 +-A limit-ntp-244 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-245 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-155 +-A limit-ntp-245 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-245 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-246 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-156 +-A limit-ntp-246 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-247 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-157 +-A limit-ntp-247 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-248 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-158 +-A limit-ntp-248 -m limit --limit 12/minute -j ULOG +-A limit-ntp-248 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-249 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-159 +-A limit-ntp-249 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-25 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-25 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-25 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-250 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-160 +-A limit-ntp-250 -j ACCEPT +-A limit-ntp-252 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-162 +-A limit-ntp-252 -m limit --limit 1/second -j LOG +-A limit-ntp-252 -j ACCEPT +-A limit-ntp-253 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-163 +-A limit-ntp-253 -m limit --limit 1/second -j LOG +-A limit-ntp-254 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-164 +-A limit-ntp-254 -j TEE --gateway 10.0.0.1 +-A limit-ntp-254 -j TEE --gateway 10.0.0.2 +-A limit-ntp-254 -j ACCEPT +-A limit-ntp-255 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-165 +-A limit-ntp-255 -j TEE --gateway 10.0.0.1 +-A limit-ntp-255 -j TEE --gateway 10.0.0.2 +-A limit-ntp-256 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-166 +-A limit-ntp-256 -j ACCEPT +-A limit-ntp-258 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-168 +-A limit-ntp-258 -m limit --limit 12/minute -j ULOG +-A limit-ntp-258 -j ACCEPT +-A limit-ntp-259 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-169 +-A limit-ntp-259 -m limit --limit 12/minute -j ULOG +-A limit-ntp-26 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-26 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-260 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-170 +-A limit-ntp-260 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-261 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-171 +-A limit-ntp-261 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-262 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-172 +-A limit-ntp-262 -m limit --limit 1/second -j LOG +-A limit-ntp-262 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-263 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-173 +-A limit-ntp-263 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-264 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-174 +-A limit-ntp-264 -j TEE --gateway 10.0.0.1 +-A limit-ntp-264 -j TEE --gateway 10.0.0.2 +-A limit-ntp-264 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-265 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-175 +-A limit-ntp-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-266 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-176 +-A limit-ntp-266 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-267 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-177 +-A limit-ntp-267 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-268 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-178 +-A limit-ntp-268 -m limit --limit 12/minute -j ULOG +-A limit-ntp-268 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-269 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-179 +-A limit-ntp-269 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-27 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-27 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-270 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-180 +-A limit-ntp-270 -j ACCEPT +-A limit-ntp-272 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-182 +-A limit-ntp-272 -m limit --limit 1/second -j LOG +-A limit-ntp-272 -j ACCEPT +-A limit-ntp-273 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-183 +-A limit-ntp-273 -m limit --limit 1/second -j LOG +-A limit-ntp-274 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-184 +-A limit-ntp-274 -j TEE --gateway 10.0.0.1 +-A limit-ntp-274 -j TEE --gateway 10.0.0.2 +-A limit-ntp-274 -j ACCEPT +-A limit-ntp-275 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-185 +-A limit-ntp-275 -j TEE --gateway 10.0.0.1 +-A limit-ntp-275 -j TEE --gateway 10.0.0.2 +-A limit-ntp-276 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-186 +-A limit-ntp-276 -j ACCEPT +-A limit-ntp-278 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-188 +-A limit-ntp-278 -m limit --limit 12/minute -j ULOG +-A limit-ntp-278 -j ACCEPT +-A limit-ntp-279 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-189 +-A limit-ntp-279 -m limit --limit 12/minute -j ULOG +-A limit-ntp-28 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-28 -m limit --limit 12/minute -j ULOG +-A limit-ntp-28 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-280 -m recent --name limit-ntp-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-280 -m recent --name limit-ntp-280 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-281 -m recent --name limit-ntp-281 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-281 -m recent --name limit-ntp-281 --rsource --mask 255.255.255.255 --set +-A limit-ntp-282 -m recent --name limit-ntp-282 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-282 -m limit --limit 1/second -j LOG +-A limit-ntp-282 -m recent --name limit-ntp-282 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-283 -m recent --name limit-ntp-283 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-283 -m recent --name limit-ntp-283 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-284 -m recent --name limit-ntp-284 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-284 -j TEE --gateway 10.0.0.1 +-A limit-ntp-284 -j TEE --gateway 10.0.0.2 +-A limit-ntp-284 -m recent --name limit-ntp-284 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-286 -m recent --name limit-ntp-286 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-286 -m recent --name limit-ntp-286 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-287 -m recent --name limit-ntp-287 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-287 -m recent --name limit-ntp-287 --rsource --mask 255.255.255.255 --set +-A limit-ntp-288 -m recent --name limit-ntp-288 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-288 -m limit --limit 12/minute -j ULOG +-A limit-ntp-288 -m recent --name limit-ntp-288 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-289 -m recent --name limit-ntp-289 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-289 -m recent --name limit-ntp-289 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-29 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-29 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-290 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-290 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-291 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-291 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-292 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-292 -m limit --limit 1/second -j LOG +-A limit-ntp-292 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-293 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-293 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-294 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-294 -j TEE --gateway 10.0.0.1 +-A limit-ntp-294 -j TEE --gateway 10.0.0.2 +-A limit-ntp-294 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-295 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-295 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-295 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-296 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-296 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-297 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-297 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-298 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-298 -m limit --limit 12/minute -j ULOG +-A limit-ntp-298 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-299 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-299 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-3 -m recent --name limit-ntp-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-3 +-A limit-ntp-3 -m recent --name limit-ntp-3 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-30 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-30 -j ACCEPT +-A limit-ntp-300 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-300 -j ACCEPT +-A limit-ntp-302 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-302 -m limit --limit 1/second -j LOG +-A limit-ntp-302 -j ACCEPT +-A limit-ntp-303 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-303 -m limit --limit 1/second -j LOG +-A limit-ntp-304 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-304 -j TEE --gateway 10.0.0.1 +-A limit-ntp-304 -j TEE --gateway 10.0.0.2 +-A limit-ntp-304 -j ACCEPT +-A limit-ntp-305 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-305 -j TEE --gateway 10.0.0.1 +-A limit-ntp-305 -j TEE --gateway 10.0.0.2 +-A limit-ntp-306 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-306 -j ACCEPT +-A limit-ntp-308 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-308 -m limit --limit 12/minute -j ULOG +-A limit-ntp-308 -j ACCEPT +-A limit-ntp-309 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-309 -m limit --limit 12/minute -j ULOG +-A limit-ntp-310 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-310 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-311 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-311 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-312 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-312 -m limit --limit 1/second -j LOG +-A limit-ntp-312 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-313 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-313 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-314 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-314 -j TEE --gateway 10.0.0.1 +-A limit-ntp-314 -j TEE --gateway 10.0.0.2 +-A limit-ntp-314 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-315 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-315 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-315 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-316 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-316 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-317 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-317 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-318 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-318 -m limit --limit 12/minute -j ULOG +-A limit-ntp-318 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-319 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-319 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-32 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-32 -m limit --limit 1/second -j LOG +-A limit-ntp-32 -j ACCEPT +-A limit-ntp-320 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-320 -j ACCEPT +-A limit-ntp-322 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-322 -m limit --limit 1/second -j LOG +-A limit-ntp-322 -j ACCEPT +-A limit-ntp-323 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-323 -m limit --limit 1/second -j LOG +-A limit-ntp-324 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-324 -j TEE --gateway 10.0.0.1 +-A limit-ntp-324 -j TEE --gateway 10.0.0.2 +-A limit-ntp-324 -j ACCEPT +-A limit-ntp-325 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-325 -j TEE --gateway 10.0.0.1 +-A limit-ntp-325 -j TEE --gateway 10.0.0.2 +-A limit-ntp-326 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-326 -j ACCEPT +-A limit-ntp-328 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-328 -m limit --limit 12/minute -j ULOG +-A limit-ntp-328 -j ACCEPT +-A limit-ntp-329 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-329 -m limit --limit 12/minute -j ULOG +-A limit-ntp-33 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-33 -m limit --limit 1/second -j LOG +-A limit-ntp-330 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-330 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-331 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-331 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-332 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-332 -m limit --limit 1/second -j LOG +-A limit-ntp-332 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-333 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-333 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-334 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-334 -j TEE --gateway 10.0.0.1 +-A limit-ntp-334 -j TEE --gateway 10.0.0.2 +-A limit-ntp-334 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-335 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-335 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-335 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-336 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-336 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-337 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-337 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-338 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-338 -m limit --limit 12/minute -j ULOG +-A limit-ntp-338 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-339 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-339 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-34 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-34 -j TEE --gateway 10.0.0.1 +-A limit-ntp-34 -j TEE --gateway 10.0.0.2 +-A limit-ntp-34 -j ACCEPT +-A limit-ntp-340 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-340 -j ACCEPT +-A limit-ntp-342 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-342 -m limit --limit 1/second -j LOG +-A limit-ntp-342 -j ACCEPT +-A limit-ntp-343 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-343 -m limit --limit 1/second -j LOG +-A limit-ntp-344 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-344 -j TEE --gateway 10.0.0.1 +-A limit-ntp-344 -j TEE --gateway 10.0.0.2 +-A limit-ntp-344 -j ACCEPT +-A limit-ntp-345 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-345 -j TEE --gateway 10.0.0.1 +-A limit-ntp-345 -j TEE --gateway 10.0.0.2 +-A limit-ntp-346 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-346 -j ACCEPT +-A limit-ntp-348 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-348 -m limit --limit 12/minute -j ULOG +-A limit-ntp-348 -j ACCEPT +-A limit-ntp-349 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-349 -m limit --limit 12/minute -j ULOG +-A limit-ntp-35 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-35 -j TEE --gateway 10.0.0.1 +-A limit-ntp-35 -j TEE --gateway 10.0.0.2 +-A limit-ntp-350 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-350 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-351 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-351 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-352 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-352 -m limit --limit 1/second -j LOG +-A limit-ntp-352 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-353 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-353 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-354 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-354 -j TEE --gateway 10.0.0.1 +-A limit-ntp-354 -j TEE --gateway 10.0.0.2 +-A limit-ntp-354 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-355 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-356 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-356 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-357 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-357 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-358 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-358 -m limit --limit 12/minute -j ULOG +-A limit-ntp-358 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-359 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-359 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-36 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-36 -j ACCEPT +-A limit-ntp-360 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-360 -j ACCEPT +-A limit-ntp-362 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-362 -m limit --limit 1/second -j LOG +-A limit-ntp-362 -j ACCEPT +-A limit-ntp-363 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-363 -m limit --limit 1/second -j LOG +-A limit-ntp-364 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-364 -j TEE --gateway 10.0.0.1 +-A limit-ntp-364 -j TEE --gateway 10.0.0.2 +-A limit-ntp-364 -j ACCEPT +-A limit-ntp-365 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-365 -j TEE --gateway 10.0.0.1 +-A limit-ntp-365 -j TEE --gateway 10.0.0.2 +-A limit-ntp-366 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-366 -j ACCEPT +-A limit-ntp-368 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-368 -m limit --limit 12/minute -j ULOG +-A limit-ntp-368 -j ACCEPT +-A limit-ntp-369 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-369 -m limit --limit 12/minute -j ULOG +-A limit-ntp-370 -m recent --name limit-ntp-370 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-190 +-A limit-ntp-370 -m recent --name limit-ntp-370 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-371 -m recent --name limit-ntp-371 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-191 +-A limit-ntp-371 -m recent --name limit-ntp-371 --rsource --mask 255.255.255.255 --set +-A limit-ntp-372 -m recent --name limit-ntp-372 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-192 +-A limit-ntp-372 -m limit --limit 1/second -j LOG +-A limit-ntp-372 -m recent --name limit-ntp-372 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-373 -m recent --name limit-ntp-373 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-193 +-A limit-ntp-373 -m recent --name limit-ntp-373 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-374 -m recent --name limit-ntp-374 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-194 +-A limit-ntp-374 -j TEE --gateway 10.0.0.1 +-A limit-ntp-374 -j TEE --gateway 10.0.0.2 +-A limit-ntp-374 -m recent --name limit-ntp-374 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-195 +-A limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-376 -m recent --name limit-ntp-376 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-196 +-A limit-ntp-376 -m recent --name limit-ntp-376 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-377 -m recent --name limit-ntp-377 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-197 +-A limit-ntp-377 -m recent --name limit-ntp-377 --rsource --mask 255.255.255.255 --set +-A limit-ntp-378 -m recent --name limit-ntp-378 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-198 +-A limit-ntp-378 -m limit --limit 12/minute -j ULOG +-A limit-ntp-378 -m recent --name limit-ntp-378 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-379 -m recent --name limit-ntp-379 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-199 +-A limit-ntp-379 -m recent --name limit-ntp-379 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-38 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-38 -m limit --limit 12/minute -j ULOG +-A limit-ntp-38 -j ACCEPT +-A limit-ntp-380 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-200 +-A limit-ntp-380 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-381 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-201 +-A limit-ntp-381 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-382 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-202 +-A limit-ntp-382 -m limit --limit 1/second -j LOG +-A limit-ntp-382 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-383 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-203 +-A limit-ntp-383 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-384 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-204 +-A limit-ntp-384 -j TEE --gateway 10.0.0.1 +-A limit-ntp-384 -j TEE --gateway 10.0.0.2 +-A limit-ntp-384 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-385 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-205 +-A limit-ntp-385 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-385 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-386 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-206 +-A limit-ntp-386 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-387 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-207 +-A limit-ntp-387 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-388 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-208 +-A limit-ntp-388 -m limit --limit 12/minute -j ULOG +-A limit-ntp-388 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-389 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-209 +-A limit-ntp-389 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-39 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-39 -m limit --limit 12/minute -j ULOG +-A limit-ntp-390 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-210 +-A limit-ntp-390 -j ACCEPT +-A limit-ntp-392 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-212 +-A limit-ntp-392 -m limit --limit 1/second -j LOG +-A limit-ntp-392 -j ACCEPT +-A limit-ntp-393 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-213 +-A limit-ntp-393 -m limit --limit 1/second -j LOG +-A limit-ntp-394 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-214 +-A limit-ntp-394 -j TEE --gateway 10.0.0.1 +-A limit-ntp-394 -j TEE --gateway 10.0.0.2 +-A limit-ntp-394 -j ACCEPT +-A limit-ntp-395 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-215 +-A limit-ntp-395 -j TEE --gateway 10.0.0.1 +-A limit-ntp-395 -j TEE --gateway 10.0.0.2 +-A limit-ntp-396 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-216 +-A limit-ntp-396 -j ACCEPT +-A limit-ntp-398 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-218 +-A limit-ntp-398 -m limit --limit 12/minute -j ULOG +-A limit-ntp-398 -j ACCEPT +-A limit-ntp-399 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-219 +-A limit-ntp-399 -m limit --limit 12/minute -j ULOG +-A limit-ntp-4 -m recent --name limit-ntp-4 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-4 +-A limit-ntp-4 -j TEE --gateway 10.0.0.1 +-A limit-ntp-4 -j TEE --gateway 10.0.0.2 +-A limit-ntp-4 -m recent --name limit-ntp-4 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-40 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-40 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-400 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-220 +-A limit-ntp-400 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-401 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-221 +-A limit-ntp-401 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-402 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-222 +-A limit-ntp-402 -m limit --limit 1/second -j LOG +-A limit-ntp-402 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-403 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-223 +-A limit-ntp-403 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-404 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-224 +-A limit-ntp-404 -j TEE --gateway 10.0.0.1 +-A limit-ntp-404 -j TEE --gateway 10.0.0.2 +-A limit-ntp-404 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-405 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-225 +-A limit-ntp-405 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-405 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-406 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-226 +-A limit-ntp-406 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-407 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-227 +-A limit-ntp-407 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-408 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-228 +-A limit-ntp-408 -m limit --limit 12/minute -j ULOG +-A limit-ntp-408 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-409 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-229 +-A limit-ntp-409 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-41 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-41 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-410 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-230 +-A limit-ntp-410 -j ACCEPT +-A limit-ntp-412 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-232 +-A limit-ntp-412 -m limit --limit 1/second -j LOG +-A limit-ntp-412 -j ACCEPT +-A limit-ntp-413 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-233 +-A limit-ntp-413 -m limit --limit 1/second -j LOG +-A limit-ntp-414 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-234 +-A limit-ntp-414 -j TEE --gateway 10.0.0.1 +-A limit-ntp-414 -j TEE --gateway 10.0.0.2 +-A limit-ntp-414 -j ACCEPT +-A limit-ntp-415 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-235 +-A limit-ntp-415 -j TEE --gateway 10.0.0.1 +-A limit-ntp-415 -j TEE --gateway 10.0.0.2 +-A limit-ntp-416 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-236 +-A limit-ntp-416 -j ACCEPT +-A limit-ntp-418 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-238 +-A limit-ntp-418 -m limit --limit 12/minute -j ULOG +-A limit-ntp-418 -j ACCEPT +-A limit-ntp-419 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-239 +-A limit-ntp-419 -m limit --limit 12/minute -j ULOG +-A limit-ntp-42 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-42 -m limit --limit 1/second -j LOG +-A limit-ntp-42 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-420 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-240 +-A limit-ntp-420 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-421 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-241 +-A limit-ntp-421 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-422 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-242 +-A limit-ntp-422 -m limit --limit 1/second -j LOG +-A limit-ntp-422 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-423 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-243 +-A limit-ntp-423 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-424 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-244 +-A limit-ntp-424 -j TEE --gateway 10.0.0.1 +-A limit-ntp-424 -j TEE --gateway 10.0.0.2 +-A limit-ntp-424 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-425 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-245 +-A limit-ntp-425 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-425 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-426 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-246 +-A limit-ntp-426 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-427 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-247 +-A limit-ntp-427 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-428 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-248 +-A limit-ntp-428 -m limit --limit 12/minute -j ULOG +-A limit-ntp-428 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-429 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-249 +-A limit-ntp-429 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-43 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-43 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-430 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-250 +-A limit-ntp-430 -j ACCEPT +-A limit-ntp-432 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-252 +-A limit-ntp-432 -m limit --limit 1/second -j LOG +-A limit-ntp-432 -j ACCEPT +-A limit-ntp-433 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-253 +-A limit-ntp-433 -m limit --limit 1/second -j LOG +-A limit-ntp-434 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-254 +-A limit-ntp-434 -j TEE --gateway 10.0.0.1 +-A limit-ntp-434 -j TEE --gateway 10.0.0.2 +-A limit-ntp-434 -j ACCEPT +-A limit-ntp-435 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-255 +-A limit-ntp-435 -j TEE --gateway 10.0.0.1 +-A limit-ntp-435 -j TEE --gateway 10.0.0.2 +-A limit-ntp-436 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-256 +-A limit-ntp-436 -j ACCEPT +-A limit-ntp-438 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-258 +-A limit-ntp-438 -m limit --limit 12/minute -j ULOG +-A limit-ntp-438 -j ACCEPT +-A limit-ntp-439 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-259 +-A limit-ntp-439 -m limit --limit 12/minute -j ULOG +-A limit-ntp-44 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-44 -j TEE --gateway 10.0.0.1 +-A limit-ntp-44 -j TEE --gateway 10.0.0.2 +-A limit-ntp-44 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-440 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-260 +-A limit-ntp-440 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-441 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-261 +-A limit-ntp-441 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-442 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-262 +-A limit-ntp-442 -m limit --limit 1/second -j LOG +-A limit-ntp-442 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-443 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-263 +-A limit-ntp-443 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-444 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-264 +-A limit-ntp-444 -j TEE --gateway 10.0.0.1 +-A limit-ntp-444 -j TEE --gateway 10.0.0.2 +-A limit-ntp-444 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-445 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-265 +-A limit-ntp-445 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-445 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-446 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-266 +-A limit-ntp-446 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-447 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-267 +-A limit-ntp-447 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-448 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-268 +-A limit-ntp-448 -m limit --limit 12/minute -j ULOG +-A limit-ntp-448 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-449 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-269 +-A limit-ntp-449 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-45 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-45 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-45 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-450 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-270 +-A limit-ntp-450 -j ACCEPT +-A limit-ntp-452 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-272 +-A limit-ntp-452 -m limit --limit 1/second -j LOG +-A limit-ntp-452 -j ACCEPT +-A limit-ntp-453 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-273 +-A limit-ntp-453 -m limit --limit 1/second -j LOG +-A limit-ntp-454 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-274 +-A limit-ntp-454 -j TEE --gateway 10.0.0.1 +-A limit-ntp-454 -j TEE --gateway 10.0.0.2 +-A limit-ntp-454 -j ACCEPT +-A limit-ntp-455 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-275 +-A limit-ntp-455 -j TEE --gateway 10.0.0.1 +-A limit-ntp-455 -j TEE --gateway 10.0.0.2 +-A limit-ntp-456 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-276 +-A limit-ntp-456 -j ACCEPT +-A limit-ntp-458 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-278 +-A limit-ntp-458 -m limit --limit 12/minute -j ULOG +-A limit-ntp-458 -j ACCEPT +-A limit-ntp-459 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-279 +-A limit-ntp-459 -m limit --limit 12/minute -j ULOG +-A limit-ntp-46 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-46 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-460 -m recent --name limit-ntp-460 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-460 -m recent --name limit-ntp-460 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-461 -m recent --name limit-ntp-461 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-461 -m recent --name limit-ntp-461 --rsource --mask 255.255.255.255 --set +-A limit-ntp-462 -m recent --name limit-ntp-462 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-462 -m limit --limit 1/second -j LOG +-A limit-ntp-462 -m recent --name limit-ntp-462 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-463 -m recent --name limit-ntp-463 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-463 -m recent --name limit-ntp-463 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-464 -m recent --name limit-ntp-464 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-464 -j TEE --gateway 10.0.0.1 +-A limit-ntp-464 -j TEE --gateway 10.0.0.2 +-A limit-ntp-464 -m recent --name limit-ntp-464 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-466 -m recent --name limit-ntp-466 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-466 -m recent --name limit-ntp-466 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-467 -m recent --name limit-ntp-467 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-467 -m recent --name limit-ntp-467 --rsource --mask 255.255.255.255 --set +-A limit-ntp-468 -m recent --name limit-ntp-468 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-468 -m limit --limit 12/minute -j ULOG +-A limit-ntp-468 -m recent --name limit-ntp-468 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-469 -m recent --name limit-ntp-469 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-469 -m recent --name limit-ntp-469 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-47 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-47 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-470 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-470 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-471 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-471 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-472 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-472 -m limit --limit 1/second -j LOG +-A limit-ntp-472 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-473 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-473 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-474 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-474 -j TEE --gateway 10.0.0.1 +-A limit-ntp-474 -j TEE --gateway 10.0.0.2 +-A limit-ntp-474 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-475 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-475 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-475 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-476 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-476 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-477 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-477 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-478 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-478 -m limit --limit 12/minute -j ULOG +-A limit-ntp-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-479 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-48 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-48 -m limit --limit 12/minute -j ULOG +-A limit-ntp-48 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-480 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-480 -j ACCEPT +-A limit-ntp-482 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-482 -m limit --limit 1/second -j LOG +-A limit-ntp-482 -j ACCEPT +-A limit-ntp-483 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-483 -m limit --limit 1/second -j LOG +-A limit-ntp-484 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-484 -j TEE --gateway 10.0.0.1 +-A limit-ntp-484 -j TEE --gateway 10.0.0.2 +-A limit-ntp-484 -j ACCEPT +-A limit-ntp-485 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-485 -j TEE --gateway 10.0.0.1 +-A limit-ntp-485 -j TEE --gateway 10.0.0.2 +-A limit-ntp-486 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-486 -j ACCEPT +-A limit-ntp-488 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-488 -m limit --limit 12/minute -j ULOG +-A limit-ntp-488 -j ACCEPT +-A limit-ntp-489 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-489 -m limit --limit 12/minute -j ULOG +-A limit-ntp-49 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-49 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-490 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-491 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-491 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-492 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-492 -m limit --limit 1/second -j LOG +-A limit-ntp-492 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-493 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-493 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-494 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-494 -j TEE --gateway 10.0.0.1 +-A limit-ntp-494 -j TEE --gateway 10.0.0.2 +-A limit-ntp-494 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-495 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-496 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-496 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-497 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-497 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-498 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-498 -m limit --limit 12/minute -j ULOG +-A limit-ntp-498 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-499 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-499 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-5 +-A limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-50 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-50 -j ACCEPT +-A limit-ntp-500 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-500 -j ACCEPT +-A limit-ntp-502 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-502 -m limit --limit 1/second -j LOG +-A limit-ntp-502 -j ACCEPT +-A limit-ntp-503 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-503 -m limit --limit 1/second -j LOG +-A limit-ntp-504 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-504 -j TEE --gateway 10.0.0.1 +-A limit-ntp-504 -j TEE --gateway 10.0.0.2 +-A limit-ntp-504 -j ACCEPT +-A limit-ntp-505 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-505 -j TEE --gateway 10.0.0.1 +-A limit-ntp-505 -j TEE --gateway 10.0.0.2 +-A limit-ntp-506 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-506 -j ACCEPT +-A limit-ntp-508 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-508 -m limit --limit 12/minute -j ULOG +-A limit-ntp-508 -j ACCEPT +-A limit-ntp-509 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-509 -m limit --limit 12/minute -j ULOG +-A limit-ntp-510 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-510 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-511 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-511 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-512 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-512 -m limit --limit 1/second -j LOG +-A limit-ntp-512 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-513 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-513 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-514 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-514 -j TEE --gateway 10.0.0.1 +-A limit-ntp-514 -j TEE --gateway 10.0.0.2 +-A limit-ntp-514 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-515 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-515 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-515 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-516 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-516 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-517 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-517 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-518 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-518 -m limit --limit 12/minute -j ULOG +-A limit-ntp-518 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-519 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-519 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-52 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-52 -m limit --limit 1/second -j LOG +-A limit-ntp-52 -j ACCEPT +-A limit-ntp-520 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-520 -j ACCEPT +-A limit-ntp-522 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-522 -m limit --limit 1/second -j LOG +-A limit-ntp-522 -j ACCEPT +-A limit-ntp-523 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-523 -m limit --limit 1/second -j LOG +-A limit-ntp-524 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-524 -j TEE --gateway 10.0.0.1 +-A limit-ntp-524 -j TEE --gateway 10.0.0.2 +-A limit-ntp-524 -j ACCEPT +-A limit-ntp-525 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-525 -j TEE --gateway 10.0.0.1 +-A limit-ntp-525 -j TEE --gateway 10.0.0.2 +-A limit-ntp-526 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-526 -j ACCEPT +-A limit-ntp-528 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-528 -m limit --limit 12/minute -j ULOG +-A limit-ntp-528 -j ACCEPT +-A limit-ntp-529 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-529 -m limit --limit 12/minute -j ULOG +-A limit-ntp-53 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-53 -m limit --limit 1/second -j LOG +-A limit-ntp-530 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-530 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-531 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-531 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-532 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-532 -m limit --limit 1/second -j LOG +-A limit-ntp-532 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-533 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-533 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-534 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-534 -j TEE --gateway 10.0.0.1 +-A limit-ntp-534 -j TEE --gateway 10.0.0.2 +-A limit-ntp-534 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-535 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-535 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-535 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-536 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-536 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-537 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-537 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-538 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-538 -m limit --limit 12/minute -j ULOG +-A limit-ntp-538 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-539 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-539 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-54 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-54 -j TEE --gateway 10.0.0.1 +-A limit-ntp-54 -j TEE --gateway 10.0.0.2 +-A limit-ntp-54 -j ACCEPT +-A limit-ntp-540 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-540 -j ACCEPT +-A limit-ntp-542 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-542 -m limit --limit 1/second -j LOG +-A limit-ntp-542 -j ACCEPT +-A limit-ntp-543 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-543 -m limit --limit 1/second -j LOG +-A limit-ntp-544 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-544 -j TEE --gateway 10.0.0.1 +-A limit-ntp-544 -j TEE --gateway 10.0.0.2 +-A limit-ntp-544 -j ACCEPT +-A limit-ntp-545 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-545 -j TEE --gateway 10.0.0.1 +-A limit-ntp-545 -j TEE --gateway 10.0.0.2 +-A limit-ntp-546 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-546 -j ACCEPT +-A limit-ntp-548 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-548 -m limit --limit 12/minute -j ULOG +-A limit-ntp-548 -j ACCEPT +-A limit-ntp-549 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-549 -m limit --limit 12/minute -j ULOG +-A limit-ntp-55 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-55 -j TEE --gateway 10.0.0.1 +-A limit-ntp-55 -j TEE --gateway 10.0.0.2 +-A limit-ntp-550 -m recent --name limit-ntp-550 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-280 +-A limit-ntp-550 -m recent --name limit-ntp-550 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-551 -m recent --name limit-ntp-551 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-281 +-A limit-ntp-551 -m recent --name limit-ntp-551 --rsource --mask 255.255.255.255 --set +-A limit-ntp-552 -m recent --name limit-ntp-552 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-282 +-A limit-ntp-552 -m limit --limit 1/second -j LOG +-A limit-ntp-552 -m recent --name limit-ntp-552 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-553 -m recent --name limit-ntp-553 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-283 +-A limit-ntp-553 -m recent --name limit-ntp-553 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-554 -m recent --name limit-ntp-554 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-284 +-A limit-ntp-554 -j TEE --gateway 10.0.0.1 +-A limit-ntp-554 -j TEE --gateway 10.0.0.2 +-A limit-ntp-554 -m recent --name limit-ntp-554 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-285 +-A limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-556 -m recent --name limit-ntp-556 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-286 +-A limit-ntp-556 -m recent --name limit-ntp-556 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-557 -m recent --name limit-ntp-557 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-287 +-A limit-ntp-557 -m recent --name limit-ntp-557 --rsource --mask 255.255.255.255 --set +-A limit-ntp-558 -m recent --name limit-ntp-558 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-288 +-A limit-ntp-558 -m limit --limit 12/minute -j ULOG +-A limit-ntp-558 -m recent --name limit-ntp-558 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-559 -m recent --name limit-ntp-559 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-289 +-A limit-ntp-559 -m recent --name limit-ntp-559 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-56 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-56 -j ACCEPT +-A limit-ntp-560 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-290 +-A limit-ntp-560 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-561 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-291 +-A limit-ntp-561 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-562 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-292 +-A limit-ntp-562 -m limit --limit 1/second -j LOG +-A limit-ntp-562 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-563 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-293 +-A limit-ntp-563 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-564 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-294 +-A limit-ntp-564 -j TEE --gateway 10.0.0.1 +-A limit-ntp-564 -j TEE --gateway 10.0.0.2 +-A limit-ntp-564 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-565 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-295 +-A limit-ntp-565 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-565 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-566 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-296 +-A limit-ntp-566 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-567 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-297 +-A limit-ntp-567 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-568 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-298 +-A limit-ntp-568 -m limit --limit 12/minute -j ULOG +-A limit-ntp-568 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-569 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-299 +-A limit-ntp-569 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-570 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-300 +-A limit-ntp-570 -j ACCEPT +-A limit-ntp-572 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-302 +-A limit-ntp-572 -m limit --limit 1/second -j LOG +-A limit-ntp-572 -j ACCEPT +-A limit-ntp-573 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-303 +-A limit-ntp-573 -m limit --limit 1/second -j LOG +-A limit-ntp-574 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-304 +-A limit-ntp-574 -j TEE --gateway 10.0.0.1 +-A limit-ntp-574 -j TEE --gateway 10.0.0.2 +-A limit-ntp-574 -j ACCEPT +-A limit-ntp-575 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-305 +-A limit-ntp-575 -j TEE --gateway 10.0.0.1 +-A limit-ntp-575 -j TEE --gateway 10.0.0.2 +-A limit-ntp-576 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-306 +-A limit-ntp-576 -j ACCEPT +-A limit-ntp-578 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-308 +-A limit-ntp-578 -m limit --limit 12/minute -j ULOG +-A limit-ntp-578 -j ACCEPT +-A limit-ntp-579 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-309 +-A limit-ntp-579 -m limit --limit 12/minute -j ULOG +-A limit-ntp-58 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-58 -m limit --limit 12/minute -j ULOG +-A limit-ntp-58 -j ACCEPT +-A limit-ntp-580 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-310 +-A limit-ntp-580 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-581 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-311 +-A limit-ntp-581 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-582 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-312 +-A limit-ntp-582 -m limit --limit 1/second -j LOG +-A limit-ntp-582 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-583 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-313 +-A limit-ntp-583 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-584 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-314 +-A limit-ntp-584 -j TEE --gateway 10.0.0.1 +-A limit-ntp-584 -j TEE --gateway 10.0.0.2 +-A limit-ntp-584 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-585 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-315 +-A limit-ntp-585 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-585 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-586 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-316 +-A limit-ntp-586 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-587 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-317 +-A limit-ntp-587 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-588 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-318 +-A limit-ntp-588 -m limit --limit 12/minute -j ULOG +-A limit-ntp-588 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-589 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-319 +-A limit-ntp-589 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-59 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-59 -m limit --limit 12/minute -j ULOG +-A limit-ntp-590 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-320 +-A limit-ntp-590 -j ACCEPT +-A limit-ntp-592 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-322 +-A limit-ntp-592 -m limit --limit 1/second -j LOG +-A limit-ntp-592 -j ACCEPT +-A limit-ntp-593 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-323 +-A limit-ntp-593 -m limit --limit 1/second -j LOG +-A limit-ntp-594 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-324 +-A limit-ntp-594 -j TEE --gateway 10.0.0.1 +-A limit-ntp-594 -j TEE --gateway 10.0.0.2 +-A limit-ntp-594 -j ACCEPT +-A limit-ntp-595 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-325 +-A limit-ntp-595 -j TEE --gateway 10.0.0.1 +-A limit-ntp-595 -j TEE --gateway 10.0.0.2 +-A limit-ntp-596 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-326 +-A limit-ntp-596 -j ACCEPT +-A limit-ntp-598 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-328 +-A limit-ntp-598 -m limit --limit 12/minute -j ULOG +-A limit-ntp-598 -j ACCEPT +-A limit-ntp-599 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-329 +-A limit-ntp-599 -m limit --limit 12/minute -j ULOG +-A limit-ntp-6 -m recent --name limit-ntp-6 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-6 +-A limit-ntp-6 -m recent --name limit-ntp-6 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-60 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-60 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-600 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-330 +-A limit-ntp-600 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-601 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-331 +-A limit-ntp-601 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-602 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-332 +-A limit-ntp-602 -m limit --limit 1/second -j LOG +-A limit-ntp-602 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-603 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-333 +-A limit-ntp-603 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-604 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-334 +-A limit-ntp-604 -j TEE --gateway 10.0.0.1 +-A limit-ntp-604 -j TEE --gateway 10.0.0.2 +-A limit-ntp-604 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-605 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-335 +-A limit-ntp-605 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-605 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-606 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-336 +-A limit-ntp-606 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-607 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-337 +-A limit-ntp-607 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-608 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-338 +-A limit-ntp-608 -m limit --limit 12/minute -j ULOG +-A limit-ntp-608 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-609 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-339 +-A limit-ntp-609 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-61 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-61 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-610 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-340 +-A limit-ntp-610 -j ACCEPT +-A limit-ntp-612 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-342 +-A limit-ntp-612 -m limit --limit 1/second -j LOG +-A limit-ntp-612 -j ACCEPT +-A limit-ntp-613 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-343 +-A limit-ntp-613 -m limit --limit 1/second -j LOG +-A limit-ntp-614 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-344 +-A limit-ntp-614 -j TEE --gateway 10.0.0.1 +-A limit-ntp-614 -j TEE --gateway 10.0.0.2 +-A limit-ntp-614 -j ACCEPT +-A limit-ntp-615 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-345 +-A limit-ntp-615 -j TEE --gateway 10.0.0.1 +-A limit-ntp-615 -j TEE --gateway 10.0.0.2 +-A limit-ntp-616 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-346 +-A limit-ntp-616 -j ACCEPT +-A limit-ntp-618 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-348 +-A limit-ntp-618 -m limit --limit 12/minute -j ULOG +-A limit-ntp-618 -j ACCEPT +-A limit-ntp-619 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-349 +-A limit-ntp-619 -m limit --limit 12/minute -j ULOG +-A limit-ntp-62 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-62 -m limit --limit 1/second -j LOG +-A limit-ntp-62 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-620 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-350 +-A limit-ntp-620 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-621 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-351 +-A limit-ntp-621 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-622 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-352 +-A limit-ntp-622 -m limit --limit 1/second -j LOG +-A limit-ntp-622 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-623 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-353 +-A limit-ntp-623 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-624 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-354 +-A limit-ntp-624 -j TEE --gateway 10.0.0.1 +-A limit-ntp-624 -j TEE --gateway 10.0.0.2 +-A limit-ntp-624 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-625 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-355 +-A limit-ntp-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-626 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-356 +-A limit-ntp-626 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-627 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-357 +-A limit-ntp-627 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-628 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-358 +-A limit-ntp-628 -m limit --limit 12/minute -j ULOG +-A limit-ntp-628 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-629 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-359 +-A limit-ntp-629 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-63 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-63 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-630 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-360 +-A limit-ntp-630 -j ACCEPT +-A limit-ntp-632 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-362 +-A limit-ntp-632 -m limit --limit 1/second -j LOG +-A limit-ntp-632 -j ACCEPT +-A limit-ntp-633 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-363 +-A limit-ntp-633 -m limit --limit 1/second -j LOG +-A limit-ntp-634 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-364 +-A limit-ntp-634 -j TEE --gateway 10.0.0.1 +-A limit-ntp-634 -j TEE --gateway 10.0.0.2 +-A limit-ntp-634 -j ACCEPT +-A limit-ntp-635 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-365 +-A limit-ntp-635 -j TEE --gateway 10.0.0.1 +-A limit-ntp-635 -j TEE --gateway 10.0.0.2 +-A limit-ntp-636 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-366 +-A limit-ntp-636 -j ACCEPT +-A limit-ntp-638 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-368 +-A limit-ntp-638 -m limit --limit 12/minute -j ULOG +-A limit-ntp-638 -j ACCEPT +-A limit-ntp-639 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-369 +-A limit-ntp-639 -m limit --limit 12/minute -j ULOG +-A limit-ntp-64 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-64 -j TEE --gateway 10.0.0.1 +-A limit-ntp-64 -j TEE --gateway 10.0.0.2 +-A limit-ntp-64 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-640 -m recent --name limit-ntp-640 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-370 +-A limit-ntp-640 -m recent --name limit-ntp-640 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-641 -m recent --name limit-ntp-641 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-371 +-A limit-ntp-641 -m recent --name limit-ntp-641 --rsource --mask 255.255.255.255 --set +-A limit-ntp-642 -m recent --name limit-ntp-642 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-372 +-A limit-ntp-642 -m limit --limit 1/second -j LOG +-A limit-ntp-642 -m recent --name limit-ntp-642 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-643 -m recent --name limit-ntp-643 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-373 +-A limit-ntp-643 -m recent --name limit-ntp-643 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-644 -m recent --name limit-ntp-644 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-374 +-A limit-ntp-644 -j TEE --gateway 10.0.0.1 +-A limit-ntp-644 -j TEE --gateway 10.0.0.2 +-A limit-ntp-644 -m recent --name limit-ntp-644 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-375 +-A limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-646 -m recent --name limit-ntp-646 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-376 +-A limit-ntp-646 -m recent --name limit-ntp-646 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-647 -m recent --name limit-ntp-647 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-377 +-A limit-ntp-647 -m recent --name limit-ntp-647 --rsource --mask 255.255.255.255 --set +-A limit-ntp-648 -m recent --name limit-ntp-648 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-378 +-A limit-ntp-648 -m limit --limit 12/minute -j ULOG +-A limit-ntp-648 -m recent --name limit-ntp-648 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-649 -m recent --name limit-ntp-649 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-379 +-A limit-ntp-649 -m recent --name limit-ntp-649 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-65 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-65 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-65 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-650 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-380 +-A limit-ntp-650 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-651 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-381 +-A limit-ntp-651 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-652 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-382 +-A limit-ntp-652 -m limit --limit 1/second -j LOG +-A limit-ntp-652 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-653 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-383 +-A limit-ntp-653 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-654 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-384 +-A limit-ntp-654 -j TEE --gateway 10.0.0.1 +-A limit-ntp-654 -j TEE --gateway 10.0.0.2 +-A limit-ntp-654 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-655 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-385 +-A limit-ntp-655 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-655 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-656 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-386 +-A limit-ntp-656 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-657 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-387 +-A limit-ntp-657 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-658 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-388 +-A limit-ntp-658 -m limit --limit 12/minute -j ULOG +-A limit-ntp-658 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-659 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-389 +-A limit-ntp-659 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-66 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-66 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-660 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-390 +-A limit-ntp-660 -j ACCEPT +-A limit-ntp-662 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-392 +-A limit-ntp-662 -m limit --limit 1/second -j LOG +-A limit-ntp-662 -j ACCEPT +-A limit-ntp-663 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-393 +-A limit-ntp-663 -m limit --limit 1/second -j LOG +-A limit-ntp-664 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-394 +-A limit-ntp-664 -j TEE --gateway 10.0.0.1 +-A limit-ntp-664 -j TEE --gateway 10.0.0.2 +-A limit-ntp-664 -j ACCEPT +-A limit-ntp-665 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-395 +-A limit-ntp-665 -j TEE --gateway 10.0.0.1 +-A limit-ntp-665 -j TEE --gateway 10.0.0.2 +-A limit-ntp-666 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-396 +-A limit-ntp-666 -j ACCEPT +-A limit-ntp-668 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-398 +-A limit-ntp-668 -m limit --limit 12/minute -j ULOG +-A limit-ntp-668 -j ACCEPT +-A limit-ntp-669 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-399 +-A limit-ntp-669 -m limit --limit 12/minute -j ULOG +-A limit-ntp-67 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-67 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-670 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-400 +-A limit-ntp-670 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-671 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-401 +-A limit-ntp-671 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-672 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-402 +-A limit-ntp-672 -m limit --limit 1/second -j LOG +-A limit-ntp-672 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-673 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-403 +-A limit-ntp-673 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-674 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-404 +-A limit-ntp-674 -j TEE --gateway 10.0.0.1 +-A limit-ntp-674 -j TEE --gateway 10.0.0.2 +-A limit-ntp-674 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-675 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-405 +-A limit-ntp-675 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-675 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-676 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-406 +-A limit-ntp-676 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-677 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-407 +-A limit-ntp-677 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-678 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-408 +-A limit-ntp-678 -m limit --limit 12/minute -j ULOG +-A limit-ntp-678 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-679 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-409 +-A limit-ntp-679 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-68 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-68 -m limit --limit 12/minute -j ULOG +-A limit-ntp-68 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-680 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-410 +-A limit-ntp-680 -j ACCEPT +-A limit-ntp-682 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-412 +-A limit-ntp-682 -m limit --limit 1/second -j LOG +-A limit-ntp-682 -j ACCEPT +-A limit-ntp-683 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-413 +-A limit-ntp-683 -m limit --limit 1/second -j LOG +-A limit-ntp-684 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-414 +-A limit-ntp-684 -j TEE --gateway 10.0.0.1 +-A limit-ntp-684 -j TEE --gateway 10.0.0.2 +-A limit-ntp-684 -j ACCEPT +-A limit-ntp-685 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-415 +-A limit-ntp-685 -j TEE --gateway 10.0.0.1 +-A limit-ntp-685 -j TEE --gateway 10.0.0.2 +-A limit-ntp-686 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-416 +-A limit-ntp-686 -j ACCEPT +-A limit-ntp-688 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-418 +-A limit-ntp-688 -m limit --limit 12/minute -j ULOG +-A limit-ntp-688 -j ACCEPT +-A limit-ntp-689 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-419 +-A limit-ntp-689 -m limit --limit 12/minute -j ULOG +-A limit-ntp-69 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-69 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-690 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-420 +-A limit-ntp-690 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-691 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-421 +-A limit-ntp-691 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-692 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-422 +-A limit-ntp-692 -m limit --limit 1/second -j LOG +-A limit-ntp-692 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-693 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-423 +-A limit-ntp-693 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-694 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-424 +-A limit-ntp-694 -j TEE --gateway 10.0.0.1 +-A limit-ntp-694 -j TEE --gateway 10.0.0.2 +-A limit-ntp-694 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-695 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-425 +-A limit-ntp-695 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-695 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-696 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-426 +-A limit-ntp-696 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-697 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-427 +-A limit-ntp-697 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-698 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-428 +-A limit-ntp-698 -m limit --limit 12/minute -j ULOG +-A limit-ntp-698 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-699 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-429 +-A limit-ntp-699 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-7 -m recent --name limit-ntp-7 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-7 +-A limit-ntp-7 -m recent --name limit-ntp-7 --rsource --mask 255.255.255.255 --set +-A limit-ntp-70 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-70 -j ACCEPT +-A limit-ntp-700 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-430 +-A limit-ntp-700 -j ACCEPT +-A limit-ntp-702 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-432 +-A limit-ntp-702 -m limit --limit 1/second -j LOG +-A limit-ntp-702 -j ACCEPT +-A limit-ntp-703 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-433 +-A limit-ntp-703 -m limit --limit 1/second -j LOG +-A limit-ntp-704 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-434 +-A limit-ntp-704 -j TEE --gateway 10.0.0.1 +-A limit-ntp-704 -j TEE --gateway 10.0.0.2 +-A limit-ntp-704 -j ACCEPT +-A limit-ntp-705 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-435 +-A limit-ntp-705 -j TEE --gateway 10.0.0.1 +-A limit-ntp-705 -j TEE --gateway 10.0.0.2 +-A limit-ntp-706 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-436 +-A limit-ntp-706 -j ACCEPT +-A limit-ntp-708 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-438 +-A limit-ntp-708 -m limit --limit 12/minute -j ULOG +-A limit-ntp-708 -j ACCEPT +-A limit-ntp-709 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-439 +-A limit-ntp-709 -m limit --limit 12/minute -j ULOG +-A limit-ntp-710 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-440 +-A limit-ntp-710 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-711 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-441 +-A limit-ntp-711 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-712 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-442 +-A limit-ntp-712 -m limit --limit 1/second -j LOG +-A limit-ntp-712 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-713 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-443 +-A limit-ntp-713 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-714 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-444 +-A limit-ntp-714 -j TEE --gateway 10.0.0.1 +-A limit-ntp-714 -j TEE --gateway 10.0.0.2 +-A limit-ntp-714 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-715 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-445 +-A limit-ntp-715 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-715 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-716 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-446 +-A limit-ntp-716 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-717 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-447 +-A limit-ntp-717 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-718 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-448 +-A limit-ntp-718 -m limit --limit 12/minute -j ULOG +-A limit-ntp-718 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-719 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-449 +-A limit-ntp-719 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-72 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-72 -m limit --limit 1/second -j LOG +-A limit-ntp-72 -j ACCEPT +-A limit-ntp-720 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-450 +-A limit-ntp-720 -j ACCEPT +-A limit-ntp-722 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-452 +-A limit-ntp-722 -m limit --limit 1/second -j LOG +-A limit-ntp-722 -j ACCEPT +-A limit-ntp-723 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-453 +-A limit-ntp-723 -m limit --limit 1/second -j LOG +-A limit-ntp-724 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-454 +-A limit-ntp-724 -j TEE --gateway 10.0.0.1 +-A limit-ntp-724 -j TEE --gateway 10.0.0.2 +-A limit-ntp-724 -j ACCEPT +-A limit-ntp-725 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-455 +-A limit-ntp-725 -j TEE --gateway 10.0.0.1 +-A limit-ntp-725 -j TEE --gateway 10.0.0.2 +-A limit-ntp-726 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-456 +-A limit-ntp-726 -j ACCEPT +-A limit-ntp-728 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-458 +-A limit-ntp-728 -m limit --limit 12/minute -j ULOG +-A limit-ntp-728 -j ACCEPT +-A limit-ntp-729 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-459 +-A limit-ntp-729 -m limit --limit 12/minute -j ULOG +-A limit-ntp-73 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-73 -m limit --limit 1/second -j LOG +-A limit-ntp-730 -m recent --name limit-ntp-730 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-730 -m recent --name limit-ntp-730 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-731 -m recent --name limit-ntp-731 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-731 -m recent --name limit-ntp-731 --rsource --mask 255.255.255.255 --set +-A limit-ntp-732 -m recent --name limit-ntp-732 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-732 -m limit --limit 1/second -j LOG +-A limit-ntp-732 -m recent --name limit-ntp-732 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-733 -m recent --name limit-ntp-733 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-733 -m recent --name limit-ntp-733 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-734 -m recent --name limit-ntp-734 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-734 -j TEE --gateway 10.0.0.1 +-A limit-ntp-734 -j TEE --gateway 10.0.0.2 +-A limit-ntp-734 -m recent --name limit-ntp-734 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-736 -m recent --name limit-ntp-736 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-736 -m recent --name limit-ntp-736 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-737 -m recent --name limit-ntp-737 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-737 -m recent --name limit-ntp-737 --rsource --mask 255.255.255.255 --set +-A limit-ntp-738 -m recent --name limit-ntp-738 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-738 -m limit --limit 12/minute -j ULOG +-A limit-ntp-738 -m recent --name limit-ntp-738 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-739 -m recent --name limit-ntp-739 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-739 -m recent --name limit-ntp-739 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-74 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-74 -j TEE --gateway 10.0.0.1 +-A limit-ntp-74 -j TEE --gateway 10.0.0.2 +-A limit-ntp-74 -j ACCEPT +-A limit-ntp-740 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-740 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-741 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-741 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-742 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-742 -m limit --limit 1/second -j LOG +-A limit-ntp-742 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-743 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-743 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-744 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-744 -j TEE --gateway 10.0.0.1 +-A limit-ntp-744 -j TEE --gateway 10.0.0.2 +-A limit-ntp-744 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-745 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-745 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-745 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-746 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-746 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-747 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-747 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-748 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-748 -m limit --limit 12/minute -j ULOG +-A limit-ntp-748 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-749 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-749 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-75 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-75 -j TEE --gateway 10.0.0.1 +-A limit-ntp-75 -j TEE --gateway 10.0.0.2 +-A limit-ntp-750 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-750 -j ACCEPT +-A limit-ntp-752 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-752 -m limit --limit 1/second -j LOG +-A limit-ntp-752 -j ACCEPT +-A limit-ntp-753 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-753 -m limit --limit 1/second -j LOG +-A limit-ntp-754 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-754 -j TEE --gateway 10.0.0.1 +-A limit-ntp-754 -j TEE --gateway 10.0.0.2 +-A limit-ntp-754 -j ACCEPT +-A limit-ntp-755 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-755 -j TEE --gateway 10.0.0.1 +-A limit-ntp-755 -j TEE --gateway 10.0.0.2 +-A limit-ntp-756 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-756 -j ACCEPT +-A limit-ntp-758 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-758 -m limit --limit 12/minute -j ULOG +-A limit-ntp-758 -j ACCEPT +-A limit-ntp-759 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-759 -m limit --limit 12/minute -j ULOG +-A limit-ntp-76 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-76 -j ACCEPT +-A limit-ntp-760 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-760 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-761 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-761 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-762 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-762 -m limit --limit 1/second -j LOG +-A limit-ntp-762 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-763 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-763 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-764 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-764 -j TEE --gateway 10.0.0.1 +-A limit-ntp-764 -j TEE --gateway 10.0.0.2 +-A limit-ntp-764 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-765 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-765 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-765 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-766 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-766 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-767 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-767 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-768 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-768 -m limit --limit 12/minute -j ULOG +-A limit-ntp-768 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-769 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-769 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-770 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-770 -j ACCEPT +-A limit-ntp-772 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-772 -m limit --limit 1/second -j LOG +-A limit-ntp-772 -j ACCEPT +-A limit-ntp-773 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-773 -m limit --limit 1/second -j LOG +-A limit-ntp-774 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-774 -j TEE --gateway 10.0.0.1 +-A limit-ntp-774 -j TEE --gateway 10.0.0.2 +-A limit-ntp-774 -j ACCEPT +-A limit-ntp-775 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-775 -j TEE --gateway 10.0.0.1 +-A limit-ntp-775 -j TEE --gateway 10.0.0.2 +-A limit-ntp-776 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-776 -j ACCEPT +-A limit-ntp-778 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-778 -m limit --limit 12/minute -j ULOG +-A limit-ntp-778 -j ACCEPT +-A limit-ntp-779 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-779 -m limit --limit 12/minute -j ULOG +-A limit-ntp-78 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-78 -m limit --limit 12/minute -j ULOG +-A limit-ntp-78 -j ACCEPT +-A limit-ntp-780 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-780 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-781 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-781 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-782 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-782 -m limit --limit 1/second -j LOG +-A limit-ntp-782 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-783 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-783 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-784 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-784 -j TEE --gateway 10.0.0.1 +-A limit-ntp-784 -j TEE --gateway 10.0.0.2 +-A limit-ntp-784 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-785 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-785 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-785 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-786 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-786 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-787 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-787 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-788 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-788 -m limit --limit 12/minute -j ULOG +-A limit-ntp-788 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-789 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-789 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-79 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-79 -m limit --limit 12/minute -j ULOG +-A limit-ntp-790 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-790 -j ACCEPT +-A limit-ntp-792 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-792 -m limit --limit 1/second -j LOG +-A limit-ntp-792 -j ACCEPT +-A limit-ntp-793 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-793 -m limit --limit 1/second -j LOG +-A limit-ntp-794 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-794 -j TEE --gateway 10.0.0.1 +-A limit-ntp-794 -j TEE --gateway 10.0.0.2 +-A limit-ntp-794 -j ACCEPT +-A limit-ntp-795 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-795 -j TEE --gateway 10.0.0.1 +-A limit-ntp-795 -j TEE --gateway 10.0.0.2 +-A limit-ntp-796 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-796 -j ACCEPT +-A limit-ntp-798 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-798 -m limit --limit 12/minute -j ULOG +-A limit-ntp-798 -j ACCEPT +-A limit-ntp-799 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-799 -m limit --limit 12/minute -j ULOG +-A limit-ntp-8 -m recent --name limit-ntp-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-8 +-A limit-ntp-8 -m limit --limit 12/minute -j ULOG +-A limit-ntp-8 -m recent --name limit-ntp-8 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-80 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-80 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-800 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-800 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-801 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-801 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-802 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-802 -m limit --limit 1/second -j LOG +-A limit-ntp-802 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-803 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-803 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-804 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-804 -j TEE --gateway 10.0.0.1 +-A limit-ntp-804 -j TEE --gateway 10.0.0.2 +-A limit-ntp-804 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-805 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-805 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-805 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-806 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-806 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-807 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-807 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-808 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-808 -m limit --limit 12/minute -j ULOG +-A limit-ntp-808 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-809 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-809 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-81 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-81 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-810 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-810 -j ACCEPT +-A limit-ntp-812 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-812 -m limit --limit 1/second -j LOG +-A limit-ntp-812 -j ACCEPT +-A limit-ntp-813 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-813 -m limit --limit 1/second -j LOG +-A limit-ntp-814 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-814 -j TEE --gateway 10.0.0.1 +-A limit-ntp-814 -j TEE --gateway 10.0.0.2 +-A limit-ntp-814 -j ACCEPT +-A limit-ntp-815 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-815 -j TEE --gateway 10.0.0.1 +-A limit-ntp-815 -j TEE --gateway 10.0.0.2 +-A limit-ntp-816 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-816 -j ACCEPT +-A limit-ntp-818 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-818 -m limit --limit 12/minute -j ULOG +-A limit-ntp-818 -j ACCEPT +-A limit-ntp-819 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-819 -m limit --limit 12/minute -j ULOG +-A limit-ntp-82 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-82 -m limit --limit 1/second -j LOG +-A limit-ntp-82 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-820 -m recent --name limit-ntp-820 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-460 +-A limit-ntp-820 -m recent --name limit-ntp-820 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-821 -m recent --name limit-ntp-821 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-461 +-A limit-ntp-821 -m recent --name limit-ntp-821 --rsource --mask 255.255.255.255 --set +-A limit-ntp-822 -m recent --name limit-ntp-822 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-462 +-A limit-ntp-822 -m limit --limit 1/second -j LOG +-A limit-ntp-822 -m recent --name limit-ntp-822 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-823 -m recent --name limit-ntp-823 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-463 +-A limit-ntp-823 -m recent --name limit-ntp-823 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-824 -m recent --name limit-ntp-824 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-464 +-A limit-ntp-824 -j TEE --gateway 10.0.0.1 +-A limit-ntp-824 -j TEE --gateway 10.0.0.2 +-A limit-ntp-824 -m recent --name limit-ntp-824 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-465 +-A limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-826 -m recent --name limit-ntp-826 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-466 +-A limit-ntp-826 -m recent --name limit-ntp-826 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-827 -m recent --name limit-ntp-827 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-467 +-A limit-ntp-827 -m recent --name limit-ntp-827 --rsource --mask 255.255.255.255 --set +-A limit-ntp-828 -m recent --name limit-ntp-828 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-468 +-A limit-ntp-828 -m limit --limit 12/minute -j ULOG +-A limit-ntp-828 -m recent --name limit-ntp-828 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-829 -m recent --name limit-ntp-829 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-469 +-A limit-ntp-829 -m recent --name limit-ntp-829 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-83 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-83 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-830 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-470 +-A limit-ntp-830 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-831 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-471 +-A limit-ntp-831 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-832 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-472 +-A limit-ntp-832 -m limit --limit 1/second -j LOG +-A limit-ntp-832 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-833 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-473 +-A limit-ntp-833 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-834 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-474 +-A limit-ntp-834 -j TEE --gateway 10.0.0.1 +-A limit-ntp-834 -j TEE --gateway 10.0.0.2 +-A limit-ntp-834 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-835 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-475 +-A limit-ntp-835 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-835 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-836 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-476 +-A limit-ntp-836 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-837 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-477 +-A limit-ntp-837 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-838 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-478 +-A limit-ntp-838 -m limit --limit 12/minute -j ULOG +-A limit-ntp-838 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-839 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-479 +-A limit-ntp-839 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-84 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-84 -j TEE --gateway 10.0.0.1 +-A limit-ntp-84 -j TEE --gateway 10.0.0.2 +-A limit-ntp-84 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-840 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-480 +-A limit-ntp-840 -j ACCEPT +-A limit-ntp-842 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-482 +-A limit-ntp-842 -m limit --limit 1/second -j LOG +-A limit-ntp-842 -j ACCEPT +-A limit-ntp-843 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-483 +-A limit-ntp-843 -m limit --limit 1/second -j LOG +-A limit-ntp-844 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-484 +-A limit-ntp-844 -j TEE --gateway 10.0.0.1 +-A limit-ntp-844 -j TEE --gateway 10.0.0.2 +-A limit-ntp-844 -j ACCEPT +-A limit-ntp-845 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-485 +-A limit-ntp-845 -j TEE --gateway 10.0.0.1 +-A limit-ntp-845 -j TEE --gateway 10.0.0.2 +-A limit-ntp-846 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-486 +-A limit-ntp-846 -j ACCEPT +-A limit-ntp-848 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-488 +-A limit-ntp-848 -m limit --limit 12/minute -j ULOG +-A limit-ntp-848 -j ACCEPT +-A limit-ntp-849 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-489 +-A limit-ntp-849 -m limit --limit 12/minute -j ULOG +-A limit-ntp-85 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-85 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-85 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-850 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-490 +-A limit-ntp-850 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-851 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-491 +-A limit-ntp-851 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-852 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-492 +-A limit-ntp-852 -m limit --limit 1/second -j LOG +-A limit-ntp-852 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-853 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-493 +-A limit-ntp-853 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-854 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-494 +-A limit-ntp-854 -j TEE --gateway 10.0.0.1 +-A limit-ntp-854 -j TEE --gateway 10.0.0.2 +-A limit-ntp-854 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-855 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-495 +-A limit-ntp-855 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-855 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-856 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-496 +-A limit-ntp-856 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-857 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-497 +-A limit-ntp-857 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-858 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-498 +-A limit-ntp-858 -m limit --limit 12/minute -j ULOG +-A limit-ntp-858 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-859 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-499 +-A limit-ntp-859 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-86 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-86 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-860 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-500 +-A limit-ntp-860 -j ACCEPT +-A limit-ntp-862 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-502 +-A limit-ntp-862 -m limit --limit 1/second -j LOG +-A limit-ntp-862 -j ACCEPT +-A limit-ntp-863 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-503 +-A limit-ntp-863 -m limit --limit 1/second -j LOG +-A limit-ntp-864 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-504 +-A limit-ntp-864 -j TEE --gateway 10.0.0.1 +-A limit-ntp-864 -j TEE --gateway 10.0.0.2 +-A limit-ntp-864 -j ACCEPT +-A limit-ntp-865 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-505 +-A limit-ntp-865 -j TEE --gateway 10.0.0.1 +-A limit-ntp-865 -j TEE --gateway 10.0.0.2 +-A limit-ntp-866 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-506 +-A limit-ntp-866 -j ACCEPT +-A limit-ntp-868 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-508 +-A limit-ntp-868 -m limit --limit 12/minute -j ULOG +-A limit-ntp-868 -j ACCEPT +-A limit-ntp-869 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-509 +-A limit-ntp-869 -m limit --limit 12/minute -j ULOG +-A limit-ntp-87 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-87 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-870 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-510 +-A limit-ntp-870 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-871 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-511 +-A limit-ntp-871 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-872 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-512 +-A limit-ntp-872 -m limit --limit 1/second -j LOG +-A limit-ntp-872 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-873 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-513 +-A limit-ntp-873 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-874 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-514 +-A limit-ntp-874 -j TEE --gateway 10.0.0.1 +-A limit-ntp-874 -j TEE --gateway 10.0.0.2 +-A limit-ntp-874 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-875 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-515 +-A limit-ntp-875 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-875 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-876 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-516 +-A limit-ntp-876 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-877 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-517 +-A limit-ntp-877 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-878 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-518 +-A limit-ntp-878 -m limit --limit 12/minute -j ULOG +-A limit-ntp-878 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-879 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-519 +-A limit-ntp-879 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-88 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-88 -m limit --limit 12/minute -j ULOG +-A limit-ntp-88 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-880 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-520 +-A limit-ntp-880 -j ACCEPT +-A limit-ntp-882 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-522 +-A limit-ntp-882 -m limit --limit 1/second -j LOG +-A limit-ntp-882 -j ACCEPT +-A limit-ntp-883 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-523 +-A limit-ntp-883 -m limit --limit 1/second -j LOG +-A limit-ntp-884 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-524 +-A limit-ntp-884 -j TEE --gateway 10.0.0.1 +-A limit-ntp-884 -j TEE --gateway 10.0.0.2 +-A limit-ntp-884 -j ACCEPT +-A limit-ntp-885 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-525 +-A limit-ntp-885 -j TEE --gateway 10.0.0.1 +-A limit-ntp-885 -j TEE --gateway 10.0.0.2 +-A limit-ntp-886 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-526 +-A limit-ntp-886 -j ACCEPT +-A limit-ntp-888 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-528 +-A limit-ntp-888 -m limit --limit 12/minute -j ULOG +-A limit-ntp-888 -j ACCEPT +-A limit-ntp-889 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-529 +-A limit-ntp-889 -m limit --limit 12/minute -j ULOG +-A limit-ntp-89 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-89 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-890 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-530 +-A limit-ntp-890 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-891 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-531 +-A limit-ntp-891 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-892 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-532 +-A limit-ntp-892 -m limit --limit 1/second -j LOG +-A limit-ntp-892 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-893 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-533 +-A limit-ntp-893 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-894 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-534 +-A limit-ntp-894 -j TEE --gateway 10.0.0.1 +-A limit-ntp-894 -j TEE --gateway 10.0.0.2 +-A limit-ntp-894 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-895 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-535 +-A limit-ntp-895 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-895 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-896 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-536 +-A limit-ntp-896 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-897 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-537 +-A limit-ntp-897 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-898 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-538 +-A limit-ntp-898 -m limit --limit 12/minute -j ULOG +-A limit-ntp-898 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-899 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-539 +-A limit-ntp-899 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-9 -m recent --name limit-ntp-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-9 +-A limit-ntp-9 -m recent --name limit-ntp-9 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-90 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-90 -j ACCEPT +-A limit-ntp-900 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-540 +-A limit-ntp-900 -j ACCEPT +-A limit-ntp-902 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-542 +-A limit-ntp-902 -m limit --limit 1/second -j LOG +-A limit-ntp-902 -j ACCEPT +-A limit-ntp-903 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-543 +-A limit-ntp-903 -m limit --limit 1/second -j LOG +-A limit-ntp-904 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-544 +-A limit-ntp-904 -j TEE --gateway 10.0.0.1 +-A limit-ntp-904 -j TEE --gateway 10.0.0.2 +-A limit-ntp-904 -j ACCEPT +-A limit-ntp-905 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-545 +-A limit-ntp-905 -j TEE --gateway 10.0.0.1 +-A limit-ntp-905 -j TEE --gateway 10.0.0.2 +-A limit-ntp-906 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-546 +-A limit-ntp-906 -j ACCEPT +-A limit-ntp-908 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-548 +-A limit-ntp-908 -m limit --limit 12/minute -j ULOG +-A limit-ntp-908 -j ACCEPT +-A limit-ntp-909 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-549 +-A limit-ntp-909 -m limit --limit 12/minute -j ULOG +-A limit-ntp-910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-910 -j ACCEPT +-A limit-ntp-910 -m limit --limit 1/second -j LOG +-A limit-ntp-910 -j DROP +-A limit-ntp-911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-911 -j RETURN +-A limit-ntp-911 -m limit --limit 1/second -j LOG +-A limit-ntp-911 -j DROP +-A limit-ntp-912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-912 -j logaccept-ntp-0 +-A limit-ntp-912 -m limit --limit 1/second -j LOG +-A limit-ntp-912 -j DROP +-A limit-ntp-913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-913 -j logaccept-ntp-1 +-A limit-ntp-913 -m limit --limit 1/second -j LOG +-A limit-ntp-913 -j DROP +-A limit-ntp-914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-914 -j ACCEPT +-A limit-ntp-914 -m limit --limit 1/second -j LOG +-A limit-ntp-914 -j DROP +-A limit-ntp-915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-915 -j logaccept-ntp-2 +-A limit-ntp-915 -m limit --limit 1/second -j LOG +-A limit-ntp-915 -j DROP +-A limit-ntp-916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-916 -j ACCEPT +-A limit-ntp-916 -j DROP +-A limit-ntp-917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-917 -j RETURN +-A limit-ntp-917 -j DROP +-A limit-ntp-918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-918 -j logaccept-ntp-3 +-A limit-ntp-918 -j DROP +-A limit-ntp-919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-919 -j logaccept-ntp-4 +-A limit-ntp-919 -j DROP +-A limit-ntp-92 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-92 -m limit --limit 1/second -j LOG +-A limit-ntp-92 -j ACCEPT +-A limit-ntp-920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-920 -j ACCEPT +-A limit-ntp-920 -j DROP +-A limit-ntp-921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-921 -j logaccept-ntp-5 +-A limit-ntp-921 -j DROP +-A limit-ntp-922 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-922 -j ACCEPT +-A limit-ntp-922 -m limit --limit 1/second -j LOG +-A limit-ntp-922 -j DROP +-A limit-ntp-923 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-923 -j RETURN +-A limit-ntp-923 -m limit --limit 1/second -j LOG +-A limit-ntp-923 -j DROP +-A limit-ntp-924 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-924 -j logaccept-ntp-6 +-A limit-ntp-924 -m limit --limit 1/second -j LOG +-A limit-ntp-924 -j DROP +-A limit-ntp-925 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-925 -j logaccept-ntp-7 +-A limit-ntp-925 -m limit --limit 1/second -j LOG +-A limit-ntp-925 -j DROP +-A limit-ntp-926 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-926 -j ACCEPT +-A limit-ntp-926 -m limit --limit 1/second -j LOG +-A limit-ntp-926 -j DROP +-A limit-ntp-927 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-927 -j logaccept-ntp-8 +-A limit-ntp-927 -m limit --limit 1/second -j LOG +-A limit-ntp-927 -j DROP +-A limit-ntp-928 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-928 -j ACCEPT +-A limit-ntp-928 -j TEE --gateway 10.0.0.1 +-A limit-ntp-928 -j TEE --gateway 10.0.0.2 +-A limit-ntp-928 -j DROP +-A limit-ntp-929 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-929 -j RETURN +-A limit-ntp-929 -j TEE --gateway 10.0.0.1 +-A limit-ntp-929 -j TEE --gateway 10.0.0.2 +-A limit-ntp-929 -j DROP +-A limit-ntp-93 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-93 -m limit --limit 1/second -j LOG +-A limit-ntp-930 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-930 -j logaccept-ntp-9 +-A limit-ntp-930 -j TEE --gateway 10.0.0.1 +-A limit-ntp-930 -j TEE --gateway 10.0.0.2 +-A limit-ntp-930 -j DROP +-A limit-ntp-931 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-931 -j logaccept-ntp-10 +-A limit-ntp-931 -j TEE --gateway 10.0.0.1 +-A limit-ntp-931 -j TEE --gateway 10.0.0.2 +-A limit-ntp-931 -j DROP +-A limit-ntp-932 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-932 -j ACCEPT +-A limit-ntp-932 -j TEE --gateway 10.0.0.1 +-A limit-ntp-932 -j TEE --gateway 10.0.0.2 +-A limit-ntp-932 -j DROP +-A limit-ntp-933 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-933 -j logaccept-ntp-11 +-A limit-ntp-933 -j TEE --gateway 10.0.0.1 +-A limit-ntp-933 -j TEE --gateway 10.0.0.2 +-A limit-ntp-933 -j DROP +-A limit-ntp-934 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-934 -j ACCEPT +-A limit-ntp-934 -j DROP +-A limit-ntp-935 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-935 -j RETURN +-A limit-ntp-935 -j DROP +-A limit-ntp-936 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-936 -j logaccept-ntp-12 +-A limit-ntp-936 -j DROP +-A limit-ntp-937 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-937 -j logaccept-ntp-13 +-A limit-ntp-937 -j DROP +-A limit-ntp-938 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-938 -j ACCEPT +-A limit-ntp-938 -j DROP +-A limit-ntp-939 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-939 -j logaccept-ntp-14 +-A limit-ntp-939 -j DROP +-A limit-ntp-94 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-94 -j TEE --gateway 10.0.0.1 +-A limit-ntp-94 -j TEE --gateway 10.0.0.2 +-A limit-ntp-94 -j ACCEPT +-A limit-ntp-940 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-940 -j ACCEPT +-A limit-ntp-940 -m limit --limit 12/minute -j ULOG +-A limit-ntp-940 -j DROP +-A limit-ntp-941 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-941 -j RETURN +-A limit-ntp-941 -m limit --limit 12/minute -j ULOG +-A limit-ntp-941 -j DROP +-A limit-ntp-942 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-942 -j logaccept-ntp-15 +-A limit-ntp-942 -m limit --limit 12/minute -j ULOG +-A limit-ntp-942 -j DROP +-A limit-ntp-943 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-943 -j logaccept-ntp-16 +-A limit-ntp-943 -m limit --limit 12/minute -j ULOG +-A limit-ntp-943 -j DROP +-A limit-ntp-944 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-944 -j ACCEPT +-A limit-ntp-944 -m limit --limit 12/minute -j ULOG +-A limit-ntp-944 -j DROP +-A limit-ntp-945 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-945 -j logaccept-ntp-17 +-A limit-ntp-945 -m limit --limit 12/minute -j ULOG +-A limit-ntp-945 -j DROP +-A limit-ntp-946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-946 -j ACCEPT +-A limit-ntp-946 -j DROP +-A limit-ntp-947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-947 -j RETURN +-A limit-ntp-947 -j DROP +-A limit-ntp-948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-948 -j logaccept-ntp-18 +-A limit-ntp-948 -j DROP +-A limit-ntp-949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-949 -j logaccept-ntp-19 +-A limit-ntp-949 -j DROP +-A limit-ntp-95 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-95 -j TEE --gateway 10.0.0.1 +-A limit-ntp-95 -j TEE --gateway 10.0.0.2 +-A limit-ntp-950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-950 -j ACCEPT +-A limit-ntp-950 -j DROP +-A limit-ntp-951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-951 -j logaccept-ntp-20 +-A limit-ntp-951 -j DROP +-A limit-ntp-952 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-952 -j ACCEPT +-A limit-ntp-952 -m limit --limit 1/second -j LOG +-A limit-ntp-952 -j DROP +-A limit-ntp-953 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-953 -j RETURN +-A limit-ntp-953 -m limit --limit 1/second -j LOG +-A limit-ntp-953 -j DROP +-A limit-ntp-954 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-954 -j logaccept-ntp-21 +-A limit-ntp-954 -m limit --limit 1/second -j LOG +-A limit-ntp-954 -j DROP +-A limit-ntp-955 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-955 -j logaccept-ntp-22 +-A limit-ntp-955 -m limit --limit 1/second -j LOG +-A limit-ntp-955 -j DROP +-A limit-ntp-956 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-956 -j ACCEPT +-A limit-ntp-956 -m limit --limit 1/second -j LOG +-A limit-ntp-956 -j DROP +-A limit-ntp-957 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-957 -j logaccept-ntp-23 +-A limit-ntp-957 -m limit --limit 1/second -j LOG +-A limit-ntp-957 -j DROP +-A limit-ntp-958 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-958 -j ACCEPT +-A limit-ntp-958 -j TEE --gateway 10.0.0.1 +-A limit-ntp-958 -j TEE --gateway 10.0.0.2 +-A limit-ntp-958 -j DROP +-A limit-ntp-959 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-959 -j RETURN +-A limit-ntp-959 -j TEE --gateway 10.0.0.1 +-A limit-ntp-959 -j TEE --gateway 10.0.0.2 +-A limit-ntp-959 -j DROP +-A limit-ntp-96 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-96 -j ACCEPT +-A limit-ntp-960 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-960 -j logaccept-ntp-24 +-A limit-ntp-960 -j TEE --gateway 10.0.0.1 +-A limit-ntp-960 -j TEE --gateway 10.0.0.2 +-A limit-ntp-960 -j DROP +-A limit-ntp-961 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-961 -j logaccept-ntp-25 +-A limit-ntp-961 -j TEE --gateway 10.0.0.1 +-A limit-ntp-961 -j TEE --gateway 10.0.0.2 +-A limit-ntp-961 -j DROP +-A limit-ntp-962 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-962 -j ACCEPT +-A limit-ntp-962 -j TEE --gateway 10.0.0.1 +-A limit-ntp-962 -j TEE --gateway 10.0.0.2 +-A limit-ntp-962 -j DROP +-A limit-ntp-963 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-963 -j logaccept-ntp-26 +-A limit-ntp-963 -j TEE --gateway 10.0.0.1 +-A limit-ntp-963 -j TEE --gateway 10.0.0.2 +-A limit-ntp-963 -j DROP +-A limit-ntp-964 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-964 -j ACCEPT +-A limit-ntp-964 -j DROP +-A limit-ntp-965 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-965 -j RETURN +-A limit-ntp-965 -j DROP +-A limit-ntp-966 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-966 -j logaccept-ntp-27 +-A limit-ntp-966 -j DROP +-A limit-ntp-967 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-967 -j logaccept-ntp-28 +-A limit-ntp-967 -j DROP +-A limit-ntp-968 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-968 -j ACCEPT +-A limit-ntp-968 -j DROP +-A limit-ntp-969 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-969 -j logaccept-ntp-29 +-A limit-ntp-969 -j DROP +-A limit-ntp-970 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-970 -j ACCEPT +-A limit-ntp-970 -m limit --limit 12/minute -j ULOG +-A limit-ntp-970 -j DROP +-A limit-ntp-971 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-971 -j RETURN +-A limit-ntp-971 -m limit --limit 12/minute -j ULOG +-A limit-ntp-971 -j DROP +-A limit-ntp-972 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-972 -j logaccept-ntp-30 +-A limit-ntp-972 -m limit --limit 12/minute -j ULOG +-A limit-ntp-972 -j DROP +-A limit-ntp-973 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-973 -j logaccept-ntp-31 +-A limit-ntp-973 -m limit --limit 12/minute -j ULOG +-A limit-ntp-973 -j DROP +-A limit-ntp-974 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-974 -j ACCEPT +-A limit-ntp-974 -m limit --limit 12/minute -j ULOG +-A limit-ntp-974 -j DROP +-A limit-ntp-975 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-975 -j logaccept-ntp-32 +-A limit-ntp-975 -m limit --limit 12/minute -j ULOG +-A limit-ntp-975 -j DROP +-A limit-ntp-98 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-98 -m limit --limit 12/minute -j ULOG +-A limit-ntp-98 -j ACCEPT +-A limit-ntp-99 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-99 -m limit --limit 12/minute -j ULOG -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT -A logaccept-1 -j TEE --gateway 10.0.0.1 @@ -83986,13 +83986,6 @@ hash:net family inet -A logaccept-10 -j TEE --gateway 10.0.0.1 -A logaccept-10 -j TEE --gateway 10.0.0.2 -A logaccept-10 -j ACCEPT --A logaccept-100 -j LOG --A logaccept-100 -j ACCEPT --A logaccept-101 -j TEE --gateway 10.0.0.1 --A logaccept-101 -j TEE --gateway 10.0.0.2 --A logaccept-101 -j ACCEPT --A logaccept-102 -m limit --limit 12/minute -j ULOG --A logaccept-102 -j ACCEPT -A logaccept-11 -m limit --limit 12/minute -j ULOG -A logaccept-11 -j ACCEPT -A logaccept-12 -m limit --limit 1/second -j LOG @@ -84134,90 +84127,20 @@ hash:net family inet -A logaccept-65 -j ACCEPT -A logaccept-66 -m limit --limit 1/second -j LOG -A logaccept-66 -j ACCEPT --A logaccept-67 -j TEE --gateway 10.0.0.1 --A logaccept-67 -j TEE --gateway 10.0.0.2 +-A logaccept-67 -j LOG -A logaccept-67 -j ACCEPT --A logaccept-68 -m limit --limit 12/minute -j ULOG +-A logaccept-68 -j TEE --gateway 10.0.0.1 +-A logaccept-68 -j TEE --gateway 10.0.0.2 -A logaccept-68 -j ACCEPT --A logaccept-69 -m limit --limit 1/second -j LOG +-A logaccept-69 -m limit --limit 12/minute -j ULOG -A logaccept-69 -j ACCEPT -A logaccept-7 -j TEE --gateway 10.0.0.1 -A logaccept-7 -j TEE --gateway 10.0.0.2 -A logaccept-7 -j ACCEPT --A logaccept-70 -j TEE --gateway 10.0.0.1 --A logaccept-70 -j TEE --gateway 10.0.0.2 --A logaccept-70 -j ACCEPT --A logaccept-71 -m limit --limit 12/minute -j ULOG --A logaccept-71 -j ACCEPT --A logaccept-72 -m limit --limit 1/second -j LOG --A logaccept-72 -j ACCEPT --A logaccept-73 -j TEE --gateway 10.0.0.1 --A logaccept-73 -j TEE --gateway 10.0.0.2 --A logaccept-73 -j ACCEPT --A logaccept-74 -m limit --limit 12/minute -j ULOG --A logaccept-74 -j ACCEPT --A logaccept-75 -m limit --limit 1/second -j LOG --A logaccept-75 -j ACCEPT --A logaccept-76 -j TEE --gateway 10.0.0.1 --A logaccept-76 -j TEE --gateway 10.0.0.2 --A logaccept-76 -j ACCEPT --A logaccept-77 -m limit --limit 12/minute -j ULOG --A logaccept-77 -j ACCEPT --A logaccept-78 -m limit --limit 1/second -j LOG --A logaccept-78 -j ACCEPT --A logaccept-79 -j TEE --gateway 10.0.0.1 --A logaccept-79 -j TEE --gateway 10.0.0.2 --A logaccept-79 -j ACCEPT -A logaccept-8 -m limit --limit 12/minute -j ULOG -A logaccept-8 -j ACCEPT --A logaccept-80 -m limit --limit 12/minute -j ULOG --A logaccept-80 -j ACCEPT --A logaccept-81 -m limit --limit 1/second -j LOG --A logaccept-81 -j ACCEPT --A logaccept-82 -j TEE --gateway 10.0.0.1 --A logaccept-82 -j TEE --gateway 10.0.0.2 --A logaccept-82 -j ACCEPT --A logaccept-83 -m limit --limit 12/minute -j ULOG --A logaccept-83 -j ACCEPT --A logaccept-84 -m limit --limit 1/second -j LOG --A logaccept-84 -j ACCEPT --A logaccept-85 -j TEE --gateway 10.0.0.1 --A logaccept-85 -j TEE --gateway 10.0.0.2 --A logaccept-85 -j ACCEPT --A logaccept-86 -m limit --limit 12/minute -j ULOG --A logaccept-86 -j ACCEPT --A logaccept-87 -m limit --limit 1/second -j LOG --A logaccept-87 -j ACCEPT --A logaccept-88 -j TEE --gateway 10.0.0.1 --A logaccept-88 -j TEE --gateway 10.0.0.2 --A logaccept-88 -j ACCEPT --A logaccept-89 -m limit --limit 12/minute -j ULOG --A logaccept-89 -j ACCEPT -A logaccept-9 -m limit --limit 1/second -j LOG -A logaccept-9 -j ACCEPT --A logaccept-90 -m limit --limit 1/second -j LOG --A logaccept-90 -j ACCEPT --A logaccept-91 -j TEE --gateway 10.0.0.1 --A logaccept-91 -j TEE --gateway 10.0.0.2 --A logaccept-91 -j ACCEPT --A logaccept-92 -m limit --limit 12/minute -j ULOG --A logaccept-92 -j ACCEPT --A logaccept-93 -m limit --limit 1/second -j LOG --A logaccept-93 -j ACCEPT --A logaccept-94 -j TEE --gateway 10.0.0.1 --A logaccept-94 -j TEE --gateway 10.0.0.2 --A logaccept-94 -j ACCEPT --A logaccept-95 -m limit --limit 12/minute -j ULOG --A logaccept-95 -j ACCEPT --A logaccept-96 -m limit --limit 1/second -j LOG --A logaccept-96 -j ACCEPT --A logaccept-97 -j TEE --gateway 10.0.0.1 --A logaccept-97 -j TEE --gateway 10.0.0.2 --A logaccept-97 -j ACCEPT --A logaccept-98 -m limit --limit 12/minute -j ULOG --A logaccept-98 -j ACCEPT --A logaccept-99 -m limit --limit 1/second -j LOG --A logaccept-99 -j ACCEPT -A logaccept-final-0 -m limit --limit 1/second -j LOG -A logaccept-final-0 -j ACCEPT -A logaccept-final-1 -j TEE --gateway 10.0.0.1 @@ -84932,6 +84855,83 @@ hash:net family inet -A logaccept-final-98 -j ACCEPT -A logaccept-final-99 -m limit --limit 1/second -j LOG -A logaccept-final-99 -j ACCEPT +-A logaccept-ntp-0 -m limit --limit 1/second -j LOG +-A logaccept-ntp-0 -j ACCEPT +-A logaccept-ntp-1 -j TEE --gateway 10.0.0.1 +-A logaccept-ntp-1 -j TEE --gateway 10.0.0.2 +-A logaccept-ntp-1 -j ACCEPT +-A logaccept-ntp-10 -j TEE --gateway 10.0.0.1 +-A logaccept-ntp-10 -j TEE --gateway 10.0.0.2 +-A logaccept-ntp-10 -j ACCEPT +-A logaccept-ntp-11 -m limit --limit 12/minute -j ULOG +-A logaccept-ntp-11 -j ACCEPT +-A logaccept-ntp-12 -m limit --limit 1/second -j LOG +-A logaccept-ntp-12 -j ACCEPT +-A logaccept-ntp-13 -j TEE --gateway 10.0.0.1 +-A logaccept-ntp-13 -j TEE --gateway 10.0.0.2 +-A logaccept-ntp-13 -j ACCEPT +-A logaccept-ntp-14 -m limit --limit 12/minute -j ULOG +-A logaccept-ntp-14 -j ACCEPT +-A logaccept-ntp-15 -m limit --limit 1/second -j LOG +-A logaccept-ntp-15 -j ACCEPT +-A logaccept-ntp-16 -j TEE --gateway 10.0.0.1 +-A logaccept-ntp-16 -j TEE --gateway 10.0.0.2 +-A logaccept-ntp-16 -j ACCEPT +-A logaccept-ntp-17 -m limit --limit 12/minute -j ULOG +-A logaccept-ntp-17 -j ACCEPT +-A logaccept-ntp-18 -m limit --limit 1/second -j LOG +-A logaccept-ntp-18 -j ACCEPT +-A logaccept-ntp-19 -j TEE --gateway 10.0.0.1 +-A logaccept-ntp-19 -j TEE --gateway 10.0.0.2 +-A logaccept-ntp-19 -j ACCEPT +-A logaccept-ntp-2 -m limit --limit 12/minute -j ULOG +-A logaccept-ntp-2 -j ACCEPT +-A logaccept-ntp-20 -m limit --limit 12/minute -j ULOG +-A logaccept-ntp-20 -j ACCEPT +-A logaccept-ntp-21 -m limit --limit 1/second -j LOG +-A logaccept-ntp-21 -j ACCEPT +-A logaccept-ntp-22 -j TEE --gateway 10.0.0.1 +-A logaccept-ntp-22 -j TEE --gateway 10.0.0.2 +-A logaccept-ntp-22 -j ACCEPT +-A logaccept-ntp-23 -m limit --limit 12/minute -j ULOG +-A logaccept-ntp-23 -j ACCEPT +-A logaccept-ntp-24 -m limit --limit 1/second -j LOG +-A logaccept-ntp-24 -j ACCEPT +-A logaccept-ntp-25 -j TEE --gateway 10.0.0.1 +-A logaccept-ntp-25 -j TEE --gateway 10.0.0.2 +-A logaccept-ntp-25 -j ACCEPT +-A logaccept-ntp-26 -m limit --limit 12/minute -j ULOG +-A logaccept-ntp-26 -j ACCEPT +-A logaccept-ntp-27 -m limit --limit 1/second -j LOG +-A logaccept-ntp-27 -j ACCEPT +-A logaccept-ntp-28 -j TEE --gateway 10.0.0.1 +-A logaccept-ntp-28 -j TEE --gateway 10.0.0.2 +-A logaccept-ntp-28 -j ACCEPT +-A logaccept-ntp-29 -m limit --limit 12/minute -j ULOG +-A logaccept-ntp-29 -j ACCEPT +-A logaccept-ntp-3 -m limit --limit 1/second -j LOG +-A logaccept-ntp-3 -j ACCEPT +-A logaccept-ntp-30 -m limit --limit 1/second -j LOG +-A logaccept-ntp-30 -j ACCEPT +-A logaccept-ntp-31 -j TEE --gateway 10.0.0.1 +-A logaccept-ntp-31 -j TEE --gateway 10.0.0.2 +-A logaccept-ntp-31 -j ACCEPT +-A logaccept-ntp-32 -m limit --limit 12/minute -j ULOG +-A logaccept-ntp-32 -j ACCEPT +-A logaccept-ntp-4 -j TEE --gateway 10.0.0.1 +-A logaccept-ntp-4 -j TEE --gateway 10.0.0.2 +-A logaccept-ntp-4 -j ACCEPT +-A logaccept-ntp-5 -m limit --limit 12/minute -j ULOG +-A logaccept-ntp-5 -j ACCEPT +-A logaccept-ntp-6 -m limit --limit 1/second -j LOG +-A logaccept-ntp-6 -j ACCEPT +-A logaccept-ntp-7 -j TEE --gateway 10.0.0.1 +-A logaccept-ntp-7 -j TEE --gateway 10.0.0.2 +-A logaccept-ntp-7 -j ACCEPT +-A logaccept-ntp-8 -m limit --limit 12/minute -j ULOG +-A logaccept-ntp-8 -j ACCEPT +-A logaccept-ntp-9 -m limit --limit 1/second -j LOG +-A logaccept-ntp-9 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG @@ -86642,1441 +86642,161 @@ hash:net family inet -A logdrop-1650 -j DROP -A logdrop-1651 -m limit --limit 1/second -j LOG -A logdrop-1651 -j DROP --A logdrop-1652 -m limit --limit 1/second -j LOG +-A logdrop-1652 -j LOG -A logdrop-1652 -j DROP --A logdrop-1653 -m limit --limit 1/second -j LOG +-A logdrop-1653 -j TEE --gateway 10.0.0.1 +-A logdrop-1653 -j TEE --gateway 10.0.0.2 -A logdrop-1653 -j DROP --A logdrop-1654 -m limit --limit 1/second -j LOG +-A logdrop-1654 -m limit --limit 12/minute -j ULOG -A logdrop-1654 -j DROP --A logdrop-1655 -m limit --limit 1/second -j LOG --A logdrop-1655 -j DROP --A logdrop-1656 -m limit --limit 1/second -j LOG --A logdrop-1656 -j DROP --A logdrop-1657 -m limit --limit 1/second -j LOG --A logdrop-1657 -j DROP --A logdrop-1658 -m limit --limit 1/second -j LOG --A logdrop-1658 -j DROP --A logdrop-1659 -m limit --limit 1/second -j LOG --A logdrop-1659 -j DROP -A logdrop-166 -j TEE --gateway 10.0.0.1 -A logdrop-166 -j TEE --gateway 10.0.0.2 -A logdrop-166 -j DROP --A logdrop-1660 -m limit --limit 1/second -j LOG --A logdrop-1660 -j DROP --A logdrop-1661 -m limit --limit 1/second -j LOG --A logdrop-1661 -j DROP --A logdrop-1662 -m limit --limit 1/second -j LOG --A logdrop-1662 -j DROP --A logdrop-1663 -m limit --limit 1/second -j LOG --A logdrop-1663 -j DROP --A logdrop-1664 -m limit --limit 1/second -j LOG --A logdrop-1664 -j DROP --A logdrop-1665 -m limit --limit 1/second -j LOG --A logdrop-1665 -j DROP --A logdrop-1666 -m limit --limit 1/second -j LOG --A logdrop-1666 -j DROP --A logdrop-1667 -m limit --limit 1/second -j LOG --A logdrop-1667 -j DROP --A logdrop-1668 -m limit --limit 1/second -j LOG --A logdrop-1668 -j DROP --A logdrop-1669 -m limit --limit 1/second -j LOG --A logdrop-1669 -j DROP -A logdrop-167 -j TEE --gateway 10.0.0.1 -A logdrop-167 -j TEE --gateway 10.0.0.2 -A logdrop-167 -j DROP --A logdrop-1670 -m limit --limit 1/second -j LOG --A logdrop-1670 -j DROP --A logdrop-1671 -m limit --limit 1/second -j LOG --A logdrop-1671 -j DROP --A logdrop-1672 -m limit --limit 1/second -j LOG --A logdrop-1672 -j DROP --A logdrop-1673 -m limit --limit 1/second -j LOG --A logdrop-1673 -j DROP --A logdrop-1674 -m limit --limit 1/second -j LOG --A logdrop-1674 -j DROP --A logdrop-1675 -m limit --limit 1/second -j LOG --A logdrop-1675 -j DROP --A logdrop-1676 -m limit --limit 1/second -j LOG --A logdrop-1676 -j DROP --A logdrop-1677 -m limit --limit 1/second -j LOG --A logdrop-1677 -j DROP --A logdrop-1678 -m limit --limit 1/second -j LOG --A logdrop-1678 -j DROP --A logdrop-1679 -m limit --limit 1/second -j LOG --A logdrop-1679 -j DROP -A logdrop-168 -j TEE --gateway 10.0.0.1 -A logdrop-168 -j TEE --gateway 10.0.0.2 -A logdrop-168 -j DROP --A logdrop-1680 -m limit --limit 1/second -j LOG --A logdrop-1680 -j DROP --A logdrop-1681 -m limit --limit 1/second -j LOG --A logdrop-1681 -j DROP --A logdrop-1682 -m limit --limit 1/second -j LOG --A logdrop-1682 -j DROP --A logdrop-1683 -m limit --limit 1/second -j LOG --A logdrop-1683 -j DROP --A logdrop-1684 -m limit --limit 1/second -j LOG --A logdrop-1684 -j DROP --A logdrop-1685 -m limit --limit 1/second -j LOG --A logdrop-1685 -j DROP --A logdrop-1686 -m limit --limit 1/second -j LOG --A logdrop-1686 -j DROP --A logdrop-1687 -m limit --limit 1/second -j LOG --A logdrop-1687 -j DROP --A logdrop-1688 -m limit --limit 1/second -j LOG --A logdrop-1688 -j DROP --A logdrop-1689 -m limit --limit 1/second -j LOG --A logdrop-1689 -j DROP -A logdrop-169 -j TEE --gateway 10.0.0.1 -A logdrop-169 -j TEE --gateway 10.0.0.2 -A logdrop-169 -j DROP --A logdrop-1690 -m limit --limit 1/second -j LOG --A logdrop-1690 -j DROP --A logdrop-1691 -m limit --limit 1/second -j LOG --A logdrop-1691 -j DROP --A logdrop-1692 -m limit --limit 1/second -j LOG --A logdrop-1692 -j DROP --A logdrop-1693 -m limit --limit 1/second -j LOG --A logdrop-1693 -j DROP --A logdrop-1694 -m limit --limit 1/second -j LOG --A logdrop-1694 -j DROP --A logdrop-1695 -m limit --limit 1/second -j LOG --A logdrop-1695 -j DROP --A logdrop-1696 -m limit --limit 1/second -j LOG --A logdrop-1696 -j DROP --A logdrop-1697 -m limit --limit 1/second -j LOG --A logdrop-1697 -j DROP --A logdrop-1698 -m limit --limit 1/second -j LOG --A logdrop-1698 -j DROP --A logdrop-1699 -m limit --limit 1/second -j LOG --A logdrop-1699 -j DROP -A logdrop-17 -m limit --limit 1/second -j LOG -A logdrop-17 -j DROP -A logdrop-170 -j TEE --gateway 10.0.0.1 -A logdrop-170 -j TEE --gateway 10.0.0.2 -A logdrop-170 -j DROP --A logdrop-1700 -m limit --limit 1/second -j LOG --A logdrop-1700 -j DROP --A logdrop-1701 -m limit --limit 1/second -j LOG --A logdrop-1701 -j DROP --A logdrop-1702 -m limit --limit 1/second -j LOG --A logdrop-1702 -j DROP --A logdrop-1703 -m limit --limit 1/second -j LOG --A logdrop-1703 -j DROP --A logdrop-1704 -m limit --limit 1/second -j LOG --A logdrop-1704 -j DROP --A logdrop-1705 -m limit --limit 1/second -j LOG --A logdrop-1705 -j DROP --A logdrop-1706 -m limit --limit 1/second -j LOG --A logdrop-1706 -j DROP --A logdrop-1707 -m limit --limit 1/second -j LOG --A logdrop-1707 -j DROP --A logdrop-1708 -m limit --limit 1/second -j LOG --A logdrop-1708 -j DROP --A logdrop-1709 -m limit --limit 1/second -j LOG --A logdrop-1709 -j DROP -A logdrop-171 -j TEE --gateway 10.0.0.1 -A logdrop-171 -j TEE --gateway 10.0.0.2 -A logdrop-171 -j DROP --A logdrop-1710 -m limit --limit 1/second -j LOG --A logdrop-1710 -j DROP --A logdrop-1711 -m limit --limit 1/second -j LOG --A logdrop-1711 -j DROP --A logdrop-1712 -m limit --limit 1/second -j LOG --A logdrop-1712 -j DROP --A logdrop-1713 -m limit --limit 1/second -j LOG --A logdrop-1713 -j DROP --A logdrop-1714 -m limit --limit 1/second -j LOG --A logdrop-1714 -j DROP --A logdrop-1715 -m limit --limit 1/second -j LOG --A logdrop-1715 -j DROP --A logdrop-1716 -m limit --limit 1/second -j LOG --A logdrop-1716 -j DROP --A logdrop-1717 -m limit --limit 1/second -j LOG --A logdrop-1717 -j DROP --A logdrop-1718 -m limit --limit 1/second -j LOG --A logdrop-1718 -j DROP --A logdrop-1719 -m limit --limit 1/second -j LOG --A logdrop-1719 -j DROP -A logdrop-172 -j TEE --gateway 10.0.0.1 -A logdrop-172 -j TEE --gateway 10.0.0.2 -A logdrop-172 -j DROP --A logdrop-1720 -m limit --limit 1/second -j LOG --A logdrop-1720 -j DROP --A logdrop-1721 -m limit --limit 1/second -j LOG --A logdrop-1721 -j DROP --A logdrop-1722 -m limit --limit 1/second -j LOG --A logdrop-1722 -j DROP --A logdrop-1723 -m limit --limit 1/second -j LOG --A logdrop-1723 -j DROP --A logdrop-1724 -m limit --limit 1/second -j LOG --A logdrop-1724 -j DROP --A logdrop-1725 -m limit --limit 1/second -j LOG --A logdrop-1725 -j DROP --A logdrop-1726 -m limit --limit 1/second -j LOG --A logdrop-1726 -j DROP --A logdrop-1727 -m limit --limit 1/second -j LOG --A logdrop-1727 -j DROP --A logdrop-1728 -m limit --limit 1/second -j LOG --A logdrop-1728 -j DROP --A logdrop-1729 -m limit --limit 1/second -j LOG --A logdrop-1729 -j DROP -A logdrop-173 -j TEE --gateway 10.0.0.1 -A logdrop-173 -j TEE --gateway 10.0.0.2 -A logdrop-173 -j DROP --A logdrop-1730 -m limit --limit 1/second -j LOG --A logdrop-1730 -j DROP --A logdrop-1731 -m limit --limit 1/second -j LOG --A logdrop-1731 -j DROP --A logdrop-1732 -m limit --limit 1/second -j LOG --A logdrop-1732 -j DROP --A logdrop-1733 -m limit --limit 1/second -j LOG --A logdrop-1733 -j DROP --A logdrop-1734 -m limit --limit 1/second -j LOG --A logdrop-1734 -j DROP --A logdrop-1735 -m limit --limit 1/second -j LOG --A logdrop-1735 -j DROP --A logdrop-1736 -m limit --limit 1/second -j LOG --A logdrop-1736 -j DROP --A logdrop-1737 -m limit --limit 1/second -j LOG --A logdrop-1737 -j DROP --A logdrop-1738 -m limit --limit 1/second -j LOG --A logdrop-1738 -j DROP --A logdrop-1739 -m limit --limit 1/second -j LOG --A logdrop-1739 -j DROP -A logdrop-174 -j TEE --gateway 10.0.0.1 -A logdrop-174 -j TEE --gateway 10.0.0.2 -A logdrop-174 -j DROP --A logdrop-1740 -m limit --limit 1/second -j LOG --A logdrop-1740 -j DROP --A logdrop-1741 -m limit --limit 1/second -j LOG --A logdrop-1741 -j DROP --A logdrop-1742 -m limit --limit 1/second -j LOG --A logdrop-1742 -j DROP --A logdrop-1743 -m limit --limit 1/second -j LOG --A logdrop-1743 -j DROP --A logdrop-1744 -m limit --limit 1/second -j LOG --A logdrop-1744 -j DROP --A logdrop-1745 -m limit --limit 1/second -j LOG --A logdrop-1745 -j DROP --A logdrop-1746 -m limit --limit 1/second -j LOG --A logdrop-1746 -j DROP --A logdrop-1747 -m limit --limit 1/second -j LOG --A logdrop-1747 -j DROP --A logdrop-1748 -m limit --limit 1/second -j LOG --A logdrop-1748 -j DROP --A logdrop-1749 -m limit --limit 1/second -j LOG --A logdrop-1749 -j DROP -A logdrop-175 -j TEE --gateway 10.0.0.1 -A logdrop-175 -j TEE --gateway 10.0.0.2 -A logdrop-175 -j DROP --A logdrop-1750 -j TEE --gateway 10.0.0.1 --A logdrop-1750 -j TEE --gateway 10.0.0.2 --A logdrop-1750 -j DROP --A logdrop-1751 -j TEE --gateway 10.0.0.1 --A logdrop-1751 -j TEE --gateway 10.0.0.2 --A logdrop-1751 -j DROP --A logdrop-1752 -j TEE --gateway 10.0.0.1 --A logdrop-1752 -j TEE --gateway 10.0.0.2 --A logdrop-1752 -j DROP --A logdrop-1753 -j TEE --gateway 10.0.0.1 --A logdrop-1753 -j TEE --gateway 10.0.0.2 --A logdrop-1753 -j DROP --A logdrop-1754 -j TEE --gateway 10.0.0.1 --A logdrop-1754 -j TEE --gateway 10.0.0.2 --A logdrop-1754 -j DROP --A logdrop-1755 -j TEE --gateway 10.0.0.1 --A logdrop-1755 -j TEE --gateway 10.0.0.2 --A logdrop-1755 -j DROP --A logdrop-1756 -j TEE --gateway 10.0.0.1 --A logdrop-1756 -j TEE --gateway 10.0.0.2 --A logdrop-1756 -j DROP --A logdrop-1757 -j TEE --gateway 10.0.0.1 --A logdrop-1757 -j TEE --gateway 10.0.0.2 --A logdrop-1757 -j DROP --A logdrop-1758 -j TEE --gateway 10.0.0.1 --A logdrop-1758 -j TEE --gateway 10.0.0.2 --A logdrop-1758 -j DROP --A logdrop-1759 -j TEE --gateway 10.0.0.1 --A logdrop-1759 -j TEE --gateway 10.0.0.2 --A logdrop-1759 -j DROP -A logdrop-176 -j TEE --gateway 10.0.0.1 -A logdrop-176 -j TEE --gateway 10.0.0.2 -A logdrop-176 -j DROP --A logdrop-1760 -j TEE --gateway 10.0.0.1 --A logdrop-1760 -j TEE --gateway 10.0.0.2 --A logdrop-1760 -j DROP --A logdrop-1761 -j TEE --gateway 10.0.0.1 --A logdrop-1761 -j TEE --gateway 10.0.0.2 --A logdrop-1761 -j DROP --A logdrop-1762 -j TEE --gateway 10.0.0.1 --A logdrop-1762 -j TEE --gateway 10.0.0.2 --A logdrop-1762 -j DROP --A logdrop-1763 -j TEE --gateway 10.0.0.1 --A logdrop-1763 -j TEE --gateway 10.0.0.2 --A logdrop-1763 -j DROP --A logdrop-1764 -j TEE --gateway 10.0.0.1 --A logdrop-1764 -j TEE --gateway 10.0.0.2 --A logdrop-1764 -j DROP --A logdrop-1765 -j TEE --gateway 10.0.0.1 --A logdrop-1765 -j TEE --gateway 10.0.0.2 --A logdrop-1765 -j DROP --A logdrop-1766 -j TEE --gateway 10.0.0.1 --A logdrop-1766 -j TEE --gateway 10.0.0.2 --A logdrop-1766 -j DROP --A logdrop-1767 -j TEE --gateway 10.0.0.1 --A logdrop-1767 -j TEE --gateway 10.0.0.2 --A logdrop-1767 -j DROP --A logdrop-1768 -j TEE --gateway 10.0.0.1 --A logdrop-1768 -j TEE --gateway 10.0.0.2 --A logdrop-1768 -j DROP --A logdrop-1769 -j TEE --gateway 10.0.0.1 --A logdrop-1769 -j TEE --gateway 10.0.0.2 --A logdrop-1769 -j DROP -A logdrop-177 -j TEE --gateway 10.0.0.1 -A logdrop-177 -j TEE --gateway 10.0.0.2 -A logdrop-177 -j DROP --A logdrop-1770 -j TEE --gateway 10.0.0.1 --A logdrop-1770 -j TEE --gateway 10.0.0.2 --A logdrop-1770 -j DROP --A logdrop-1771 -j TEE --gateway 10.0.0.1 --A logdrop-1771 -j TEE --gateway 10.0.0.2 --A logdrop-1771 -j DROP --A logdrop-1772 -j TEE --gateway 10.0.0.1 --A logdrop-1772 -j TEE --gateway 10.0.0.2 --A logdrop-1772 -j DROP --A logdrop-1773 -j TEE --gateway 10.0.0.1 --A logdrop-1773 -j TEE --gateway 10.0.0.2 --A logdrop-1773 -j DROP --A logdrop-1774 -j TEE --gateway 10.0.0.1 --A logdrop-1774 -j TEE --gateway 10.0.0.2 --A logdrop-1774 -j DROP --A logdrop-1775 -j TEE --gateway 10.0.0.1 --A logdrop-1775 -j TEE --gateway 10.0.0.2 --A logdrop-1775 -j DROP --A logdrop-1776 -j TEE --gateway 10.0.0.1 --A logdrop-1776 -j TEE --gateway 10.0.0.2 --A logdrop-1776 -j DROP --A logdrop-1777 -j TEE --gateway 10.0.0.1 --A logdrop-1777 -j TEE --gateway 10.0.0.2 --A logdrop-1777 -j DROP --A logdrop-1778 -j TEE --gateway 10.0.0.1 --A logdrop-1778 -j TEE --gateway 10.0.0.2 --A logdrop-1778 -j DROP --A logdrop-1779 -j TEE --gateway 10.0.0.1 --A logdrop-1779 -j TEE --gateway 10.0.0.2 --A logdrop-1779 -j DROP -A logdrop-178 -j TEE --gateway 10.0.0.1 -A logdrop-178 -j TEE --gateway 10.0.0.2 -A logdrop-178 -j DROP --A logdrop-1780 -j TEE --gateway 10.0.0.1 --A logdrop-1780 -j TEE --gateway 10.0.0.2 --A logdrop-1780 -j DROP --A logdrop-1781 -j TEE --gateway 10.0.0.1 --A logdrop-1781 -j TEE --gateway 10.0.0.2 --A logdrop-1781 -j DROP --A logdrop-1782 -j TEE --gateway 10.0.0.1 --A logdrop-1782 -j TEE --gateway 10.0.0.2 --A logdrop-1782 -j DROP --A logdrop-1783 -j TEE --gateway 10.0.0.1 --A logdrop-1783 -j TEE --gateway 10.0.0.2 --A logdrop-1783 -j DROP --A logdrop-1784 -j TEE --gateway 10.0.0.1 --A logdrop-1784 -j TEE --gateway 10.0.0.2 --A logdrop-1784 -j DROP --A logdrop-1785 -j TEE --gateway 10.0.0.1 --A logdrop-1785 -j TEE --gateway 10.0.0.2 --A logdrop-1785 -j DROP --A logdrop-1786 -j TEE --gateway 10.0.0.1 --A logdrop-1786 -j TEE --gateway 10.0.0.2 --A logdrop-1786 -j DROP --A logdrop-1787 -j TEE --gateway 10.0.0.1 --A logdrop-1787 -j TEE --gateway 10.0.0.2 --A logdrop-1787 -j DROP --A logdrop-1788 -j TEE --gateway 10.0.0.1 --A logdrop-1788 -j TEE --gateway 10.0.0.2 --A logdrop-1788 -j DROP --A logdrop-1789 -j TEE --gateway 10.0.0.1 --A logdrop-1789 -j TEE --gateway 10.0.0.2 --A logdrop-1789 -j DROP -A logdrop-179 -j TEE --gateway 10.0.0.1 -A logdrop-179 -j TEE --gateway 10.0.0.2 -A logdrop-179 -j DROP --A logdrop-1790 -j TEE --gateway 10.0.0.1 --A logdrop-1790 -j TEE --gateway 10.0.0.2 --A logdrop-1790 -j DROP --A logdrop-1791 -j TEE --gateway 10.0.0.1 --A logdrop-1791 -j TEE --gateway 10.0.0.2 --A logdrop-1791 -j DROP --A logdrop-1792 -j TEE --gateway 10.0.0.1 --A logdrop-1792 -j TEE --gateway 10.0.0.2 --A logdrop-1792 -j DROP --A logdrop-1793 -j TEE --gateway 10.0.0.1 --A logdrop-1793 -j TEE --gateway 10.0.0.2 --A logdrop-1793 -j DROP --A logdrop-1794 -j TEE --gateway 10.0.0.1 --A logdrop-1794 -j TEE --gateway 10.0.0.2 --A logdrop-1794 -j DROP --A logdrop-1795 -j TEE --gateway 10.0.0.1 --A logdrop-1795 -j TEE --gateway 10.0.0.2 --A logdrop-1795 -j DROP --A logdrop-1796 -j TEE --gateway 10.0.0.1 --A logdrop-1796 -j TEE --gateway 10.0.0.2 --A logdrop-1796 -j DROP --A logdrop-1797 -j TEE --gateway 10.0.0.1 --A logdrop-1797 -j TEE --gateway 10.0.0.2 --A logdrop-1797 -j DROP --A logdrop-1798 -j TEE --gateway 10.0.0.1 --A logdrop-1798 -j TEE --gateway 10.0.0.2 --A logdrop-1798 -j DROP --A logdrop-1799 -j TEE --gateway 10.0.0.1 --A logdrop-1799 -j TEE --gateway 10.0.0.2 --A logdrop-1799 -j DROP -A logdrop-18 -m limit --limit 1/second -j LOG -A logdrop-18 -j DROP -A logdrop-180 -j TEE --gateway 10.0.0.1 -A logdrop-180 -j TEE --gateway 10.0.0.2 -A logdrop-180 -j DROP --A logdrop-1800 -j TEE --gateway 10.0.0.1 --A logdrop-1800 -j TEE --gateway 10.0.0.2 --A logdrop-1800 -j DROP --A logdrop-1801 -j TEE --gateway 10.0.0.1 --A logdrop-1801 -j TEE --gateway 10.0.0.2 --A logdrop-1801 -j DROP --A logdrop-1802 -j TEE --gateway 10.0.0.1 --A logdrop-1802 -j TEE --gateway 10.0.0.2 --A logdrop-1802 -j DROP --A logdrop-1803 -j TEE --gateway 10.0.0.1 --A logdrop-1803 -j TEE --gateway 10.0.0.2 --A logdrop-1803 -j DROP --A logdrop-1804 -j TEE --gateway 10.0.0.1 --A logdrop-1804 -j TEE --gateway 10.0.0.2 --A logdrop-1804 -j DROP --A logdrop-1805 -j TEE --gateway 10.0.0.1 --A logdrop-1805 -j TEE --gateway 10.0.0.2 --A logdrop-1805 -j DROP --A logdrop-1806 -j TEE --gateway 10.0.0.1 --A logdrop-1806 -j TEE --gateway 10.0.0.2 --A logdrop-1806 -j DROP --A logdrop-1807 -j TEE --gateway 10.0.0.1 --A logdrop-1807 -j TEE --gateway 10.0.0.2 --A logdrop-1807 -j DROP --A logdrop-1808 -j TEE --gateway 10.0.0.1 --A logdrop-1808 -j TEE --gateway 10.0.0.2 --A logdrop-1808 -j DROP --A logdrop-1809 -j TEE --gateway 10.0.0.1 --A logdrop-1809 -j TEE --gateway 10.0.0.2 --A logdrop-1809 -j DROP -A logdrop-181 -j TEE --gateway 10.0.0.1 -A logdrop-181 -j TEE --gateway 10.0.0.2 -A logdrop-181 -j DROP --A logdrop-1810 -j TEE --gateway 10.0.0.1 --A logdrop-1810 -j TEE --gateway 10.0.0.2 --A logdrop-1810 -j DROP --A logdrop-1811 -j TEE --gateway 10.0.0.1 --A logdrop-1811 -j TEE --gateway 10.0.0.2 --A logdrop-1811 -j DROP --A logdrop-1812 -j TEE --gateway 10.0.0.1 --A logdrop-1812 -j TEE --gateway 10.0.0.2 --A logdrop-1812 -j DROP --A logdrop-1813 -j TEE --gateway 10.0.0.1 --A logdrop-1813 -j TEE --gateway 10.0.0.2 --A logdrop-1813 -j DROP --A logdrop-1814 -j TEE --gateway 10.0.0.1 --A logdrop-1814 -j TEE --gateway 10.0.0.2 --A logdrop-1814 -j DROP --A logdrop-1815 -j TEE --gateway 10.0.0.1 --A logdrop-1815 -j TEE --gateway 10.0.0.2 --A logdrop-1815 -j DROP --A logdrop-1816 -j TEE --gateway 10.0.0.1 --A logdrop-1816 -j TEE --gateway 10.0.0.2 --A logdrop-1816 -j DROP --A logdrop-1817 -j TEE --gateway 10.0.0.1 --A logdrop-1817 -j TEE --gateway 10.0.0.2 --A logdrop-1817 -j DROP --A logdrop-1818 -j TEE --gateway 10.0.0.1 --A logdrop-1818 -j TEE --gateway 10.0.0.2 --A logdrop-1818 -j DROP --A logdrop-1819 -j TEE --gateway 10.0.0.1 --A logdrop-1819 -j TEE --gateway 10.0.0.2 --A logdrop-1819 -j DROP -A logdrop-182 -j TEE --gateway 10.0.0.1 -A logdrop-182 -j TEE --gateway 10.0.0.2 -A logdrop-182 -j DROP --A logdrop-1820 -j TEE --gateway 10.0.0.1 --A logdrop-1820 -j TEE --gateway 10.0.0.2 --A logdrop-1820 -j DROP --A logdrop-1821 -j TEE --gateway 10.0.0.1 --A logdrop-1821 -j TEE --gateway 10.0.0.2 --A logdrop-1821 -j DROP --A logdrop-1822 -j TEE --gateway 10.0.0.1 --A logdrop-1822 -j TEE --gateway 10.0.0.2 --A logdrop-1822 -j DROP --A logdrop-1823 -j TEE --gateway 10.0.0.1 --A logdrop-1823 -j TEE --gateway 10.0.0.2 --A logdrop-1823 -j DROP --A logdrop-1824 -j TEE --gateway 10.0.0.1 --A logdrop-1824 -j TEE --gateway 10.0.0.2 --A logdrop-1824 -j DROP --A logdrop-1825 -j TEE --gateway 10.0.0.1 --A logdrop-1825 -j TEE --gateway 10.0.0.2 --A logdrop-1825 -j DROP --A logdrop-1826 -j TEE --gateway 10.0.0.1 --A logdrop-1826 -j TEE --gateway 10.0.0.2 --A logdrop-1826 -j DROP --A logdrop-1827 -j TEE --gateway 10.0.0.1 --A logdrop-1827 -j TEE --gateway 10.0.0.2 --A logdrop-1827 -j DROP --A logdrop-1828 -j TEE --gateway 10.0.0.1 --A logdrop-1828 -j TEE --gateway 10.0.0.2 --A logdrop-1828 -j DROP --A logdrop-1829 -j TEE --gateway 10.0.0.1 --A logdrop-1829 -j TEE --gateway 10.0.0.2 --A logdrop-1829 -j DROP -A logdrop-183 -j TEE --gateway 10.0.0.1 -A logdrop-183 -j TEE --gateway 10.0.0.2 -A logdrop-183 -j DROP --A logdrop-1830 -j TEE --gateway 10.0.0.1 --A logdrop-1830 -j TEE --gateway 10.0.0.2 --A logdrop-1830 -j DROP --A logdrop-1831 -j TEE --gateway 10.0.0.1 --A logdrop-1831 -j TEE --gateway 10.0.0.2 --A logdrop-1831 -j DROP --A logdrop-1832 -j TEE --gateway 10.0.0.1 --A logdrop-1832 -j TEE --gateway 10.0.0.2 --A logdrop-1832 -j DROP --A logdrop-1833 -j TEE --gateway 10.0.0.1 --A logdrop-1833 -j TEE --gateway 10.0.0.2 --A logdrop-1833 -j DROP --A logdrop-1834 -j TEE --gateway 10.0.0.1 --A logdrop-1834 -j TEE --gateway 10.0.0.2 --A logdrop-1834 -j DROP --A logdrop-1835 -j TEE --gateway 10.0.0.1 --A logdrop-1835 -j TEE --gateway 10.0.0.2 --A logdrop-1835 -j DROP --A logdrop-1836 -j TEE --gateway 10.0.0.1 --A logdrop-1836 -j TEE --gateway 10.0.0.2 --A logdrop-1836 -j DROP --A logdrop-1837 -j TEE --gateway 10.0.0.1 --A logdrop-1837 -j TEE --gateway 10.0.0.2 --A logdrop-1837 -j DROP --A logdrop-1838 -j TEE --gateway 10.0.0.1 --A logdrop-1838 -j TEE --gateway 10.0.0.2 --A logdrop-1838 -j DROP --A logdrop-1839 -j TEE --gateway 10.0.0.1 --A logdrop-1839 -j TEE --gateway 10.0.0.2 --A logdrop-1839 -j DROP -A logdrop-184 -j TEE --gateway 10.0.0.1 -A logdrop-184 -j TEE --gateway 10.0.0.2 -A logdrop-184 -j DROP --A logdrop-1840 -m limit --limit 12/minute -j ULOG --A logdrop-1840 -j DROP --A logdrop-1841 -m limit --limit 12/minute -j ULOG --A logdrop-1841 -j DROP --A logdrop-1842 -m limit --limit 12/minute -j ULOG --A logdrop-1842 -j DROP --A logdrop-1843 -m limit --limit 12/minute -j ULOG --A logdrop-1843 -j DROP --A logdrop-1844 -m limit --limit 12/minute -j ULOG --A logdrop-1844 -j DROP --A logdrop-1845 -m limit --limit 12/minute -j ULOG --A logdrop-1845 -j DROP --A logdrop-1846 -m limit --limit 12/minute -j ULOG --A logdrop-1846 -j DROP --A logdrop-1847 -m limit --limit 12/minute -j ULOG --A logdrop-1847 -j DROP --A logdrop-1848 -m limit --limit 12/minute -j ULOG --A logdrop-1848 -j DROP --A logdrop-1849 -m limit --limit 12/minute -j ULOG --A logdrop-1849 -j DROP -A logdrop-185 -j TEE --gateway 10.0.0.1 -A logdrop-185 -j TEE --gateway 10.0.0.2 -A logdrop-185 -j DROP --A logdrop-1850 -m limit --limit 12/minute -j ULOG --A logdrop-1850 -j DROP --A logdrop-1851 -m limit --limit 12/minute -j ULOG --A logdrop-1851 -j DROP --A logdrop-1852 -m limit --limit 12/minute -j ULOG --A logdrop-1852 -j DROP --A logdrop-1853 -m limit --limit 12/minute -j ULOG --A logdrop-1853 -j DROP --A logdrop-1854 -m limit --limit 12/minute -j ULOG --A logdrop-1854 -j DROP --A logdrop-1855 -m limit --limit 12/minute -j ULOG --A logdrop-1855 -j DROP --A logdrop-1856 -m limit --limit 12/minute -j ULOG --A logdrop-1856 -j DROP --A logdrop-1857 -m limit --limit 12/minute -j ULOG --A logdrop-1857 -j DROP --A logdrop-1858 -m limit --limit 12/minute -j ULOG --A logdrop-1858 -j DROP --A logdrop-1859 -m limit --limit 12/minute -j ULOG --A logdrop-1859 -j DROP -A logdrop-186 -j TEE --gateway 10.0.0.1 -A logdrop-186 -j TEE --gateway 10.0.0.2 -A logdrop-186 -j DROP --A logdrop-1860 -m limit --limit 12/minute -j ULOG --A logdrop-1860 -j DROP --A logdrop-1861 -m limit --limit 12/minute -j ULOG --A logdrop-1861 -j DROP --A logdrop-1862 -m limit --limit 12/minute -j ULOG --A logdrop-1862 -j DROP --A logdrop-1863 -m limit --limit 12/minute -j ULOG --A logdrop-1863 -j DROP --A logdrop-1864 -m limit --limit 12/minute -j ULOG --A logdrop-1864 -j DROP --A logdrop-1865 -m limit --limit 12/minute -j ULOG --A logdrop-1865 -j DROP --A logdrop-1866 -m limit --limit 12/minute -j ULOG --A logdrop-1866 -j DROP --A logdrop-1867 -m limit --limit 12/minute -j ULOG --A logdrop-1867 -j DROP --A logdrop-1868 -m limit --limit 12/minute -j ULOG --A logdrop-1868 -j DROP --A logdrop-1869 -m limit --limit 12/minute -j ULOG --A logdrop-1869 -j DROP -A logdrop-187 -j TEE --gateway 10.0.0.1 -A logdrop-187 -j TEE --gateway 10.0.0.2 -A logdrop-187 -j DROP --A logdrop-1870 -m limit --limit 12/minute -j ULOG --A logdrop-1870 -j DROP --A logdrop-1871 -m limit --limit 12/minute -j ULOG --A logdrop-1871 -j DROP --A logdrop-1872 -m limit --limit 12/minute -j ULOG --A logdrop-1872 -j DROP --A logdrop-1873 -m limit --limit 12/minute -j ULOG --A logdrop-1873 -j DROP --A logdrop-1874 -m limit --limit 12/minute -j ULOG --A logdrop-1874 -j DROP --A logdrop-1875 -m limit --limit 12/minute -j ULOG --A logdrop-1875 -j DROP --A logdrop-1876 -m limit --limit 12/minute -j ULOG --A logdrop-1876 -j DROP --A logdrop-1877 -m limit --limit 12/minute -j ULOG --A logdrop-1877 -j DROP --A logdrop-1878 -m limit --limit 12/minute -j ULOG --A logdrop-1878 -j DROP --A logdrop-1879 -m limit --limit 12/minute -j ULOG --A logdrop-1879 -j DROP -A logdrop-188 -j TEE --gateway 10.0.0.1 -A logdrop-188 -j TEE --gateway 10.0.0.2 -A logdrop-188 -j DROP --A logdrop-1880 -m limit --limit 12/minute -j ULOG --A logdrop-1880 -j DROP --A logdrop-1881 -m limit --limit 12/minute -j ULOG --A logdrop-1881 -j DROP --A logdrop-1882 -m limit --limit 12/minute -j ULOG --A logdrop-1882 -j DROP --A logdrop-1883 -m limit --limit 12/minute -j ULOG --A logdrop-1883 -j DROP --A logdrop-1884 -m limit --limit 12/minute -j ULOG --A logdrop-1884 -j DROP --A logdrop-1885 -m limit --limit 12/minute -j ULOG --A logdrop-1885 -j DROP --A logdrop-1886 -m limit --limit 12/minute -j ULOG --A logdrop-1886 -j DROP --A logdrop-1887 -m limit --limit 12/minute -j ULOG --A logdrop-1887 -j DROP --A logdrop-1888 -m limit --limit 12/minute -j ULOG --A logdrop-1888 -j DROP --A logdrop-1889 -m limit --limit 12/minute -j ULOG --A logdrop-1889 -j DROP -A logdrop-189 -j TEE --gateway 10.0.0.1 -A logdrop-189 -j TEE --gateway 10.0.0.2 -A logdrop-189 -j DROP --A logdrop-1890 -m limit --limit 12/minute -j ULOG --A logdrop-1890 -j DROP --A logdrop-1891 -m limit --limit 12/minute -j ULOG --A logdrop-1891 -j DROP --A logdrop-1892 -m limit --limit 12/minute -j ULOG --A logdrop-1892 -j DROP --A logdrop-1893 -m limit --limit 12/minute -j ULOG --A logdrop-1893 -j DROP --A logdrop-1894 -m limit --limit 12/minute -j ULOG --A logdrop-1894 -j DROP --A logdrop-1895 -m limit --limit 12/minute -j ULOG --A logdrop-1895 -j DROP --A logdrop-1896 -m limit --limit 12/minute -j ULOG --A logdrop-1896 -j DROP --A logdrop-1897 -m limit --limit 12/minute -j ULOG --A logdrop-1897 -j DROP --A logdrop-1898 -m limit --limit 12/minute -j ULOG --A logdrop-1898 -j DROP --A logdrop-1899 -m limit --limit 12/minute -j ULOG --A logdrop-1899 -j DROP -A logdrop-19 -m limit --limit 1/second -j LOG -A logdrop-19 -j DROP -A logdrop-190 -m limit --limit 12/minute -j ULOG -A logdrop-190 -j DROP --A logdrop-1900 -m limit --limit 12/minute -j ULOG --A logdrop-1900 -j DROP --A logdrop-1901 -m limit --limit 12/minute -j ULOG --A logdrop-1901 -j DROP --A logdrop-1902 -m limit --limit 12/minute -j ULOG --A logdrop-1902 -j DROP --A logdrop-1903 -m limit --limit 12/minute -j ULOG --A logdrop-1903 -j DROP --A logdrop-1904 -m limit --limit 12/minute -j ULOG --A logdrop-1904 -j DROP --A logdrop-1905 -m limit --limit 12/minute -j ULOG --A logdrop-1905 -j DROP --A logdrop-1906 -m limit --limit 12/minute -j ULOG --A logdrop-1906 -j DROP --A logdrop-1907 -m limit --limit 12/minute -j ULOG --A logdrop-1907 -j DROP --A logdrop-1908 -m limit --limit 12/minute -j ULOG --A logdrop-1908 -j DROP --A logdrop-1909 -m limit --limit 12/minute -j ULOG --A logdrop-1909 -j DROP -A logdrop-191 -m limit --limit 12/minute -j ULOG -A logdrop-191 -j DROP --A logdrop-1910 -m limit --limit 12/minute -j ULOG --A logdrop-1910 -j DROP --A logdrop-1911 -m limit --limit 12/minute -j ULOG --A logdrop-1911 -j DROP --A logdrop-1912 -m limit --limit 12/minute -j ULOG --A logdrop-1912 -j DROP --A logdrop-1913 -m limit --limit 12/minute -j ULOG --A logdrop-1913 -j DROP --A logdrop-1914 -m limit --limit 12/minute -j ULOG --A logdrop-1914 -j DROP --A logdrop-1915 -m limit --limit 12/minute -j ULOG --A logdrop-1915 -j DROP --A logdrop-1916 -m limit --limit 12/minute -j ULOG --A logdrop-1916 -j DROP --A logdrop-1917 -m limit --limit 12/minute -j ULOG --A logdrop-1917 -j DROP --A logdrop-1918 -m limit --limit 12/minute -j ULOG --A logdrop-1918 -j DROP --A logdrop-1919 -m limit --limit 12/minute -j ULOG --A logdrop-1919 -j DROP -A logdrop-192 -m limit --limit 12/minute -j ULOG -A logdrop-192 -j DROP --A logdrop-1920 -m limit --limit 12/minute -j ULOG --A logdrop-1920 -j DROP --A logdrop-1921 -m limit --limit 12/minute -j ULOG --A logdrop-1921 -j DROP --A logdrop-1922 -m limit --limit 12/minute -j ULOG --A logdrop-1922 -j DROP --A logdrop-1923 -m limit --limit 12/minute -j ULOG --A logdrop-1923 -j DROP --A logdrop-1924 -m limit --limit 12/minute -j ULOG --A logdrop-1924 -j DROP --A logdrop-1925 -m limit --limit 12/minute -j ULOG --A logdrop-1925 -j DROP --A logdrop-1926 -m limit --limit 12/minute -j ULOG --A logdrop-1926 -j DROP --A logdrop-1927 -m limit --limit 12/minute -j ULOG --A logdrop-1927 -j DROP --A logdrop-1928 -m limit --limit 12/minute -j ULOG --A logdrop-1928 -j DROP --A logdrop-1929 -m limit --limit 12/minute -j ULOG --A logdrop-1929 -j DROP -A logdrop-193 -m limit --limit 12/minute -j ULOG -A logdrop-193 -j DROP --A logdrop-1930 -m limit --limit 1/second -j LOG --A logdrop-1930 -j DROP --A logdrop-1931 -m limit --limit 1/second -j LOG --A logdrop-1931 -j DROP --A logdrop-1932 -m limit --limit 1/second -j LOG --A logdrop-1932 -j DROP --A logdrop-1933 -m limit --limit 1/second -j LOG --A logdrop-1933 -j DROP --A logdrop-1934 -m limit --limit 1/second -j LOG --A logdrop-1934 -j DROP --A logdrop-1935 -m limit --limit 1/second -j LOG --A logdrop-1935 -j DROP --A logdrop-1936 -m limit --limit 1/second -j LOG --A logdrop-1936 -j DROP --A logdrop-1937 -m limit --limit 1/second -j LOG --A logdrop-1937 -j DROP --A logdrop-1938 -m limit --limit 1/second -j LOG --A logdrop-1938 -j DROP --A logdrop-1939 -m limit --limit 1/second -j LOG --A logdrop-1939 -j DROP -A logdrop-194 -m limit --limit 12/minute -j ULOG -A logdrop-194 -j DROP --A logdrop-1940 -m limit --limit 1/second -j LOG --A logdrop-1940 -j DROP --A logdrop-1941 -m limit --limit 1/second -j LOG --A logdrop-1941 -j DROP --A logdrop-1942 -m limit --limit 1/second -j LOG --A logdrop-1942 -j DROP --A logdrop-1943 -m limit --limit 1/second -j LOG --A logdrop-1943 -j DROP --A logdrop-1944 -m limit --limit 1/second -j LOG --A logdrop-1944 -j DROP --A logdrop-1945 -m limit --limit 1/second -j LOG --A logdrop-1945 -j DROP --A logdrop-1946 -m limit --limit 1/second -j LOG --A logdrop-1946 -j DROP --A logdrop-1947 -m limit --limit 1/second -j LOG --A logdrop-1947 -j DROP --A logdrop-1948 -m limit --limit 1/second -j LOG --A logdrop-1948 -j DROP --A logdrop-1949 -m limit --limit 1/second -j LOG --A logdrop-1949 -j DROP -A logdrop-195 -m limit --limit 12/minute -j ULOG -A logdrop-195 -j DROP --A logdrop-1950 -m limit --limit 1/second -j LOG --A logdrop-1950 -j DROP --A logdrop-1951 -m limit --limit 1/second -j LOG --A logdrop-1951 -j DROP --A logdrop-1952 -m limit --limit 1/second -j LOG --A logdrop-1952 -j DROP --A logdrop-1953 -m limit --limit 1/second -j LOG --A logdrop-1953 -j DROP --A logdrop-1954 -m limit --limit 1/second -j LOG --A logdrop-1954 -j DROP --A logdrop-1955 -m limit --limit 1/second -j LOG --A logdrop-1955 -j DROP --A logdrop-1956 -m limit --limit 1/second -j LOG --A logdrop-1956 -j DROP --A logdrop-1957 -m limit --limit 1/second -j LOG --A logdrop-1957 -j DROP --A logdrop-1958 -m limit --limit 1/second -j LOG --A logdrop-1958 -j DROP --A logdrop-1959 -m limit --limit 1/second -j LOG --A logdrop-1959 -j DROP -A logdrop-196 -m limit --limit 12/minute -j ULOG -A logdrop-196 -j DROP --A logdrop-1960 -m limit --limit 1/second -j LOG --A logdrop-1960 -j DROP --A logdrop-1961 -m limit --limit 1/second -j LOG --A logdrop-1961 -j DROP --A logdrop-1962 -m limit --limit 1/second -j LOG --A logdrop-1962 -j DROP --A logdrop-1963 -m limit --limit 1/second -j LOG --A logdrop-1963 -j DROP --A logdrop-1964 -m limit --limit 1/second -j LOG --A logdrop-1964 -j DROP --A logdrop-1965 -m limit --limit 1/second -j LOG --A logdrop-1965 -j DROP --A logdrop-1966 -m limit --limit 1/second -j LOG --A logdrop-1966 -j DROP --A logdrop-1967 -m limit --limit 1/second -j LOG --A logdrop-1967 -j DROP --A logdrop-1968 -m limit --limit 1/second -j LOG --A logdrop-1968 -j DROP --A logdrop-1969 -m limit --limit 1/second -j LOG --A logdrop-1969 -j DROP -A logdrop-197 -m limit --limit 12/minute -j ULOG -A logdrop-197 -j DROP --A logdrop-1970 -m limit --limit 1/second -j LOG --A logdrop-1970 -j DROP --A logdrop-1971 -m limit --limit 1/second -j LOG --A logdrop-1971 -j DROP --A logdrop-1972 -m limit --limit 1/second -j LOG --A logdrop-1972 -j DROP --A logdrop-1973 -m limit --limit 1/second -j LOG --A logdrop-1973 -j DROP --A logdrop-1974 -m limit --limit 1/second -j LOG --A logdrop-1974 -j DROP --A logdrop-1975 -m limit --limit 1/second -j LOG --A logdrop-1975 -j DROP --A logdrop-1976 -m limit --limit 1/second -j LOG --A logdrop-1976 -j DROP --A logdrop-1977 -m limit --limit 1/second -j LOG --A logdrop-1977 -j DROP --A logdrop-1978 -m limit --limit 1/second -j LOG --A logdrop-1978 -j DROP --A logdrop-1979 -m limit --limit 1/second -j LOG --A logdrop-1979 -j DROP -A logdrop-198 -m limit --limit 12/minute -j ULOG -A logdrop-198 -j DROP --A logdrop-1980 -m limit --limit 1/second -j LOG --A logdrop-1980 -j DROP --A logdrop-1981 -m limit --limit 1/second -j LOG --A logdrop-1981 -j DROP --A logdrop-1982 -m limit --limit 1/second -j LOG --A logdrop-1982 -j DROP --A logdrop-1983 -m limit --limit 1/second -j LOG --A logdrop-1983 -j DROP --A logdrop-1984 -m limit --limit 1/second -j LOG --A logdrop-1984 -j DROP --A logdrop-1985 -m limit --limit 1/second -j LOG --A logdrop-1985 -j DROP --A logdrop-1986 -m limit --limit 1/second -j LOG --A logdrop-1986 -j DROP --A logdrop-1987 -m limit --limit 1/second -j LOG --A logdrop-1987 -j DROP --A logdrop-1988 -m limit --limit 1/second -j LOG --A logdrop-1988 -j DROP --A logdrop-1989 -m limit --limit 1/second -j LOG --A logdrop-1989 -j DROP -A logdrop-199 -m limit --limit 12/minute -j ULOG -A logdrop-199 -j DROP --A logdrop-1990 -m limit --limit 1/second -j LOG --A logdrop-1990 -j DROP --A logdrop-1991 -m limit --limit 1/second -j LOG --A logdrop-1991 -j DROP --A logdrop-1992 -m limit --limit 1/second -j LOG --A logdrop-1992 -j DROP --A logdrop-1993 -m limit --limit 1/second -j LOG --A logdrop-1993 -j DROP --A logdrop-1994 -m limit --limit 1/second -j LOG --A logdrop-1994 -j DROP --A logdrop-1995 -m limit --limit 1/second -j LOG --A logdrop-1995 -j DROP --A logdrop-1996 -m limit --limit 1/second -j LOG --A logdrop-1996 -j DROP --A logdrop-1997 -m limit --limit 1/second -j LOG --A logdrop-1997 -j DROP --A logdrop-1998 -m limit --limit 1/second -j LOG --A logdrop-1998 -j DROP --A logdrop-1999 -m limit --limit 1/second -j LOG --A logdrop-1999 -j DROP -A logdrop-2 -m limit --limit 1/second -j LOG -A logdrop-2 -j DROP -A logdrop-20 -m limit --limit 1/second -j LOG -A logdrop-20 -j DROP -A logdrop-200 -m limit --limit 12/minute -j ULOG -A logdrop-200 -j DROP --A logdrop-2000 -m limit --limit 1/second -j LOG --A logdrop-2000 -j DROP --A logdrop-2001 -m limit --limit 1/second -j LOG --A logdrop-2001 -j DROP --A logdrop-2002 -m limit --limit 1/second -j LOG --A logdrop-2002 -j DROP --A logdrop-2003 -m limit --limit 1/second -j LOG --A logdrop-2003 -j DROP --A logdrop-2004 -m limit --limit 1/second -j LOG --A logdrop-2004 -j DROP --A logdrop-2005 -m limit --limit 1/second -j LOG --A logdrop-2005 -j DROP --A logdrop-2006 -m limit --limit 1/second -j LOG --A logdrop-2006 -j DROP --A logdrop-2007 -m limit --limit 1/second -j LOG --A logdrop-2007 -j DROP --A logdrop-2008 -m limit --limit 1/second -j LOG --A logdrop-2008 -j DROP --A logdrop-2009 -m limit --limit 1/second -j LOG --A logdrop-2009 -j DROP -A logdrop-201 -m limit --limit 12/minute -j ULOG -A logdrop-201 -j DROP --A logdrop-2010 -m limit --limit 1/second -j LOG --A logdrop-2010 -j DROP --A logdrop-2011 -m limit --limit 1/second -j LOG --A logdrop-2011 -j DROP --A logdrop-2012 -m limit --limit 1/second -j LOG --A logdrop-2012 -j DROP --A logdrop-2013 -m limit --limit 1/second -j LOG --A logdrop-2013 -j DROP --A logdrop-2014 -m limit --limit 1/second -j LOG --A logdrop-2014 -j DROP --A logdrop-2015 -m limit --limit 1/second -j LOG --A logdrop-2015 -j DROP --A logdrop-2016 -m limit --limit 1/second -j LOG --A logdrop-2016 -j DROP --A logdrop-2017 -m limit --limit 1/second -j LOG --A logdrop-2017 -j DROP --A logdrop-2018 -m limit --limit 1/second -j LOG --A logdrop-2018 -j DROP --A logdrop-2019 -m limit --limit 1/second -j LOG --A logdrop-2019 -j DROP -A logdrop-202 -m limit --limit 12/minute -j ULOG -A logdrop-202 -j DROP --A logdrop-2020 -j TEE --gateway 10.0.0.1 --A logdrop-2020 -j TEE --gateway 10.0.0.2 --A logdrop-2020 -j DROP --A logdrop-2021 -j TEE --gateway 10.0.0.1 --A logdrop-2021 -j TEE --gateway 10.0.0.2 --A logdrop-2021 -j DROP --A logdrop-2022 -j TEE --gateway 10.0.0.1 --A logdrop-2022 -j TEE --gateway 10.0.0.2 --A logdrop-2022 -j DROP --A logdrop-2023 -j TEE --gateway 10.0.0.1 --A logdrop-2023 -j TEE --gateway 10.0.0.2 --A logdrop-2023 -j DROP --A logdrop-2024 -j TEE --gateway 10.0.0.1 --A logdrop-2024 -j TEE --gateway 10.0.0.2 --A logdrop-2024 -j DROP --A logdrop-2025 -j TEE --gateway 10.0.0.1 --A logdrop-2025 -j TEE --gateway 10.0.0.2 --A logdrop-2025 -j DROP --A logdrop-2026 -j TEE --gateway 10.0.0.1 --A logdrop-2026 -j TEE --gateway 10.0.0.2 --A logdrop-2026 -j DROP --A logdrop-2027 -j TEE --gateway 10.0.0.1 --A logdrop-2027 -j TEE --gateway 10.0.0.2 --A logdrop-2027 -j DROP --A logdrop-2028 -j TEE --gateway 10.0.0.1 --A logdrop-2028 -j TEE --gateway 10.0.0.2 --A logdrop-2028 -j DROP --A logdrop-2029 -j TEE --gateway 10.0.0.1 --A logdrop-2029 -j TEE --gateway 10.0.0.2 --A logdrop-2029 -j DROP -A logdrop-203 -m limit --limit 12/minute -j ULOG -A logdrop-203 -j DROP --A logdrop-2030 -j TEE --gateway 10.0.0.1 --A logdrop-2030 -j TEE --gateway 10.0.0.2 --A logdrop-2030 -j DROP --A logdrop-2031 -j TEE --gateway 10.0.0.1 --A logdrop-2031 -j TEE --gateway 10.0.0.2 --A logdrop-2031 -j DROP --A logdrop-2032 -j TEE --gateway 10.0.0.1 --A logdrop-2032 -j TEE --gateway 10.0.0.2 --A logdrop-2032 -j DROP --A logdrop-2033 -j TEE --gateway 10.0.0.1 --A logdrop-2033 -j TEE --gateway 10.0.0.2 --A logdrop-2033 -j DROP --A logdrop-2034 -j TEE --gateway 10.0.0.1 --A logdrop-2034 -j TEE --gateway 10.0.0.2 --A logdrop-2034 -j DROP --A logdrop-2035 -j TEE --gateway 10.0.0.1 --A logdrop-2035 -j TEE --gateway 10.0.0.2 --A logdrop-2035 -j DROP --A logdrop-2036 -j TEE --gateway 10.0.0.1 --A logdrop-2036 -j TEE --gateway 10.0.0.2 --A logdrop-2036 -j DROP --A logdrop-2037 -j TEE --gateway 10.0.0.1 --A logdrop-2037 -j TEE --gateway 10.0.0.2 --A logdrop-2037 -j DROP --A logdrop-2038 -j TEE --gateway 10.0.0.1 --A logdrop-2038 -j TEE --gateway 10.0.0.2 --A logdrop-2038 -j DROP --A logdrop-2039 -j TEE --gateway 10.0.0.1 --A logdrop-2039 -j TEE --gateway 10.0.0.2 --A logdrop-2039 -j DROP -A logdrop-204 -m limit --limit 12/minute -j ULOG -A logdrop-204 -j DROP --A logdrop-2040 -j TEE --gateway 10.0.0.1 --A logdrop-2040 -j TEE --gateway 10.0.0.2 --A logdrop-2040 -j DROP --A logdrop-2041 -j TEE --gateway 10.0.0.1 --A logdrop-2041 -j TEE --gateway 10.0.0.2 --A logdrop-2041 -j DROP --A logdrop-2042 -j TEE --gateway 10.0.0.1 --A logdrop-2042 -j TEE --gateway 10.0.0.2 --A logdrop-2042 -j DROP --A logdrop-2043 -j TEE --gateway 10.0.0.1 --A logdrop-2043 -j TEE --gateway 10.0.0.2 --A logdrop-2043 -j DROP --A logdrop-2044 -j TEE --gateway 10.0.0.1 --A logdrop-2044 -j TEE --gateway 10.0.0.2 --A logdrop-2044 -j DROP --A logdrop-2045 -j TEE --gateway 10.0.0.1 --A logdrop-2045 -j TEE --gateway 10.0.0.2 --A logdrop-2045 -j DROP --A logdrop-2046 -j TEE --gateway 10.0.0.1 --A logdrop-2046 -j TEE --gateway 10.0.0.2 --A logdrop-2046 -j DROP --A logdrop-2047 -j TEE --gateway 10.0.0.1 --A logdrop-2047 -j TEE --gateway 10.0.0.2 --A logdrop-2047 -j DROP --A logdrop-2048 -j TEE --gateway 10.0.0.1 --A logdrop-2048 -j TEE --gateway 10.0.0.2 --A logdrop-2048 -j DROP --A logdrop-2049 -j TEE --gateway 10.0.0.1 --A logdrop-2049 -j TEE --gateway 10.0.0.2 --A logdrop-2049 -j DROP -A logdrop-205 -m limit --limit 12/minute -j ULOG -A logdrop-205 -j DROP --A logdrop-2050 -j TEE --gateway 10.0.0.1 --A logdrop-2050 -j TEE --gateway 10.0.0.2 --A logdrop-2050 -j DROP --A logdrop-2051 -j TEE --gateway 10.0.0.1 --A logdrop-2051 -j TEE --gateway 10.0.0.2 --A logdrop-2051 -j DROP --A logdrop-2052 -j TEE --gateway 10.0.0.1 --A logdrop-2052 -j TEE --gateway 10.0.0.2 --A logdrop-2052 -j DROP --A logdrop-2053 -j TEE --gateway 10.0.0.1 --A logdrop-2053 -j TEE --gateway 10.0.0.2 --A logdrop-2053 -j DROP --A logdrop-2054 -j TEE --gateway 10.0.0.1 --A logdrop-2054 -j TEE --gateway 10.0.0.2 --A logdrop-2054 -j DROP --A logdrop-2055 -j TEE --gateway 10.0.0.1 --A logdrop-2055 -j TEE --gateway 10.0.0.2 --A logdrop-2055 -j DROP --A logdrop-2056 -j TEE --gateway 10.0.0.1 --A logdrop-2056 -j TEE --gateway 10.0.0.2 --A logdrop-2056 -j DROP --A logdrop-2057 -j TEE --gateway 10.0.0.1 --A logdrop-2057 -j TEE --gateway 10.0.0.2 --A logdrop-2057 -j DROP --A logdrop-2058 -j TEE --gateway 10.0.0.1 --A logdrop-2058 -j TEE --gateway 10.0.0.2 --A logdrop-2058 -j DROP --A logdrop-2059 -j TEE --gateway 10.0.0.1 --A logdrop-2059 -j TEE --gateway 10.0.0.2 --A logdrop-2059 -j DROP -A logdrop-206 -m limit --limit 12/minute -j ULOG -A logdrop-206 -j DROP --A logdrop-2060 -j TEE --gateway 10.0.0.1 --A logdrop-2060 -j TEE --gateway 10.0.0.2 --A logdrop-2060 -j DROP --A logdrop-2061 -j TEE --gateway 10.0.0.1 --A logdrop-2061 -j TEE --gateway 10.0.0.2 --A logdrop-2061 -j DROP --A logdrop-2062 -j TEE --gateway 10.0.0.1 --A logdrop-2062 -j TEE --gateway 10.0.0.2 --A logdrop-2062 -j DROP --A logdrop-2063 -j TEE --gateway 10.0.0.1 --A logdrop-2063 -j TEE --gateway 10.0.0.2 --A logdrop-2063 -j DROP --A logdrop-2064 -j TEE --gateway 10.0.0.1 --A logdrop-2064 -j TEE --gateway 10.0.0.2 --A logdrop-2064 -j DROP --A logdrop-2065 -j TEE --gateway 10.0.0.1 --A logdrop-2065 -j TEE --gateway 10.0.0.2 --A logdrop-2065 -j DROP --A logdrop-2066 -j TEE --gateway 10.0.0.1 --A logdrop-2066 -j TEE --gateway 10.0.0.2 --A logdrop-2066 -j DROP --A logdrop-2067 -j TEE --gateway 10.0.0.1 --A logdrop-2067 -j TEE --gateway 10.0.0.2 --A logdrop-2067 -j DROP --A logdrop-2068 -j TEE --gateway 10.0.0.1 --A logdrop-2068 -j TEE --gateway 10.0.0.2 --A logdrop-2068 -j DROP --A logdrop-2069 -j TEE --gateway 10.0.0.1 --A logdrop-2069 -j TEE --gateway 10.0.0.2 --A logdrop-2069 -j DROP -A logdrop-207 -m limit --limit 12/minute -j ULOG -A logdrop-207 -j DROP --A logdrop-2070 -j TEE --gateway 10.0.0.1 --A logdrop-2070 -j TEE --gateway 10.0.0.2 --A logdrop-2070 -j DROP --A logdrop-2071 -j TEE --gateway 10.0.0.1 --A logdrop-2071 -j TEE --gateway 10.0.0.2 --A logdrop-2071 -j DROP --A logdrop-2072 -j TEE --gateway 10.0.0.1 --A logdrop-2072 -j TEE --gateway 10.0.0.2 --A logdrop-2072 -j DROP --A logdrop-2073 -j TEE --gateway 10.0.0.1 --A logdrop-2073 -j TEE --gateway 10.0.0.2 --A logdrop-2073 -j DROP --A logdrop-2074 -j TEE --gateway 10.0.0.1 --A logdrop-2074 -j TEE --gateway 10.0.0.2 --A logdrop-2074 -j DROP --A logdrop-2075 -j TEE --gateway 10.0.0.1 --A logdrop-2075 -j TEE --gateway 10.0.0.2 --A logdrop-2075 -j DROP --A logdrop-2076 -j TEE --gateway 10.0.0.1 --A logdrop-2076 -j TEE --gateway 10.0.0.2 --A logdrop-2076 -j DROP --A logdrop-2077 -j TEE --gateway 10.0.0.1 --A logdrop-2077 -j TEE --gateway 10.0.0.2 --A logdrop-2077 -j DROP --A logdrop-2078 -j TEE --gateway 10.0.0.1 --A logdrop-2078 -j TEE --gateway 10.0.0.2 --A logdrop-2078 -j DROP --A logdrop-2079 -j TEE --gateway 10.0.0.1 --A logdrop-2079 -j TEE --gateway 10.0.0.2 --A logdrop-2079 -j DROP -A logdrop-208 -m limit --limit 12/minute -j ULOG -A logdrop-208 -j DROP --A logdrop-2080 -j TEE --gateway 10.0.0.1 --A logdrop-2080 -j TEE --gateway 10.0.0.2 --A logdrop-2080 -j DROP --A logdrop-2081 -j TEE --gateway 10.0.0.1 --A logdrop-2081 -j TEE --gateway 10.0.0.2 --A logdrop-2081 -j DROP --A logdrop-2082 -j TEE --gateway 10.0.0.1 --A logdrop-2082 -j TEE --gateway 10.0.0.2 --A logdrop-2082 -j DROP --A logdrop-2083 -j TEE --gateway 10.0.0.1 --A logdrop-2083 -j TEE --gateway 10.0.0.2 --A logdrop-2083 -j DROP --A logdrop-2084 -j TEE --gateway 10.0.0.1 --A logdrop-2084 -j TEE --gateway 10.0.0.2 --A logdrop-2084 -j DROP --A logdrop-2085 -j TEE --gateway 10.0.0.1 --A logdrop-2085 -j TEE --gateway 10.0.0.2 --A logdrop-2085 -j DROP --A logdrop-2086 -j TEE --gateway 10.0.0.1 --A logdrop-2086 -j TEE --gateway 10.0.0.2 --A logdrop-2086 -j DROP --A logdrop-2087 -j TEE --gateway 10.0.0.1 --A logdrop-2087 -j TEE --gateway 10.0.0.2 --A logdrop-2087 -j DROP --A logdrop-2088 -j TEE --gateway 10.0.0.1 --A logdrop-2088 -j TEE --gateway 10.0.0.2 --A logdrop-2088 -j DROP --A logdrop-2089 -j TEE --gateway 10.0.0.1 --A logdrop-2089 -j TEE --gateway 10.0.0.2 --A logdrop-2089 -j DROP -A logdrop-209 -m limit --limit 12/minute -j ULOG -A logdrop-209 -j DROP --A logdrop-2090 -j TEE --gateway 10.0.0.1 --A logdrop-2090 -j TEE --gateway 10.0.0.2 --A logdrop-2090 -j DROP --A logdrop-2091 -j TEE --gateway 10.0.0.1 --A logdrop-2091 -j TEE --gateway 10.0.0.2 --A logdrop-2091 -j DROP --A logdrop-2092 -j TEE --gateway 10.0.0.1 --A logdrop-2092 -j TEE --gateway 10.0.0.2 --A logdrop-2092 -j DROP --A logdrop-2093 -j TEE --gateway 10.0.0.1 --A logdrop-2093 -j TEE --gateway 10.0.0.2 --A logdrop-2093 -j DROP --A logdrop-2094 -j TEE --gateway 10.0.0.1 --A logdrop-2094 -j TEE --gateway 10.0.0.2 --A logdrop-2094 -j DROP --A logdrop-2095 -j TEE --gateway 10.0.0.1 --A logdrop-2095 -j TEE --gateway 10.0.0.2 --A logdrop-2095 -j DROP --A logdrop-2096 -j TEE --gateway 10.0.0.1 --A logdrop-2096 -j TEE --gateway 10.0.0.2 --A logdrop-2096 -j DROP --A logdrop-2097 -j TEE --gateway 10.0.0.1 --A logdrop-2097 -j TEE --gateway 10.0.0.2 --A logdrop-2097 -j DROP --A logdrop-2098 -j TEE --gateway 10.0.0.1 --A logdrop-2098 -j TEE --gateway 10.0.0.2 --A logdrop-2098 -j DROP --A logdrop-2099 -j TEE --gateway 10.0.0.1 --A logdrop-2099 -j TEE --gateway 10.0.0.2 --A logdrop-2099 -j DROP -A logdrop-21 -m limit --limit 1/second -j LOG -A logdrop-21 -j DROP -A logdrop-210 -m limit --limit 12/minute -j ULOG -A logdrop-210 -j DROP --A logdrop-2100 -j TEE --gateway 10.0.0.1 --A logdrop-2100 -j TEE --gateway 10.0.0.2 --A logdrop-2100 -j DROP --A logdrop-2101 -j TEE --gateway 10.0.0.1 --A logdrop-2101 -j TEE --gateway 10.0.0.2 --A logdrop-2101 -j DROP --A logdrop-2102 -j TEE --gateway 10.0.0.1 --A logdrop-2102 -j TEE --gateway 10.0.0.2 --A logdrop-2102 -j DROP --A logdrop-2103 -j TEE --gateway 10.0.0.1 --A logdrop-2103 -j TEE --gateway 10.0.0.2 --A logdrop-2103 -j DROP --A logdrop-2104 -j TEE --gateway 10.0.0.1 --A logdrop-2104 -j TEE --gateway 10.0.0.2 --A logdrop-2104 -j DROP --A logdrop-2105 -j TEE --gateway 10.0.0.1 --A logdrop-2105 -j TEE --gateway 10.0.0.2 --A logdrop-2105 -j DROP --A logdrop-2106 -j TEE --gateway 10.0.0.1 --A logdrop-2106 -j TEE --gateway 10.0.0.2 --A logdrop-2106 -j DROP --A logdrop-2107 -j TEE --gateway 10.0.0.1 --A logdrop-2107 -j TEE --gateway 10.0.0.2 --A logdrop-2107 -j DROP --A logdrop-2108 -j TEE --gateway 10.0.0.1 --A logdrop-2108 -j TEE --gateway 10.0.0.2 --A logdrop-2108 -j DROP --A logdrop-2109 -j TEE --gateway 10.0.0.1 --A logdrop-2109 -j TEE --gateway 10.0.0.2 --A logdrop-2109 -j DROP -A logdrop-211 -m limit --limit 12/minute -j ULOG -A logdrop-211 -j DROP --A logdrop-2110 -m limit --limit 12/minute -j ULOG --A logdrop-2110 -j DROP --A logdrop-2111 -m limit --limit 12/minute -j ULOG --A logdrop-2111 -j DROP --A logdrop-2112 -m limit --limit 12/minute -j ULOG --A logdrop-2112 -j DROP --A logdrop-2113 -m limit --limit 12/minute -j ULOG --A logdrop-2113 -j DROP --A logdrop-2114 -m limit --limit 12/minute -j ULOG --A logdrop-2114 -j DROP --A logdrop-2115 -m limit --limit 12/minute -j ULOG --A logdrop-2115 -j DROP --A logdrop-2116 -m limit --limit 12/minute -j ULOG --A logdrop-2116 -j DROP --A logdrop-2117 -m limit --limit 12/minute -j ULOG --A logdrop-2117 -j DROP --A logdrop-2118 -m limit --limit 12/minute -j ULOG --A logdrop-2118 -j DROP --A logdrop-2119 -m limit --limit 12/minute -j ULOG --A logdrop-2119 -j DROP -A logdrop-212 -m limit --limit 12/minute -j ULOG -A logdrop-212 -j DROP --A logdrop-2120 -m limit --limit 12/minute -j ULOG --A logdrop-2120 -j DROP --A logdrop-2121 -m limit --limit 12/minute -j ULOG --A logdrop-2121 -j DROP --A logdrop-2122 -m limit --limit 12/minute -j ULOG --A logdrop-2122 -j DROP --A logdrop-2123 -m limit --limit 12/minute -j ULOG --A logdrop-2123 -j DROP --A logdrop-2124 -m limit --limit 12/minute -j ULOG --A logdrop-2124 -j DROP --A logdrop-2125 -m limit --limit 12/minute -j ULOG --A logdrop-2125 -j DROP --A logdrop-2126 -m limit --limit 12/minute -j ULOG --A logdrop-2126 -j DROP --A logdrop-2127 -m limit --limit 12/minute -j ULOG --A logdrop-2127 -j DROP --A logdrop-2128 -m limit --limit 12/minute -j ULOG --A logdrop-2128 -j DROP --A logdrop-2129 -m limit --limit 12/minute -j ULOG --A logdrop-2129 -j DROP -A logdrop-213 -m limit --limit 12/minute -j ULOG -A logdrop-213 -j DROP --A logdrop-2130 -m limit --limit 12/minute -j ULOG --A logdrop-2130 -j DROP --A logdrop-2131 -m limit --limit 12/minute -j ULOG --A logdrop-2131 -j DROP --A logdrop-2132 -m limit --limit 12/minute -j ULOG --A logdrop-2132 -j DROP --A logdrop-2133 -m limit --limit 12/minute -j ULOG --A logdrop-2133 -j DROP --A logdrop-2134 -m limit --limit 12/minute -j ULOG --A logdrop-2134 -j DROP --A logdrop-2135 -m limit --limit 12/minute -j ULOG --A logdrop-2135 -j DROP --A logdrop-2136 -m limit --limit 12/minute -j ULOG --A logdrop-2136 -j DROP --A logdrop-2137 -m limit --limit 12/minute -j ULOG --A logdrop-2137 -j DROP --A logdrop-2138 -m limit --limit 12/minute -j ULOG --A logdrop-2138 -j DROP --A logdrop-2139 -m limit --limit 12/minute -j ULOG --A logdrop-2139 -j DROP -A logdrop-214 -m limit --limit 12/minute -j ULOG -A logdrop-214 -j DROP --A logdrop-2140 -m limit --limit 12/minute -j ULOG --A logdrop-2140 -j DROP --A logdrop-2141 -m limit --limit 12/minute -j ULOG --A logdrop-2141 -j DROP --A logdrop-2142 -m limit --limit 12/minute -j ULOG --A logdrop-2142 -j DROP --A logdrop-2143 -m limit --limit 12/minute -j ULOG --A logdrop-2143 -j DROP --A logdrop-2144 -m limit --limit 12/minute -j ULOG --A logdrop-2144 -j DROP --A logdrop-2145 -m limit --limit 12/minute -j ULOG --A logdrop-2145 -j DROP --A logdrop-2146 -m limit --limit 12/minute -j ULOG --A logdrop-2146 -j DROP --A logdrop-2147 -m limit --limit 12/minute -j ULOG --A logdrop-2147 -j DROP --A logdrop-2148 -m limit --limit 12/minute -j ULOG --A logdrop-2148 -j DROP --A logdrop-2149 -m limit --limit 12/minute -j ULOG --A logdrop-2149 -j DROP -A logdrop-215 -m limit --limit 12/minute -j ULOG -A logdrop-215 -j DROP --A logdrop-2150 -m limit --limit 12/minute -j ULOG --A logdrop-2150 -j DROP --A logdrop-2151 -m limit --limit 12/minute -j ULOG --A logdrop-2151 -j DROP --A logdrop-2152 -m limit --limit 12/minute -j ULOG --A logdrop-2152 -j DROP --A logdrop-2153 -m limit --limit 12/minute -j ULOG --A logdrop-2153 -j DROP --A logdrop-2154 -m limit --limit 12/minute -j ULOG --A logdrop-2154 -j DROP --A logdrop-2155 -m limit --limit 12/minute -j ULOG --A logdrop-2155 -j DROP --A logdrop-2156 -m limit --limit 12/minute -j ULOG --A logdrop-2156 -j DROP --A logdrop-2157 -m limit --limit 12/minute -j ULOG --A logdrop-2157 -j DROP --A logdrop-2158 -m limit --limit 12/minute -j ULOG --A logdrop-2158 -j DROP --A logdrop-2159 -m limit --limit 12/minute -j ULOG --A logdrop-2159 -j DROP -A logdrop-216 -m limit --limit 12/minute -j ULOG -A logdrop-216 -j DROP --A logdrop-2160 -m limit --limit 12/minute -j ULOG --A logdrop-2160 -j DROP --A logdrop-2161 -m limit --limit 12/minute -j ULOG --A logdrop-2161 -j DROP --A logdrop-2162 -m limit --limit 12/minute -j ULOG --A logdrop-2162 -j DROP --A logdrop-2163 -m limit --limit 12/minute -j ULOG --A logdrop-2163 -j DROP --A logdrop-2164 -m limit --limit 12/minute -j ULOG --A logdrop-2164 -j DROP --A logdrop-2165 -m limit --limit 12/minute -j ULOG --A logdrop-2165 -j DROP --A logdrop-2166 -m limit --limit 12/minute -j ULOG --A logdrop-2166 -j DROP --A logdrop-2167 -m limit --limit 12/minute -j ULOG --A logdrop-2167 -j DROP --A logdrop-2168 -m limit --limit 12/minute -j ULOG --A logdrop-2168 -j DROP --A logdrop-2169 -m limit --limit 12/minute -j ULOG --A logdrop-2169 -j DROP -A logdrop-217 -m limit --limit 12/minute -j ULOG -A logdrop-217 -j DROP --A logdrop-2170 -m limit --limit 12/minute -j ULOG --A logdrop-2170 -j DROP --A logdrop-2171 -m limit --limit 12/minute -j ULOG --A logdrop-2171 -j DROP --A logdrop-2172 -m limit --limit 12/minute -j ULOG --A logdrop-2172 -j DROP --A logdrop-2173 -m limit --limit 12/minute -j ULOG --A logdrop-2173 -j DROP --A logdrop-2174 -m limit --limit 12/minute -j ULOG --A logdrop-2174 -j DROP --A logdrop-2175 -m limit --limit 12/minute -j ULOG --A logdrop-2175 -j DROP --A logdrop-2176 -m limit --limit 12/minute -j ULOG --A logdrop-2176 -j DROP --A logdrop-2177 -m limit --limit 12/minute -j ULOG --A logdrop-2177 -j DROP --A logdrop-2178 -m limit --limit 12/minute -j ULOG --A logdrop-2178 -j DROP --A logdrop-2179 -m limit --limit 12/minute -j ULOG --A logdrop-2179 -j DROP -A logdrop-218 -m limit --limit 12/minute -j ULOG -A logdrop-218 -j DROP --A logdrop-2180 -m limit --limit 12/minute -j ULOG --A logdrop-2180 -j DROP --A logdrop-2181 -m limit --limit 12/minute -j ULOG --A logdrop-2181 -j DROP --A logdrop-2182 -m limit --limit 12/minute -j ULOG --A logdrop-2182 -j DROP --A logdrop-2183 -m limit --limit 12/minute -j ULOG --A logdrop-2183 -j DROP --A logdrop-2184 -m limit --limit 12/minute -j ULOG --A logdrop-2184 -j DROP --A logdrop-2185 -m limit --limit 12/minute -j ULOG --A logdrop-2185 -j DROP --A logdrop-2186 -m limit --limit 12/minute -j ULOG --A logdrop-2186 -j DROP --A logdrop-2187 -m limit --limit 12/minute -j ULOG --A logdrop-2187 -j DROP --A logdrop-2188 -m limit --limit 12/minute -j ULOG --A logdrop-2188 -j DROP --A logdrop-2189 -m limit --limit 12/minute -j ULOG --A logdrop-2189 -j DROP -A logdrop-219 -m limit --limit 12/minute -j ULOG -A logdrop-219 -j DROP --A logdrop-2190 -m limit --limit 12/minute -j ULOG --A logdrop-2190 -j DROP --A logdrop-2191 -m limit --limit 12/minute -j ULOG --A logdrop-2191 -j DROP --A logdrop-2192 -m limit --limit 12/minute -j ULOG --A logdrop-2192 -j DROP --A logdrop-2193 -m limit --limit 12/minute -j ULOG --A logdrop-2193 -j DROP --A logdrop-2194 -m limit --limit 12/minute -j ULOG --A logdrop-2194 -j DROP --A logdrop-2195 -m limit --limit 12/minute -j ULOG --A logdrop-2195 -j DROP --A logdrop-2196 -m limit --limit 12/minute -j ULOG --A logdrop-2196 -j DROP --A logdrop-2197 -m limit --limit 12/minute -j ULOG --A logdrop-2197 -j DROP --A logdrop-2198 -m limit --limit 12/minute -j ULOG --A logdrop-2198 -j DROP --A logdrop-2199 -m limit --limit 12/minute -j ULOG --A logdrop-2199 -j DROP -A logdrop-22 -m limit --limit 1/second -j LOG -A logdrop-22 -j DROP -A logdrop-220 -m limit --limit 12/minute -j ULOG -A logdrop-220 -j DROP --A logdrop-2200 -m limit --limit 1/second -j LOG --A logdrop-2200 -j DROP --A logdrop-2201 -m limit --limit 1/second -j LOG --A logdrop-2201 -j DROP --A logdrop-2202 -j LOG --A logdrop-2202 -j DROP --A logdrop-2203 -j TEE --gateway 10.0.0.1 --A logdrop-2203 -j TEE --gateway 10.0.0.2 --A logdrop-2203 -j DROP --A logdrop-2204 -m limit --limit 12/minute -j ULOG --A logdrop-2204 -j DROP -A logdrop-221 -m limit --limit 12/minute -j ULOG -A logdrop-221 -j DROP -A logdrop-222 -m limit --limit 12/minute -j ULOG @@ -90063,6 +88783,1286 @@ hash:net family inet -A logdrop-999 -j TEE --gateway 10.0.0.1 -A logdrop-999 -j TEE --gateway 10.0.0.2 -A logdrop-999 -j DROP +-A logdrop-ntp-0 -m limit --limit 1/second -j LOG +-A logdrop-ntp-0 -j DROP +-A logdrop-ntp-1 -m limit --limit 1/second -j LOG +-A logdrop-ntp-1 -j DROP +-A logdrop-ntp-10 -m limit --limit 1/second -j LOG +-A logdrop-ntp-10 -j DROP +-A logdrop-ntp-100 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-100 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-100 -j DROP +-A logdrop-ntp-101 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-101 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-101 -j DROP +-A logdrop-ntp-102 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-102 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-102 -j DROP +-A logdrop-ntp-103 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-103 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-103 -j DROP +-A logdrop-ntp-104 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-104 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-104 -j DROP +-A logdrop-ntp-105 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-105 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-105 -j DROP +-A logdrop-ntp-106 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-106 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-106 -j DROP +-A logdrop-ntp-107 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-107 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-107 -j DROP +-A logdrop-ntp-108 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-108 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-108 -j DROP +-A logdrop-ntp-109 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-109 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-109 -j DROP +-A logdrop-ntp-11 -m limit --limit 1/second -j LOG +-A logdrop-ntp-11 -j DROP +-A logdrop-ntp-110 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-110 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-110 -j DROP +-A logdrop-ntp-111 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-111 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-111 -j DROP +-A logdrop-ntp-112 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-112 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-112 -j DROP +-A logdrop-ntp-113 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-113 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-113 -j DROP +-A logdrop-ntp-114 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-114 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-114 -j DROP +-A logdrop-ntp-115 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-115 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-115 -j DROP +-A logdrop-ntp-116 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-116 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-116 -j DROP +-A logdrop-ntp-117 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-117 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-117 -j DROP +-A logdrop-ntp-118 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-118 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-118 -j DROP +-A logdrop-ntp-119 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-119 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-119 -j DROP +-A logdrop-ntp-12 -m limit --limit 1/second -j LOG +-A logdrop-ntp-12 -j DROP +-A logdrop-ntp-120 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-120 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-120 -j DROP +-A logdrop-ntp-121 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-121 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-121 -j DROP +-A logdrop-ntp-122 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-122 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-122 -j DROP +-A logdrop-ntp-123 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-123 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-123 -j DROP +-A logdrop-ntp-124 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-124 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-124 -j DROP +-A logdrop-ntp-125 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-125 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-125 -j DROP +-A logdrop-ntp-126 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-126 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-126 -j DROP +-A logdrop-ntp-127 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-127 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-127 -j DROP +-A logdrop-ntp-128 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-128 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-128 -j DROP +-A logdrop-ntp-129 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-129 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-129 -j DROP +-A logdrop-ntp-13 -m limit --limit 1/second -j LOG +-A logdrop-ntp-13 -j DROP +-A logdrop-ntp-130 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-130 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-130 -j DROP +-A logdrop-ntp-131 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-131 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-131 -j DROP +-A logdrop-ntp-132 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-132 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-132 -j DROP +-A logdrop-ntp-133 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-133 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-133 -j DROP +-A logdrop-ntp-134 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-134 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-134 -j DROP +-A logdrop-ntp-135 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-135 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-135 -j DROP +-A logdrop-ntp-136 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-136 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-136 -j DROP +-A logdrop-ntp-137 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-137 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-137 -j DROP +-A logdrop-ntp-138 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-138 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-138 -j DROP +-A logdrop-ntp-139 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-139 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-139 -j DROP +-A logdrop-ntp-14 -m limit --limit 1/second -j LOG +-A logdrop-ntp-14 -j DROP +-A logdrop-ntp-140 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-140 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-140 -j DROP +-A logdrop-ntp-141 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-141 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-141 -j DROP +-A logdrop-ntp-142 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-142 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-142 -j DROP +-A logdrop-ntp-143 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-143 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-143 -j DROP +-A logdrop-ntp-144 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-144 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-144 -j DROP +-A logdrop-ntp-145 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-145 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-145 -j DROP +-A logdrop-ntp-146 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-146 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-146 -j DROP +-A logdrop-ntp-147 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-147 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-147 -j DROP +-A logdrop-ntp-148 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-148 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-148 -j DROP +-A logdrop-ntp-149 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-149 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-149 -j DROP +-A logdrop-ntp-15 -m limit --limit 1/second -j LOG +-A logdrop-ntp-15 -j DROP +-A logdrop-ntp-150 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-150 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-150 -j DROP +-A logdrop-ntp-151 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-151 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-151 -j DROP +-A logdrop-ntp-152 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-152 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-152 -j DROP +-A logdrop-ntp-153 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-153 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-153 -j DROP +-A logdrop-ntp-154 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-154 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-154 -j DROP +-A logdrop-ntp-155 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-155 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-155 -j DROP +-A logdrop-ntp-156 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-156 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-156 -j DROP +-A logdrop-ntp-157 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-157 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-157 -j DROP +-A logdrop-ntp-158 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-158 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-158 -j DROP +-A logdrop-ntp-159 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-159 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-159 -j DROP +-A logdrop-ntp-16 -m limit --limit 1/second -j LOG +-A logdrop-ntp-16 -j DROP +-A logdrop-ntp-160 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-160 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-160 -j DROP +-A logdrop-ntp-161 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-161 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-161 -j DROP +-A logdrop-ntp-162 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-162 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-162 -j DROP +-A logdrop-ntp-163 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-163 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-163 -j DROP +-A logdrop-ntp-164 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-164 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-164 -j DROP +-A logdrop-ntp-165 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-165 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-165 -j DROP +-A logdrop-ntp-166 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-166 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-166 -j DROP +-A logdrop-ntp-167 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-167 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-167 -j DROP +-A logdrop-ntp-168 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-168 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-168 -j DROP +-A logdrop-ntp-169 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-169 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-169 -j DROP +-A logdrop-ntp-17 -m limit --limit 1/second -j LOG +-A logdrop-ntp-17 -j DROP +-A logdrop-ntp-170 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-170 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-170 -j DROP +-A logdrop-ntp-171 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-171 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-171 -j DROP +-A logdrop-ntp-172 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-172 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-172 -j DROP +-A logdrop-ntp-173 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-173 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-173 -j DROP +-A logdrop-ntp-174 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-174 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-174 -j DROP +-A logdrop-ntp-175 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-175 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-175 -j DROP +-A logdrop-ntp-176 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-176 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-176 -j DROP +-A logdrop-ntp-177 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-177 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-177 -j DROP +-A logdrop-ntp-178 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-178 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-178 -j DROP +-A logdrop-ntp-179 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-179 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-179 -j DROP +-A logdrop-ntp-18 -m limit --limit 1/second -j LOG +-A logdrop-ntp-18 -j DROP +-A logdrop-ntp-180 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-180 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-180 -j DROP +-A logdrop-ntp-181 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-181 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-181 -j DROP +-A logdrop-ntp-182 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-182 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-182 -j DROP +-A logdrop-ntp-183 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-183 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-183 -j DROP +-A logdrop-ntp-184 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-184 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-184 -j DROP +-A logdrop-ntp-185 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-185 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-185 -j DROP +-A logdrop-ntp-186 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-186 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-186 -j DROP +-A logdrop-ntp-187 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-187 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-187 -j DROP +-A logdrop-ntp-188 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-188 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-188 -j DROP +-A logdrop-ntp-189 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-189 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-189 -j DROP +-A logdrop-ntp-19 -m limit --limit 1/second -j LOG +-A logdrop-ntp-19 -j DROP +-A logdrop-ntp-190 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-190 -j DROP +-A logdrop-ntp-191 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-191 -j DROP +-A logdrop-ntp-192 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-192 -j DROP +-A logdrop-ntp-193 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-193 -j DROP +-A logdrop-ntp-194 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-194 -j DROP +-A logdrop-ntp-195 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-195 -j DROP +-A logdrop-ntp-196 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-196 -j DROP +-A logdrop-ntp-197 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-197 -j DROP +-A logdrop-ntp-198 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-198 -j DROP +-A logdrop-ntp-199 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-199 -j DROP +-A logdrop-ntp-2 -m limit --limit 1/second -j LOG +-A logdrop-ntp-2 -j DROP +-A logdrop-ntp-20 -m limit --limit 1/second -j LOG +-A logdrop-ntp-20 -j DROP +-A logdrop-ntp-200 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-200 -j DROP +-A logdrop-ntp-201 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-201 -j DROP +-A logdrop-ntp-202 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-202 -j DROP +-A logdrop-ntp-203 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-203 -j DROP +-A logdrop-ntp-204 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-204 -j DROP +-A logdrop-ntp-205 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-205 -j DROP +-A logdrop-ntp-206 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-206 -j DROP +-A logdrop-ntp-207 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-207 -j DROP +-A logdrop-ntp-208 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-208 -j DROP +-A logdrop-ntp-209 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-209 -j DROP +-A logdrop-ntp-21 -m limit --limit 1/second -j LOG +-A logdrop-ntp-21 -j DROP +-A logdrop-ntp-210 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-210 -j DROP +-A logdrop-ntp-211 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-211 -j DROP +-A logdrop-ntp-212 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-212 -j DROP +-A logdrop-ntp-213 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-213 -j DROP +-A logdrop-ntp-214 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-214 -j DROP +-A logdrop-ntp-215 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-215 -j DROP +-A logdrop-ntp-216 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-216 -j DROP +-A logdrop-ntp-217 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-217 -j DROP +-A logdrop-ntp-218 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-218 -j DROP +-A logdrop-ntp-219 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-219 -j DROP +-A logdrop-ntp-22 -m limit --limit 1/second -j LOG +-A logdrop-ntp-22 -j DROP +-A logdrop-ntp-220 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-220 -j DROP +-A logdrop-ntp-221 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-221 -j DROP +-A logdrop-ntp-222 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-222 -j DROP +-A logdrop-ntp-223 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-223 -j DROP +-A logdrop-ntp-224 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-224 -j DROP +-A logdrop-ntp-225 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-225 -j DROP +-A logdrop-ntp-226 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-226 -j DROP +-A logdrop-ntp-227 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-227 -j DROP +-A logdrop-ntp-228 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-228 -j DROP +-A logdrop-ntp-229 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-229 -j DROP +-A logdrop-ntp-23 -m limit --limit 1/second -j LOG +-A logdrop-ntp-23 -j DROP +-A logdrop-ntp-230 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-230 -j DROP +-A logdrop-ntp-231 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-231 -j DROP +-A logdrop-ntp-232 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-232 -j DROP +-A logdrop-ntp-233 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-233 -j DROP +-A logdrop-ntp-234 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-234 -j DROP +-A logdrop-ntp-235 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-235 -j DROP +-A logdrop-ntp-236 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-236 -j DROP +-A logdrop-ntp-237 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-237 -j DROP +-A logdrop-ntp-238 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-238 -j DROP +-A logdrop-ntp-239 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-239 -j DROP +-A logdrop-ntp-24 -m limit --limit 1/second -j LOG +-A logdrop-ntp-24 -j DROP +-A logdrop-ntp-240 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-240 -j DROP +-A logdrop-ntp-241 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-241 -j DROP +-A logdrop-ntp-242 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-242 -j DROP +-A logdrop-ntp-243 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-243 -j DROP +-A logdrop-ntp-244 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-244 -j DROP +-A logdrop-ntp-245 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-245 -j DROP +-A logdrop-ntp-246 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-246 -j DROP +-A logdrop-ntp-247 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-247 -j DROP +-A logdrop-ntp-248 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-248 -j DROP +-A logdrop-ntp-249 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-249 -j DROP +-A logdrop-ntp-25 -m limit --limit 1/second -j LOG +-A logdrop-ntp-25 -j DROP +-A logdrop-ntp-250 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-250 -j DROP +-A logdrop-ntp-251 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-251 -j DROP +-A logdrop-ntp-252 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-252 -j DROP +-A logdrop-ntp-253 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-253 -j DROP +-A logdrop-ntp-254 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-254 -j DROP +-A logdrop-ntp-255 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-255 -j DROP +-A logdrop-ntp-256 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-256 -j DROP +-A logdrop-ntp-257 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-257 -j DROP +-A logdrop-ntp-258 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-258 -j DROP +-A logdrop-ntp-259 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-259 -j DROP +-A logdrop-ntp-26 -m limit --limit 1/second -j LOG +-A logdrop-ntp-26 -j DROP +-A logdrop-ntp-260 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-260 -j DROP +-A logdrop-ntp-261 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-261 -j DROP +-A logdrop-ntp-262 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-262 -j DROP +-A logdrop-ntp-263 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-263 -j DROP +-A logdrop-ntp-264 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-264 -j DROP +-A logdrop-ntp-265 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-265 -j DROP +-A logdrop-ntp-266 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-266 -j DROP +-A logdrop-ntp-267 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-267 -j DROP +-A logdrop-ntp-268 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-268 -j DROP +-A logdrop-ntp-269 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-269 -j DROP +-A logdrop-ntp-27 -m limit --limit 1/second -j LOG +-A logdrop-ntp-27 -j DROP +-A logdrop-ntp-270 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-270 -j DROP +-A logdrop-ntp-271 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-271 -j DROP +-A logdrop-ntp-272 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-272 -j DROP +-A logdrop-ntp-273 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-273 -j DROP +-A logdrop-ntp-274 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-274 -j DROP +-A logdrop-ntp-275 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-275 -j DROP +-A logdrop-ntp-276 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-276 -j DROP +-A logdrop-ntp-277 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-277 -j DROP +-A logdrop-ntp-278 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-278 -j DROP +-A logdrop-ntp-279 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-279 -j DROP +-A logdrop-ntp-28 -m limit --limit 1/second -j LOG +-A logdrop-ntp-28 -j DROP +-A logdrop-ntp-280 -m limit --limit 1/second -j LOG +-A logdrop-ntp-280 -j DROP +-A logdrop-ntp-281 -m limit --limit 1/second -j LOG +-A logdrop-ntp-281 -j DROP +-A logdrop-ntp-282 -m limit --limit 1/second -j LOG +-A logdrop-ntp-282 -j DROP +-A logdrop-ntp-283 -m limit --limit 1/second -j LOG +-A logdrop-ntp-283 -j DROP +-A logdrop-ntp-284 -m limit --limit 1/second -j LOG +-A logdrop-ntp-284 -j DROP +-A logdrop-ntp-285 -m limit --limit 1/second -j LOG +-A logdrop-ntp-285 -j DROP +-A logdrop-ntp-286 -m limit --limit 1/second -j LOG +-A logdrop-ntp-286 -j DROP +-A logdrop-ntp-287 -m limit --limit 1/second -j LOG +-A logdrop-ntp-287 -j DROP +-A logdrop-ntp-288 -m limit --limit 1/second -j LOG +-A logdrop-ntp-288 -j DROP +-A logdrop-ntp-289 -m limit --limit 1/second -j LOG +-A logdrop-ntp-289 -j DROP +-A logdrop-ntp-29 -m limit --limit 1/second -j LOG +-A logdrop-ntp-29 -j DROP +-A logdrop-ntp-290 -m limit --limit 1/second -j LOG +-A logdrop-ntp-290 -j DROP +-A logdrop-ntp-291 -m limit --limit 1/second -j LOG +-A logdrop-ntp-291 -j DROP +-A logdrop-ntp-292 -m limit --limit 1/second -j LOG +-A logdrop-ntp-292 -j DROP +-A logdrop-ntp-293 -m limit --limit 1/second -j LOG +-A logdrop-ntp-293 -j DROP +-A logdrop-ntp-294 -m limit --limit 1/second -j LOG +-A logdrop-ntp-294 -j DROP +-A logdrop-ntp-295 -m limit --limit 1/second -j LOG +-A logdrop-ntp-295 -j DROP +-A logdrop-ntp-296 -m limit --limit 1/second -j LOG +-A logdrop-ntp-296 -j DROP +-A logdrop-ntp-297 -m limit --limit 1/second -j LOG +-A logdrop-ntp-297 -j DROP +-A logdrop-ntp-298 -m limit --limit 1/second -j LOG +-A logdrop-ntp-298 -j DROP +-A logdrop-ntp-299 -m limit --limit 1/second -j LOG +-A logdrop-ntp-299 -j DROP +-A logdrop-ntp-3 -m limit --limit 1/second -j LOG +-A logdrop-ntp-3 -j DROP +-A logdrop-ntp-30 -m limit --limit 1/second -j LOG +-A logdrop-ntp-30 -j DROP +-A logdrop-ntp-300 -m limit --limit 1/second -j LOG +-A logdrop-ntp-300 -j DROP +-A logdrop-ntp-301 -m limit --limit 1/second -j LOG +-A logdrop-ntp-301 -j DROP +-A logdrop-ntp-302 -m limit --limit 1/second -j LOG +-A logdrop-ntp-302 -j DROP +-A logdrop-ntp-303 -m limit --limit 1/second -j LOG +-A logdrop-ntp-303 -j DROP +-A logdrop-ntp-304 -m limit --limit 1/second -j LOG +-A logdrop-ntp-304 -j DROP +-A logdrop-ntp-305 -m limit --limit 1/second -j LOG +-A logdrop-ntp-305 -j DROP +-A logdrop-ntp-306 -m limit --limit 1/second -j LOG +-A logdrop-ntp-306 -j DROP +-A logdrop-ntp-307 -m limit --limit 1/second -j LOG +-A logdrop-ntp-307 -j DROP +-A logdrop-ntp-308 -m limit --limit 1/second -j LOG +-A logdrop-ntp-308 -j DROP +-A logdrop-ntp-309 -m limit --limit 1/second -j LOG +-A logdrop-ntp-309 -j DROP +-A logdrop-ntp-31 -m limit --limit 1/second -j LOG +-A logdrop-ntp-31 -j DROP +-A logdrop-ntp-310 -m limit --limit 1/second -j LOG +-A logdrop-ntp-310 -j DROP +-A logdrop-ntp-311 -m limit --limit 1/second -j LOG +-A logdrop-ntp-311 -j DROP +-A logdrop-ntp-312 -m limit --limit 1/second -j LOG +-A logdrop-ntp-312 -j DROP +-A logdrop-ntp-313 -m limit --limit 1/second -j LOG +-A logdrop-ntp-313 -j DROP +-A logdrop-ntp-314 -m limit --limit 1/second -j LOG +-A logdrop-ntp-314 -j DROP +-A logdrop-ntp-315 -m limit --limit 1/second -j LOG +-A logdrop-ntp-315 -j DROP +-A logdrop-ntp-316 -m limit --limit 1/second -j LOG +-A logdrop-ntp-316 -j DROP +-A logdrop-ntp-317 -m limit --limit 1/second -j LOG +-A logdrop-ntp-317 -j DROP +-A logdrop-ntp-318 -m limit --limit 1/second -j LOG +-A logdrop-ntp-318 -j DROP +-A logdrop-ntp-319 -m limit --limit 1/second -j LOG +-A logdrop-ntp-319 -j DROP +-A logdrop-ntp-32 -m limit --limit 1/second -j LOG +-A logdrop-ntp-32 -j DROP +-A logdrop-ntp-320 -m limit --limit 1/second -j LOG +-A logdrop-ntp-320 -j DROP +-A logdrop-ntp-321 -m limit --limit 1/second -j LOG +-A logdrop-ntp-321 -j DROP +-A logdrop-ntp-322 -m limit --limit 1/second -j LOG +-A logdrop-ntp-322 -j DROP +-A logdrop-ntp-323 -m limit --limit 1/second -j LOG +-A logdrop-ntp-323 -j DROP +-A logdrop-ntp-324 -m limit --limit 1/second -j LOG +-A logdrop-ntp-324 -j DROP +-A logdrop-ntp-325 -m limit --limit 1/second -j LOG +-A logdrop-ntp-325 -j DROP +-A logdrop-ntp-326 -m limit --limit 1/second -j LOG +-A logdrop-ntp-326 -j DROP +-A logdrop-ntp-327 -m limit --limit 1/second -j LOG +-A logdrop-ntp-327 -j DROP +-A logdrop-ntp-328 -m limit --limit 1/second -j LOG +-A logdrop-ntp-328 -j DROP +-A logdrop-ntp-329 -m limit --limit 1/second -j LOG +-A logdrop-ntp-329 -j DROP +-A logdrop-ntp-33 -m limit --limit 1/second -j LOG +-A logdrop-ntp-33 -j DROP +-A logdrop-ntp-330 -m limit --limit 1/second -j LOG +-A logdrop-ntp-330 -j DROP +-A logdrop-ntp-331 -m limit --limit 1/second -j LOG +-A logdrop-ntp-331 -j DROP +-A logdrop-ntp-332 -m limit --limit 1/second -j LOG +-A logdrop-ntp-332 -j DROP +-A logdrop-ntp-333 -m limit --limit 1/second -j LOG +-A logdrop-ntp-333 -j DROP +-A logdrop-ntp-334 -m limit --limit 1/second -j LOG +-A logdrop-ntp-334 -j DROP +-A logdrop-ntp-335 -m limit --limit 1/second -j LOG +-A logdrop-ntp-335 -j DROP +-A logdrop-ntp-336 -m limit --limit 1/second -j LOG +-A logdrop-ntp-336 -j DROP +-A logdrop-ntp-337 -m limit --limit 1/second -j LOG +-A logdrop-ntp-337 -j DROP +-A logdrop-ntp-338 -m limit --limit 1/second -j LOG +-A logdrop-ntp-338 -j DROP +-A logdrop-ntp-339 -m limit --limit 1/second -j LOG +-A logdrop-ntp-339 -j DROP +-A logdrop-ntp-34 -m limit --limit 1/second -j LOG +-A logdrop-ntp-34 -j DROP +-A logdrop-ntp-340 -m limit --limit 1/second -j LOG +-A logdrop-ntp-340 -j DROP +-A logdrop-ntp-341 -m limit --limit 1/second -j LOG +-A logdrop-ntp-341 -j DROP +-A logdrop-ntp-342 -m limit --limit 1/second -j LOG +-A logdrop-ntp-342 -j DROP +-A logdrop-ntp-343 -m limit --limit 1/second -j LOG +-A logdrop-ntp-343 -j DROP +-A logdrop-ntp-344 -m limit --limit 1/second -j LOG +-A logdrop-ntp-344 -j DROP +-A logdrop-ntp-345 -m limit --limit 1/second -j LOG +-A logdrop-ntp-345 -j DROP +-A logdrop-ntp-346 -m limit --limit 1/second -j LOG +-A logdrop-ntp-346 -j DROP +-A logdrop-ntp-347 -m limit --limit 1/second -j LOG +-A logdrop-ntp-347 -j DROP +-A logdrop-ntp-348 -m limit --limit 1/second -j LOG +-A logdrop-ntp-348 -j DROP +-A logdrop-ntp-349 -m limit --limit 1/second -j LOG +-A logdrop-ntp-349 -j DROP +-A logdrop-ntp-35 -m limit --limit 1/second -j LOG +-A logdrop-ntp-35 -j DROP +-A logdrop-ntp-350 -m limit --limit 1/second -j LOG +-A logdrop-ntp-350 -j DROP +-A logdrop-ntp-351 -m limit --limit 1/second -j LOG +-A logdrop-ntp-351 -j DROP +-A logdrop-ntp-352 -m limit --limit 1/second -j LOG +-A logdrop-ntp-352 -j DROP +-A logdrop-ntp-353 -m limit --limit 1/second -j LOG +-A logdrop-ntp-353 -j DROP +-A logdrop-ntp-354 -m limit --limit 1/second -j LOG +-A logdrop-ntp-354 -j DROP +-A logdrop-ntp-355 -m limit --limit 1/second -j LOG +-A logdrop-ntp-355 -j DROP +-A logdrop-ntp-356 -m limit --limit 1/second -j LOG +-A logdrop-ntp-356 -j DROP +-A logdrop-ntp-357 -m limit --limit 1/second -j LOG +-A logdrop-ntp-357 -j DROP +-A logdrop-ntp-358 -m limit --limit 1/second -j LOG +-A logdrop-ntp-358 -j DROP +-A logdrop-ntp-359 -m limit --limit 1/second -j LOG +-A logdrop-ntp-359 -j DROP +-A logdrop-ntp-36 -m limit --limit 1/second -j LOG +-A logdrop-ntp-36 -j DROP +-A logdrop-ntp-360 -m limit --limit 1/second -j LOG +-A logdrop-ntp-360 -j DROP +-A logdrop-ntp-361 -m limit --limit 1/second -j LOG +-A logdrop-ntp-361 -j DROP +-A logdrop-ntp-362 -m limit --limit 1/second -j LOG +-A logdrop-ntp-362 -j DROP +-A logdrop-ntp-363 -m limit --limit 1/second -j LOG +-A logdrop-ntp-363 -j DROP +-A logdrop-ntp-364 -m limit --limit 1/second -j LOG +-A logdrop-ntp-364 -j DROP +-A logdrop-ntp-365 -m limit --limit 1/second -j LOG +-A logdrop-ntp-365 -j DROP +-A logdrop-ntp-366 -m limit --limit 1/second -j LOG +-A logdrop-ntp-366 -j DROP +-A logdrop-ntp-367 -m limit --limit 1/second -j LOG +-A logdrop-ntp-367 -j DROP +-A logdrop-ntp-368 -m limit --limit 1/second -j LOG +-A logdrop-ntp-368 -j DROP +-A logdrop-ntp-369 -m limit --limit 1/second -j LOG +-A logdrop-ntp-369 -j DROP +-A logdrop-ntp-37 -m limit --limit 1/second -j LOG +-A logdrop-ntp-37 -j DROP +-A logdrop-ntp-370 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-370 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-370 -j DROP +-A logdrop-ntp-371 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-371 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-371 -j DROP +-A logdrop-ntp-372 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-372 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-372 -j DROP +-A logdrop-ntp-373 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-373 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-373 -j DROP +-A logdrop-ntp-374 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-374 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-374 -j DROP +-A logdrop-ntp-375 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-375 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-375 -j DROP +-A logdrop-ntp-376 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-376 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-376 -j DROP +-A logdrop-ntp-377 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-377 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-377 -j DROP +-A logdrop-ntp-378 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-378 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-378 -j DROP +-A logdrop-ntp-379 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-379 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-379 -j DROP +-A logdrop-ntp-38 -m limit --limit 1/second -j LOG +-A logdrop-ntp-38 -j DROP +-A logdrop-ntp-380 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-380 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-380 -j DROP +-A logdrop-ntp-381 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-381 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-381 -j DROP +-A logdrop-ntp-382 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-382 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-382 -j DROP +-A logdrop-ntp-383 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-383 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-383 -j DROP +-A logdrop-ntp-384 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-384 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-384 -j DROP +-A logdrop-ntp-385 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-385 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-385 -j DROP +-A logdrop-ntp-386 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-386 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-386 -j DROP +-A logdrop-ntp-387 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-387 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-387 -j DROP +-A logdrop-ntp-388 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-388 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-388 -j DROP +-A logdrop-ntp-389 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-389 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-389 -j DROP +-A logdrop-ntp-39 -m limit --limit 1/second -j LOG +-A logdrop-ntp-39 -j DROP +-A logdrop-ntp-390 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-390 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-390 -j DROP +-A logdrop-ntp-391 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-391 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-391 -j DROP +-A logdrop-ntp-392 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-392 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-392 -j DROP +-A logdrop-ntp-393 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-393 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-393 -j DROP +-A logdrop-ntp-394 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-394 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-394 -j DROP +-A logdrop-ntp-395 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-395 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-395 -j DROP +-A logdrop-ntp-396 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-396 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-396 -j DROP +-A logdrop-ntp-397 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-397 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-397 -j DROP +-A logdrop-ntp-398 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-398 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-398 -j DROP +-A logdrop-ntp-399 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-399 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-399 -j DROP +-A logdrop-ntp-4 -m limit --limit 1/second -j LOG +-A logdrop-ntp-4 -j DROP +-A logdrop-ntp-40 -m limit --limit 1/second -j LOG +-A logdrop-ntp-40 -j DROP +-A logdrop-ntp-400 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-400 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-400 -j DROP +-A logdrop-ntp-401 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-401 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-401 -j DROP +-A logdrop-ntp-402 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-402 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-402 -j DROP +-A logdrop-ntp-403 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-403 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-403 -j DROP +-A logdrop-ntp-404 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-404 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-404 -j DROP +-A logdrop-ntp-405 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-405 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-405 -j DROP +-A logdrop-ntp-406 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-406 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-406 -j DROP +-A logdrop-ntp-407 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-407 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-407 -j DROP +-A logdrop-ntp-408 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-408 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-408 -j DROP +-A logdrop-ntp-409 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-409 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-409 -j DROP +-A logdrop-ntp-41 -m limit --limit 1/second -j LOG +-A logdrop-ntp-41 -j DROP +-A logdrop-ntp-410 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-410 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-410 -j DROP +-A logdrop-ntp-411 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-411 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-411 -j DROP +-A logdrop-ntp-412 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-412 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-412 -j DROP +-A logdrop-ntp-413 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-413 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-413 -j DROP +-A logdrop-ntp-414 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-414 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-414 -j DROP +-A logdrop-ntp-415 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-415 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-415 -j DROP +-A logdrop-ntp-416 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-416 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-416 -j DROP +-A logdrop-ntp-417 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-417 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-417 -j DROP +-A logdrop-ntp-418 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-418 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-418 -j DROP +-A logdrop-ntp-419 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-419 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-419 -j DROP +-A logdrop-ntp-42 -m limit --limit 1/second -j LOG +-A logdrop-ntp-42 -j DROP +-A logdrop-ntp-420 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-420 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-420 -j DROP +-A logdrop-ntp-421 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-421 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-421 -j DROP +-A logdrop-ntp-422 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-422 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-422 -j DROP +-A logdrop-ntp-423 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-423 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-423 -j DROP +-A logdrop-ntp-424 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-424 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-424 -j DROP +-A logdrop-ntp-425 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-425 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-425 -j DROP +-A logdrop-ntp-426 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-426 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-426 -j DROP +-A logdrop-ntp-427 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-427 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-427 -j DROP +-A logdrop-ntp-428 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-428 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-428 -j DROP +-A logdrop-ntp-429 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-429 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-429 -j DROP +-A logdrop-ntp-43 -m limit --limit 1/second -j LOG +-A logdrop-ntp-43 -j DROP +-A logdrop-ntp-430 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-430 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-430 -j DROP +-A logdrop-ntp-431 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-431 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-431 -j DROP +-A logdrop-ntp-432 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-432 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-432 -j DROP +-A logdrop-ntp-433 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-433 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-433 -j DROP +-A logdrop-ntp-434 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-434 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-434 -j DROP +-A logdrop-ntp-435 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-435 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-435 -j DROP +-A logdrop-ntp-436 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-436 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-436 -j DROP +-A logdrop-ntp-437 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-437 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-437 -j DROP +-A logdrop-ntp-438 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-438 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-438 -j DROP +-A logdrop-ntp-439 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-439 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-439 -j DROP +-A logdrop-ntp-44 -m limit --limit 1/second -j LOG +-A logdrop-ntp-44 -j DROP +-A logdrop-ntp-440 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-440 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-440 -j DROP +-A logdrop-ntp-441 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-441 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-441 -j DROP +-A logdrop-ntp-442 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-442 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-442 -j DROP +-A logdrop-ntp-443 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-443 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-443 -j DROP +-A logdrop-ntp-444 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-444 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-444 -j DROP +-A logdrop-ntp-445 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-445 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-445 -j DROP +-A logdrop-ntp-446 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-446 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-446 -j DROP +-A logdrop-ntp-447 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-447 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-447 -j DROP +-A logdrop-ntp-448 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-448 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-448 -j DROP +-A logdrop-ntp-449 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-449 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-449 -j DROP +-A logdrop-ntp-45 -m limit --limit 1/second -j LOG +-A logdrop-ntp-45 -j DROP +-A logdrop-ntp-450 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-450 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-450 -j DROP +-A logdrop-ntp-451 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-451 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-451 -j DROP +-A logdrop-ntp-452 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-452 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-452 -j DROP +-A logdrop-ntp-453 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-453 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-453 -j DROP +-A logdrop-ntp-454 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-454 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-454 -j DROP +-A logdrop-ntp-455 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-455 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-455 -j DROP +-A logdrop-ntp-456 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-456 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-456 -j DROP +-A logdrop-ntp-457 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-457 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-457 -j DROP +-A logdrop-ntp-458 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-458 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-458 -j DROP +-A logdrop-ntp-459 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-459 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-459 -j DROP +-A logdrop-ntp-46 -m limit --limit 1/second -j LOG +-A logdrop-ntp-46 -j DROP +-A logdrop-ntp-460 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-460 -j DROP +-A logdrop-ntp-461 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-461 -j DROP +-A logdrop-ntp-462 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-462 -j DROP +-A logdrop-ntp-463 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-463 -j DROP +-A logdrop-ntp-464 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-464 -j DROP +-A logdrop-ntp-465 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-465 -j DROP +-A logdrop-ntp-466 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-466 -j DROP +-A logdrop-ntp-467 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-467 -j DROP +-A logdrop-ntp-468 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-468 -j DROP +-A logdrop-ntp-469 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-469 -j DROP +-A logdrop-ntp-47 -m limit --limit 1/second -j LOG +-A logdrop-ntp-47 -j DROP +-A logdrop-ntp-470 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-470 -j DROP +-A logdrop-ntp-471 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-471 -j DROP +-A logdrop-ntp-472 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-472 -j DROP +-A logdrop-ntp-473 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-473 -j DROP +-A logdrop-ntp-474 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-474 -j DROP +-A logdrop-ntp-475 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-475 -j DROP +-A logdrop-ntp-476 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-476 -j DROP +-A logdrop-ntp-477 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-477 -j DROP +-A logdrop-ntp-478 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-478 -j DROP +-A logdrop-ntp-479 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-479 -j DROP +-A logdrop-ntp-48 -m limit --limit 1/second -j LOG +-A logdrop-ntp-48 -j DROP +-A logdrop-ntp-480 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-480 -j DROP +-A logdrop-ntp-481 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-481 -j DROP +-A logdrop-ntp-482 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-482 -j DROP +-A logdrop-ntp-483 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-483 -j DROP +-A logdrop-ntp-484 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-484 -j DROP +-A logdrop-ntp-485 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-485 -j DROP +-A logdrop-ntp-486 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-486 -j DROP +-A logdrop-ntp-487 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-487 -j DROP +-A logdrop-ntp-488 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-488 -j DROP +-A logdrop-ntp-489 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-489 -j DROP +-A logdrop-ntp-49 -m limit --limit 1/second -j LOG +-A logdrop-ntp-49 -j DROP +-A logdrop-ntp-490 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-490 -j DROP +-A logdrop-ntp-491 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-491 -j DROP +-A logdrop-ntp-492 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-492 -j DROP +-A logdrop-ntp-493 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-493 -j DROP +-A logdrop-ntp-494 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-494 -j DROP +-A logdrop-ntp-495 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-495 -j DROP +-A logdrop-ntp-496 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-496 -j DROP +-A logdrop-ntp-497 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-497 -j DROP +-A logdrop-ntp-498 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-498 -j DROP +-A logdrop-ntp-499 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-499 -j DROP +-A logdrop-ntp-5 -m limit --limit 1/second -j LOG +-A logdrop-ntp-5 -j DROP +-A logdrop-ntp-50 -m limit --limit 1/second -j LOG +-A logdrop-ntp-50 -j DROP +-A logdrop-ntp-500 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-500 -j DROP +-A logdrop-ntp-501 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-501 -j DROP +-A logdrop-ntp-502 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-502 -j DROP +-A logdrop-ntp-503 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-503 -j DROP +-A logdrop-ntp-504 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-504 -j DROP +-A logdrop-ntp-505 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-505 -j DROP +-A logdrop-ntp-506 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-506 -j DROP +-A logdrop-ntp-507 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-507 -j DROP +-A logdrop-ntp-508 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-508 -j DROP +-A logdrop-ntp-509 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-509 -j DROP +-A logdrop-ntp-51 -m limit --limit 1/second -j LOG +-A logdrop-ntp-51 -j DROP +-A logdrop-ntp-510 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-510 -j DROP +-A logdrop-ntp-511 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-511 -j DROP +-A logdrop-ntp-512 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-512 -j DROP +-A logdrop-ntp-513 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-513 -j DROP +-A logdrop-ntp-514 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-514 -j DROP +-A logdrop-ntp-515 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-515 -j DROP +-A logdrop-ntp-516 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-516 -j DROP +-A logdrop-ntp-517 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-517 -j DROP +-A logdrop-ntp-518 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-518 -j DROP +-A logdrop-ntp-519 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-519 -j DROP +-A logdrop-ntp-52 -m limit --limit 1/second -j LOG +-A logdrop-ntp-52 -j DROP +-A logdrop-ntp-520 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-520 -j DROP +-A logdrop-ntp-521 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-521 -j DROP +-A logdrop-ntp-522 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-522 -j DROP +-A logdrop-ntp-523 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-523 -j DROP +-A logdrop-ntp-524 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-524 -j DROP +-A logdrop-ntp-525 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-525 -j DROP +-A logdrop-ntp-526 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-526 -j DROP +-A logdrop-ntp-527 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-527 -j DROP +-A logdrop-ntp-528 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-528 -j DROP +-A logdrop-ntp-529 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-529 -j DROP +-A logdrop-ntp-53 -m limit --limit 1/second -j LOG +-A logdrop-ntp-53 -j DROP +-A logdrop-ntp-530 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-530 -j DROP +-A logdrop-ntp-531 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-531 -j DROP +-A logdrop-ntp-532 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-532 -j DROP +-A logdrop-ntp-533 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-533 -j DROP +-A logdrop-ntp-534 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-534 -j DROP +-A logdrop-ntp-535 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-535 -j DROP +-A logdrop-ntp-536 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-536 -j DROP +-A logdrop-ntp-537 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-537 -j DROP +-A logdrop-ntp-538 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-538 -j DROP +-A logdrop-ntp-539 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-539 -j DROP +-A logdrop-ntp-54 -m limit --limit 1/second -j LOG +-A logdrop-ntp-54 -j DROP +-A logdrop-ntp-540 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-540 -j DROP +-A logdrop-ntp-541 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-541 -j DROP +-A logdrop-ntp-542 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-542 -j DROP +-A logdrop-ntp-543 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-543 -j DROP +-A logdrop-ntp-544 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-544 -j DROP +-A logdrop-ntp-545 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-545 -j DROP +-A logdrop-ntp-546 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-546 -j DROP +-A logdrop-ntp-547 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-547 -j DROP +-A logdrop-ntp-548 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-548 -j DROP +-A logdrop-ntp-549 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-549 -j DROP +-A logdrop-ntp-55 -m limit --limit 1/second -j LOG +-A logdrop-ntp-55 -j DROP +-A logdrop-ntp-56 -m limit --limit 1/second -j LOG +-A logdrop-ntp-56 -j DROP +-A logdrop-ntp-57 -m limit --limit 1/second -j LOG +-A logdrop-ntp-57 -j DROP +-A logdrop-ntp-58 -m limit --limit 1/second -j LOG +-A logdrop-ntp-58 -j DROP +-A logdrop-ntp-59 -m limit --limit 1/second -j LOG +-A logdrop-ntp-59 -j DROP +-A logdrop-ntp-6 -m limit --limit 1/second -j LOG +-A logdrop-ntp-6 -j DROP +-A logdrop-ntp-60 -m limit --limit 1/second -j LOG +-A logdrop-ntp-60 -j DROP +-A logdrop-ntp-61 -m limit --limit 1/second -j LOG +-A logdrop-ntp-61 -j DROP +-A logdrop-ntp-62 -m limit --limit 1/second -j LOG +-A logdrop-ntp-62 -j DROP +-A logdrop-ntp-63 -m limit --limit 1/second -j LOG +-A logdrop-ntp-63 -j DROP +-A logdrop-ntp-64 -m limit --limit 1/second -j LOG +-A logdrop-ntp-64 -j DROP +-A logdrop-ntp-65 -m limit --limit 1/second -j LOG +-A logdrop-ntp-65 -j DROP +-A logdrop-ntp-66 -m limit --limit 1/second -j LOG +-A logdrop-ntp-66 -j DROP +-A logdrop-ntp-67 -m limit --limit 1/second -j LOG +-A logdrop-ntp-67 -j DROP +-A logdrop-ntp-68 -m limit --limit 1/second -j LOG +-A logdrop-ntp-68 -j DROP +-A logdrop-ntp-69 -m limit --limit 1/second -j LOG +-A logdrop-ntp-69 -j DROP +-A logdrop-ntp-7 -m limit --limit 1/second -j LOG +-A logdrop-ntp-7 -j DROP +-A logdrop-ntp-70 -m limit --limit 1/second -j LOG +-A logdrop-ntp-70 -j DROP +-A logdrop-ntp-71 -m limit --limit 1/second -j LOG +-A logdrop-ntp-71 -j DROP +-A logdrop-ntp-72 -m limit --limit 1/second -j LOG +-A logdrop-ntp-72 -j DROP +-A logdrop-ntp-73 -m limit --limit 1/second -j LOG +-A logdrop-ntp-73 -j DROP +-A logdrop-ntp-74 -m limit --limit 1/second -j LOG +-A logdrop-ntp-74 -j DROP +-A logdrop-ntp-75 -m limit --limit 1/second -j LOG +-A logdrop-ntp-75 -j DROP +-A logdrop-ntp-76 -m limit --limit 1/second -j LOG +-A logdrop-ntp-76 -j DROP +-A logdrop-ntp-77 -m limit --limit 1/second -j LOG +-A logdrop-ntp-77 -j DROP +-A logdrop-ntp-78 -m limit --limit 1/second -j LOG +-A logdrop-ntp-78 -j DROP +-A logdrop-ntp-79 -m limit --limit 1/second -j LOG +-A logdrop-ntp-79 -j DROP +-A logdrop-ntp-8 -m limit --limit 1/second -j LOG +-A logdrop-ntp-8 -j DROP +-A logdrop-ntp-80 -m limit --limit 1/second -j LOG +-A logdrop-ntp-80 -j DROP +-A logdrop-ntp-81 -m limit --limit 1/second -j LOG +-A logdrop-ntp-81 -j DROP +-A logdrop-ntp-82 -m limit --limit 1/second -j LOG +-A logdrop-ntp-82 -j DROP +-A logdrop-ntp-83 -m limit --limit 1/second -j LOG +-A logdrop-ntp-83 -j DROP +-A logdrop-ntp-84 -m limit --limit 1/second -j LOG +-A logdrop-ntp-84 -j DROP +-A logdrop-ntp-85 -m limit --limit 1/second -j LOG +-A logdrop-ntp-85 -j DROP +-A logdrop-ntp-86 -m limit --limit 1/second -j LOG +-A logdrop-ntp-86 -j DROP +-A logdrop-ntp-87 -m limit --limit 1/second -j LOG +-A logdrop-ntp-87 -j DROP +-A logdrop-ntp-88 -m limit --limit 1/second -j LOG +-A logdrop-ntp-88 -j DROP +-A logdrop-ntp-89 -m limit --limit 1/second -j LOG +-A logdrop-ntp-89 -j DROP +-A logdrop-ntp-9 -m limit --limit 1/second -j LOG +-A logdrop-ntp-9 -j DROP +-A logdrop-ntp-90 -m limit --limit 1/second -j LOG +-A logdrop-ntp-90 -j DROP +-A logdrop-ntp-91 -m limit --limit 1/second -j LOG +-A logdrop-ntp-91 -j DROP +-A logdrop-ntp-92 -m limit --limit 1/second -j LOG +-A logdrop-ntp-92 -j DROP +-A logdrop-ntp-93 -m limit --limit 1/second -j LOG +-A logdrop-ntp-93 -j DROP +-A logdrop-ntp-94 -m limit --limit 1/second -j LOG +-A logdrop-ntp-94 -j DROP +-A logdrop-ntp-95 -m limit --limit 1/second -j LOG +-A logdrop-ntp-95 -j DROP +-A logdrop-ntp-96 -m limit --limit 1/second -j LOG +-A logdrop-ntp-96 -j DROP +-A logdrop-ntp-97 -m limit --limit 1/second -j LOG +-A logdrop-ntp-97 -j DROP +-A logdrop-ntp-98 -m limit --limit 1/second -j LOG +-A logdrop-ntp-98 -j DROP +-A logdrop-ntp-99 -m limit --limit 1/second -j LOG +-A logdrop-ntp-99 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG -A logpass-1 -j LOG -A logpass-2 -j TEE --gateway 10.0.0.1 @@ -90099,1493 +90099,1493 @@ COMMIT *raw :OUTPUT ACCEPT [0:0] :PREROUTING ACCEPT [0:0] --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -i eth0 -j CT --notrack -A PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack @@ -93661,1011 +93661,115 @@ COMMIT :limit-2925 - [0:0] :limit-2926 - [0:0] :limit-2927 - [0:0] -:limit-2928 - [0:0] -:limit-2929 - [0:0] :limit-293 - [0:0] -:limit-2930 - [0:0] -:limit-2931 - [0:0] -:limit-2932 - [0:0] -:limit-2933 - [0:0] -:limit-2934 - [0:0] -:limit-2935 - [0:0] -:limit-2936 - [0:0] -:limit-2937 - [0:0] -:limit-2938 - [0:0] -:limit-2939 - [0:0] :limit-294 - [0:0] -:limit-2940 - [0:0] -:limit-2941 - [0:0] -:limit-2942 - [0:0] -:limit-2943 - [0:0] -:limit-2944 - [0:0] -:limit-2945 - [0:0] -:limit-2946 - [0:0] -:limit-2947 - [0:0] -:limit-2948 - [0:0] -:limit-2949 - [0:0] :limit-295 - [0:0] -:limit-2950 - [0:0] -:limit-2951 - [0:0] -:limit-2952 - [0:0] -:limit-2953 - [0:0] -:limit-2954 - [0:0] -:limit-2955 - [0:0] -:limit-2956 - [0:0] -:limit-2957 - [0:0] -:limit-2958 - [0:0] :limit-296 - [0:0] -:limit-2960 - [0:0] -:limit-2961 - [0:0] -:limit-2962 - [0:0] -:limit-2963 - [0:0] -:limit-2964 - [0:0] -:limit-2966 - [0:0] -:limit-2967 - [0:0] -:limit-2968 - [0:0] -:limit-2969 - [0:0] :limit-297 - [0:0] -:limit-2970 - [0:0] -:limit-2971 - [0:0] -:limit-2972 - [0:0] -:limit-2973 - [0:0] -:limit-2974 - [0:0] -:limit-2975 - [0:0] -:limit-2976 - [0:0] -:limit-2977 - [0:0] -:limit-2978 - [0:0] :limit-298 - [0:0] -:limit-2980 - [0:0] -:limit-2981 - [0:0] -:limit-2982 - [0:0] -:limit-2983 - [0:0] -:limit-2984 - [0:0] -:limit-2986 - [0:0] -:limit-2987 - [0:0] -:limit-2988 - [0:0] -:limit-2989 - [0:0] :limit-299 - [0:0] -:limit-2990 - [0:0] -:limit-2991 - [0:0] -:limit-2992 - [0:0] -:limit-2993 - [0:0] -:limit-2994 - [0:0] -:limit-2995 - [0:0] -:limit-2996 - [0:0] -:limit-2997 - [0:0] -:limit-2998 - [0:0] :limit-3 - [0:0] :limit-30 - [0:0] :limit-300 - [0:0] -:limit-3000 - [0:0] -:limit-3001 - [0:0] -:limit-3002 - [0:0] -:limit-3003 - [0:0] -:limit-3004 - [0:0] -:limit-3006 - [0:0] -:limit-3007 - [0:0] -:limit-3008 - [0:0] -:limit-3009 - [0:0] :limit-301 - [0:0] -:limit-3010 - [0:0] -:limit-3011 - [0:0] -:limit-3012 - [0:0] -:limit-3013 - [0:0] -:limit-3014 - [0:0] -:limit-3015 - [0:0] -:limit-3016 - [0:0] -:limit-3017 - [0:0] -:limit-3018 - [0:0] :limit-302 - [0:0] -:limit-3020 - [0:0] -:limit-3021 - [0:0] -:limit-3022 - [0:0] -:limit-3023 - [0:0] -:limit-3024 - [0:0] -:limit-3026 - [0:0] -:limit-3027 - [0:0] -:limit-3028 - [0:0] -:limit-3029 - [0:0] :limit-303 - [0:0] -:limit-3030 - [0:0] -:limit-3031 - [0:0] -:limit-3032 - [0:0] -:limit-3033 - [0:0] -:limit-3034 - [0:0] -:limit-3035 - [0:0] -:limit-3036 - [0:0] -:limit-3037 - [0:0] -:limit-3038 - [0:0] -:limit-3039 - [0:0] :limit-304 - [0:0] -:limit-3040 - [0:0] -:limit-3041 - [0:0] -:limit-3042 - [0:0] -:limit-3043 - [0:0] -:limit-3044 - [0:0] -:limit-3045 - [0:0] -:limit-3046 - [0:0] -:limit-3047 - [0:0] -:limit-3048 - [0:0] :limit-305 - [0:0] -:limit-3050 - [0:0] -:limit-3051 - [0:0] -:limit-3052 - [0:0] -:limit-3053 - [0:0] -:limit-3054 - [0:0] -:limit-3056 - [0:0] -:limit-3057 - [0:0] -:limit-3058 - [0:0] -:limit-3059 - [0:0] :limit-306 - [0:0] -:limit-3060 - [0:0] -:limit-3061 - [0:0] -:limit-3062 - [0:0] -:limit-3063 - [0:0] -:limit-3064 - [0:0] -:limit-3065 - [0:0] -:limit-3066 - [0:0] -:limit-3067 - [0:0] -:limit-3068 - [0:0] :limit-307 - [0:0] -:limit-3070 - [0:0] -:limit-3071 - [0:0] -:limit-3072 - [0:0] -:limit-3073 - [0:0] -:limit-3074 - [0:0] -:limit-3076 - [0:0] -:limit-3077 - [0:0] -:limit-3078 - [0:0] -:limit-3079 - [0:0] :limit-308 - [0:0] -:limit-3080 - [0:0] -:limit-3081 - [0:0] -:limit-3082 - [0:0] -:limit-3083 - [0:0] -:limit-3084 - [0:0] -:limit-3085 - [0:0] -:limit-3086 - [0:0] -:limit-3087 - [0:0] -:limit-3088 - [0:0] :limit-309 - [0:0] -:limit-3090 - [0:0] -:limit-3091 - [0:0] -:limit-3092 - [0:0] -:limit-3093 - [0:0] -:limit-3094 - [0:0] -:limit-3096 - [0:0] -:limit-3097 - [0:0] -:limit-3098 - [0:0] -:limit-3099 - [0:0] :limit-31 - [0:0] :limit-310 - [0:0] -:limit-3100 - [0:0] -:limit-3101 - [0:0] -:limit-3102 - [0:0] -:limit-3103 - [0:0] -:limit-3104 - [0:0] -:limit-3105 - [0:0] -:limit-3106 - [0:0] -:limit-3107 - [0:0] -:limit-3108 - [0:0] :limit-311 - [0:0] -:limit-3110 - [0:0] -:limit-3111 - [0:0] -:limit-3112 - [0:0] -:limit-3113 - [0:0] -:limit-3114 - [0:0] -:limit-3116 - [0:0] -:limit-3117 - [0:0] -:limit-3118 - [0:0] -:limit-3119 - [0:0] :limit-312 - [0:0] -:limit-3120 - [0:0] -:limit-3121 - [0:0] -:limit-3122 - [0:0] -:limit-3123 - [0:0] -:limit-3124 - [0:0] -:limit-3125 - [0:0] -:limit-3126 - [0:0] -:limit-3127 - [0:0] -:limit-3128 - [0:0] -:limit-3129 - [0:0] :limit-313 - [0:0] -:limit-3130 - [0:0] -:limit-3131 - [0:0] -:limit-3132 - [0:0] -:limit-3133 - [0:0] -:limit-3134 - [0:0] -:limit-3135 - [0:0] -:limit-3136 - [0:0] -:limit-3137 - [0:0] -:limit-3138 - [0:0] :limit-314 - [0:0] -:limit-3140 - [0:0] -:limit-3141 - [0:0] -:limit-3142 - [0:0] -:limit-3143 - [0:0] -:limit-3144 - [0:0] -:limit-3146 - [0:0] -:limit-3147 - [0:0] -:limit-3148 - [0:0] -:limit-3149 - [0:0] :limit-315 - [0:0] -:limit-3150 - [0:0] -:limit-3151 - [0:0] -:limit-3152 - [0:0] -:limit-3153 - [0:0] -:limit-3154 - [0:0] -:limit-3155 - [0:0] -:limit-3156 - [0:0] -:limit-3157 - [0:0] -:limit-3158 - [0:0] :limit-316 - [0:0] -:limit-3160 - [0:0] -:limit-3161 - [0:0] -:limit-3162 - [0:0] -:limit-3163 - [0:0] -:limit-3164 - [0:0] -:limit-3166 - [0:0] -:limit-3167 - [0:0] -:limit-3168 - [0:0] -:limit-3169 - [0:0] :limit-317 - [0:0] -:limit-3170 - [0:0] -:limit-3171 - [0:0] -:limit-3172 - [0:0] -:limit-3173 - [0:0] -:limit-3174 - [0:0] -:limit-3175 - [0:0] -:limit-3176 - [0:0] -:limit-3177 - [0:0] -:limit-3178 - [0:0] :limit-318 - [0:0] -:limit-3180 - [0:0] -:limit-3181 - [0:0] -:limit-3182 - [0:0] -:limit-3183 - [0:0] -:limit-3184 - [0:0] -:limit-3186 - [0:0] -:limit-3187 - [0:0] -:limit-3188 - [0:0] -:limit-3189 - [0:0] :limit-319 - [0:0] -:limit-3190 - [0:0] -:limit-3191 - [0:0] -:limit-3192 - [0:0] -:limit-3193 - [0:0] -:limit-3194 - [0:0] -:limit-3195 - [0:0] -:limit-3196 - [0:0] -:limit-3197 - [0:0] -:limit-3198 - [0:0] :limit-32 - [0:0] :limit-320 - [0:0] -:limit-3200 - [0:0] -:limit-3201 - [0:0] -:limit-3202 - [0:0] -:limit-3203 - [0:0] -:limit-3204 - [0:0] -:limit-3206 - [0:0] -:limit-3207 - [0:0] -:limit-3208 - [0:0] -:limit-3209 - [0:0] :limit-321 - [0:0] -:limit-3210 - [0:0] -:limit-3211 - [0:0] -:limit-3212 - [0:0] -:limit-3213 - [0:0] -:limit-3214 - [0:0] -:limit-3215 - [0:0] -:limit-3216 - [0:0] -:limit-3217 - [0:0] -:limit-3218 - [0:0] -:limit-3219 - [0:0] :limit-322 - [0:0] -:limit-3220 - [0:0] -:limit-3221 - [0:0] -:limit-3222 - [0:0] -:limit-3223 - [0:0] -:limit-3224 - [0:0] -:limit-3225 - [0:0] -:limit-3226 - [0:0] -:limit-3227 - [0:0] -:limit-3228 - [0:0] :limit-323 - [0:0] -:limit-3230 - [0:0] -:limit-3231 - [0:0] -:limit-3232 - [0:0] -:limit-3233 - [0:0] -:limit-3234 - [0:0] -:limit-3236 - [0:0] -:limit-3237 - [0:0] -:limit-3238 - [0:0] -:limit-3239 - [0:0] :limit-324 - [0:0] -:limit-3240 - [0:0] -:limit-3241 - [0:0] -:limit-3242 - [0:0] -:limit-3243 - [0:0] -:limit-3244 - [0:0] -:limit-3245 - [0:0] -:limit-3246 - [0:0] -:limit-3247 - [0:0] -:limit-3248 - [0:0] :limit-325 - [0:0] -:limit-3250 - [0:0] -:limit-3251 - [0:0] -:limit-3252 - [0:0] -:limit-3253 - [0:0] -:limit-3254 - [0:0] -:limit-3256 - [0:0] -:limit-3257 - [0:0] -:limit-3258 - [0:0] -:limit-3259 - [0:0] :limit-326 - [0:0] -:limit-3260 - [0:0] -:limit-3261 - [0:0] -:limit-3262 - [0:0] -:limit-3263 - [0:0] -:limit-3264 - [0:0] -:limit-3265 - [0:0] -:limit-3266 - [0:0] -:limit-3267 - [0:0] -:limit-3268 - [0:0] :limit-327 - [0:0] -:limit-3270 - [0:0] -:limit-3271 - [0:0] -:limit-3272 - [0:0] -:limit-3273 - [0:0] -:limit-3274 - [0:0] -:limit-3276 - [0:0] -:limit-3277 - [0:0] -:limit-3278 - [0:0] -:limit-3279 - [0:0] :limit-328 - [0:0] -:limit-3280 - [0:0] -:limit-3281 - [0:0] -:limit-3282 - [0:0] -:limit-3283 - [0:0] -:limit-3284 - [0:0] -:limit-3285 - [0:0] -:limit-3286 - [0:0] -:limit-3287 - [0:0] -:limit-3288 - [0:0] :limit-329 - [0:0] -:limit-3290 - [0:0] -:limit-3291 - [0:0] -:limit-3292 - [0:0] -:limit-3293 - [0:0] -:limit-3294 - [0:0] -:limit-3296 - [0:0] -:limit-3297 - [0:0] -:limit-3298 - [0:0] -:limit-3299 - [0:0] :limit-33 - [0:0] :limit-330 - [0:0] -:limit-3300 - [0:0] -:limit-3301 - [0:0] -:limit-3302 - [0:0] -:limit-3303 - [0:0] -:limit-3304 - [0:0] -:limit-3305 - [0:0] -:limit-3306 - [0:0] -:limit-3307 - [0:0] -:limit-3308 - [0:0] -:limit-3309 - [0:0] :limit-331 - [0:0] -:limit-3310 - [0:0] -:limit-3311 - [0:0] -:limit-3312 - [0:0] -:limit-3313 - [0:0] -:limit-3314 - [0:0] -:limit-3315 - [0:0] -:limit-3316 - [0:0] -:limit-3317 - [0:0] -:limit-3318 - [0:0] :limit-332 - [0:0] -:limit-3320 - [0:0] -:limit-3321 - [0:0] -:limit-3322 - [0:0] -:limit-3323 - [0:0] -:limit-3324 - [0:0] -:limit-3326 - [0:0] -:limit-3327 - [0:0] -:limit-3328 - [0:0] -:limit-3329 - [0:0] :limit-333 - [0:0] -:limit-3330 - [0:0] -:limit-3331 - [0:0] -:limit-3332 - [0:0] -:limit-3333 - [0:0] -:limit-3334 - [0:0] -:limit-3335 - [0:0] -:limit-3336 - [0:0] -:limit-3337 - [0:0] -:limit-3338 - [0:0] :limit-334 - [0:0] -:limit-3340 - [0:0] -:limit-3341 - [0:0] -:limit-3342 - [0:0] -:limit-3343 - [0:0] -:limit-3344 - [0:0] -:limit-3346 - [0:0] -:limit-3347 - [0:0] -:limit-3348 - [0:0] -:limit-3349 - [0:0] :limit-335 - [0:0] -:limit-3350 - [0:0] -:limit-3351 - [0:0] -:limit-3352 - [0:0] -:limit-3353 - [0:0] -:limit-3354 - [0:0] -:limit-3355 - [0:0] -:limit-3356 - [0:0] -:limit-3357 - [0:0] -:limit-3358 - [0:0] :limit-336 - [0:0] -:limit-3360 - [0:0] -:limit-3361 - [0:0] -:limit-3362 - [0:0] -:limit-3363 - [0:0] -:limit-3364 - [0:0] -:limit-3366 - [0:0] -:limit-3367 - [0:0] -:limit-3368 - [0:0] -:limit-3369 - [0:0] :limit-337 - [0:0] -:limit-3370 - [0:0] -:limit-3371 - [0:0] -:limit-3372 - [0:0] -:limit-3373 - [0:0] -:limit-3374 - [0:0] -:limit-3375 - [0:0] -:limit-3376 - [0:0] -:limit-3377 - [0:0] -:limit-3378 - [0:0] :limit-338 - [0:0] -:limit-3380 - [0:0] -:limit-3381 - [0:0] -:limit-3382 - [0:0] -:limit-3383 - [0:0] -:limit-3384 - [0:0] -:limit-3386 - [0:0] -:limit-3387 - [0:0] -:limit-3388 - [0:0] -:limit-3389 - [0:0] :limit-339 - [0:0] -:limit-3390 - [0:0] -:limit-3391 - [0:0] -:limit-3392 - [0:0] -:limit-3393 - [0:0] -:limit-3394 - [0:0] -:limit-3395 - [0:0] -:limit-3396 - [0:0] -:limit-3397 - [0:0] -:limit-3398 - [0:0] -:limit-3399 - [0:0] :limit-34 - [0:0] :limit-340 - [0:0] -:limit-3400 - [0:0] -:limit-3401 - [0:0] -:limit-3402 - [0:0] -:limit-3403 - [0:0] -:limit-3404 - [0:0] -:limit-3405 - [0:0] -:limit-3406 - [0:0] -:limit-3407 - [0:0] -:limit-3408 - [0:0] :limit-341 - [0:0] -:limit-3410 - [0:0] -:limit-3411 - [0:0] -:limit-3412 - [0:0] -:limit-3413 - [0:0] -:limit-3414 - [0:0] -:limit-3416 - [0:0] -:limit-3417 - [0:0] -:limit-3418 - [0:0] -:limit-3419 - [0:0] :limit-342 - [0:0] -:limit-3420 - [0:0] -:limit-3421 - [0:0] -:limit-3422 - [0:0] -:limit-3423 - [0:0] -:limit-3424 - [0:0] -:limit-3425 - [0:0] -:limit-3426 - [0:0] -:limit-3427 - [0:0] -:limit-3428 - [0:0] :limit-343 - [0:0] -:limit-3430 - [0:0] -:limit-3431 - [0:0] -:limit-3432 - [0:0] -:limit-3433 - [0:0] -:limit-3434 - [0:0] -:limit-3436 - [0:0] -:limit-3437 - [0:0] -:limit-3438 - [0:0] -:limit-3439 - [0:0] :limit-344 - [0:0] -:limit-3440 - [0:0] -:limit-3441 - [0:0] -:limit-3442 - [0:0] -:limit-3443 - [0:0] -:limit-3444 - [0:0] -:limit-3445 - [0:0] -:limit-3446 - [0:0] -:limit-3447 - [0:0] -:limit-3448 - [0:0] :limit-345 - [0:0] -:limit-3450 - [0:0] -:limit-3451 - [0:0] -:limit-3452 - [0:0] -:limit-3453 - [0:0] -:limit-3454 - [0:0] -:limit-3456 - [0:0] -:limit-3457 - [0:0] -:limit-3458 - [0:0] -:limit-3459 - [0:0] :limit-346 - [0:0] -:limit-3460 - [0:0] -:limit-3461 - [0:0] -:limit-3462 - [0:0] -:limit-3463 - [0:0] -:limit-3464 - [0:0] -:limit-3465 - [0:0] -:limit-3466 - [0:0] -:limit-3467 - [0:0] -:limit-3468 - [0:0] :limit-347 - [0:0] -:limit-3470 - [0:0] -:limit-3471 - [0:0] -:limit-3472 - [0:0] -:limit-3473 - [0:0] -:limit-3474 - [0:0] -:limit-3476 - [0:0] -:limit-3477 - [0:0] -:limit-3478 - [0:0] -:limit-3479 - [0:0] :limit-348 - [0:0] -:limit-3480 - [0:0] -:limit-3481 - [0:0] -:limit-3482 - [0:0] -:limit-3483 - [0:0] -:limit-3484 - [0:0] -:limit-3485 - [0:0] -:limit-3486 - [0:0] -:limit-3487 - [0:0] -:limit-3488 - [0:0] -:limit-3489 - [0:0] :limit-349 - [0:0] -:limit-3490 - [0:0] -:limit-3491 - [0:0] -:limit-3492 - [0:0] -:limit-3493 - [0:0] -:limit-3494 - [0:0] -:limit-3495 - [0:0] -:limit-3496 - [0:0] -:limit-3497 - [0:0] -:limit-3498 - [0:0] :limit-35 - [0:0] :limit-350 - [0:0] -:limit-3500 - [0:0] -:limit-3501 - [0:0] -:limit-3502 - [0:0] -:limit-3503 - [0:0] -:limit-3504 - [0:0] -:limit-3506 - [0:0] -:limit-3507 - [0:0] -:limit-3508 - [0:0] -:limit-3509 - [0:0] :limit-351 - [0:0] -:limit-3510 - [0:0] -:limit-3511 - [0:0] -:limit-3512 - [0:0] -:limit-3513 - [0:0] -:limit-3514 - [0:0] -:limit-3515 - [0:0] -:limit-3516 - [0:0] -:limit-3517 - [0:0] -:limit-3518 - [0:0] :limit-352 - [0:0] -:limit-3520 - [0:0] -:limit-3521 - [0:0] -:limit-3522 - [0:0] -:limit-3523 - [0:0] -:limit-3524 - [0:0] -:limit-3526 - [0:0] -:limit-3527 - [0:0] -:limit-3528 - [0:0] -:limit-3529 - [0:0] :limit-353 - [0:0] -:limit-3530 - [0:0] -:limit-3531 - [0:0] -:limit-3532 - [0:0] -:limit-3533 - [0:0] -:limit-3534 - [0:0] -:limit-3535 - [0:0] -:limit-3536 - [0:0] -:limit-3537 - [0:0] -:limit-3538 - [0:0] :limit-354 - [0:0] -:limit-3540 - [0:0] -:limit-3541 - [0:0] -:limit-3542 - [0:0] -:limit-3543 - [0:0] -:limit-3544 - [0:0] -:limit-3546 - [0:0] -:limit-3547 - [0:0] -:limit-3548 - [0:0] -:limit-3549 - [0:0] :limit-355 - [0:0] -:limit-3550 - [0:0] -:limit-3551 - [0:0] -:limit-3552 - [0:0] -:limit-3553 - [0:0] -:limit-3554 - [0:0] -:limit-3555 - [0:0] -:limit-3556 - [0:0] -:limit-3557 - [0:0] -:limit-3558 - [0:0] :limit-356 - [0:0] -:limit-3560 - [0:0] -:limit-3561 - [0:0] -:limit-3562 - [0:0] -:limit-3563 - [0:0] -:limit-3564 - [0:0] -:limit-3566 - [0:0] -:limit-3567 - [0:0] -:limit-3568 - [0:0] -:limit-3569 - [0:0] :limit-357 - [0:0] -:limit-3570 - [0:0] -:limit-3571 - [0:0] -:limit-3572 - [0:0] -:limit-3573 - [0:0] -:limit-3574 - [0:0] -:limit-3575 - [0:0] -:limit-3576 - [0:0] -:limit-3577 - [0:0] -:limit-3578 - [0:0] -:limit-3579 - [0:0] :limit-358 - [0:0] -:limit-3580 - [0:0] -:limit-3581 - [0:0] -:limit-3582 - [0:0] -:limit-3583 - [0:0] -:limit-3584 - [0:0] -:limit-3585 - [0:0] -:limit-3586 - [0:0] -:limit-3587 - [0:0] -:limit-3588 - [0:0] :limit-359 - [0:0] -:limit-3590 - [0:0] -:limit-3591 - [0:0] -:limit-3592 - [0:0] -:limit-3593 - [0:0] -:limit-3594 - [0:0] -:limit-3596 - [0:0] -:limit-3597 - [0:0] -:limit-3598 - [0:0] -:limit-3599 - [0:0] :limit-36 - [0:0] :limit-360 - [0:0] -:limit-3600 - [0:0] -:limit-3601 - [0:0] -:limit-3602 - [0:0] -:limit-3603 - [0:0] -:limit-3604 - [0:0] -:limit-3605 - [0:0] -:limit-3606 - [0:0] -:limit-3607 - [0:0] -:limit-3608 - [0:0] :limit-361 - [0:0] -:limit-3610 - [0:0] -:limit-3611 - [0:0] -:limit-3612 - [0:0] -:limit-3613 - [0:0] -:limit-3614 - [0:0] -:limit-3616 - [0:0] -:limit-3617 - [0:0] -:limit-3618 - [0:0] -:limit-3619 - [0:0] :limit-362 - [0:0] -:limit-3620 - [0:0] -:limit-3621 - [0:0] -:limit-3622 - [0:0] -:limit-3623 - [0:0] -:limit-3624 - [0:0] -:limit-3625 - [0:0] -:limit-3626 - [0:0] -:limit-3627 - [0:0] -:limit-3628 - [0:0] :limit-363 - [0:0] -:limit-3630 - [0:0] -:limit-3631 - [0:0] -:limit-3632 - [0:0] -:limit-3633 - [0:0] -:limit-3634 - [0:0] -:limit-3636 - [0:0] -:limit-3637 - [0:0] -:limit-3638 - [0:0] -:limit-3639 - [0:0] :limit-364 - [0:0] -:limit-3640 - [0:0] -:limit-3641 - [0:0] -:limit-3642 - [0:0] -:limit-3643 - [0:0] -:limit-3644 - [0:0] -:limit-3645 - [0:0] -:limit-3646 - [0:0] -:limit-3647 - [0:0] -:limit-3648 - [0:0] :limit-365 - [0:0] -:limit-3650 - [0:0] -:limit-3651 - [0:0] -:limit-3652 - [0:0] -:limit-3653 - [0:0] -:limit-3654 - [0:0] -:limit-3656 - [0:0] -:limit-3657 - [0:0] -:limit-3658 - [0:0] -:limit-3659 - [0:0] :limit-366 - [0:0] -:limit-3660 - [0:0] -:limit-3661 - [0:0] -:limit-3662 - [0:0] -:limit-3663 - [0:0] -:limit-3664 - [0:0] -:limit-3665 - [0:0] -:limit-3666 - [0:0] -:limit-3667 - [0:0] -:limit-3668 - [0:0] -:limit-3669 - [0:0] :limit-367 - [0:0] -:limit-3670 - [0:0] -:limit-3671 - [0:0] -:limit-3672 - [0:0] -:limit-3673 - [0:0] -:limit-3674 - [0:0] -:limit-3675 - [0:0] -:limit-3676 - [0:0] -:limit-3677 - [0:0] -:limit-3678 - [0:0] :limit-368 - [0:0] -:limit-3680 - [0:0] -:limit-3681 - [0:0] -:limit-3682 - [0:0] -:limit-3683 - [0:0] -:limit-3684 - [0:0] -:limit-3686 - [0:0] -:limit-3687 - [0:0] -:limit-3688 - [0:0] -:limit-3689 - [0:0] :limit-369 - [0:0] -:limit-3690 - [0:0] -:limit-3691 - [0:0] -:limit-3692 - [0:0] -:limit-3693 - [0:0] -:limit-3694 - [0:0] -:limit-3695 - [0:0] -:limit-3696 - [0:0] -:limit-3697 - [0:0] -:limit-3698 - [0:0] :limit-37 - [0:0] :limit-370 - [0:0] -:limit-3700 - [0:0] -:limit-3701 - [0:0] -:limit-3702 - [0:0] -:limit-3703 - [0:0] -:limit-3704 - [0:0] -:limit-3706 - [0:0] -:limit-3707 - [0:0] -:limit-3708 - [0:0] -:limit-3709 - [0:0] :limit-371 - [0:0] -:limit-3710 - [0:0] -:limit-3711 - [0:0] -:limit-3712 - [0:0] -:limit-3713 - [0:0] -:limit-3714 - [0:0] -:limit-3715 - [0:0] -:limit-3716 - [0:0] -:limit-3717 - [0:0] -:limit-3718 - [0:0] :limit-372 - [0:0] -:limit-3720 - [0:0] -:limit-3721 - [0:0] -:limit-3722 - [0:0] -:limit-3723 - [0:0] -:limit-3724 - [0:0] -:limit-3726 - [0:0] -:limit-3727 - [0:0] -:limit-3728 - [0:0] -:limit-3729 - [0:0] :limit-373 - [0:0] -:limit-3730 - [0:0] -:limit-3731 - [0:0] -:limit-3732 - [0:0] -:limit-3733 - [0:0] -:limit-3734 - [0:0] -:limit-3735 - [0:0] -:limit-3736 - [0:0] -:limit-3737 - [0:0] -:limit-3738 - [0:0] :limit-374 - [0:0] -:limit-3740 - [0:0] -:limit-3741 - [0:0] -:limit-3742 - [0:0] -:limit-3743 - [0:0] -:limit-3744 - [0:0] -:limit-3746 - [0:0] -:limit-3747 - [0:0] -:limit-3748 - [0:0] -:limit-3749 - [0:0] :limit-375 - [0:0] -:limit-3750 - [0:0] -:limit-3751 - [0:0] -:limit-3752 - [0:0] -:limit-3753 - [0:0] -:limit-3754 - [0:0] -:limit-3755 - [0:0] -:limit-3756 - [0:0] -:limit-3757 - [0:0] -:limit-3758 - [0:0] -:limit-3759 - [0:0] :limit-376 - [0:0] -:limit-3760 - [0:0] -:limit-3761 - [0:0] -:limit-3762 - [0:0] -:limit-3763 - [0:0] -:limit-3764 - [0:0] -:limit-3765 - [0:0] -:limit-3766 - [0:0] -:limit-3767 - [0:0] -:limit-3768 - [0:0] :limit-377 - [0:0] -:limit-3770 - [0:0] -:limit-3771 - [0:0] -:limit-3772 - [0:0] -:limit-3773 - [0:0] -:limit-3774 - [0:0] -:limit-3776 - [0:0] -:limit-3777 - [0:0] -:limit-3778 - [0:0] -:limit-3779 - [0:0] :limit-378 - [0:0] -:limit-3780 - [0:0] -:limit-3781 - [0:0] -:limit-3782 - [0:0] -:limit-3783 - [0:0] -:limit-3784 - [0:0] -:limit-3785 - [0:0] -:limit-3786 - [0:0] -:limit-3787 - [0:0] -:limit-3788 - [0:0] :limit-379 - [0:0] -:limit-3790 - [0:0] -:limit-3791 - [0:0] -:limit-3792 - [0:0] -:limit-3793 - [0:0] -:limit-3794 - [0:0] -:limit-3796 - [0:0] -:limit-3797 - [0:0] -:limit-3798 - [0:0] -:limit-3799 - [0:0] :limit-38 - [0:0] :limit-380 - [0:0] -:limit-3800 - [0:0] -:limit-3801 - [0:0] -:limit-3802 - [0:0] -:limit-3803 - [0:0] -:limit-3804 - [0:0] -:limit-3805 - [0:0] -:limit-3806 - [0:0] -:limit-3807 - [0:0] -:limit-3808 - [0:0] :limit-381 - [0:0] -:limit-3810 - [0:0] -:limit-3811 - [0:0] -:limit-3812 - [0:0] -:limit-3813 - [0:0] -:limit-3814 - [0:0] -:limit-3816 - [0:0] -:limit-3817 - [0:0] -:limit-3818 - [0:0] -:limit-3819 - [0:0] :limit-382 - [0:0] -:limit-3820 - [0:0] -:limit-3821 - [0:0] -:limit-3822 - [0:0] -:limit-3823 - [0:0] -:limit-3824 - [0:0] -:limit-3825 - [0:0] -:limit-3826 - [0:0] -:limit-3827 - [0:0] -:limit-3828 - [0:0] :limit-383 - [0:0] -:limit-3830 - [0:0] -:limit-3831 - [0:0] -:limit-3832 - [0:0] -:limit-3833 - [0:0] -:limit-3834 - [0:0] -:limit-3836 - [0:0] -:limit-3837 - [0:0] -:limit-3838 - [0:0] -:limit-3839 - [0:0] :limit-384 - [0:0] -:limit-3840 - [0:0] -:limit-3841 - [0:0] -:limit-3842 - [0:0] -:limit-3843 - [0:0] -:limit-3844 - [0:0] -:limit-3845 - [0:0] -:limit-3846 - [0:0] -:limit-3847 - [0:0] -:limit-3848 - [0:0] -:limit-3849 - [0:0] :limit-385 - [0:0] -:limit-3850 - [0:0] -:limit-3851 - [0:0] -:limit-3852 - [0:0] -:limit-3853 - [0:0] -:limit-3854 - [0:0] -:limit-3855 - [0:0] -:limit-3856 - [0:0] -:limit-3857 - [0:0] -:limit-3858 - [0:0] -:limit-3859 - [0:0] :limit-386 - [0:0] -:limit-3860 - [0:0] -:limit-3861 - [0:0] -:limit-3862 - [0:0] -:limit-3863 - [0:0] -:limit-3864 - [0:0] -:limit-3865 - [0:0] -:limit-3866 - [0:0] -:limit-3867 - [0:0] -:limit-3868 - [0:0] -:limit-3869 - [0:0] :limit-387 - [0:0] -:limit-3870 - [0:0] -:limit-3871 - [0:0] -:limit-3872 - [0:0] -:limit-3873 - [0:0] -:limit-3874 - [0:0] -:limit-3875 - [0:0] -:limit-3876 - [0:0] -:limit-3877 - [0:0] -:limit-3878 - [0:0] -:limit-3879 - [0:0] :limit-388 - [0:0] -:limit-3880 - [0:0] -:limit-3881 - [0:0] -:limit-3882 - [0:0] -:limit-3883 - [0:0] -:limit-3884 - [0:0] -:limit-3885 - [0:0] -:limit-3886 - [0:0] -:limit-3887 - [0:0] -:limit-3888 - [0:0] -:limit-3889 - [0:0] :limit-389 - [0:0] -:limit-3890 - [0:0] -:limit-3891 - [0:0] -:limit-3892 - [0:0] -:limit-3893 - [0:0] -:limit-3894 - [0:0] -:limit-3895 - [0:0] -:limit-3896 - [0:0] -:limit-3897 - [0:0] -:limit-3898 - [0:0] -:limit-3899 - [0:0] :limit-39 - [0:0] :limit-390 - [0:0] -:limit-3900 - [0:0] -:limit-3901 - [0:0] -:limit-3902 - [0:0] -:limit-3903 - [0:0] :limit-391 - [0:0] :limit-392 - [0:0] :limit-393 - [0:0] @@ -95341,12 +94445,905 @@ COMMIT :limit-997 - [0:0] :limit-998 - [0:0] :limit-999 - [0:0] +:limit-ntp-0 - [0:0] +:limit-ntp-1 - [0:0] +:limit-ntp-10 - [0:0] +:limit-ntp-100 - [0:0] +:limit-ntp-101 - [0:0] +:limit-ntp-102 - [0:0] +:limit-ntp-103 - [0:0] +:limit-ntp-104 - [0:0] +:limit-ntp-105 - [0:0] +:limit-ntp-106 - [0:0] +:limit-ntp-107 - [0:0] +:limit-ntp-108 - [0:0] +:limit-ntp-109 - [0:0] +:limit-ntp-11 - [0:0] +:limit-ntp-110 - [0:0] +:limit-ntp-111 - [0:0] +:limit-ntp-112 - [0:0] +:limit-ntp-113 - [0:0] +:limit-ntp-114 - [0:0] +:limit-ntp-115 - [0:0] +:limit-ntp-116 - [0:0] +:limit-ntp-117 - [0:0] +:limit-ntp-118 - [0:0] +:limit-ntp-119 - [0:0] +:limit-ntp-12 - [0:0] +:limit-ntp-120 - [0:0] +:limit-ntp-122 - [0:0] +:limit-ntp-123 - [0:0] +:limit-ntp-124 - [0:0] +:limit-ntp-125 - [0:0] +:limit-ntp-126 - [0:0] +:limit-ntp-128 - [0:0] +:limit-ntp-129 - [0:0] +:limit-ntp-13 - [0:0] +:limit-ntp-130 - [0:0] +:limit-ntp-131 - [0:0] +:limit-ntp-132 - [0:0] +:limit-ntp-133 - [0:0] +:limit-ntp-134 - [0:0] +:limit-ntp-135 - [0:0] +:limit-ntp-136 - [0:0] +:limit-ntp-137 - [0:0] +:limit-ntp-138 - [0:0] +:limit-ntp-139 - [0:0] +:limit-ntp-14 - [0:0] +:limit-ntp-140 - [0:0] +:limit-ntp-142 - [0:0] +:limit-ntp-143 - [0:0] +:limit-ntp-144 - [0:0] +:limit-ntp-145 - [0:0] +:limit-ntp-146 - [0:0] +:limit-ntp-148 - [0:0] +:limit-ntp-149 - [0:0] +:limit-ntp-15 - [0:0] +:limit-ntp-150 - [0:0] +:limit-ntp-151 - [0:0] +:limit-ntp-152 - [0:0] +:limit-ntp-153 - [0:0] +:limit-ntp-154 - [0:0] +:limit-ntp-155 - [0:0] +:limit-ntp-156 - [0:0] +:limit-ntp-157 - [0:0] +:limit-ntp-158 - [0:0] +:limit-ntp-159 - [0:0] +:limit-ntp-16 - [0:0] +:limit-ntp-160 - [0:0] +:limit-ntp-162 - [0:0] +:limit-ntp-163 - [0:0] +:limit-ntp-164 - [0:0] +:limit-ntp-165 - [0:0] +:limit-ntp-166 - [0:0] +:limit-ntp-168 - [0:0] +:limit-ntp-169 - [0:0] +:limit-ntp-17 - [0:0] +:limit-ntp-170 - [0:0] +:limit-ntp-171 - [0:0] +:limit-ntp-172 - [0:0] +:limit-ntp-173 - [0:0] +:limit-ntp-174 - [0:0] +:limit-ntp-175 - [0:0] +:limit-ntp-176 - [0:0] +:limit-ntp-177 - [0:0] +:limit-ntp-178 - [0:0] +:limit-ntp-179 - [0:0] +:limit-ntp-18 - [0:0] +:limit-ntp-180 - [0:0] +:limit-ntp-182 - [0:0] +:limit-ntp-183 - [0:0] +:limit-ntp-184 - [0:0] +:limit-ntp-185 - [0:0] +:limit-ntp-186 - [0:0] +:limit-ntp-188 - [0:0] +:limit-ntp-189 - [0:0] +:limit-ntp-19 - [0:0] +:limit-ntp-190 - [0:0] +:limit-ntp-191 - [0:0] +:limit-ntp-192 - [0:0] +:limit-ntp-193 - [0:0] +:limit-ntp-194 - [0:0] +:limit-ntp-195 - [0:0] +:limit-ntp-196 - [0:0] +:limit-ntp-197 - [0:0] +:limit-ntp-198 - [0:0] +:limit-ntp-199 - [0:0] +:limit-ntp-2 - [0:0] +:limit-ntp-20 - [0:0] +:limit-ntp-200 - [0:0] +:limit-ntp-201 - [0:0] +:limit-ntp-202 - [0:0] +:limit-ntp-203 - [0:0] +:limit-ntp-204 - [0:0] +:limit-ntp-205 - [0:0] +:limit-ntp-206 - [0:0] +:limit-ntp-207 - [0:0] +:limit-ntp-208 - [0:0] +:limit-ntp-209 - [0:0] +:limit-ntp-21 - [0:0] +:limit-ntp-210 - [0:0] +:limit-ntp-212 - [0:0] +:limit-ntp-213 - [0:0] +:limit-ntp-214 - [0:0] +:limit-ntp-215 - [0:0] +:limit-ntp-216 - [0:0] +:limit-ntp-218 - [0:0] +:limit-ntp-219 - [0:0] +:limit-ntp-22 - [0:0] +:limit-ntp-220 - [0:0] +:limit-ntp-221 - [0:0] +:limit-ntp-222 - [0:0] +:limit-ntp-223 - [0:0] +:limit-ntp-224 - [0:0] +:limit-ntp-225 - [0:0] +:limit-ntp-226 - [0:0] +:limit-ntp-227 - [0:0] +:limit-ntp-228 - [0:0] +:limit-ntp-229 - [0:0] +:limit-ntp-23 - [0:0] +:limit-ntp-230 - [0:0] +:limit-ntp-232 - [0:0] +:limit-ntp-233 - [0:0] +:limit-ntp-234 - [0:0] +:limit-ntp-235 - [0:0] +:limit-ntp-236 - [0:0] +:limit-ntp-238 - [0:0] +:limit-ntp-239 - [0:0] +:limit-ntp-24 - [0:0] +:limit-ntp-240 - [0:0] +:limit-ntp-241 - [0:0] +:limit-ntp-242 - [0:0] +:limit-ntp-243 - [0:0] +:limit-ntp-244 - [0:0] +:limit-ntp-245 - [0:0] +:limit-ntp-246 - [0:0] +:limit-ntp-247 - [0:0] +:limit-ntp-248 - [0:0] +:limit-ntp-249 - [0:0] +:limit-ntp-25 - [0:0] +:limit-ntp-250 - [0:0] +:limit-ntp-252 - [0:0] +:limit-ntp-253 - [0:0] +:limit-ntp-254 - [0:0] +:limit-ntp-255 - [0:0] +:limit-ntp-256 - [0:0] +:limit-ntp-258 - [0:0] +:limit-ntp-259 - [0:0] +:limit-ntp-26 - [0:0] +:limit-ntp-260 - [0:0] +:limit-ntp-261 - [0:0] +:limit-ntp-262 - [0:0] +:limit-ntp-263 - [0:0] +:limit-ntp-264 - [0:0] +:limit-ntp-265 - [0:0] +:limit-ntp-266 - [0:0] +:limit-ntp-267 - [0:0] +:limit-ntp-268 - [0:0] +:limit-ntp-269 - [0:0] +:limit-ntp-27 - [0:0] +:limit-ntp-270 - [0:0] +:limit-ntp-272 - [0:0] +:limit-ntp-273 - [0:0] +:limit-ntp-274 - [0:0] +:limit-ntp-275 - [0:0] +:limit-ntp-276 - [0:0] +:limit-ntp-278 - [0:0] +:limit-ntp-279 - [0:0] +:limit-ntp-28 - [0:0] +:limit-ntp-280 - [0:0] +:limit-ntp-281 - [0:0] +:limit-ntp-282 - [0:0] +:limit-ntp-283 - [0:0] +:limit-ntp-284 - [0:0] +:limit-ntp-285 - [0:0] +:limit-ntp-286 - [0:0] +:limit-ntp-287 - [0:0] +:limit-ntp-288 - [0:0] +:limit-ntp-289 - [0:0] +:limit-ntp-29 - [0:0] +:limit-ntp-290 - [0:0] +:limit-ntp-291 - [0:0] +:limit-ntp-292 - [0:0] +:limit-ntp-293 - [0:0] +:limit-ntp-294 - [0:0] +:limit-ntp-295 - [0:0] +:limit-ntp-296 - [0:0] +:limit-ntp-297 - [0:0] +:limit-ntp-298 - [0:0] +:limit-ntp-299 - [0:0] +:limit-ntp-3 - [0:0] +:limit-ntp-30 - [0:0] +:limit-ntp-300 - [0:0] +:limit-ntp-302 - [0:0] +:limit-ntp-303 - [0:0] +:limit-ntp-304 - [0:0] +:limit-ntp-305 - [0:0] +:limit-ntp-306 - [0:0] +:limit-ntp-308 - [0:0] +:limit-ntp-309 - [0:0] +:limit-ntp-310 - [0:0] +:limit-ntp-311 - [0:0] +:limit-ntp-312 - [0:0] +:limit-ntp-313 - [0:0] +:limit-ntp-314 - [0:0] +:limit-ntp-315 - [0:0] +:limit-ntp-316 - [0:0] +:limit-ntp-317 - [0:0] +:limit-ntp-318 - [0:0] +:limit-ntp-319 - [0:0] +:limit-ntp-32 - [0:0] +:limit-ntp-320 - [0:0] +:limit-ntp-322 - [0:0] +:limit-ntp-323 - [0:0] +:limit-ntp-324 - [0:0] +:limit-ntp-325 - [0:0] +:limit-ntp-326 - [0:0] +:limit-ntp-328 - [0:0] +:limit-ntp-329 - [0:0] +:limit-ntp-33 - [0:0] +:limit-ntp-330 - [0:0] +:limit-ntp-331 - [0:0] +:limit-ntp-332 - [0:0] +:limit-ntp-333 - [0:0] +:limit-ntp-334 - [0:0] +:limit-ntp-335 - [0:0] +:limit-ntp-336 - [0:0] +:limit-ntp-337 - [0:0] +:limit-ntp-338 - [0:0] +:limit-ntp-339 - [0:0] +:limit-ntp-34 - [0:0] +:limit-ntp-340 - [0:0] +:limit-ntp-342 - [0:0] +:limit-ntp-343 - [0:0] +:limit-ntp-344 - [0:0] +:limit-ntp-345 - [0:0] +:limit-ntp-346 - [0:0] +:limit-ntp-348 - [0:0] +:limit-ntp-349 - [0:0] +:limit-ntp-35 - [0:0] +:limit-ntp-350 - [0:0] +:limit-ntp-351 - [0:0] +:limit-ntp-352 - [0:0] +:limit-ntp-353 - [0:0] +:limit-ntp-354 - [0:0] +:limit-ntp-355 - [0:0] +:limit-ntp-356 - [0:0] +:limit-ntp-357 - [0:0] +:limit-ntp-358 - [0:0] +:limit-ntp-359 - [0:0] +:limit-ntp-36 - [0:0] +:limit-ntp-360 - [0:0] +:limit-ntp-362 - [0:0] +:limit-ntp-363 - [0:0] +:limit-ntp-364 - [0:0] +:limit-ntp-365 - [0:0] +:limit-ntp-366 - [0:0] +:limit-ntp-368 - [0:0] +:limit-ntp-369 - [0:0] +:limit-ntp-370 - [0:0] +:limit-ntp-371 - [0:0] +:limit-ntp-372 - [0:0] +:limit-ntp-373 - [0:0] +:limit-ntp-374 - [0:0] +:limit-ntp-375 - [0:0] +:limit-ntp-376 - [0:0] +:limit-ntp-377 - [0:0] +:limit-ntp-378 - [0:0] +:limit-ntp-379 - [0:0] +:limit-ntp-38 - [0:0] +:limit-ntp-380 - [0:0] +:limit-ntp-381 - [0:0] +:limit-ntp-382 - [0:0] +:limit-ntp-383 - [0:0] +:limit-ntp-384 - [0:0] +:limit-ntp-385 - [0:0] +:limit-ntp-386 - [0:0] +:limit-ntp-387 - [0:0] +:limit-ntp-388 - [0:0] +:limit-ntp-389 - [0:0] +:limit-ntp-39 - [0:0] +:limit-ntp-390 - [0:0] +:limit-ntp-392 - [0:0] +:limit-ntp-393 - [0:0] +:limit-ntp-394 - [0:0] +:limit-ntp-395 - [0:0] +:limit-ntp-396 - [0:0] +:limit-ntp-398 - [0:0] +:limit-ntp-399 - [0:0] +:limit-ntp-4 - [0:0] +:limit-ntp-40 - [0:0] +:limit-ntp-400 - [0:0] +:limit-ntp-401 - [0:0] +:limit-ntp-402 - [0:0] +:limit-ntp-403 - [0:0] +:limit-ntp-404 - [0:0] +:limit-ntp-405 - [0:0] +:limit-ntp-406 - [0:0] +:limit-ntp-407 - [0:0] +:limit-ntp-408 - [0:0] +:limit-ntp-409 - [0:0] +:limit-ntp-41 - [0:0] +:limit-ntp-410 - [0:0] +:limit-ntp-412 - [0:0] +:limit-ntp-413 - [0:0] +:limit-ntp-414 - [0:0] +:limit-ntp-415 - [0:0] +:limit-ntp-416 - [0:0] +:limit-ntp-418 - [0:0] +:limit-ntp-419 - [0:0] +:limit-ntp-42 - [0:0] +:limit-ntp-420 - [0:0] +:limit-ntp-421 - [0:0] +:limit-ntp-422 - [0:0] +:limit-ntp-423 - [0:0] +:limit-ntp-424 - [0:0] +:limit-ntp-425 - [0:0] +:limit-ntp-426 - [0:0] +:limit-ntp-427 - [0:0] +:limit-ntp-428 - [0:0] +:limit-ntp-429 - [0:0] +:limit-ntp-43 - [0:0] +:limit-ntp-430 - [0:0] +:limit-ntp-432 - [0:0] +:limit-ntp-433 - [0:0] +:limit-ntp-434 - [0:0] +:limit-ntp-435 - [0:0] +:limit-ntp-436 - [0:0] +:limit-ntp-438 - [0:0] +:limit-ntp-439 - [0:0] +:limit-ntp-44 - [0:0] +:limit-ntp-440 - [0:0] +:limit-ntp-441 - [0:0] +:limit-ntp-442 - [0:0] +:limit-ntp-443 - [0:0] +:limit-ntp-444 - [0:0] +:limit-ntp-445 - [0:0] +:limit-ntp-446 - [0:0] +:limit-ntp-447 - [0:0] +:limit-ntp-448 - [0:0] +:limit-ntp-449 - [0:0] +:limit-ntp-45 - [0:0] +:limit-ntp-450 - [0:0] +:limit-ntp-452 - [0:0] +:limit-ntp-453 - [0:0] +:limit-ntp-454 - [0:0] +:limit-ntp-455 - [0:0] +:limit-ntp-456 - [0:0] +:limit-ntp-458 - [0:0] +:limit-ntp-459 - [0:0] +:limit-ntp-46 - [0:0] +:limit-ntp-460 - [0:0] +:limit-ntp-461 - [0:0] +:limit-ntp-462 - [0:0] +:limit-ntp-463 - [0:0] +:limit-ntp-464 - [0:0] +:limit-ntp-465 - [0:0] +:limit-ntp-466 - [0:0] +:limit-ntp-467 - [0:0] +:limit-ntp-468 - [0:0] +:limit-ntp-469 - [0:0] +:limit-ntp-47 - [0:0] +:limit-ntp-470 - [0:0] +:limit-ntp-471 - [0:0] +:limit-ntp-472 - [0:0] +:limit-ntp-473 - [0:0] +:limit-ntp-474 - [0:0] +:limit-ntp-475 - [0:0] +:limit-ntp-476 - [0:0] +:limit-ntp-477 - [0:0] +:limit-ntp-478 - [0:0] +:limit-ntp-479 - [0:0] +:limit-ntp-48 - [0:0] +:limit-ntp-480 - [0:0] +:limit-ntp-482 - [0:0] +:limit-ntp-483 - [0:0] +:limit-ntp-484 - [0:0] +:limit-ntp-485 - [0:0] +:limit-ntp-486 - [0:0] +:limit-ntp-488 - [0:0] +:limit-ntp-489 - [0:0] +:limit-ntp-49 - [0:0] +:limit-ntp-490 - [0:0] +:limit-ntp-491 - [0:0] +:limit-ntp-492 - [0:0] +:limit-ntp-493 - [0:0] +:limit-ntp-494 - [0:0] +:limit-ntp-495 - [0:0] +:limit-ntp-496 - [0:0] +:limit-ntp-497 - [0:0] +:limit-ntp-498 - [0:0] +:limit-ntp-499 - [0:0] +:limit-ntp-5 - [0:0] +:limit-ntp-50 - [0:0] +:limit-ntp-500 - [0:0] +:limit-ntp-502 - [0:0] +:limit-ntp-503 - [0:0] +:limit-ntp-504 - [0:0] +:limit-ntp-505 - [0:0] +:limit-ntp-506 - [0:0] +:limit-ntp-508 - [0:0] +:limit-ntp-509 - [0:0] +:limit-ntp-510 - [0:0] +:limit-ntp-511 - [0:0] +:limit-ntp-512 - [0:0] +:limit-ntp-513 - [0:0] +:limit-ntp-514 - [0:0] +:limit-ntp-515 - [0:0] +:limit-ntp-516 - [0:0] +:limit-ntp-517 - [0:0] +:limit-ntp-518 - [0:0] +:limit-ntp-519 - [0:0] +:limit-ntp-52 - [0:0] +:limit-ntp-520 - [0:0] +:limit-ntp-522 - [0:0] +:limit-ntp-523 - [0:0] +:limit-ntp-524 - [0:0] +:limit-ntp-525 - [0:0] +:limit-ntp-526 - [0:0] +:limit-ntp-528 - [0:0] +:limit-ntp-529 - [0:0] +:limit-ntp-53 - [0:0] +:limit-ntp-530 - [0:0] +:limit-ntp-531 - [0:0] +:limit-ntp-532 - [0:0] +:limit-ntp-533 - [0:0] +:limit-ntp-534 - [0:0] +:limit-ntp-535 - [0:0] +:limit-ntp-536 - [0:0] +:limit-ntp-537 - [0:0] +:limit-ntp-538 - [0:0] +:limit-ntp-539 - [0:0] +:limit-ntp-54 - [0:0] +:limit-ntp-540 - [0:0] +:limit-ntp-542 - [0:0] +:limit-ntp-543 - [0:0] +:limit-ntp-544 - [0:0] +:limit-ntp-545 - [0:0] +:limit-ntp-546 - [0:0] +:limit-ntp-548 - [0:0] +:limit-ntp-549 - [0:0] +:limit-ntp-55 - [0:0] +:limit-ntp-550 - [0:0] +:limit-ntp-551 - [0:0] +:limit-ntp-552 - [0:0] +:limit-ntp-553 - [0:0] +:limit-ntp-554 - [0:0] +:limit-ntp-555 - [0:0] +:limit-ntp-556 - [0:0] +:limit-ntp-557 - [0:0] +:limit-ntp-558 - [0:0] +:limit-ntp-559 - [0:0] +:limit-ntp-56 - [0:0] +:limit-ntp-560 - [0:0] +:limit-ntp-561 - [0:0] +:limit-ntp-562 - [0:0] +:limit-ntp-563 - [0:0] +:limit-ntp-564 - [0:0] +:limit-ntp-565 - [0:0] +:limit-ntp-566 - [0:0] +:limit-ntp-567 - [0:0] +:limit-ntp-568 - [0:0] +:limit-ntp-569 - [0:0] +:limit-ntp-570 - [0:0] +:limit-ntp-572 - [0:0] +:limit-ntp-573 - [0:0] +:limit-ntp-574 - [0:0] +:limit-ntp-575 - [0:0] +:limit-ntp-576 - [0:0] +:limit-ntp-578 - [0:0] +:limit-ntp-579 - [0:0] +:limit-ntp-58 - [0:0] +:limit-ntp-580 - [0:0] +:limit-ntp-581 - [0:0] +:limit-ntp-582 - [0:0] +:limit-ntp-583 - [0:0] +:limit-ntp-584 - [0:0] +:limit-ntp-585 - [0:0] +:limit-ntp-586 - [0:0] +:limit-ntp-587 - [0:0] +:limit-ntp-588 - [0:0] +:limit-ntp-589 - [0:0] +:limit-ntp-59 - [0:0] +:limit-ntp-590 - [0:0] +:limit-ntp-592 - [0:0] +:limit-ntp-593 - [0:0] +:limit-ntp-594 - [0:0] +:limit-ntp-595 - [0:0] +:limit-ntp-596 - [0:0] +:limit-ntp-598 - [0:0] +:limit-ntp-599 - [0:0] +:limit-ntp-6 - [0:0] +:limit-ntp-60 - [0:0] +:limit-ntp-600 - [0:0] +:limit-ntp-601 - [0:0] +:limit-ntp-602 - [0:0] +:limit-ntp-603 - [0:0] +:limit-ntp-604 - [0:0] +:limit-ntp-605 - [0:0] +:limit-ntp-606 - [0:0] +:limit-ntp-607 - [0:0] +:limit-ntp-608 - [0:0] +:limit-ntp-609 - [0:0] +:limit-ntp-61 - [0:0] +:limit-ntp-610 - [0:0] +:limit-ntp-612 - [0:0] +:limit-ntp-613 - [0:0] +:limit-ntp-614 - [0:0] +:limit-ntp-615 - [0:0] +:limit-ntp-616 - [0:0] +:limit-ntp-618 - [0:0] +:limit-ntp-619 - [0:0] +:limit-ntp-62 - [0:0] +:limit-ntp-620 - [0:0] +:limit-ntp-621 - [0:0] +:limit-ntp-622 - [0:0] +:limit-ntp-623 - [0:0] +:limit-ntp-624 - [0:0] +:limit-ntp-625 - [0:0] +:limit-ntp-626 - [0:0] +:limit-ntp-627 - [0:0] +:limit-ntp-628 - [0:0] +:limit-ntp-629 - [0:0] +:limit-ntp-63 - [0:0] +:limit-ntp-630 - [0:0] +:limit-ntp-632 - [0:0] +:limit-ntp-633 - [0:0] +:limit-ntp-634 - [0:0] +:limit-ntp-635 - [0:0] +:limit-ntp-636 - [0:0] +:limit-ntp-638 - [0:0] +:limit-ntp-639 - [0:0] +:limit-ntp-64 - [0:0] +:limit-ntp-640 - [0:0] +:limit-ntp-641 - [0:0] +:limit-ntp-642 - [0:0] +:limit-ntp-643 - [0:0] +:limit-ntp-644 - [0:0] +:limit-ntp-645 - [0:0] +:limit-ntp-646 - [0:0] +:limit-ntp-647 - [0:0] +:limit-ntp-648 - [0:0] +:limit-ntp-649 - [0:0] +:limit-ntp-65 - [0:0] +:limit-ntp-650 - [0:0] +:limit-ntp-651 - [0:0] +:limit-ntp-652 - [0:0] +:limit-ntp-653 - [0:0] +:limit-ntp-654 - [0:0] +:limit-ntp-655 - [0:0] +:limit-ntp-656 - [0:0] +:limit-ntp-657 - [0:0] +:limit-ntp-658 - [0:0] +:limit-ntp-659 - [0:0] +:limit-ntp-66 - [0:0] +:limit-ntp-660 - [0:0] +:limit-ntp-662 - [0:0] +:limit-ntp-663 - [0:0] +:limit-ntp-664 - [0:0] +:limit-ntp-665 - [0:0] +:limit-ntp-666 - [0:0] +:limit-ntp-668 - [0:0] +:limit-ntp-669 - [0:0] +:limit-ntp-67 - [0:0] +:limit-ntp-670 - [0:0] +:limit-ntp-671 - [0:0] +:limit-ntp-672 - [0:0] +:limit-ntp-673 - [0:0] +:limit-ntp-674 - [0:0] +:limit-ntp-675 - [0:0] +:limit-ntp-676 - [0:0] +:limit-ntp-677 - [0:0] +:limit-ntp-678 - [0:0] +:limit-ntp-679 - [0:0] +:limit-ntp-68 - [0:0] +:limit-ntp-680 - [0:0] +:limit-ntp-682 - [0:0] +:limit-ntp-683 - [0:0] +:limit-ntp-684 - [0:0] +:limit-ntp-685 - [0:0] +:limit-ntp-686 - [0:0] +:limit-ntp-688 - [0:0] +:limit-ntp-689 - [0:0] +:limit-ntp-69 - [0:0] +:limit-ntp-690 - [0:0] +:limit-ntp-691 - [0:0] +:limit-ntp-692 - [0:0] +:limit-ntp-693 - [0:0] +:limit-ntp-694 - [0:0] +:limit-ntp-695 - [0:0] +:limit-ntp-696 - [0:0] +:limit-ntp-697 - [0:0] +:limit-ntp-698 - [0:0] +:limit-ntp-699 - [0:0] +:limit-ntp-7 - [0:0] +:limit-ntp-70 - [0:0] +:limit-ntp-700 - [0:0] +:limit-ntp-702 - [0:0] +:limit-ntp-703 - [0:0] +:limit-ntp-704 - [0:0] +:limit-ntp-705 - [0:0] +:limit-ntp-706 - [0:0] +:limit-ntp-708 - [0:0] +:limit-ntp-709 - [0:0] +:limit-ntp-710 - [0:0] +:limit-ntp-711 - [0:0] +:limit-ntp-712 - [0:0] +:limit-ntp-713 - [0:0] +:limit-ntp-714 - [0:0] +:limit-ntp-715 - [0:0] +:limit-ntp-716 - [0:0] +:limit-ntp-717 - [0:0] +:limit-ntp-718 - [0:0] +:limit-ntp-719 - [0:0] +:limit-ntp-72 - [0:0] +:limit-ntp-720 - [0:0] +:limit-ntp-722 - [0:0] +:limit-ntp-723 - [0:0] +:limit-ntp-724 - [0:0] +:limit-ntp-725 - [0:0] +:limit-ntp-726 - [0:0] +:limit-ntp-728 - [0:0] +:limit-ntp-729 - [0:0] +:limit-ntp-73 - [0:0] +:limit-ntp-730 - [0:0] +:limit-ntp-731 - [0:0] +:limit-ntp-732 - [0:0] +:limit-ntp-733 - [0:0] +:limit-ntp-734 - [0:0] +:limit-ntp-735 - [0:0] +:limit-ntp-736 - [0:0] +:limit-ntp-737 - [0:0] +:limit-ntp-738 - [0:0] +:limit-ntp-739 - [0:0] +:limit-ntp-74 - [0:0] +:limit-ntp-740 - [0:0] +:limit-ntp-741 - [0:0] +:limit-ntp-742 - [0:0] +:limit-ntp-743 - [0:0] +:limit-ntp-744 - [0:0] +:limit-ntp-745 - [0:0] +:limit-ntp-746 - [0:0] +:limit-ntp-747 - [0:0] +:limit-ntp-748 - [0:0] +:limit-ntp-749 - [0:0] +:limit-ntp-75 - [0:0] +:limit-ntp-750 - [0:0] +:limit-ntp-752 - [0:0] +:limit-ntp-753 - [0:0] +:limit-ntp-754 - [0:0] +:limit-ntp-755 - [0:0] +:limit-ntp-756 - [0:0] +:limit-ntp-758 - [0:0] +:limit-ntp-759 - [0:0] +:limit-ntp-76 - [0:0] +:limit-ntp-760 - [0:0] +:limit-ntp-761 - [0:0] +:limit-ntp-762 - [0:0] +:limit-ntp-763 - [0:0] +:limit-ntp-764 - [0:0] +:limit-ntp-765 - [0:0] +:limit-ntp-766 - [0:0] +:limit-ntp-767 - [0:0] +:limit-ntp-768 - [0:0] +:limit-ntp-769 - [0:0] +:limit-ntp-770 - [0:0] +:limit-ntp-772 - [0:0] +:limit-ntp-773 - [0:0] +:limit-ntp-774 - [0:0] +:limit-ntp-775 - [0:0] +:limit-ntp-776 - [0:0] +:limit-ntp-778 - [0:0] +:limit-ntp-779 - [0:0] +:limit-ntp-78 - [0:0] +:limit-ntp-780 - [0:0] +:limit-ntp-781 - [0:0] +:limit-ntp-782 - [0:0] +:limit-ntp-783 - [0:0] +:limit-ntp-784 - [0:0] +:limit-ntp-785 - [0:0] +:limit-ntp-786 - [0:0] +:limit-ntp-787 - [0:0] +:limit-ntp-788 - [0:0] +:limit-ntp-789 - [0:0] +:limit-ntp-79 - [0:0] +:limit-ntp-790 - [0:0] +:limit-ntp-792 - [0:0] +:limit-ntp-793 - [0:0] +:limit-ntp-794 - [0:0] +:limit-ntp-795 - [0:0] +:limit-ntp-796 - [0:0] +:limit-ntp-798 - [0:0] +:limit-ntp-799 - [0:0] +:limit-ntp-8 - [0:0] +:limit-ntp-80 - [0:0] +:limit-ntp-800 - [0:0] +:limit-ntp-801 - [0:0] +:limit-ntp-802 - [0:0] +:limit-ntp-803 - [0:0] +:limit-ntp-804 - [0:0] +:limit-ntp-805 - [0:0] +:limit-ntp-806 - [0:0] +:limit-ntp-807 - [0:0] +:limit-ntp-808 - [0:0] +:limit-ntp-809 - [0:0] +:limit-ntp-81 - [0:0] +:limit-ntp-810 - [0:0] +:limit-ntp-812 - [0:0] +:limit-ntp-813 - [0:0] +:limit-ntp-814 - [0:0] +:limit-ntp-815 - [0:0] +:limit-ntp-816 - [0:0] +:limit-ntp-818 - [0:0] +:limit-ntp-819 - [0:0] +:limit-ntp-82 - [0:0] +:limit-ntp-820 - [0:0] +:limit-ntp-821 - [0:0] +:limit-ntp-822 - [0:0] +:limit-ntp-823 - [0:0] +:limit-ntp-824 - [0:0] +:limit-ntp-825 - [0:0] +:limit-ntp-826 - [0:0] +:limit-ntp-827 - [0:0] +:limit-ntp-828 - [0:0] +:limit-ntp-829 - [0:0] +:limit-ntp-83 - [0:0] +:limit-ntp-830 - [0:0] +:limit-ntp-831 - [0:0] +:limit-ntp-832 - [0:0] +:limit-ntp-833 - [0:0] +:limit-ntp-834 - [0:0] +:limit-ntp-835 - [0:0] +:limit-ntp-836 - [0:0] +:limit-ntp-837 - [0:0] +:limit-ntp-838 - [0:0] +:limit-ntp-839 - [0:0] +:limit-ntp-84 - [0:0] +:limit-ntp-840 - [0:0] +:limit-ntp-842 - [0:0] +:limit-ntp-843 - [0:0] +:limit-ntp-844 - [0:0] +:limit-ntp-845 - [0:0] +:limit-ntp-846 - [0:0] +:limit-ntp-848 - [0:0] +:limit-ntp-849 - [0:0] +:limit-ntp-85 - [0:0] +:limit-ntp-850 - [0:0] +:limit-ntp-851 - [0:0] +:limit-ntp-852 - [0:0] +:limit-ntp-853 - [0:0] +:limit-ntp-854 - [0:0] +:limit-ntp-855 - [0:0] +:limit-ntp-856 - [0:0] +:limit-ntp-857 - [0:0] +:limit-ntp-858 - [0:0] +:limit-ntp-859 - [0:0] +:limit-ntp-86 - [0:0] +:limit-ntp-860 - [0:0] +:limit-ntp-862 - [0:0] +:limit-ntp-863 - [0:0] +:limit-ntp-864 - [0:0] +:limit-ntp-865 - [0:0] +:limit-ntp-866 - [0:0] +:limit-ntp-868 - [0:0] +:limit-ntp-869 - [0:0] +:limit-ntp-87 - [0:0] +:limit-ntp-870 - [0:0] +:limit-ntp-871 - [0:0] +:limit-ntp-872 - [0:0] +:limit-ntp-873 - [0:0] +:limit-ntp-874 - [0:0] +:limit-ntp-875 - [0:0] +:limit-ntp-876 - [0:0] +:limit-ntp-877 - [0:0] +:limit-ntp-878 - [0:0] +:limit-ntp-879 - [0:0] +:limit-ntp-88 - [0:0] +:limit-ntp-880 - [0:0] +:limit-ntp-882 - [0:0] +:limit-ntp-883 - [0:0] +:limit-ntp-884 - [0:0] +:limit-ntp-885 - [0:0] +:limit-ntp-886 - [0:0] +:limit-ntp-888 - [0:0] +:limit-ntp-889 - [0:0] +:limit-ntp-89 - [0:0] +:limit-ntp-890 - [0:0] +:limit-ntp-891 - [0:0] +:limit-ntp-892 - [0:0] +:limit-ntp-893 - [0:0] +:limit-ntp-894 - [0:0] +:limit-ntp-895 - [0:0] +:limit-ntp-896 - [0:0] +:limit-ntp-897 - [0:0] +:limit-ntp-898 - [0:0] +:limit-ntp-899 - [0:0] +:limit-ntp-9 - [0:0] +:limit-ntp-90 - [0:0] +:limit-ntp-900 - [0:0] +:limit-ntp-902 - [0:0] +:limit-ntp-903 - [0:0] +:limit-ntp-904 - [0:0] +:limit-ntp-905 - [0:0] +:limit-ntp-906 - [0:0] +:limit-ntp-908 - [0:0] +:limit-ntp-909 - [0:0] +:limit-ntp-910 - [0:0] +:limit-ntp-911 - [0:0] +:limit-ntp-912 - [0:0] +:limit-ntp-913 - [0:0] +:limit-ntp-914 - [0:0] +:limit-ntp-915 - [0:0] +:limit-ntp-916 - [0:0] +:limit-ntp-917 - [0:0] +:limit-ntp-918 - [0:0] +:limit-ntp-919 - [0:0] +:limit-ntp-92 - [0:0] +:limit-ntp-920 - [0:0] +:limit-ntp-921 - [0:0] +:limit-ntp-922 - [0:0] +:limit-ntp-923 - [0:0] +:limit-ntp-924 - [0:0] +:limit-ntp-925 - [0:0] +:limit-ntp-926 - [0:0] +:limit-ntp-927 - [0:0] +:limit-ntp-928 - [0:0] +:limit-ntp-929 - [0:0] +:limit-ntp-93 - [0:0] +:limit-ntp-930 - [0:0] +:limit-ntp-931 - [0:0] +:limit-ntp-932 - [0:0] +:limit-ntp-933 - [0:0] +:limit-ntp-934 - [0:0] +:limit-ntp-935 - [0:0] +:limit-ntp-936 - [0:0] +:limit-ntp-937 - [0:0] +:limit-ntp-938 - [0:0] +:limit-ntp-939 - [0:0] +:limit-ntp-94 - [0:0] +:limit-ntp-940 - [0:0] +:limit-ntp-941 - [0:0] +:limit-ntp-942 - [0:0] +:limit-ntp-943 - [0:0] +:limit-ntp-944 - [0:0] +:limit-ntp-945 - [0:0] +:limit-ntp-946 - [0:0] +:limit-ntp-947 - [0:0] +:limit-ntp-948 - [0:0] +:limit-ntp-949 - [0:0] +:limit-ntp-95 - [0:0] +:limit-ntp-950 - [0:0] +:limit-ntp-951 - [0:0] +:limit-ntp-952 - [0:0] +:limit-ntp-953 - [0:0] +:limit-ntp-954 - [0:0] +:limit-ntp-955 - [0:0] +:limit-ntp-956 - [0:0] +:limit-ntp-957 - [0:0] +:limit-ntp-958 - [0:0] +:limit-ntp-959 - [0:0] +:limit-ntp-96 - [0:0] +:limit-ntp-960 - [0:0] +:limit-ntp-961 - [0:0] +:limit-ntp-962 - [0:0] +:limit-ntp-963 - [0:0] +:limit-ntp-964 - [0:0] +:limit-ntp-965 - [0:0] +:limit-ntp-966 - [0:0] +:limit-ntp-967 - [0:0] +:limit-ntp-968 - [0:0] +:limit-ntp-969 - [0:0] +:limit-ntp-970 - [0:0] +:limit-ntp-971 - [0:0] +:limit-ntp-972 - [0:0] +:limit-ntp-973 - [0:0] +:limit-ntp-974 - [0:0] +:limit-ntp-975 - [0:0] +:limit-ntp-98 - [0:0] +:limit-ntp-99 - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] :logaccept-10 - [0:0] -:logaccept-100 - [0:0] -:logaccept-101 - [0:0] -:logaccept-102 - [0:0] :logaccept-11 - [0:0] :logaccept-12 - [0:0] :logaccept-13 - [0:0] @@ -95412,38 +95409,8 @@ COMMIT :logaccept-68 - [0:0] :logaccept-69 - [0:0] :logaccept-7 - [0:0] -:logaccept-70 - [0:0] -:logaccept-71 - [0:0] -:logaccept-72 - [0:0] -:logaccept-73 - [0:0] -:logaccept-74 - [0:0] -:logaccept-75 - [0:0] -:logaccept-76 - [0:0] -:logaccept-77 - [0:0] -:logaccept-78 - [0:0] -:logaccept-79 - [0:0] :logaccept-8 - [0:0] -:logaccept-80 - [0:0] -:logaccept-81 - [0:0] -:logaccept-82 - [0:0] -:logaccept-83 - [0:0] -:logaccept-84 - [0:0] -:logaccept-85 - [0:0] -:logaccept-86 - [0:0] -:logaccept-87 - [0:0] -:logaccept-88 - [0:0] -:logaccept-89 - [0:0] :logaccept-9 - [0:0] -:logaccept-90 - [0:0] -:logaccept-91 - [0:0] -:logaccept-92 - [0:0] -:logaccept-93 - [0:0] -:logaccept-94 - [0:0] -:logaccept-95 - [0:0] -:logaccept-96 - [0:0] -:logaccept-97 - [0:0] -:logaccept-98 - [0:0] -:logaccept-99 - [0:0] :logaccept-final-0 - [0:0] :logaccept-final-1 - [0:0] :logaccept-final-10 - [0:0] @@ -95750,6 +95717,39 @@ COMMIT :logaccept-final-97 - [0:0] :logaccept-final-98 - [0:0] :logaccept-final-99 - [0:0] +:logaccept-ntp-0 - [0:0] +:logaccept-ntp-1 - [0:0] +:logaccept-ntp-10 - [0:0] +:logaccept-ntp-11 - [0:0] +:logaccept-ntp-12 - [0:0] +:logaccept-ntp-13 - [0:0] +:logaccept-ntp-14 - [0:0] +:logaccept-ntp-15 - [0:0] +:logaccept-ntp-16 - [0:0] +:logaccept-ntp-17 - [0:0] +:logaccept-ntp-18 - [0:0] +:logaccept-ntp-19 - [0:0] +:logaccept-ntp-2 - [0:0] +:logaccept-ntp-20 - [0:0] +:logaccept-ntp-21 - [0:0] +:logaccept-ntp-22 - [0:0] +:logaccept-ntp-23 - [0:0] +:logaccept-ntp-24 - [0:0] +:logaccept-ntp-25 - [0:0] +:logaccept-ntp-26 - [0:0] +:logaccept-ntp-27 - [0:0] +:logaccept-ntp-28 - [0:0] +:logaccept-ntp-29 - [0:0] +:logaccept-ntp-3 - [0:0] +:logaccept-ntp-30 - [0:0] +:logaccept-ntp-31 - [0:0] +:logaccept-ntp-32 - [0:0] +:logaccept-ntp-4 - [0:0] +:logaccept-ntp-5 - [0:0] +:logaccept-ntp-6 - [0:0] +:logaccept-ntp-7 - [0:0] +:logaccept-ntp-8 - [0:0] +:logaccept-ntp-9 - [0:0] :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-10 - [0:0] @@ -96480,618 +96480,68 @@ COMMIT :logdrop-1652 - [0:0] :logdrop-1653 - [0:0] :logdrop-1654 - [0:0] -:logdrop-1655 - [0:0] -:logdrop-1656 - [0:0] -:logdrop-1657 - [0:0] -:logdrop-1658 - [0:0] -:logdrop-1659 - [0:0] :logdrop-166 - [0:0] -:logdrop-1660 - [0:0] -:logdrop-1661 - [0:0] -:logdrop-1662 - [0:0] -:logdrop-1663 - [0:0] -:logdrop-1664 - [0:0] -:logdrop-1665 - [0:0] -:logdrop-1666 - [0:0] -:logdrop-1667 - [0:0] -:logdrop-1668 - [0:0] -:logdrop-1669 - [0:0] :logdrop-167 - [0:0] -:logdrop-1670 - [0:0] -:logdrop-1671 - [0:0] -:logdrop-1672 - [0:0] -:logdrop-1673 - [0:0] -:logdrop-1674 - [0:0] -:logdrop-1675 - [0:0] -:logdrop-1676 - [0:0] -:logdrop-1677 - [0:0] -:logdrop-1678 - [0:0] -:logdrop-1679 - [0:0] :logdrop-168 - [0:0] -:logdrop-1680 - [0:0] -:logdrop-1681 - [0:0] -:logdrop-1682 - [0:0] -:logdrop-1683 - [0:0] -:logdrop-1684 - [0:0] -:logdrop-1685 - [0:0] -:logdrop-1686 - [0:0] -:logdrop-1687 - [0:0] -:logdrop-1688 - [0:0] -:logdrop-1689 - [0:0] :logdrop-169 - [0:0] -:logdrop-1690 - [0:0] -:logdrop-1691 - [0:0] -:logdrop-1692 - [0:0] -:logdrop-1693 - [0:0] -:logdrop-1694 - [0:0] -:logdrop-1695 - [0:0] -:logdrop-1696 - [0:0] -:logdrop-1697 - [0:0] -:logdrop-1698 - [0:0] -:logdrop-1699 - [0:0] :logdrop-17 - [0:0] :logdrop-170 - [0:0] -:logdrop-1700 - [0:0] -:logdrop-1701 - [0:0] -:logdrop-1702 - [0:0] -:logdrop-1703 - [0:0] -:logdrop-1704 - [0:0] -:logdrop-1705 - [0:0] -:logdrop-1706 - [0:0] -:logdrop-1707 - [0:0] -:logdrop-1708 - [0:0] -:logdrop-1709 - [0:0] :logdrop-171 - [0:0] -:logdrop-1710 - [0:0] -:logdrop-1711 - [0:0] -:logdrop-1712 - [0:0] -:logdrop-1713 - [0:0] -:logdrop-1714 - [0:0] -:logdrop-1715 - [0:0] -:logdrop-1716 - [0:0] -:logdrop-1717 - [0:0] -:logdrop-1718 - [0:0] -:logdrop-1719 - [0:0] :logdrop-172 - [0:0] -:logdrop-1720 - [0:0] -:logdrop-1721 - [0:0] -:logdrop-1722 - [0:0] -:logdrop-1723 - [0:0] -:logdrop-1724 - [0:0] -:logdrop-1725 - [0:0] -:logdrop-1726 - [0:0] -:logdrop-1727 - [0:0] -:logdrop-1728 - [0:0] -:logdrop-1729 - [0:0] :logdrop-173 - [0:0] -:logdrop-1730 - [0:0] -:logdrop-1731 - [0:0] -:logdrop-1732 - [0:0] -:logdrop-1733 - [0:0] -:logdrop-1734 - [0:0] -:logdrop-1735 - [0:0] -:logdrop-1736 - [0:0] -:logdrop-1737 - [0:0] -:logdrop-1738 - [0:0] -:logdrop-1739 - [0:0] :logdrop-174 - [0:0] -:logdrop-1740 - [0:0] -:logdrop-1741 - [0:0] -:logdrop-1742 - [0:0] -:logdrop-1743 - [0:0] -:logdrop-1744 - [0:0] -:logdrop-1745 - [0:0] -:logdrop-1746 - [0:0] -:logdrop-1747 - [0:0] -:logdrop-1748 - [0:0] -:logdrop-1749 - [0:0] :logdrop-175 - [0:0] -:logdrop-1750 - [0:0] -:logdrop-1751 - [0:0] -:logdrop-1752 - [0:0] -:logdrop-1753 - [0:0] -:logdrop-1754 - [0:0] -:logdrop-1755 - [0:0] -:logdrop-1756 - [0:0] -:logdrop-1757 - [0:0] -:logdrop-1758 - [0:0] -:logdrop-1759 - [0:0] :logdrop-176 - [0:0] -:logdrop-1760 - [0:0] -:logdrop-1761 - [0:0] -:logdrop-1762 - [0:0] -:logdrop-1763 - [0:0] -:logdrop-1764 - [0:0] -:logdrop-1765 - [0:0] -:logdrop-1766 - [0:0] -:logdrop-1767 - [0:0] -:logdrop-1768 - [0:0] -:logdrop-1769 - [0:0] :logdrop-177 - [0:0] -:logdrop-1770 - [0:0] -:logdrop-1771 - [0:0] -:logdrop-1772 - [0:0] -:logdrop-1773 - [0:0] -:logdrop-1774 - [0:0] -:logdrop-1775 - [0:0] -:logdrop-1776 - [0:0] -:logdrop-1777 - [0:0] -:logdrop-1778 - [0:0] -:logdrop-1779 - [0:0] :logdrop-178 - [0:0] -:logdrop-1780 - [0:0] -:logdrop-1781 - [0:0] -:logdrop-1782 - [0:0] -:logdrop-1783 - [0:0] -:logdrop-1784 - [0:0] -:logdrop-1785 - [0:0] -:logdrop-1786 - [0:0] -:logdrop-1787 - [0:0] -:logdrop-1788 - [0:0] -:logdrop-1789 - [0:0] :logdrop-179 - [0:0] -:logdrop-1790 - [0:0] -:logdrop-1791 - [0:0] -:logdrop-1792 - [0:0] -:logdrop-1793 - [0:0] -:logdrop-1794 - [0:0] -:logdrop-1795 - [0:0] -:logdrop-1796 - [0:0] -:logdrop-1797 - [0:0] -:logdrop-1798 - [0:0] -:logdrop-1799 - [0:0] :logdrop-18 - [0:0] :logdrop-180 - [0:0] -:logdrop-1800 - [0:0] -:logdrop-1801 - [0:0] -:logdrop-1802 - [0:0] -:logdrop-1803 - [0:0] -:logdrop-1804 - [0:0] -:logdrop-1805 - [0:0] -:logdrop-1806 - [0:0] -:logdrop-1807 - [0:0] -:logdrop-1808 - [0:0] -:logdrop-1809 - [0:0] :logdrop-181 - [0:0] -:logdrop-1810 - [0:0] -:logdrop-1811 - [0:0] -:logdrop-1812 - [0:0] -:logdrop-1813 - [0:0] -:logdrop-1814 - [0:0] -:logdrop-1815 - [0:0] -:logdrop-1816 - [0:0] -:logdrop-1817 - [0:0] -:logdrop-1818 - [0:0] -:logdrop-1819 - [0:0] :logdrop-182 - [0:0] -:logdrop-1820 - [0:0] -:logdrop-1821 - [0:0] -:logdrop-1822 - [0:0] -:logdrop-1823 - [0:0] -:logdrop-1824 - [0:0] -:logdrop-1825 - [0:0] -:logdrop-1826 - [0:0] -:logdrop-1827 - [0:0] -:logdrop-1828 - [0:0] -:logdrop-1829 - [0:0] :logdrop-183 - [0:0] -:logdrop-1830 - [0:0] -:logdrop-1831 - [0:0] -:logdrop-1832 - [0:0] -:logdrop-1833 - [0:0] -:logdrop-1834 - [0:0] -:logdrop-1835 - [0:0] -:logdrop-1836 - [0:0] -:logdrop-1837 - [0:0] -:logdrop-1838 - [0:0] -:logdrop-1839 - [0:0] :logdrop-184 - [0:0] -:logdrop-1840 - [0:0] -:logdrop-1841 - [0:0] -:logdrop-1842 - [0:0] -:logdrop-1843 - [0:0] -:logdrop-1844 - [0:0] -:logdrop-1845 - [0:0] -:logdrop-1846 - [0:0] -:logdrop-1847 - [0:0] -:logdrop-1848 - [0:0] -:logdrop-1849 - [0:0] :logdrop-185 - [0:0] -:logdrop-1850 - [0:0] -:logdrop-1851 - [0:0] -:logdrop-1852 - [0:0] -:logdrop-1853 - [0:0] -:logdrop-1854 - [0:0] -:logdrop-1855 - [0:0] -:logdrop-1856 - [0:0] -:logdrop-1857 - [0:0] -:logdrop-1858 - [0:0] -:logdrop-1859 - [0:0] :logdrop-186 - [0:0] -:logdrop-1860 - [0:0] -:logdrop-1861 - [0:0] -:logdrop-1862 - [0:0] -:logdrop-1863 - [0:0] -:logdrop-1864 - [0:0] -:logdrop-1865 - [0:0] -:logdrop-1866 - [0:0] -:logdrop-1867 - [0:0] -:logdrop-1868 - [0:0] -:logdrop-1869 - [0:0] :logdrop-187 - [0:0] -:logdrop-1870 - [0:0] -:logdrop-1871 - [0:0] -:logdrop-1872 - [0:0] -:logdrop-1873 - [0:0] -:logdrop-1874 - [0:0] -:logdrop-1875 - [0:0] -:logdrop-1876 - [0:0] -:logdrop-1877 - [0:0] -:logdrop-1878 - [0:0] -:logdrop-1879 - [0:0] :logdrop-188 - [0:0] -:logdrop-1880 - [0:0] -:logdrop-1881 - [0:0] -:logdrop-1882 - [0:0] -:logdrop-1883 - [0:0] -:logdrop-1884 - [0:0] -:logdrop-1885 - [0:0] -:logdrop-1886 - [0:0] -:logdrop-1887 - [0:0] -:logdrop-1888 - [0:0] -:logdrop-1889 - [0:0] :logdrop-189 - [0:0] -:logdrop-1890 - [0:0] -:logdrop-1891 - [0:0] -:logdrop-1892 - [0:0] -:logdrop-1893 - [0:0] -:logdrop-1894 - [0:0] -:logdrop-1895 - [0:0] -:logdrop-1896 - [0:0] -:logdrop-1897 - [0:0] -:logdrop-1898 - [0:0] -:logdrop-1899 - [0:0] :logdrop-19 - [0:0] :logdrop-190 - [0:0] -:logdrop-1900 - [0:0] -:logdrop-1901 - [0:0] -:logdrop-1902 - [0:0] -:logdrop-1903 - [0:0] -:logdrop-1904 - [0:0] -:logdrop-1905 - [0:0] -:logdrop-1906 - [0:0] -:logdrop-1907 - [0:0] -:logdrop-1908 - [0:0] -:logdrop-1909 - [0:0] :logdrop-191 - [0:0] -:logdrop-1910 - [0:0] -:logdrop-1911 - [0:0] -:logdrop-1912 - [0:0] -:logdrop-1913 - [0:0] -:logdrop-1914 - [0:0] -:logdrop-1915 - [0:0] -:logdrop-1916 - [0:0] -:logdrop-1917 - [0:0] -:logdrop-1918 - [0:0] -:logdrop-1919 - [0:0] :logdrop-192 - [0:0] -:logdrop-1920 - [0:0] -:logdrop-1921 - [0:0] -:logdrop-1922 - [0:0] -:logdrop-1923 - [0:0] -:logdrop-1924 - [0:0] -:logdrop-1925 - [0:0] -:logdrop-1926 - [0:0] -:logdrop-1927 - [0:0] -:logdrop-1928 - [0:0] -:logdrop-1929 - [0:0] :logdrop-193 - [0:0] -:logdrop-1930 - [0:0] -:logdrop-1931 - [0:0] -:logdrop-1932 - [0:0] -:logdrop-1933 - [0:0] -:logdrop-1934 - [0:0] -:logdrop-1935 - [0:0] -:logdrop-1936 - [0:0] -:logdrop-1937 - [0:0] -:logdrop-1938 - [0:0] -:logdrop-1939 - [0:0] :logdrop-194 - [0:0] -:logdrop-1940 - [0:0] -:logdrop-1941 - [0:0] -:logdrop-1942 - [0:0] -:logdrop-1943 - [0:0] -:logdrop-1944 - [0:0] -:logdrop-1945 - [0:0] -:logdrop-1946 - [0:0] -:logdrop-1947 - [0:0] -:logdrop-1948 - [0:0] -:logdrop-1949 - [0:0] :logdrop-195 - [0:0] -:logdrop-1950 - [0:0] -:logdrop-1951 - [0:0] -:logdrop-1952 - [0:0] -:logdrop-1953 - [0:0] -:logdrop-1954 - [0:0] -:logdrop-1955 - [0:0] -:logdrop-1956 - [0:0] -:logdrop-1957 - [0:0] -:logdrop-1958 - [0:0] -:logdrop-1959 - [0:0] :logdrop-196 - [0:0] -:logdrop-1960 - [0:0] -:logdrop-1961 - [0:0] -:logdrop-1962 - [0:0] -:logdrop-1963 - [0:0] -:logdrop-1964 - [0:0] -:logdrop-1965 - [0:0] -:logdrop-1966 - [0:0] -:logdrop-1967 - [0:0] -:logdrop-1968 - [0:0] -:logdrop-1969 - [0:0] :logdrop-197 - [0:0] -:logdrop-1970 - [0:0] -:logdrop-1971 - [0:0] -:logdrop-1972 - [0:0] -:logdrop-1973 - [0:0] -:logdrop-1974 - [0:0] -:logdrop-1975 - [0:0] -:logdrop-1976 - [0:0] -:logdrop-1977 - [0:0] -:logdrop-1978 - [0:0] -:logdrop-1979 - [0:0] :logdrop-198 - [0:0] -:logdrop-1980 - [0:0] -:logdrop-1981 - [0:0] -:logdrop-1982 - [0:0] -:logdrop-1983 - [0:0] -:logdrop-1984 - [0:0] -:logdrop-1985 - [0:0] -:logdrop-1986 - [0:0] -:logdrop-1987 - [0:0] -:logdrop-1988 - [0:0] -:logdrop-1989 - [0:0] :logdrop-199 - [0:0] -:logdrop-1990 - [0:0] -:logdrop-1991 - [0:0] -:logdrop-1992 - [0:0] -:logdrop-1993 - [0:0] -:logdrop-1994 - [0:0] -:logdrop-1995 - [0:0] -:logdrop-1996 - [0:0] -:logdrop-1997 - [0:0] -:logdrop-1998 - [0:0] -:logdrop-1999 - [0:0] :logdrop-2 - [0:0] :logdrop-20 - [0:0] :logdrop-200 - [0:0] -:logdrop-2000 - [0:0] -:logdrop-2001 - [0:0] -:logdrop-2002 - [0:0] -:logdrop-2003 - [0:0] -:logdrop-2004 - [0:0] -:logdrop-2005 - [0:0] -:logdrop-2006 - [0:0] -:logdrop-2007 - [0:0] -:logdrop-2008 - [0:0] -:logdrop-2009 - [0:0] :logdrop-201 - [0:0] -:logdrop-2010 - [0:0] -:logdrop-2011 - [0:0] -:logdrop-2012 - [0:0] -:logdrop-2013 - [0:0] -:logdrop-2014 - [0:0] -:logdrop-2015 - [0:0] -:logdrop-2016 - [0:0] -:logdrop-2017 - [0:0] -:logdrop-2018 - [0:0] -:logdrop-2019 - [0:0] :logdrop-202 - [0:0] -:logdrop-2020 - [0:0] -:logdrop-2021 - [0:0] -:logdrop-2022 - [0:0] -:logdrop-2023 - [0:0] -:logdrop-2024 - [0:0] -:logdrop-2025 - [0:0] -:logdrop-2026 - [0:0] -:logdrop-2027 - [0:0] -:logdrop-2028 - [0:0] -:logdrop-2029 - [0:0] :logdrop-203 - [0:0] -:logdrop-2030 - [0:0] -:logdrop-2031 - [0:0] -:logdrop-2032 - [0:0] -:logdrop-2033 - [0:0] -:logdrop-2034 - [0:0] -:logdrop-2035 - [0:0] -:logdrop-2036 - [0:0] -:logdrop-2037 - [0:0] -:logdrop-2038 - [0:0] -:logdrop-2039 - [0:0] :logdrop-204 - [0:0] -:logdrop-2040 - [0:0] -:logdrop-2041 - [0:0] -:logdrop-2042 - [0:0] -:logdrop-2043 - [0:0] -:logdrop-2044 - [0:0] -:logdrop-2045 - [0:0] -:logdrop-2046 - [0:0] -:logdrop-2047 - [0:0] -:logdrop-2048 - [0:0] -:logdrop-2049 - [0:0] :logdrop-205 - [0:0] -:logdrop-2050 - [0:0] -:logdrop-2051 - [0:0] -:logdrop-2052 - [0:0] -:logdrop-2053 - [0:0] -:logdrop-2054 - [0:0] -:logdrop-2055 - [0:0] -:logdrop-2056 - [0:0] -:logdrop-2057 - [0:0] -:logdrop-2058 - [0:0] -:logdrop-2059 - [0:0] :logdrop-206 - [0:0] -:logdrop-2060 - [0:0] -:logdrop-2061 - [0:0] -:logdrop-2062 - [0:0] -:logdrop-2063 - [0:0] -:logdrop-2064 - [0:0] -:logdrop-2065 - [0:0] -:logdrop-2066 - [0:0] -:logdrop-2067 - [0:0] -:logdrop-2068 - [0:0] -:logdrop-2069 - [0:0] :logdrop-207 - [0:0] -:logdrop-2070 - [0:0] -:logdrop-2071 - [0:0] -:logdrop-2072 - [0:0] -:logdrop-2073 - [0:0] -:logdrop-2074 - [0:0] -:logdrop-2075 - [0:0] -:logdrop-2076 - [0:0] -:logdrop-2077 - [0:0] -:logdrop-2078 - [0:0] -:logdrop-2079 - [0:0] :logdrop-208 - [0:0] -:logdrop-2080 - [0:0] -:logdrop-2081 - [0:0] -:logdrop-2082 - [0:0] -:logdrop-2083 - [0:0] -:logdrop-2084 - [0:0] -:logdrop-2085 - [0:0] -:logdrop-2086 - [0:0] -:logdrop-2087 - [0:0] -:logdrop-2088 - [0:0] -:logdrop-2089 - [0:0] :logdrop-209 - [0:0] -:logdrop-2090 - [0:0] -:logdrop-2091 - [0:0] -:logdrop-2092 - [0:0] -:logdrop-2093 - [0:0] -:logdrop-2094 - [0:0] -:logdrop-2095 - [0:0] -:logdrop-2096 - [0:0] -:logdrop-2097 - [0:0] -:logdrop-2098 - [0:0] -:logdrop-2099 - [0:0] :logdrop-21 - [0:0] :logdrop-210 - [0:0] -:logdrop-2100 - [0:0] -:logdrop-2101 - [0:0] -:logdrop-2102 - [0:0] -:logdrop-2103 - [0:0] -:logdrop-2104 - [0:0] -:logdrop-2105 - [0:0] -:logdrop-2106 - [0:0] -:logdrop-2107 - [0:0] -:logdrop-2108 - [0:0] -:logdrop-2109 - [0:0] :logdrop-211 - [0:0] -:logdrop-2110 - [0:0] -:logdrop-2111 - [0:0] -:logdrop-2112 - [0:0] -:logdrop-2113 - [0:0] -:logdrop-2114 - [0:0] -:logdrop-2115 - [0:0] -:logdrop-2116 - [0:0] -:logdrop-2117 - [0:0] -:logdrop-2118 - [0:0] -:logdrop-2119 - [0:0] :logdrop-212 - [0:0] -:logdrop-2120 - [0:0] -:logdrop-2121 - [0:0] -:logdrop-2122 - [0:0] -:logdrop-2123 - [0:0] -:logdrop-2124 - [0:0] -:logdrop-2125 - [0:0] -:logdrop-2126 - [0:0] -:logdrop-2127 - [0:0] -:logdrop-2128 - [0:0] -:logdrop-2129 - [0:0] :logdrop-213 - [0:0] -:logdrop-2130 - [0:0] -:logdrop-2131 - [0:0] -:logdrop-2132 - [0:0] -:logdrop-2133 - [0:0] -:logdrop-2134 - [0:0] -:logdrop-2135 - [0:0] -:logdrop-2136 - [0:0] -:logdrop-2137 - [0:0] -:logdrop-2138 - [0:0] -:logdrop-2139 - [0:0] :logdrop-214 - [0:0] -:logdrop-2140 - [0:0] -:logdrop-2141 - [0:0] -:logdrop-2142 - [0:0] -:logdrop-2143 - [0:0] -:logdrop-2144 - [0:0] -:logdrop-2145 - [0:0] -:logdrop-2146 - [0:0] -:logdrop-2147 - [0:0] -:logdrop-2148 - [0:0] -:logdrop-2149 - [0:0] :logdrop-215 - [0:0] -:logdrop-2150 - [0:0] -:logdrop-2151 - [0:0] -:logdrop-2152 - [0:0] -:logdrop-2153 - [0:0] -:logdrop-2154 - [0:0] -:logdrop-2155 - [0:0] -:logdrop-2156 - [0:0] -:logdrop-2157 - [0:0] -:logdrop-2158 - [0:0] -:logdrop-2159 - [0:0] :logdrop-216 - [0:0] -:logdrop-2160 - [0:0] -:logdrop-2161 - [0:0] -:logdrop-2162 - [0:0] -:logdrop-2163 - [0:0] -:logdrop-2164 - [0:0] -:logdrop-2165 - [0:0] -:logdrop-2166 - [0:0] -:logdrop-2167 - [0:0] -:logdrop-2168 - [0:0] -:logdrop-2169 - [0:0] :logdrop-217 - [0:0] -:logdrop-2170 - [0:0] -:logdrop-2171 - [0:0] -:logdrop-2172 - [0:0] -:logdrop-2173 - [0:0] -:logdrop-2174 - [0:0] -:logdrop-2175 - [0:0] -:logdrop-2176 - [0:0] -:logdrop-2177 - [0:0] -:logdrop-2178 - [0:0] -:logdrop-2179 - [0:0] :logdrop-218 - [0:0] -:logdrop-2180 - [0:0] -:logdrop-2181 - [0:0] -:logdrop-2182 - [0:0] -:logdrop-2183 - [0:0] -:logdrop-2184 - [0:0] -:logdrop-2185 - [0:0] -:logdrop-2186 - [0:0] -:logdrop-2187 - [0:0] -:logdrop-2188 - [0:0] -:logdrop-2189 - [0:0] :logdrop-219 - [0:0] -:logdrop-2190 - [0:0] -:logdrop-2191 - [0:0] -:logdrop-2192 - [0:0] -:logdrop-2193 - [0:0] -:logdrop-2194 - [0:0] -:logdrop-2195 - [0:0] -:logdrop-2196 - [0:0] -:logdrop-2197 - [0:0] -:logdrop-2198 - [0:0] -:logdrop-2199 - [0:0] :logdrop-22 - [0:0] :logdrop-220 - [0:0] -:logdrop-2200 - [0:0] -:logdrop-2201 - [0:0] -:logdrop-2202 - [0:0] -:logdrop-2203 - [0:0] -:logdrop-2204 - [0:0] :logdrop-221 - [0:0] :logdrop-222 - [0:0] :logdrop-223 - [0:0] @@ -97955,6 +97405,556 @@ COMMIT :logdrop-997 - [0:0] :logdrop-998 - [0:0] :logdrop-999 - [0:0] +:logdrop-ntp-0 - [0:0] +:logdrop-ntp-1 - [0:0] +:logdrop-ntp-10 - [0:0] +:logdrop-ntp-100 - [0:0] +:logdrop-ntp-101 - [0:0] +:logdrop-ntp-102 - [0:0] +:logdrop-ntp-103 - [0:0] +:logdrop-ntp-104 - [0:0] +:logdrop-ntp-105 - [0:0] +:logdrop-ntp-106 - [0:0] +:logdrop-ntp-107 - [0:0] +:logdrop-ntp-108 - [0:0] +:logdrop-ntp-109 - [0:0] +:logdrop-ntp-11 - [0:0] +:logdrop-ntp-110 - [0:0] +:logdrop-ntp-111 - [0:0] +:logdrop-ntp-112 - [0:0] +:logdrop-ntp-113 - [0:0] +:logdrop-ntp-114 - [0:0] +:logdrop-ntp-115 - [0:0] +:logdrop-ntp-116 - [0:0] +:logdrop-ntp-117 - [0:0] +:logdrop-ntp-118 - [0:0] +:logdrop-ntp-119 - [0:0] +:logdrop-ntp-12 - [0:0] +:logdrop-ntp-120 - [0:0] +:logdrop-ntp-121 - [0:0] +:logdrop-ntp-122 - [0:0] +:logdrop-ntp-123 - [0:0] +:logdrop-ntp-124 - [0:0] +:logdrop-ntp-125 - [0:0] +:logdrop-ntp-126 - [0:0] +:logdrop-ntp-127 - [0:0] +:logdrop-ntp-128 - [0:0] +:logdrop-ntp-129 - [0:0] +:logdrop-ntp-13 - [0:0] +:logdrop-ntp-130 - [0:0] +:logdrop-ntp-131 - [0:0] +:logdrop-ntp-132 - [0:0] +:logdrop-ntp-133 - [0:0] +:logdrop-ntp-134 - [0:0] +:logdrop-ntp-135 - [0:0] +:logdrop-ntp-136 - [0:0] +:logdrop-ntp-137 - [0:0] +:logdrop-ntp-138 - [0:0] +:logdrop-ntp-139 - [0:0] +:logdrop-ntp-14 - [0:0] +:logdrop-ntp-140 - [0:0] +:logdrop-ntp-141 - [0:0] +:logdrop-ntp-142 - [0:0] +:logdrop-ntp-143 - [0:0] +:logdrop-ntp-144 - [0:0] +:logdrop-ntp-145 - [0:0] +:logdrop-ntp-146 - [0:0] +:logdrop-ntp-147 - [0:0] +:logdrop-ntp-148 - [0:0] +:logdrop-ntp-149 - [0:0] +:logdrop-ntp-15 - [0:0] +:logdrop-ntp-150 - [0:0] +:logdrop-ntp-151 - [0:0] +:logdrop-ntp-152 - [0:0] +:logdrop-ntp-153 - [0:0] +:logdrop-ntp-154 - [0:0] +:logdrop-ntp-155 - [0:0] +:logdrop-ntp-156 - [0:0] +:logdrop-ntp-157 - [0:0] +:logdrop-ntp-158 - [0:0] +:logdrop-ntp-159 - [0:0] +:logdrop-ntp-16 - [0:0] +:logdrop-ntp-160 - [0:0] +:logdrop-ntp-161 - [0:0] +:logdrop-ntp-162 - [0:0] +:logdrop-ntp-163 - [0:0] +:logdrop-ntp-164 - [0:0] +:logdrop-ntp-165 - [0:0] +:logdrop-ntp-166 - [0:0] +:logdrop-ntp-167 - [0:0] +:logdrop-ntp-168 - [0:0] +:logdrop-ntp-169 - [0:0] +:logdrop-ntp-17 - [0:0] +:logdrop-ntp-170 - [0:0] +:logdrop-ntp-171 - [0:0] +:logdrop-ntp-172 - [0:0] +:logdrop-ntp-173 - [0:0] +:logdrop-ntp-174 - [0:0] +:logdrop-ntp-175 - [0:0] +:logdrop-ntp-176 - [0:0] +:logdrop-ntp-177 - [0:0] +:logdrop-ntp-178 - [0:0] +:logdrop-ntp-179 - [0:0] +:logdrop-ntp-18 - [0:0] +:logdrop-ntp-180 - [0:0] +:logdrop-ntp-181 - [0:0] +:logdrop-ntp-182 - [0:0] +:logdrop-ntp-183 - [0:0] +:logdrop-ntp-184 - [0:0] +:logdrop-ntp-185 - [0:0] +:logdrop-ntp-186 - [0:0] +:logdrop-ntp-187 - [0:0] +:logdrop-ntp-188 - [0:0] +:logdrop-ntp-189 - [0:0] +:logdrop-ntp-19 - [0:0] +:logdrop-ntp-190 - [0:0] +:logdrop-ntp-191 - [0:0] +:logdrop-ntp-192 - [0:0] +:logdrop-ntp-193 - [0:0] +:logdrop-ntp-194 - [0:0] +:logdrop-ntp-195 - [0:0] +:logdrop-ntp-196 - [0:0] +:logdrop-ntp-197 - [0:0] +:logdrop-ntp-198 - [0:0] +:logdrop-ntp-199 - [0:0] +:logdrop-ntp-2 - [0:0] +:logdrop-ntp-20 - [0:0] +:logdrop-ntp-200 - [0:0] +:logdrop-ntp-201 - [0:0] +:logdrop-ntp-202 - [0:0] +:logdrop-ntp-203 - [0:0] +:logdrop-ntp-204 - [0:0] +:logdrop-ntp-205 - [0:0] +:logdrop-ntp-206 - [0:0] +:logdrop-ntp-207 - [0:0] +:logdrop-ntp-208 - [0:0] +:logdrop-ntp-209 - [0:0] +:logdrop-ntp-21 - [0:0] +:logdrop-ntp-210 - [0:0] +:logdrop-ntp-211 - [0:0] +:logdrop-ntp-212 - [0:0] +:logdrop-ntp-213 - [0:0] +:logdrop-ntp-214 - [0:0] +:logdrop-ntp-215 - [0:0] +:logdrop-ntp-216 - [0:0] +:logdrop-ntp-217 - [0:0] +:logdrop-ntp-218 - [0:0] +:logdrop-ntp-219 - [0:0] +:logdrop-ntp-22 - [0:0] +:logdrop-ntp-220 - [0:0] +:logdrop-ntp-221 - [0:0] +:logdrop-ntp-222 - [0:0] +:logdrop-ntp-223 - [0:0] +:logdrop-ntp-224 - [0:0] +:logdrop-ntp-225 - [0:0] +:logdrop-ntp-226 - [0:0] +:logdrop-ntp-227 - [0:0] +:logdrop-ntp-228 - [0:0] +:logdrop-ntp-229 - [0:0] +:logdrop-ntp-23 - [0:0] +:logdrop-ntp-230 - [0:0] +:logdrop-ntp-231 - [0:0] +:logdrop-ntp-232 - [0:0] +:logdrop-ntp-233 - [0:0] +:logdrop-ntp-234 - [0:0] +:logdrop-ntp-235 - [0:0] +:logdrop-ntp-236 - [0:0] +:logdrop-ntp-237 - [0:0] +:logdrop-ntp-238 - [0:0] +:logdrop-ntp-239 - [0:0] +:logdrop-ntp-24 - [0:0] +:logdrop-ntp-240 - [0:0] +:logdrop-ntp-241 - [0:0] +:logdrop-ntp-242 - [0:0] +:logdrop-ntp-243 - [0:0] +:logdrop-ntp-244 - [0:0] +:logdrop-ntp-245 - [0:0] +:logdrop-ntp-246 - [0:0] +:logdrop-ntp-247 - [0:0] +:logdrop-ntp-248 - [0:0] +:logdrop-ntp-249 - [0:0] +:logdrop-ntp-25 - [0:0] +:logdrop-ntp-250 - [0:0] +:logdrop-ntp-251 - [0:0] +:logdrop-ntp-252 - [0:0] +:logdrop-ntp-253 - [0:0] +:logdrop-ntp-254 - [0:0] +:logdrop-ntp-255 - [0:0] +:logdrop-ntp-256 - [0:0] +:logdrop-ntp-257 - [0:0] +:logdrop-ntp-258 - [0:0] +:logdrop-ntp-259 - [0:0] +:logdrop-ntp-26 - [0:0] +:logdrop-ntp-260 - [0:0] +:logdrop-ntp-261 - [0:0] +:logdrop-ntp-262 - [0:0] +:logdrop-ntp-263 - [0:0] +:logdrop-ntp-264 - [0:0] +:logdrop-ntp-265 - [0:0] +:logdrop-ntp-266 - [0:0] +:logdrop-ntp-267 - [0:0] +:logdrop-ntp-268 - [0:0] +:logdrop-ntp-269 - [0:0] +:logdrop-ntp-27 - [0:0] +:logdrop-ntp-270 - [0:0] +:logdrop-ntp-271 - [0:0] +:logdrop-ntp-272 - [0:0] +:logdrop-ntp-273 - [0:0] +:logdrop-ntp-274 - [0:0] +:logdrop-ntp-275 - [0:0] +:logdrop-ntp-276 - [0:0] +:logdrop-ntp-277 - [0:0] +:logdrop-ntp-278 - [0:0] +:logdrop-ntp-279 - [0:0] +:logdrop-ntp-28 - [0:0] +:logdrop-ntp-280 - [0:0] +:logdrop-ntp-281 - [0:0] +:logdrop-ntp-282 - [0:0] +:logdrop-ntp-283 - [0:0] +:logdrop-ntp-284 - [0:0] +:logdrop-ntp-285 - [0:0] +:logdrop-ntp-286 - [0:0] +:logdrop-ntp-287 - [0:0] +:logdrop-ntp-288 - [0:0] +:logdrop-ntp-289 - [0:0] +:logdrop-ntp-29 - [0:0] +:logdrop-ntp-290 - [0:0] +:logdrop-ntp-291 - [0:0] +:logdrop-ntp-292 - [0:0] +:logdrop-ntp-293 - [0:0] +:logdrop-ntp-294 - [0:0] +:logdrop-ntp-295 - [0:0] +:logdrop-ntp-296 - [0:0] +:logdrop-ntp-297 - [0:0] +:logdrop-ntp-298 - [0:0] +:logdrop-ntp-299 - [0:0] +:logdrop-ntp-3 - [0:0] +:logdrop-ntp-30 - [0:0] +:logdrop-ntp-300 - [0:0] +:logdrop-ntp-301 - [0:0] +:logdrop-ntp-302 - [0:0] +:logdrop-ntp-303 - [0:0] +:logdrop-ntp-304 - [0:0] +:logdrop-ntp-305 - [0:0] +:logdrop-ntp-306 - [0:0] +:logdrop-ntp-307 - [0:0] +:logdrop-ntp-308 - [0:0] +:logdrop-ntp-309 - [0:0] +:logdrop-ntp-31 - [0:0] +:logdrop-ntp-310 - [0:0] +:logdrop-ntp-311 - [0:0] +:logdrop-ntp-312 - [0:0] +:logdrop-ntp-313 - [0:0] +:logdrop-ntp-314 - [0:0] +:logdrop-ntp-315 - [0:0] +:logdrop-ntp-316 - [0:0] +:logdrop-ntp-317 - [0:0] +:logdrop-ntp-318 - [0:0] +:logdrop-ntp-319 - [0:0] +:logdrop-ntp-32 - [0:0] +:logdrop-ntp-320 - [0:0] +:logdrop-ntp-321 - [0:0] +:logdrop-ntp-322 - [0:0] +:logdrop-ntp-323 - [0:0] +:logdrop-ntp-324 - [0:0] +:logdrop-ntp-325 - [0:0] +:logdrop-ntp-326 - [0:0] +:logdrop-ntp-327 - [0:0] +:logdrop-ntp-328 - [0:0] +:logdrop-ntp-329 - [0:0] +:logdrop-ntp-33 - [0:0] +:logdrop-ntp-330 - [0:0] +:logdrop-ntp-331 - [0:0] +:logdrop-ntp-332 - [0:0] +:logdrop-ntp-333 - [0:0] +:logdrop-ntp-334 - [0:0] +:logdrop-ntp-335 - [0:0] +:logdrop-ntp-336 - [0:0] +:logdrop-ntp-337 - [0:0] +:logdrop-ntp-338 - [0:0] +:logdrop-ntp-339 - [0:0] +:logdrop-ntp-34 - [0:0] +:logdrop-ntp-340 - [0:0] +:logdrop-ntp-341 - [0:0] +:logdrop-ntp-342 - [0:0] +:logdrop-ntp-343 - [0:0] +:logdrop-ntp-344 - [0:0] +:logdrop-ntp-345 - [0:0] +:logdrop-ntp-346 - [0:0] +:logdrop-ntp-347 - [0:0] +:logdrop-ntp-348 - [0:0] +:logdrop-ntp-349 - [0:0] +:logdrop-ntp-35 - [0:0] +:logdrop-ntp-350 - [0:0] +:logdrop-ntp-351 - [0:0] +:logdrop-ntp-352 - [0:0] +:logdrop-ntp-353 - [0:0] +:logdrop-ntp-354 - [0:0] +:logdrop-ntp-355 - [0:0] +:logdrop-ntp-356 - [0:0] +:logdrop-ntp-357 - [0:0] +:logdrop-ntp-358 - [0:0] +:logdrop-ntp-359 - [0:0] +:logdrop-ntp-36 - [0:0] +:logdrop-ntp-360 - [0:0] +:logdrop-ntp-361 - [0:0] +:logdrop-ntp-362 - [0:0] +:logdrop-ntp-363 - [0:0] +:logdrop-ntp-364 - [0:0] +:logdrop-ntp-365 - [0:0] +:logdrop-ntp-366 - [0:0] +:logdrop-ntp-367 - [0:0] +:logdrop-ntp-368 - [0:0] +:logdrop-ntp-369 - [0:0] +:logdrop-ntp-37 - [0:0] +:logdrop-ntp-370 - [0:0] +:logdrop-ntp-371 - [0:0] +:logdrop-ntp-372 - [0:0] +:logdrop-ntp-373 - [0:0] +:logdrop-ntp-374 - [0:0] +:logdrop-ntp-375 - [0:0] +:logdrop-ntp-376 - [0:0] +:logdrop-ntp-377 - [0:0] +:logdrop-ntp-378 - [0:0] +:logdrop-ntp-379 - [0:0] +:logdrop-ntp-38 - [0:0] +:logdrop-ntp-380 - [0:0] +:logdrop-ntp-381 - [0:0] +:logdrop-ntp-382 - [0:0] +:logdrop-ntp-383 - [0:0] +:logdrop-ntp-384 - [0:0] +:logdrop-ntp-385 - [0:0] +:logdrop-ntp-386 - [0:0] +:logdrop-ntp-387 - [0:0] +:logdrop-ntp-388 - [0:0] +:logdrop-ntp-389 - [0:0] +:logdrop-ntp-39 - [0:0] +:logdrop-ntp-390 - [0:0] +:logdrop-ntp-391 - [0:0] +:logdrop-ntp-392 - [0:0] +:logdrop-ntp-393 - [0:0] +:logdrop-ntp-394 - [0:0] +:logdrop-ntp-395 - [0:0] +:logdrop-ntp-396 - [0:0] +:logdrop-ntp-397 - [0:0] +:logdrop-ntp-398 - [0:0] +:logdrop-ntp-399 - [0:0] +:logdrop-ntp-4 - [0:0] +:logdrop-ntp-40 - [0:0] +:logdrop-ntp-400 - [0:0] +:logdrop-ntp-401 - [0:0] +:logdrop-ntp-402 - [0:0] +:logdrop-ntp-403 - [0:0] +:logdrop-ntp-404 - [0:0] +:logdrop-ntp-405 - [0:0] +:logdrop-ntp-406 - [0:0] +:logdrop-ntp-407 - [0:0] +:logdrop-ntp-408 - [0:0] +:logdrop-ntp-409 - [0:0] +:logdrop-ntp-41 - [0:0] +:logdrop-ntp-410 - [0:0] +:logdrop-ntp-411 - [0:0] +:logdrop-ntp-412 - [0:0] +:logdrop-ntp-413 - [0:0] +:logdrop-ntp-414 - [0:0] +:logdrop-ntp-415 - [0:0] +:logdrop-ntp-416 - [0:0] +:logdrop-ntp-417 - [0:0] +:logdrop-ntp-418 - [0:0] +:logdrop-ntp-419 - [0:0] +:logdrop-ntp-42 - [0:0] +:logdrop-ntp-420 - [0:0] +:logdrop-ntp-421 - [0:0] +:logdrop-ntp-422 - [0:0] +:logdrop-ntp-423 - [0:0] +:logdrop-ntp-424 - [0:0] +:logdrop-ntp-425 - [0:0] +:logdrop-ntp-426 - [0:0] +:logdrop-ntp-427 - [0:0] +:logdrop-ntp-428 - [0:0] +:logdrop-ntp-429 - [0:0] +:logdrop-ntp-43 - [0:0] +:logdrop-ntp-430 - [0:0] +:logdrop-ntp-431 - [0:0] +:logdrop-ntp-432 - [0:0] +:logdrop-ntp-433 - [0:0] +:logdrop-ntp-434 - [0:0] +:logdrop-ntp-435 - [0:0] +:logdrop-ntp-436 - [0:0] +:logdrop-ntp-437 - [0:0] +:logdrop-ntp-438 - [0:0] +:logdrop-ntp-439 - [0:0] +:logdrop-ntp-44 - [0:0] +:logdrop-ntp-440 - [0:0] +:logdrop-ntp-441 - [0:0] +:logdrop-ntp-442 - [0:0] +:logdrop-ntp-443 - [0:0] +:logdrop-ntp-444 - [0:0] +:logdrop-ntp-445 - [0:0] +:logdrop-ntp-446 - [0:0] +:logdrop-ntp-447 - [0:0] +:logdrop-ntp-448 - [0:0] +:logdrop-ntp-449 - [0:0] +:logdrop-ntp-45 - [0:0] +:logdrop-ntp-450 - [0:0] +:logdrop-ntp-451 - [0:0] +:logdrop-ntp-452 - [0:0] +:logdrop-ntp-453 - [0:0] +:logdrop-ntp-454 - [0:0] +:logdrop-ntp-455 - [0:0] +:logdrop-ntp-456 - [0:0] +:logdrop-ntp-457 - [0:0] +:logdrop-ntp-458 - [0:0] +:logdrop-ntp-459 - [0:0] +:logdrop-ntp-46 - [0:0] +:logdrop-ntp-460 - [0:0] +:logdrop-ntp-461 - [0:0] +:logdrop-ntp-462 - [0:0] +:logdrop-ntp-463 - [0:0] +:logdrop-ntp-464 - [0:0] +:logdrop-ntp-465 - [0:0] +:logdrop-ntp-466 - [0:0] +:logdrop-ntp-467 - [0:0] +:logdrop-ntp-468 - [0:0] +:logdrop-ntp-469 - [0:0] +:logdrop-ntp-47 - [0:0] +:logdrop-ntp-470 - [0:0] +:logdrop-ntp-471 - [0:0] +:logdrop-ntp-472 - [0:0] +:logdrop-ntp-473 - [0:0] +:logdrop-ntp-474 - [0:0] +:logdrop-ntp-475 - [0:0] +:logdrop-ntp-476 - [0:0] +:logdrop-ntp-477 - [0:0] +:logdrop-ntp-478 - [0:0] +:logdrop-ntp-479 - [0:0] +:logdrop-ntp-48 - [0:0] +:logdrop-ntp-480 - [0:0] +:logdrop-ntp-481 - [0:0] +:logdrop-ntp-482 - [0:0] +:logdrop-ntp-483 - [0:0] +:logdrop-ntp-484 - [0:0] +:logdrop-ntp-485 - [0:0] +:logdrop-ntp-486 - [0:0] +:logdrop-ntp-487 - [0:0] +:logdrop-ntp-488 - [0:0] +:logdrop-ntp-489 - [0:0] +:logdrop-ntp-49 - [0:0] +:logdrop-ntp-490 - [0:0] +:logdrop-ntp-491 - [0:0] +:logdrop-ntp-492 - [0:0] +:logdrop-ntp-493 - [0:0] +:logdrop-ntp-494 - [0:0] +:logdrop-ntp-495 - [0:0] +:logdrop-ntp-496 - [0:0] +:logdrop-ntp-497 - [0:0] +:logdrop-ntp-498 - [0:0] +:logdrop-ntp-499 - [0:0] +:logdrop-ntp-5 - [0:0] +:logdrop-ntp-50 - [0:0] +:logdrop-ntp-500 - [0:0] +:logdrop-ntp-501 - [0:0] +:logdrop-ntp-502 - [0:0] +:logdrop-ntp-503 - [0:0] +:logdrop-ntp-504 - [0:0] +:logdrop-ntp-505 - [0:0] +:logdrop-ntp-506 - [0:0] +:logdrop-ntp-507 - [0:0] +:logdrop-ntp-508 - [0:0] +:logdrop-ntp-509 - [0:0] +:logdrop-ntp-51 - [0:0] +:logdrop-ntp-510 - [0:0] +:logdrop-ntp-511 - [0:0] +:logdrop-ntp-512 - [0:0] +:logdrop-ntp-513 - [0:0] +:logdrop-ntp-514 - [0:0] +:logdrop-ntp-515 - [0:0] +:logdrop-ntp-516 - [0:0] +:logdrop-ntp-517 - [0:0] +:logdrop-ntp-518 - [0:0] +:logdrop-ntp-519 - [0:0] +:logdrop-ntp-52 - [0:0] +:logdrop-ntp-520 - [0:0] +:logdrop-ntp-521 - [0:0] +:logdrop-ntp-522 - [0:0] +:logdrop-ntp-523 - [0:0] +:logdrop-ntp-524 - [0:0] +:logdrop-ntp-525 - [0:0] +:logdrop-ntp-526 - [0:0] +:logdrop-ntp-527 - [0:0] +:logdrop-ntp-528 - [0:0] +:logdrop-ntp-529 - [0:0] +:logdrop-ntp-53 - [0:0] +:logdrop-ntp-530 - [0:0] +:logdrop-ntp-531 - [0:0] +:logdrop-ntp-532 - [0:0] +:logdrop-ntp-533 - [0:0] +:logdrop-ntp-534 - [0:0] +:logdrop-ntp-535 - [0:0] +:logdrop-ntp-536 - [0:0] +:logdrop-ntp-537 - [0:0] +:logdrop-ntp-538 - [0:0] +:logdrop-ntp-539 - [0:0] +:logdrop-ntp-54 - [0:0] +:logdrop-ntp-540 - [0:0] +:logdrop-ntp-541 - [0:0] +:logdrop-ntp-542 - [0:0] +:logdrop-ntp-543 - [0:0] +:logdrop-ntp-544 - [0:0] +:logdrop-ntp-545 - [0:0] +:logdrop-ntp-546 - [0:0] +:logdrop-ntp-547 - [0:0] +:logdrop-ntp-548 - [0:0] +:logdrop-ntp-549 - [0:0] +:logdrop-ntp-55 - [0:0] +:logdrop-ntp-56 - [0:0] +:logdrop-ntp-57 - [0:0] +:logdrop-ntp-58 - [0:0] +:logdrop-ntp-59 - [0:0] +:logdrop-ntp-6 - [0:0] +:logdrop-ntp-60 - [0:0] +:logdrop-ntp-61 - [0:0] +:logdrop-ntp-62 - [0:0] +:logdrop-ntp-63 - [0:0] +:logdrop-ntp-64 - [0:0] +:logdrop-ntp-65 - [0:0] +:logdrop-ntp-66 - [0:0] +:logdrop-ntp-67 - [0:0] +:logdrop-ntp-68 - [0:0] +:logdrop-ntp-69 - [0:0] +:logdrop-ntp-7 - [0:0] +:logdrop-ntp-70 - [0:0] +:logdrop-ntp-71 - [0:0] +:logdrop-ntp-72 - [0:0] +:logdrop-ntp-73 - [0:0] +:logdrop-ntp-74 - [0:0] +:logdrop-ntp-75 - [0:0] +:logdrop-ntp-76 - [0:0] +:logdrop-ntp-77 - [0:0] +:logdrop-ntp-78 - [0:0] +:logdrop-ntp-79 - [0:0] +:logdrop-ntp-8 - [0:0] +:logdrop-ntp-80 - [0:0] +:logdrop-ntp-81 - [0:0] +:logdrop-ntp-82 - [0:0] +:logdrop-ntp-83 - [0:0] +:logdrop-ntp-84 - [0:0] +:logdrop-ntp-85 - [0:0] +:logdrop-ntp-86 - [0:0] +:logdrop-ntp-87 - [0:0] +:logdrop-ntp-88 - [0:0] +:logdrop-ntp-89 - [0:0] +:logdrop-ntp-9 - [0:0] +:logdrop-ntp-90 - [0:0] +:logdrop-ntp-91 - [0:0] +:logdrop-ntp-92 - [0:0] +:logdrop-ntp-93 - [0:0] +:logdrop-ntp-94 - [0:0] +:logdrop-ntp-95 - [0:0] +:logdrop-ntp-96 - [0:0] +:logdrop-ntp-97 - [0:0] +:logdrop-ntp-98 - [0:0] +:logdrop-ntp-99 - [0:0] :logpass-0 - [0:0] :logpass-1 - [0:0] :logpass-2 - [0:0] @@ -100430,25 +100430,25 @@ COMMIT -A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -j ACCEPT --A FORWARD -j logdrop-2200 +-A FORWARD -j logdrop-1650 -A FORWARD -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-99 --A FORWARD -j logdrop-2201 +-A FORWARD -j logaccept-66 +-A FORWARD -j logdrop-1651 -A FORWARD -j logpass-0 --A FORWARD -j logaccept-100 --A FORWARD -j logdrop-2202 +-A FORWARD -j logaccept-67 +-A FORWARD -j logdrop-1652 -A FORWARD -j logpass-1 --A FORWARD -j logaccept-101 --A FORWARD -j logdrop-2203 +-A FORWARD -j logaccept-68 +-A FORWARD -j logdrop-1653 -A FORWARD -j logpass-2 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-102 --A FORWARD -j logdrop-2204 +-A FORWARD -j logaccept-69 +-A FORWARD -j logdrop-1654 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -o eth1 -d fc00::/7 -j ACCEPT -A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT @@ -101967,982 +101967,982 @@ COMMIT -A INPUT -j logaccept-final-304 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-305 --A INPUT -i eth0 -j limit-2928 --A INPUT -i eth0 -j limit-2929 --A INPUT -i eth0 -j limit-2930 --A INPUT -i eth0 -j limit-2931 --A INPUT -i eth0 -j limit-2932 --A INPUT -i eth0 -j limit-2933 --A INPUT -i eth0 -j limit-2934 --A INPUT -i eth0 -j limit-2935 --A INPUT -i eth0 -j limit-2936 --A INPUT -i eth0 -j limit-2937 --A INPUT -i eth0 -j limit-2938 --A INPUT -i eth0 -j limit-2939 --A INPUT -i eth0 -j limit-2940 --A INPUT -i eth0 -j limit-2941 --A INPUT -i eth0 -j limit-2942 --A INPUT -i eth0 -j limit-2943 --A INPUT -i eth0 -j limit-2944 --A INPUT -i eth0 -j limit-2945 --A INPUT -i eth0 -j limit-2946 --A INPUT -i eth0 -j limit-2947 --A INPUT -i eth0 -j limit-2948 --A INPUT -i eth0 -j limit-2949 --A INPUT -i eth0 -j limit-2950 --A INPUT -i eth0 -j limit-2951 --A INPUT -i eth0 -j limit-2952 --A INPUT -i eth0 -j limit-2953 --A INPUT -i eth0 -j limit-2954 --A INPUT -i eth0 -j limit-2955 --A INPUT -i eth0 -j limit-2956 --A INPUT -i eth0 -j limit-2957 --A INPUT -i eth0 -j limit-2958 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2960 --A INPUT -i eth0 -j limit-2961 --A INPUT -i eth0 -j limit-2962 --A INPUT -i eth0 -j limit-2963 --A INPUT -i eth0 -j limit-2964 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2966 --A INPUT -i eth0 -j limit-2967 --A INPUT -i eth0 -j limit-2968 --A INPUT -i eth0 -j limit-2969 --A INPUT -i eth0 -j limit-2970 --A INPUT -i eth0 -j limit-2971 --A INPUT -i eth0 -j limit-2972 --A INPUT -i eth0 -j limit-2973 --A INPUT -i eth0 -j limit-2974 --A INPUT -i eth0 -j limit-2975 --A INPUT -i eth0 -j limit-2976 --A INPUT -i eth0 -j limit-2977 --A INPUT -i eth0 -j limit-2978 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2980 --A INPUT -i eth0 -j limit-2981 --A INPUT -i eth0 -j limit-2982 --A INPUT -i eth0 -j limit-2983 --A INPUT -i eth0 -j limit-2984 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2986 --A INPUT -i eth0 -j limit-2987 --A INPUT -i eth0 -j limit-2988 --A INPUT -i eth0 -j limit-2989 --A INPUT -i eth0 -j limit-2990 --A INPUT -i eth0 -j limit-2991 --A INPUT -i eth0 -j limit-2992 --A INPUT -i eth0 -j limit-2993 --A INPUT -i eth0 -j limit-2994 --A INPUT -i eth0 -j limit-2995 --A INPUT -i eth0 -j limit-2996 --A INPUT -i eth0 -j limit-2997 --A INPUT -i eth0 -j limit-2998 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3000 --A INPUT -i eth0 -j limit-3001 --A INPUT -i eth0 -j limit-3002 --A INPUT -i eth0 -j limit-3003 --A INPUT -i eth0 -j limit-3004 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3006 --A INPUT -i eth0 -j limit-3007 --A INPUT -i eth0 -j limit-3008 --A INPUT -i eth0 -j limit-3009 --A INPUT -i eth0 -j limit-3010 --A INPUT -i eth0 -j limit-3011 --A INPUT -i eth0 -j limit-3012 --A INPUT -i eth0 -j limit-3013 --A INPUT -i eth0 -j limit-3014 --A INPUT -i eth0 -j limit-3015 --A INPUT -i eth0 -j limit-3016 --A INPUT -i eth0 -j limit-3017 --A INPUT -i eth0 -j limit-3018 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3020 --A INPUT -i eth0 -j limit-3021 --A INPUT -i eth0 -j limit-3022 --A INPUT -i eth0 -j limit-3023 --A INPUT -i eth0 -j limit-3024 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3026 --A INPUT -i eth0 -j limit-3027 --A INPUT -i eth0 -j limit-3028 --A INPUT -i eth0 -j limit-3029 --A INPUT -i eth0 -j limit-3030 --A INPUT -i eth0 -j limit-3031 --A INPUT -i eth0 -j limit-3032 --A INPUT -i eth0 -j limit-3033 --A INPUT -i eth0 -j limit-3034 --A INPUT -i eth0 -j limit-3035 --A INPUT -i eth0 -j limit-3036 --A INPUT -i eth0 -j limit-3037 --A INPUT -i eth0 -j limit-3038 --A INPUT -i eth0 -j limit-3039 --A INPUT -i eth0 -j limit-3040 --A INPUT -i eth0 -j limit-3041 --A INPUT -i eth0 -j limit-3042 --A INPUT -i eth0 -j limit-3043 --A INPUT -i eth0 -j limit-3044 --A INPUT -i eth0 -j limit-3045 --A INPUT -i eth0 -j limit-3046 --A INPUT -i eth0 -j limit-3047 --A INPUT -i eth0 -j limit-3048 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1681 --A INPUT -i eth0 -j limit-3050 --A INPUT -i eth0 -j limit-3051 --A INPUT -i eth0 -j limit-3052 --A INPUT -i eth0 -j limit-3053 --A INPUT -i eth0 -j limit-3054 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1687 --A INPUT -i eth0 -j limit-3056 --A INPUT -i eth0 -j limit-3057 --A INPUT -i eth0 -j limit-3058 --A INPUT -i eth0 -j limit-3059 --A INPUT -i eth0 -j limit-3060 --A INPUT -i eth0 -j limit-3061 --A INPUT -i eth0 -j limit-3062 --A INPUT -i eth0 -j limit-3063 --A INPUT -i eth0 -j limit-3064 --A INPUT -i eth0 -j limit-3065 --A INPUT -i eth0 -j limit-3066 --A INPUT -i eth0 -j limit-3067 --A INPUT -i eth0 -j limit-3068 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1701 --A INPUT -i eth0 -j limit-3070 --A INPUT -i eth0 -j limit-3071 --A INPUT -i eth0 -j limit-3072 --A INPUT -i eth0 -j limit-3073 --A INPUT -i eth0 -j limit-3074 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1707 --A INPUT -i eth0 -j limit-3076 --A INPUT -i eth0 -j limit-3077 --A INPUT -i eth0 -j limit-3078 --A INPUT -i eth0 -j limit-3079 --A INPUT -i eth0 -j limit-3080 --A INPUT -i eth0 -j limit-3081 --A INPUT -i eth0 -j limit-3082 --A INPUT -i eth0 -j limit-3083 --A INPUT -i eth0 -j limit-3084 --A INPUT -i eth0 -j limit-3085 --A INPUT -i eth0 -j limit-3086 --A INPUT -i eth0 -j limit-3087 --A INPUT -i eth0 -j limit-3088 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1721 --A INPUT -i eth0 -j limit-3090 --A INPUT -i eth0 -j limit-3091 --A INPUT -i eth0 -j limit-3092 --A INPUT -i eth0 -j limit-3093 --A INPUT -i eth0 -j limit-3094 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1727 --A INPUT -i eth0 -j limit-3096 --A INPUT -i eth0 -j limit-3097 --A INPUT -i eth0 -j limit-3098 --A INPUT -i eth0 -j limit-3099 --A INPUT -i eth0 -j limit-3100 --A INPUT -i eth0 -j limit-3101 --A INPUT -i eth0 -j limit-3102 --A INPUT -i eth0 -j limit-3103 --A INPUT -i eth0 -j limit-3104 --A INPUT -i eth0 -j limit-3105 --A INPUT -i eth0 -j limit-3106 --A INPUT -i eth0 -j limit-3107 --A INPUT -i eth0 -j limit-3108 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1741 --A INPUT -i eth0 -j limit-3110 --A INPUT -i eth0 -j limit-3111 --A INPUT -i eth0 -j limit-3112 --A INPUT -i eth0 -j limit-3113 --A INPUT -i eth0 -j limit-3114 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1747 --A INPUT -i eth0 -j limit-3116 --A INPUT -i eth0 -j limit-3117 --A INPUT -i eth0 -j limit-3118 --A INPUT -i eth0 -j limit-3119 --A INPUT -i eth0 -j limit-3120 --A INPUT -i eth0 -j limit-3121 --A INPUT -i eth0 -j limit-3122 --A INPUT -i eth0 -j limit-3123 --A INPUT -i eth0 -j limit-3124 --A INPUT -i eth0 -j limit-3125 --A INPUT -i eth0 -j limit-3126 --A INPUT -i eth0 -j limit-3127 --A INPUT -i eth0 -j limit-3128 --A INPUT -i eth0 -j limit-3129 --A INPUT -i eth0 -j limit-3130 --A INPUT -i eth0 -j limit-3131 --A INPUT -i eth0 -j limit-3132 --A INPUT -i eth0 -j limit-3133 --A INPUT -i eth0 -j limit-3134 --A INPUT -i eth0 -j limit-3135 --A INPUT -i eth0 -j limit-3136 --A INPUT -i eth0 -j limit-3137 --A INPUT -i eth0 -j limit-3138 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1771 --A INPUT -i eth0 -j limit-3140 --A INPUT -i eth0 -j limit-3141 --A INPUT -i eth0 -j limit-3142 --A INPUT -i eth0 -j limit-3143 --A INPUT -i eth0 -j limit-3144 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1777 --A INPUT -i eth0 -j limit-3146 --A INPUT -i eth0 -j limit-3147 --A INPUT -i eth0 -j limit-3148 --A INPUT -i eth0 -j limit-3149 --A INPUT -i eth0 -j limit-3150 --A INPUT -i eth0 -j limit-3151 --A INPUT -i eth0 -j limit-3152 --A INPUT -i eth0 -j limit-3153 --A INPUT -i eth0 -j limit-3154 --A INPUT -i eth0 -j limit-3155 --A INPUT -i eth0 -j limit-3156 --A INPUT -i eth0 -j limit-3157 --A INPUT -i eth0 -j limit-3158 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1791 --A INPUT -i eth0 -j limit-3160 --A INPUT -i eth0 -j limit-3161 --A INPUT -i eth0 -j limit-3162 --A INPUT -i eth0 -j limit-3163 --A INPUT -i eth0 -j limit-3164 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1797 --A INPUT -i eth0 -j limit-3166 --A INPUT -i eth0 -j limit-3167 --A INPUT -i eth0 -j limit-3168 --A INPUT -i eth0 -j limit-3169 --A INPUT -i eth0 -j limit-3170 --A INPUT -i eth0 -j limit-3171 --A INPUT -i eth0 -j limit-3172 --A INPUT -i eth0 -j limit-3173 --A INPUT -i eth0 -j limit-3174 --A INPUT -i eth0 -j limit-3175 --A INPUT -i eth0 -j limit-3176 --A INPUT -i eth0 -j limit-3177 --A INPUT -i eth0 -j limit-3178 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1811 --A INPUT -i eth0 -j limit-3180 --A INPUT -i eth0 -j limit-3181 --A INPUT -i eth0 -j limit-3182 --A INPUT -i eth0 -j limit-3183 --A INPUT -i eth0 -j limit-3184 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1817 --A INPUT -i eth0 -j limit-3186 --A INPUT -i eth0 -j limit-3187 --A INPUT -i eth0 -j limit-3188 --A INPUT -i eth0 -j limit-3189 --A INPUT -i eth0 -j limit-3190 --A INPUT -i eth0 -j limit-3191 --A INPUT -i eth0 -j limit-3192 --A INPUT -i eth0 -j limit-3193 --A INPUT -i eth0 -j limit-3194 --A INPUT -i eth0 -j limit-3195 --A INPUT -i eth0 -j limit-3196 --A INPUT -i eth0 -j limit-3197 --A INPUT -i eth0 -j limit-3198 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1831 --A INPUT -i eth0 -j limit-3200 --A INPUT -i eth0 -j limit-3201 --A INPUT -i eth0 -j limit-3202 --A INPUT -i eth0 -j limit-3203 --A INPUT -i eth0 -j limit-3204 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1837 --A INPUT -i eth0 -j limit-3206 --A INPUT -i eth0 -j limit-3207 --A INPUT -i eth0 -j limit-3208 --A INPUT -i eth0 -j limit-3209 --A INPUT -i eth0 -j limit-3210 --A INPUT -i eth0 -j limit-3211 --A INPUT -i eth0 -j limit-3212 --A INPUT -i eth0 -j limit-3213 --A INPUT -i eth0 -j limit-3214 --A INPUT -i eth0 -j limit-3215 --A INPUT -i eth0 -j limit-3216 --A INPUT -i eth0 -j limit-3217 --A INPUT -i eth0 -j limit-3218 --A INPUT -i eth0 -j limit-3219 --A INPUT -i eth0 -j limit-3220 --A INPUT -i eth0 -j limit-3221 --A INPUT -i eth0 -j limit-3222 --A INPUT -i eth0 -j limit-3223 --A INPUT -i eth0 -j limit-3224 --A INPUT -i eth0 -j limit-3225 --A INPUT -i eth0 -j limit-3226 --A INPUT -i eth0 -j limit-3227 --A INPUT -i eth0 -j limit-3228 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3230 --A INPUT -i eth0 -j limit-3231 --A INPUT -i eth0 -j limit-3232 --A INPUT -i eth0 -j limit-3233 --A INPUT -i eth0 -j limit-3234 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3236 --A INPUT -i eth0 -j limit-3237 --A INPUT -i eth0 -j limit-3238 --A INPUT -i eth0 -j limit-3239 --A INPUT -i eth0 -j limit-3240 --A INPUT -i eth0 -j limit-3241 --A INPUT -i eth0 -j limit-3242 --A INPUT -i eth0 -j limit-3243 --A INPUT -i eth0 -j limit-3244 --A INPUT -i eth0 -j limit-3245 --A INPUT -i eth0 -j limit-3246 --A INPUT -i eth0 -j limit-3247 --A INPUT -i eth0 -j limit-3248 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3250 --A INPUT -i eth0 -j limit-3251 --A INPUT -i eth0 -j limit-3252 --A INPUT -i eth0 -j limit-3253 --A INPUT -i eth0 -j limit-3254 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3256 --A INPUT -i eth0 -j limit-3257 --A INPUT -i eth0 -j limit-3258 --A INPUT -i eth0 -j limit-3259 --A INPUT -i eth0 -j limit-3260 --A INPUT -i eth0 -j limit-3261 --A INPUT -i eth0 -j limit-3262 --A INPUT -i eth0 -j limit-3263 --A INPUT -i eth0 -j limit-3264 --A INPUT -i eth0 -j limit-3265 --A INPUT -i eth0 -j limit-3266 --A INPUT -i eth0 -j limit-3267 --A INPUT -i eth0 -j limit-3268 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3270 --A INPUT -i eth0 -j limit-3271 --A INPUT -i eth0 -j limit-3272 --A INPUT -i eth0 -j limit-3273 --A INPUT -i eth0 -j limit-3274 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3276 --A INPUT -i eth0 -j limit-3277 --A INPUT -i eth0 -j limit-3278 --A INPUT -i eth0 -j limit-3279 --A INPUT -i eth0 -j limit-3280 --A INPUT -i eth0 -j limit-3281 --A INPUT -i eth0 -j limit-3282 --A INPUT -i eth0 -j limit-3283 --A INPUT -i eth0 -j limit-3284 --A INPUT -i eth0 -j limit-3285 --A INPUT -i eth0 -j limit-3286 --A INPUT -i eth0 -j limit-3287 --A INPUT -i eth0 -j limit-3288 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3290 --A INPUT -i eth0 -j limit-3291 --A INPUT -i eth0 -j limit-3292 --A INPUT -i eth0 -j limit-3293 --A INPUT -i eth0 -j limit-3294 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3296 --A INPUT -i eth0 -j limit-3297 --A INPUT -i eth0 -j limit-3298 --A INPUT -i eth0 -j limit-3299 --A INPUT -i eth0 -j limit-3300 --A INPUT -i eth0 -j limit-3301 --A INPUT -i eth0 -j limit-3302 --A INPUT -i eth0 -j limit-3303 --A INPUT -i eth0 -j limit-3304 --A INPUT -i eth0 -j limit-3305 --A INPUT -i eth0 -j limit-3306 --A INPUT -i eth0 -j limit-3307 --A INPUT -i eth0 -j limit-3308 --A INPUT -i eth0 -j limit-3309 --A INPUT -i eth0 -j limit-3310 --A INPUT -i eth0 -j limit-3311 --A INPUT -i eth0 -j limit-3312 --A INPUT -i eth0 -j limit-3313 --A INPUT -i eth0 -j limit-3314 --A INPUT -i eth0 -j limit-3315 --A INPUT -i eth0 -j limit-3316 --A INPUT -i eth0 -j limit-3317 --A INPUT -i eth0 -j limit-3318 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1861 --A INPUT -i eth0 -j limit-3320 --A INPUT -i eth0 -j limit-3321 --A INPUT -i eth0 -j limit-3322 --A INPUT -i eth0 -j limit-3323 --A INPUT -i eth0 -j limit-3324 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1867 --A INPUT -i eth0 -j limit-3326 --A INPUT -i eth0 -j limit-3327 --A INPUT -i eth0 -j limit-3328 --A INPUT -i eth0 -j limit-3329 --A INPUT -i eth0 -j limit-3330 --A INPUT -i eth0 -j limit-3331 --A INPUT -i eth0 -j limit-3332 --A INPUT -i eth0 -j limit-3333 --A INPUT -i eth0 -j limit-3334 --A INPUT -i eth0 -j limit-3335 --A INPUT -i eth0 -j limit-3336 --A INPUT -i eth0 -j limit-3337 --A INPUT -i eth0 -j limit-3338 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1881 --A INPUT -i eth0 -j limit-3340 --A INPUT -i eth0 -j limit-3341 --A INPUT -i eth0 -j limit-3342 --A INPUT -i eth0 -j limit-3343 --A INPUT -i eth0 -j limit-3344 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1887 --A INPUT -i eth0 -j limit-3346 --A INPUT -i eth0 -j limit-3347 --A INPUT -i eth0 -j limit-3348 --A INPUT -i eth0 -j limit-3349 --A INPUT -i eth0 -j limit-3350 --A INPUT -i eth0 -j limit-3351 --A INPUT -i eth0 -j limit-3352 --A INPUT -i eth0 -j limit-3353 --A INPUT -i eth0 -j limit-3354 --A INPUT -i eth0 -j limit-3355 --A INPUT -i eth0 -j limit-3356 --A INPUT -i eth0 -j limit-3357 --A INPUT -i eth0 -j limit-3358 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1901 --A INPUT -i eth0 -j limit-3360 --A INPUT -i eth0 -j limit-3361 --A INPUT -i eth0 -j limit-3362 --A INPUT -i eth0 -j limit-3363 --A INPUT -i eth0 -j limit-3364 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1907 --A INPUT -i eth0 -j limit-3366 --A INPUT -i eth0 -j limit-3367 --A INPUT -i eth0 -j limit-3368 --A INPUT -i eth0 -j limit-3369 --A INPUT -i eth0 -j limit-3370 --A INPUT -i eth0 -j limit-3371 --A INPUT -i eth0 -j limit-3372 --A INPUT -i eth0 -j limit-3373 --A INPUT -i eth0 -j limit-3374 --A INPUT -i eth0 -j limit-3375 --A INPUT -i eth0 -j limit-3376 --A INPUT -i eth0 -j limit-3377 --A INPUT -i eth0 -j limit-3378 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1921 --A INPUT -i eth0 -j limit-3380 --A INPUT -i eth0 -j limit-3381 --A INPUT -i eth0 -j limit-3382 --A INPUT -i eth0 -j limit-3383 --A INPUT -i eth0 -j limit-3384 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1927 --A INPUT -i eth0 -j limit-3386 --A INPUT -i eth0 -j limit-3387 --A INPUT -i eth0 -j limit-3388 --A INPUT -i eth0 -j limit-3389 --A INPUT -i eth0 -j limit-3390 --A INPUT -i eth0 -j limit-3391 --A INPUT -i eth0 -j limit-3392 --A INPUT -i eth0 -j limit-3393 --A INPUT -i eth0 -j limit-3394 --A INPUT -i eth0 -j limit-3395 --A INPUT -i eth0 -j limit-3396 --A INPUT -i eth0 -j limit-3397 --A INPUT -i eth0 -j limit-3398 --A INPUT -i eth0 -j limit-3399 --A INPUT -i eth0 -j limit-3400 --A INPUT -i eth0 -j limit-3401 --A INPUT -i eth0 -j limit-3402 --A INPUT -i eth0 -j limit-3403 --A INPUT -i eth0 -j limit-3404 --A INPUT -i eth0 -j limit-3405 --A INPUT -i eth0 -j limit-3406 --A INPUT -i eth0 -j limit-3407 --A INPUT -i eth0 -j limit-3408 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3410 --A INPUT -i eth0 -j limit-3411 --A INPUT -i eth0 -j limit-3412 --A INPUT -i eth0 -j limit-3413 --A INPUT -i eth0 -j limit-3414 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3416 --A INPUT -i eth0 -j limit-3417 --A INPUT -i eth0 -j limit-3418 --A INPUT -i eth0 -j limit-3419 --A INPUT -i eth0 -j limit-3420 --A INPUT -i eth0 -j limit-3421 --A INPUT -i eth0 -j limit-3422 --A INPUT -i eth0 -j limit-3423 --A INPUT -i eth0 -j limit-3424 --A INPUT -i eth0 -j limit-3425 --A INPUT -i eth0 -j limit-3426 --A INPUT -i eth0 -j limit-3427 --A INPUT -i eth0 -j limit-3428 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3430 --A INPUT -i eth0 -j limit-3431 --A INPUT -i eth0 -j limit-3432 --A INPUT -i eth0 -j limit-3433 --A INPUT -i eth0 -j limit-3434 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3436 --A INPUT -i eth0 -j limit-3437 --A INPUT -i eth0 -j limit-3438 --A INPUT -i eth0 -j limit-3439 --A INPUT -i eth0 -j limit-3440 --A INPUT -i eth0 -j limit-3441 --A INPUT -i eth0 -j limit-3442 --A INPUT -i eth0 -j limit-3443 --A INPUT -i eth0 -j limit-3444 --A INPUT -i eth0 -j limit-3445 --A INPUT -i eth0 -j limit-3446 --A INPUT -i eth0 -j limit-3447 --A INPUT -i eth0 -j limit-3448 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3450 --A INPUT -i eth0 -j limit-3451 --A INPUT -i eth0 -j limit-3452 --A INPUT -i eth0 -j limit-3453 --A INPUT -i eth0 -j limit-3454 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3456 --A INPUT -i eth0 -j limit-3457 --A INPUT -i eth0 -j limit-3458 --A INPUT -i eth0 -j limit-3459 --A INPUT -i eth0 -j limit-3460 --A INPUT -i eth0 -j limit-3461 --A INPUT -i eth0 -j limit-3462 --A INPUT -i eth0 -j limit-3463 --A INPUT -i eth0 -j limit-3464 --A INPUT -i eth0 -j limit-3465 --A INPUT -i eth0 -j limit-3466 --A INPUT -i eth0 -j limit-3467 --A INPUT -i eth0 -j limit-3468 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3470 --A INPUT -i eth0 -j limit-3471 --A INPUT -i eth0 -j limit-3472 --A INPUT -i eth0 -j limit-3473 --A INPUT -i eth0 -j limit-3474 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3476 --A INPUT -i eth0 -j limit-3477 --A INPUT -i eth0 -j limit-3478 --A INPUT -i eth0 -j limit-3479 --A INPUT -i eth0 -j limit-3480 --A INPUT -i eth0 -j limit-3481 --A INPUT -i eth0 -j limit-3482 --A INPUT -i eth0 -j limit-3483 --A INPUT -i eth0 -j limit-3484 --A INPUT -i eth0 -j limit-3485 --A INPUT -i eth0 -j limit-3486 --A INPUT -i eth0 -j limit-3487 --A INPUT -i eth0 -j limit-3488 --A INPUT -i eth0 -j limit-3489 --A INPUT -i eth0 -j limit-3490 --A INPUT -i eth0 -j limit-3491 --A INPUT -i eth0 -j limit-3492 --A INPUT -i eth0 -j limit-3493 --A INPUT -i eth0 -j limit-3494 --A INPUT -i eth0 -j limit-3495 --A INPUT -i eth0 -j limit-3496 --A INPUT -i eth0 -j limit-3497 --A INPUT -i eth0 -j limit-3498 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1951 --A INPUT -i eth0 -j limit-3500 --A INPUT -i eth0 -j limit-3501 --A INPUT -i eth0 -j limit-3502 --A INPUT -i eth0 -j limit-3503 --A INPUT -i eth0 -j limit-3504 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1957 --A INPUT -i eth0 -j limit-3506 --A INPUT -i eth0 -j limit-3507 --A INPUT -i eth0 -j limit-3508 --A INPUT -i eth0 -j limit-3509 --A INPUT -i eth0 -j limit-3510 --A INPUT -i eth0 -j limit-3511 --A INPUT -i eth0 -j limit-3512 --A INPUT -i eth0 -j limit-3513 --A INPUT -i eth0 -j limit-3514 --A INPUT -i eth0 -j limit-3515 --A INPUT -i eth0 -j limit-3516 --A INPUT -i eth0 -j limit-3517 --A INPUT -i eth0 -j limit-3518 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1971 --A INPUT -i eth0 -j limit-3520 --A INPUT -i eth0 -j limit-3521 --A INPUT -i eth0 -j limit-3522 --A INPUT -i eth0 -j limit-3523 --A INPUT -i eth0 -j limit-3524 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1977 --A INPUT -i eth0 -j limit-3526 --A INPUT -i eth0 -j limit-3527 --A INPUT -i eth0 -j limit-3528 --A INPUT -i eth0 -j limit-3529 --A INPUT -i eth0 -j limit-3530 --A INPUT -i eth0 -j limit-3531 --A INPUT -i eth0 -j limit-3532 --A INPUT -i eth0 -j limit-3533 --A INPUT -i eth0 -j limit-3534 --A INPUT -i eth0 -j limit-3535 --A INPUT -i eth0 -j limit-3536 --A INPUT -i eth0 -j limit-3537 --A INPUT -i eth0 -j limit-3538 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1991 --A INPUT -i eth0 -j limit-3540 --A INPUT -i eth0 -j limit-3541 --A INPUT -i eth0 -j limit-3542 --A INPUT -i eth0 -j limit-3543 --A INPUT -i eth0 -j limit-3544 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1997 --A INPUT -i eth0 -j limit-3546 --A INPUT -i eth0 -j limit-3547 --A INPUT -i eth0 -j limit-3548 --A INPUT -i eth0 -j limit-3549 --A INPUT -i eth0 -j limit-3550 --A INPUT -i eth0 -j limit-3551 --A INPUT -i eth0 -j limit-3552 --A INPUT -i eth0 -j limit-3553 --A INPUT -i eth0 -j limit-3554 --A INPUT -i eth0 -j limit-3555 --A INPUT -i eth0 -j limit-3556 --A INPUT -i eth0 -j limit-3557 --A INPUT -i eth0 -j limit-3558 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2011 --A INPUT -i eth0 -j limit-3560 --A INPUT -i eth0 -j limit-3561 --A INPUT -i eth0 -j limit-3562 --A INPUT -i eth0 -j limit-3563 --A INPUT -i eth0 -j limit-3564 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2017 --A INPUT -i eth0 -j limit-3566 --A INPUT -i eth0 -j limit-3567 --A INPUT -i eth0 -j limit-3568 --A INPUT -i eth0 -j limit-3569 --A INPUT -i eth0 -j limit-3570 --A INPUT -i eth0 -j limit-3571 --A INPUT -i eth0 -j limit-3572 --A INPUT -i eth0 -j limit-3573 --A INPUT -i eth0 -j limit-3574 --A INPUT -i eth0 -j limit-3575 --A INPUT -i eth0 -j limit-3576 --A INPUT -i eth0 -j limit-3577 --A INPUT -i eth0 -j limit-3578 --A INPUT -i eth0 -j limit-3579 --A INPUT -i eth0 -j limit-3580 --A INPUT -i eth0 -j limit-3581 --A INPUT -i eth0 -j limit-3582 --A INPUT -i eth0 -j limit-3583 --A INPUT -i eth0 -j limit-3584 --A INPUT -i eth0 -j limit-3585 --A INPUT -i eth0 -j limit-3586 --A INPUT -i eth0 -j limit-3587 --A INPUT -i eth0 -j limit-3588 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2041 --A INPUT -i eth0 -j limit-3590 --A INPUT -i eth0 -j limit-3591 --A INPUT -i eth0 -j limit-3592 --A INPUT -i eth0 -j limit-3593 --A INPUT -i eth0 -j limit-3594 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2047 --A INPUT -i eth0 -j limit-3596 --A INPUT -i eth0 -j limit-3597 --A INPUT -i eth0 -j limit-3598 --A INPUT -i eth0 -j limit-3599 --A INPUT -i eth0 -j limit-3600 --A INPUT -i eth0 -j limit-3601 --A INPUT -i eth0 -j limit-3602 --A INPUT -i eth0 -j limit-3603 --A INPUT -i eth0 -j limit-3604 --A INPUT -i eth0 -j limit-3605 --A INPUT -i eth0 -j limit-3606 --A INPUT -i eth0 -j limit-3607 --A INPUT -i eth0 -j limit-3608 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2061 --A INPUT -i eth0 -j limit-3610 --A INPUT -i eth0 -j limit-3611 --A INPUT -i eth0 -j limit-3612 --A INPUT -i eth0 -j limit-3613 --A INPUT -i eth0 -j limit-3614 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2067 --A INPUT -i eth0 -j limit-3616 --A INPUT -i eth0 -j limit-3617 --A INPUT -i eth0 -j limit-3618 --A INPUT -i eth0 -j limit-3619 --A INPUT -i eth0 -j limit-3620 --A INPUT -i eth0 -j limit-3621 --A INPUT -i eth0 -j limit-3622 --A INPUT -i eth0 -j limit-3623 --A INPUT -i eth0 -j limit-3624 --A INPUT -i eth0 -j limit-3625 --A INPUT -i eth0 -j limit-3626 --A INPUT -i eth0 -j limit-3627 --A INPUT -i eth0 -j limit-3628 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2081 --A INPUT -i eth0 -j limit-3630 --A INPUT -i eth0 -j limit-3631 --A INPUT -i eth0 -j limit-3632 --A INPUT -i eth0 -j limit-3633 --A INPUT -i eth0 -j limit-3634 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2087 --A INPUT -i eth0 -j limit-3636 --A INPUT -i eth0 -j limit-3637 --A INPUT -i eth0 -j limit-3638 --A INPUT -i eth0 -j limit-3639 --A INPUT -i eth0 -j limit-3640 --A INPUT -i eth0 -j limit-3641 --A INPUT -i eth0 -j limit-3642 --A INPUT -i eth0 -j limit-3643 --A INPUT -i eth0 -j limit-3644 --A INPUT -i eth0 -j limit-3645 --A INPUT -i eth0 -j limit-3646 --A INPUT -i eth0 -j limit-3647 --A INPUT -i eth0 -j limit-3648 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2101 --A INPUT -i eth0 -j limit-3650 --A INPUT -i eth0 -j limit-3651 --A INPUT -i eth0 -j limit-3652 --A INPUT -i eth0 -j limit-3653 --A INPUT -i eth0 -j limit-3654 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2107 --A INPUT -i eth0 -j limit-3656 --A INPUT -i eth0 -j limit-3657 --A INPUT -i eth0 -j limit-3658 --A INPUT -i eth0 -j limit-3659 --A INPUT -i eth0 -j limit-3660 --A INPUT -i eth0 -j limit-3661 --A INPUT -i eth0 -j limit-3662 --A INPUT -i eth0 -j limit-3663 --A INPUT -i eth0 -j limit-3664 --A INPUT -i eth0 -j limit-3665 --A INPUT -i eth0 -j limit-3666 --A INPUT -i eth0 -j limit-3667 --A INPUT -i eth0 -j limit-3668 --A INPUT -i eth0 -j limit-3669 --A INPUT -i eth0 -j limit-3670 --A INPUT -i eth0 -j limit-3671 --A INPUT -i eth0 -j limit-3672 --A INPUT -i eth0 -j limit-3673 --A INPUT -i eth0 -j limit-3674 --A INPUT -i eth0 -j limit-3675 --A INPUT -i eth0 -j limit-3676 --A INPUT -i eth0 -j limit-3677 --A INPUT -i eth0 -j limit-3678 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3680 --A INPUT -i eth0 -j limit-3681 --A INPUT -i eth0 -j limit-3682 --A INPUT -i eth0 -j limit-3683 --A INPUT -i eth0 -j limit-3684 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3686 --A INPUT -i eth0 -j limit-3687 --A INPUT -i eth0 -j limit-3688 --A INPUT -i eth0 -j limit-3689 --A INPUT -i eth0 -j limit-3690 --A INPUT -i eth0 -j limit-3691 --A INPUT -i eth0 -j limit-3692 --A INPUT -i eth0 -j limit-3693 --A INPUT -i eth0 -j limit-3694 --A INPUT -i eth0 -j limit-3695 --A INPUT -i eth0 -j limit-3696 --A INPUT -i eth0 -j limit-3697 --A INPUT -i eth0 -j limit-3698 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3700 --A INPUT -i eth0 -j limit-3701 --A INPUT -i eth0 -j limit-3702 --A INPUT -i eth0 -j limit-3703 --A INPUT -i eth0 -j limit-3704 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3706 --A INPUT -i eth0 -j limit-3707 --A INPUT -i eth0 -j limit-3708 --A INPUT -i eth0 -j limit-3709 --A INPUT -i eth0 -j limit-3710 --A INPUT -i eth0 -j limit-3711 --A INPUT -i eth0 -j limit-3712 --A INPUT -i eth0 -j limit-3713 --A INPUT -i eth0 -j limit-3714 --A INPUT -i eth0 -j limit-3715 --A INPUT -i eth0 -j limit-3716 --A INPUT -i eth0 -j limit-3717 --A INPUT -i eth0 -j limit-3718 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3720 --A INPUT -i eth0 -j limit-3721 --A INPUT -i eth0 -j limit-3722 --A INPUT -i eth0 -j limit-3723 --A INPUT -i eth0 -j limit-3724 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3726 --A INPUT -i eth0 -j limit-3727 --A INPUT -i eth0 -j limit-3728 --A INPUT -i eth0 -j limit-3729 --A INPUT -i eth0 -j limit-3730 --A INPUT -i eth0 -j limit-3731 --A INPUT -i eth0 -j limit-3732 --A INPUT -i eth0 -j limit-3733 --A INPUT -i eth0 -j limit-3734 --A INPUT -i eth0 -j limit-3735 --A INPUT -i eth0 -j limit-3736 --A INPUT -i eth0 -j limit-3737 --A INPUT -i eth0 -j limit-3738 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3740 --A INPUT -i eth0 -j limit-3741 --A INPUT -i eth0 -j limit-3742 --A INPUT -i eth0 -j limit-3743 --A INPUT -i eth0 -j limit-3744 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3746 --A INPUT -i eth0 -j limit-3747 --A INPUT -i eth0 -j limit-3748 --A INPUT -i eth0 -j limit-3749 --A INPUT -i eth0 -j limit-3750 --A INPUT -i eth0 -j limit-3751 --A INPUT -i eth0 -j limit-3752 --A INPUT -i eth0 -j limit-3753 --A INPUT -i eth0 -j limit-3754 --A INPUT -i eth0 -j limit-3755 --A INPUT -i eth0 -j limit-3756 --A INPUT -i eth0 -j limit-3757 --A INPUT -i eth0 -j limit-3758 --A INPUT -i eth0 -j limit-3759 --A INPUT -i eth0 -j limit-3760 --A INPUT -i eth0 -j limit-3761 --A INPUT -i eth0 -j limit-3762 --A INPUT -i eth0 -j limit-3763 --A INPUT -i eth0 -j limit-3764 --A INPUT -i eth0 -j limit-3765 --A INPUT -i eth0 -j limit-3766 --A INPUT -i eth0 -j limit-3767 --A INPUT -i eth0 -j limit-3768 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2131 --A INPUT -i eth0 -j limit-3770 --A INPUT -i eth0 -j limit-3771 --A INPUT -i eth0 -j limit-3772 --A INPUT -i eth0 -j limit-3773 --A INPUT -i eth0 -j limit-3774 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2137 --A INPUT -i eth0 -j limit-3776 --A INPUT -i eth0 -j limit-3777 --A INPUT -i eth0 -j limit-3778 --A INPUT -i eth0 -j limit-3779 --A INPUT -i eth0 -j limit-3780 --A INPUT -i eth0 -j limit-3781 --A INPUT -i eth0 -j limit-3782 --A INPUT -i eth0 -j limit-3783 --A INPUT -i eth0 -j limit-3784 --A INPUT -i eth0 -j limit-3785 --A INPUT -i eth0 -j limit-3786 --A INPUT -i eth0 -j limit-3787 --A INPUT -i eth0 -j limit-3788 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2151 --A INPUT -i eth0 -j limit-3790 --A INPUT -i eth0 -j limit-3791 --A INPUT -i eth0 -j limit-3792 --A INPUT -i eth0 -j limit-3793 --A INPUT -i eth0 -j limit-3794 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2157 --A INPUT -i eth0 -j limit-3796 --A INPUT -i eth0 -j limit-3797 --A INPUT -i eth0 -j limit-3798 --A INPUT -i eth0 -j limit-3799 --A INPUT -i eth0 -j limit-3800 --A INPUT -i eth0 -j limit-3801 --A INPUT -i eth0 -j limit-3802 --A INPUT -i eth0 -j limit-3803 --A INPUT -i eth0 -j limit-3804 --A INPUT -i eth0 -j limit-3805 --A INPUT -i eth0 -j limit-3806 --A INPUT -i eth0 -j limit-3807 --A INPUT -i eth0 -j limit-3808 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2171 --A INPUT -i eth0 -j limit-3810 --A INPUT -i eth0 -j limit-3811 --A INPUT -i eth0 -j limit-3812 --A INPUT -i eth0 -j limit-3813 --A INPUT -i eth0 -j limit-3814 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2177 --A INPUT -i eth0 -j limit-3816 --A INPUT -i eth0 -j limit-3817 --A INPUT -i eth0 -j limit-3818 --A INPUT -i eth0 -j limit-3819 --A INPUT -i eth0 -j limit-3820 --A INPUT -i eth0 -j limit-3821 --A INPUT -i eth0 -j limit-3822 --A INPUT -i eth0 -j limit-3823 --A INPUT -i eth0 -j limit-3824 --A INPUT -i eth0 -j limit-3825 --A INPUT -i eth0 -j limit-3826 --A INPUT -i eth0 -j limit-3827 --A INPUT -i eth0 -j limit-3828 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2191 --A INPUT -i eth0 -j limit-3830 --A INPUT -i eth0 -j limit-3831 --A INPUT -i eth0 -j limit-3832 --A INPUT -i eth0 -j limit-3833 --A INPUT -i eth0 -j limit-3834 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2197 --A INPUT -i eth0 -j limit-3836 --A INPUT -i eth0 -j limit-3837 --A INPUT -i eth0 -j limit-3838 --A INPUT -i eth0 -j limit-3839 --A INPUT -i eth0 -j limit-3840 --A INPUT -i eth0 -j limit-3841 --A INPUT -i eth0 -j limit-3842 --A INPUT -i eth0 -j limit-3843 --A INPUT -i eth0 -j limit-3844 --A INPUT -i eth0 -j limit-3845 --A INPUT -i eth0 -j limit-3846 --A INPUT -i eth0 -j limit-3847 --A INPUT -i eth0 -j limit-3848 --A INPUT -i eth0 -j limit-3849 --A INPUT -i eth0 -j limit-3850 --A INPUT -i eth0 -j limit-3851 --A INPUT -i eth0 -j limit-3852 --A INPUT -i eth0 -j limit-3853 --A INPUT -i eth0 -j limit-3854 --A INPUT -i eth0 -j limit-3855 --A INPUT -i eth0 -j limit-3856 --A INPUT -i eth0 -j limit-3857 --A INPUT -i eth0 -j limit-3858 --A INPUT -i eth0 -j limit-3859 --A INPUT -i eth0 -j limit-3860 --A INPUT -i eth0 -j limit-3861 --A INPUT -i eth0 -j limit-3862 --A INPUT -i eth0 -j limit-3863 --A INPUT -i eth0 -j limit-3864 --A INPUT -i eth0 -j limit-3865 --A INPUT -i eth0 -j limit-3866 --A INPUT -i eth0 -j limit-3867 --A INPUT -i eth0 -j limit-3868 --A INPUT -i eth0 -j limit-3869 --A INPUT -i eth0 -j limit-3870 --A INPUT -i eth0 -j limit-3871 --A INPUT -i eth0 -j limit-3872 --A INPUT -i eth0 -j limit-3873 --A INPUT -i eth0 -j limit-3874 --A INPUT -i eth0 -j limit-3875 --A INPUT -i eth0 -j limit-3876 --A INPUT -i eth0 -j limit-3877 --A INPUT -i eth0 -j limit-3878 --A INPUT -i eth0 -j limit-3879 --A INPUT -i eth0 -j limit-3880 --A INPUT -i eth0 -j limit-3881 --A INPUT -i eth0 -j limit-3882 --A INPUT -i eth0 -j limit-3883 --A INPUT -i eth0 -j limit-3884 --A INPUT -i eth0 -j limit-3885 --A INPUT -i eth0 -j limit-3886 --A INPUT -i eth0 -j limit-3887 --A INPUT -i eth0 -j limit-3888 --A INPUT -i eth0 -j limit-3889 --A INPUT -i eth0 -j limit-3890 --A INPUT -i eth0 -j limit-3891 --A INPUT -i eth0 -j limit-3892 --A INPUT -i eth0 -j limit-3893 --A INPUT -i eth0 -j limit-3894 --A INPUT -i eth0 -j limit-3895 --A INPUT -i eth0 -j limit-3896 --A INPUT -i eth0 -j limit-3897 --A INPUT -i eth0 -j limit-3898 --A INPUT -i eth0 -j limit-3899 --A INPUT -i eth0 -j limit-3900 --A INPUT -i eth0 -j limit-3901 --A INPUT -i eth0 -j limit-3902 --A INPUT -i eth0 -j limit-3903 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-0 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-1 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-2 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-3 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-4 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-5 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-6 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-7 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-8 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-9 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-10 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-11 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-12 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-13 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-14 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-15 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-16 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-17 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-18 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-19 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-20 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-21 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-22 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-23 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-24 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-25 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-26 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-27 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-28 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-29 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-30 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-32 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-33 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-34 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-35 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-36 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-38 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-39 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-40 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-41 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-42 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-43 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-44 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-45 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-46 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-47 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-48 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-49 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-50 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-52 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-53 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-54 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-55 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-56 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-58 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-59 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-60 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-61 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-62 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-63 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-64 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-65 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-66 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-67 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-68 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-69 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-70 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-72 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-73 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-74 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-75 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-76 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-78 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-79 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-80 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-81 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-82 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-83 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-84 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-85 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-86 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-87 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-88 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-89 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-90 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-92 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-93 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-94 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-95 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-96 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-98 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-99 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-100 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-101 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-102 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-103 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-104 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-105 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-106 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-107 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-108 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-109 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-110 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-111 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-112 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-113 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-114 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-115 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-116 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-117 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-118 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-119 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-120 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-31 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-122 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-123 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-124 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-125 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-126 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-37 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-128 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-129 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-130 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-131 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-132 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-133 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-134 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-135 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-136 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-137 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-138 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-139 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-140 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-51 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-142 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-143 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-144 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-145 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-146 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-57 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-148 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-149 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-150 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-151 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-152 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-153 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-154 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-155 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-156 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-157 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-158 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-159 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-160 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-71 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-162 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-163 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-164 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-165 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-166 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-77 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-168 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-169 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-170 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-171 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-172 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-173 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-174 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-175 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-176 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-177 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-178 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-179 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-180 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-91 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-182 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-183 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-184 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-185 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-186 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-97 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-188 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-189 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-190 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-191 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-192 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-193 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-194 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-195 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-196 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-197 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-198 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-199 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-200 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-201 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-202 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-203 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-204 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-205 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-206 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-207 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-208 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-209 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-210 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-121 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-212 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-213 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-214 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-215 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-216 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-127 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-218 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-219 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-220 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-221 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-222 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-223 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-224 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-225 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-226 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-227 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-228 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-229 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-230 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-141 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-232 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-233 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-234 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-235 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-236 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-147 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-238 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-239 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-240 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-241 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-242 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-243 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-244 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-245 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-246 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-247 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-248 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-249 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-250 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-161 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-252 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-253 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-254 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-255 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-256 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-167 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-258 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-259 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-260 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-261 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-262 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-263 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-264 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-265 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-266 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-267 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-268 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-269 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-270 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-181 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-272 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-273 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-274 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-275 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-276 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-187 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-278 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-279 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-280 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-281 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-282 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-283 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-284 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-285 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-286 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-287 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-288 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-289 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-290 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-291 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-292 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-293 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-294 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-295 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-296 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-297 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-298 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-299 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-300 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-302 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-303 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-304 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-305 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-306 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-308 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-309 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-310 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-311 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-312 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-313 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-314 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-315 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-316 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-317 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-318 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-319 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-320 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-322 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-323 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-324 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-325 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-326 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-328 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-329 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-330 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-331 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-332 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-333 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-334 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-335 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-336 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-337 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-338 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-339 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-340 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-342 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-343 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-344 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-345 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-346 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-348 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-349 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-350 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-351 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-352 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-353 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-354 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-355 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-356 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-357 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-358 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-359 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-360 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-362 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-363 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-364 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-365 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-366 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-368 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-369 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-370 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-371 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-372 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-373 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-374 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-375 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-376 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-377 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-378 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-379 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-380 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-381 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-382 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-383 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-384 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-385 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-386 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-387 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-388 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-389 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-390 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-211 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-392 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-393 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-394 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-395 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-396 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-217 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-398 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-399 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-400 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-401 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-402 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-403 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-404 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-405 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-406 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-407 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-408 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-409 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-410 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-231 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-412 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-413 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-414 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-415 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-416 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-237 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-418 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-419 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-420 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-421 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-422 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-423 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-424 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-425 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-426 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-427 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-428 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-429 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-430 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-251 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-432 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-433 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-434 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-435 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-436 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-257 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-438 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-439 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-440 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-441 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-442 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-443 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-444 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-445 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-446 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-447 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-448 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-449 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-450 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-271 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-452 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-453 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-454 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-455 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-456 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-277 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-458 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-459 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-460 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-461 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-462 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-463 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-464 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-465 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-466 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-467 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-468 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-469 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-470 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-471 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-472 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-473 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-474 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-475 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-476 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-477 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-478 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-479 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-480 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-482 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-483 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-484 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-485 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-486 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-488 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-489 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-490 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-491 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-492 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-493 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-494 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-495 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-496 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-497 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-498 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-499 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-500 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-502 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-503 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-504 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-505 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-506 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-508 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-509 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-510 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-511 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-512 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-513 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-514 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-515 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-516 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-517 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-518 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-519 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-520 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-522 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-523 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-524 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-525 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-526 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-528 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-529 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-530 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-531 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-532 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-533 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-534 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-535 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-536 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-537 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-538 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-539 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-540 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-542 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-543 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-544 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-545 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-546 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-548 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-549 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-550 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-551 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-552 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-553 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-554 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-555 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-556 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-557 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-558 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-559 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-560 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-561 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-562 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-563 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-564 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-565 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-566 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-567 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-568 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-569 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-570 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-301 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-572 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-573 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-574 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-575 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-576 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-307 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-578 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-579 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-580 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-581 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-582 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-583 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-584 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-585 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-586 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-587 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-588 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-589 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-590 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-321 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-592 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-593 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-594 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-595 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-596 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-327 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-598 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-599 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-600 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-601 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-602 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-603 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-604 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-605 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-606 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-607 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-608 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-609 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-610 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-341 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-612 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-613 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-614 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-615 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-616 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-347 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-618 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-619 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-620 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-621 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-622 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-623 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-624 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-625 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-626 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-627 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-628 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-629 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-630 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-361 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-632 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-633 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-634 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-635 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-636 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-367 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-638 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-639 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-640 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-641 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-642 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-643 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-644 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-645 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-646 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-647 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-648 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-649 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-650 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-651 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-652 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-653 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-654 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-655 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-656 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-657 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-658 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-659 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-660 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-391 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-662 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-663 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-664 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-665 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-666 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-397 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-668 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-669 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-670 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-671 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-672 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-673 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-674 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-675 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-676 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-677 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-678 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-679 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-680 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-411 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-682 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-683 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-684 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-685 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-686 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-417 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-688 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-689 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-690 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-691 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-692 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-693 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-694 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-695 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-696 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-697 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-698 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-699 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-700 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-431 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-702 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-703 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-704 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-705 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-706 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-437 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-708 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-709 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-710 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-711 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-712 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-713 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-714 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-715 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-716 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-717 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-718 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-719 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-720 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-451 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-722 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-723 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-724 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-725 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-726 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-457 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-728 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-729 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-730 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-731 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-732 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-733 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-734 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-735 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-736 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-737 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-738 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-739 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-740 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-741 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-742 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-743 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-744 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-745 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-746 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-747 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-748 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-749 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-750 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-752 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-753 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-754 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-755 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-756 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-758 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-759 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-760 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-761 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-762 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-763 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-764 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-765 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-766 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-767 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-768 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-769 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-770 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-772 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-773 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-774 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-775 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-776 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-778 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-779 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-780 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-781 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-782 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-783 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-784 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-785 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-786 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-787 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-788 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-789 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-790 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-792 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-793 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-794 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-795 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-796 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-798 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-799 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-800 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-801 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-802 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-803 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-804 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-805 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-806 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-807 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-808 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-809 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-810 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-812 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-813 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-814 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-815 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-816 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-818 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-819 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-820 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-821 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-822 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-823 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-824 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-825 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-826 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-827 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-828 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-829 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-830 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-831 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-832 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-833 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-834 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-835 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-836 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-837 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-838 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-839 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-840 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-481 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-842 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-843 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-844 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-845 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-846 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-487 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-848 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-849 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-850 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-851 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-852 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-853 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-854 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-855 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-856 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-857 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-858 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-859 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-860 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-501 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-862 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-863 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-864 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-865 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-866 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-507 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-868 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-869 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-870 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-871 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-872 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-873 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-874 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-875 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-876 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-877 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-878 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-879 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-880 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-521 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-882 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-883 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-884 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-885 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-886 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-527 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-888 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-889 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-890 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-891 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-892 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-893 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-894 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-895 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-896 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-897 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-898 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-899 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-900 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-541 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-902 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-903 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-904 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-905 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-906 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-547 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-908 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-909 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-910 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-911 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-912 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-913 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-914 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-915 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-916 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-917 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-918 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-919 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-920 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-921 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-922 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-923 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-924 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-925 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-926 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-927 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-928 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-929 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-930 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-931 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-932 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-933 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-934 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-935 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-936 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-937 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-938 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-939 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-940 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-941 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-942 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-943 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-944 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-945 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-946 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-947 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-948 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-949 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-950 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-951 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-952 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-953 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-954 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-955 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-956 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-957 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-958 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-959 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-960 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-961 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-962 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-963 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-964 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-965 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-966 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-967 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-968 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-969 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-970 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-971 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-972 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-973 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-974 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-975 -A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -m recent --name user:C --rsource --mask fe00:: --set @@ -102950,25 +102950,25 @@ COMMIT -A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -j ACCEPT --A INPUT -j logdrop-2200 +-A INPUT -j logdrop-1650 -A INPUT -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-99 --A INPUT -j logdrop-2201 +-A INPUT -j logaccept-66 +-A INPUT -j logdrop-1651 -A INPUT -j logpass-0 --A INPUT -j logaccept-100 --A INPUT -j logdrop-2202 +-A INPUT -j logaccept-67 +-A INPUT -j logdrop-1652 -A INPUT -j logpass-1 --A INPUT -j logaccept-101 --A INPUT -j logdrop-2203 +-A INPUT -j logaccept-68 +-A INPUT -j logdrop-1653 -A INPUT -j logpass-2 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-102 --A INPUT -j logdrop-2204 +-A INPUT -j logaccept-69 +-A INPUT -j logdrop-1654 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmpv6 -j ACCEPT @@ -106414,516 +106414,516 @@ COMMIT -A OUTPUT -j logaccept-final-304 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-305 --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -m recent --name user:C --rsource --mask fe00:: --set @@ -106931,25 +106931,25 @@ COMMIT -A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-2200 +-A OUTPUT -j logdrop-1650 -A OUTPUT -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-99 --A OUTPUT -j logdrop-2201 +-A OUTPUT -j logaccept-66 +-A OUTPUT -j logdrop-1651 -A OUTPUT -j logpass-0 --A OUTPUT -j logaccept-100 --A OUTPUT -j logdrop-2202 +-A OUTPUT -j logaccept-67 +-A OUTPUT -j logdrop-1652 -A OUTPUT -j logpass-1 --A OUTPUT -j logaccept-101 --A OUTPUT -j logdrop-2203 +-A OUTPUT -j logaccept-68 +-A OUTPUT -j logdrop-1653 -A OUTPUT -j logpass-2 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-102 --A OUTPUT -j logdrop-2204 +-A OUTPUT -j logaccept-69 +-A OUTPUT -j logdrop-1654 -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT -A OUTPUT -p icmpv6 -j ACCEPT @@ -110869,2137 +110869,224 @@ COMMIT -A limit-2926 -j DROP -A limit-2927 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2927 -j RETURN -A limit-2927 -j DROP --A limit-2928 -m recent --name limit-2928 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1650 --A limit-2928 -m recent --name limit-2928 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2929 -m recent --name limit-2929 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1651 --A limit-2929 -m recent --name limit-2929 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2930 -m recent --name limit-2930 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1652 --A limit-2930 -m limit --limit 1/second -j LOG --A limit-2930 -m recent --name limit-2930 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2931 -m recent --name limit-2931 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1653 --A limit-2931 -m recent --name limit-2931 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2932 -m recent --name limit-2932 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1654 --A limit-2932 -j TEE --gateway fc00::2 --A limit-2932 -m recent --name limit-2932 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2933 -m recent --name limit-2933 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1655 --A limit-2933 -m recent --name limit-2933 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-2934 -m recent --name limit-2934 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1656 --A limit-2934 -m recent --name limit-2934 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2935 -m recent --name limit-2935 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1657 --A limit-2935 -m recent --name limit-2935 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2936 -m recent --name limit-2936 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1658 --A limit-2936 -m recent --name limit-2936 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2937 -m recent --name limit-2937 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1659 --A limit-2938 -m recent --name limit-2938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2938 -m recent --name limit-2938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2939 -m recent --name limit-2939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2939 -m recent --name limit-2939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-294 -j TEE --gateway fc00::2 -A limit-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2940 -m recent --name limit-2940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2940 -m limit --limit 1/second -j LOG --A limit-2940 -m recent --name limit-2940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2941 -m recent --name limit-2941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2941 -m recent --name limit-2941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2942 -m recent --name limit-2942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2942 -j TEE --gateway fc00::2 --A limit-2942 -m recent --name limit-2942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2943 -m recent --name limit-2943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2943 -m recent --name limit-2943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-2944 -m recent --name limit-2944 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2944 -m recent --name limit-2944 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2945 -m recent --name limit-2945 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2945 -m recent --name limit-2945 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2946 -m recent --name limit-2946 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2946 -m recent --name limit-2946 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2947 -m recent --name limit-2947 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-2950 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2950 -m limit --limit 1/second -j LOG --A limit-2950 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2951 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2951 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2952 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2952 -j TEE --gateway fc00::2 --A limit-2952 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2953 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2953 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-2954 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2954 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2955 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2955 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2956 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2956 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2957 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2958 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2958 -j ACCEPT -A limit-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2960 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2960 -m limit --limit 1/second -j LOG --A limit-2960 -j ACCEPT --A limit-2961 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2961 -m limit --limit 1/second -j LOG --A limit-2962 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2962 -j TEE --gateway fc00::2 --A limit-2962 -j ACCEPT --A limit-2963 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2963 -j TEE --gateway fc00::2 --A limit-2964 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2964 -j ACCEPT --A limit-2966 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2966 -j ACCEPT --A limit-2967 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2968 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2968 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2969 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2969 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2970 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2970 -m limit --limit 1/second -j LOG --A limit-2970 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2971 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2971 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2972 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2972 -j TEE --gateway fc00::2 --A limit-2972 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2973 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2973 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-2974 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2974 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2975 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2975 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2976 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2976 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2977 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2978 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2978 -j ACCEPT -A limit-298 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-298 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2980 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2980 -m limit --limit 1/second -j LOG --A limit-2980 -j ACCEPT --A limit-2981 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2981 -m limit --limit 1/second -j LOG --A limit-2982 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2982 -j TEE --gateway fc00::2 --A limit-2982 -j ACCEPT --A limit-2983 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2983 -j TEE --gateway fc00::2 --A limit-2984 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2984 -j ACCEPT --A limit-2986 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2986 -j ACCEPT --A limit-2987 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2988 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2988 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2989 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2989 -m recent --name user:C --rsource --mask fe00:: --set -A limit-299 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2990 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2990 -m limit --limit 1/second -j LOG --A limit-2990 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2991 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2991 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2992 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2992 -j TEE --gateway fc00::2 --A limit-2992 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2993 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2993 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-2994 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2994 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2995 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2995 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2996 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2996 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2997 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2998 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2998 -j ACCEPT -A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-3 -A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-30 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-30 -j ACCEPT -A limit-300 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-300 -j ACCEPT --A limit-3000 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3000 -m limit --limit 1/second -j LOG --A limit-3000 -j ACCEPT --A limit-3001 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3001 -m limit --limit 1/second -j LOG --A limit-3002 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3002 -j TEE --gateway fc00::2 --A limit-3002 -j ACCEPT --A limit-3003 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3003 -j TEE --gateway fc00::2 --A limit-3004 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3004 -j ACCEPT --A limit-3006 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3006 -j ACCEPT --A limit-3007 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3008 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3008 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3009 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3009 -m recent --name user:C --rdest --mask fe00:: --set -A limit-301 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3010 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3010 -m limit --limit 1/second -j LOG --A limit-3010 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3011 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3011 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3012 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3012 -j TEE --gateway fc00::2 --A limit-3012 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3013 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3013 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3014 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3014 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3015 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3015 -m recent --name user:C --rdest --mask fe00:: --set --A limit-3016 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3016 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3017 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3018 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3018 -j ACCEPT -A limit-302 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-302 -m limit --limit 1/second -j LOG -A limit-302 -j ACCEPT --A limit-3020 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3020 -m limit --limit 1/second -j LOG --A limit-3020 -j ACCEPT --A limit-3021 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3021 -m limit --limit 1/second -j LOG --A limit-3022 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3022 -j TEE --gateway fc00::2 --A limit-3022 -j ACCEPT --A limit-3023 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3023 -j TEE --gateway fc00::2 --A limit-3024 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3024 -j ACCEPT --A limit-3026 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3026 -j ACCEPT --A limit-3027 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3028 -m recent --name limit-3028 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1660 --A limit-3028 -m recent --name limit-3028 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3029 -m recent --name limit-3029 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1661 --A limit-3029 -m recent --name limit-3029 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-303 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-303 -m limit --limit 1/second -j LOG --A limit-3030 -m recent --name limit-3030 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1662 --A limit-3030 -m limit --limit 1/second -j LOG --A limit-3030 -m recent --name limit-3030 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3031 -m recent --name limit-3031 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1663 --A limit-3031 -m recent --name limit-3031 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3032 -m recent --name limit-3032 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1664 --A limit-3032 -j TEE --gateway fc00::2 --A limit-3032 -m recent --name limit-3032 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3033 -m recent --name limit-3033 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1665 --A limit-3033 -m recent --name limit-3033 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3034 -m recent --name limit-3034 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1666 --A limit-3034 -m recent --name limit-3034 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3035 -m recent --name limit-3035 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1667 --A limit-3035 -m recent --name limit-3035 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3036 -m recent --name limit-3036 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1668 --A limit-3036 -m recent --name limit-3036 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3037 -m recent --name limit-3037 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1669 --A limit-3038 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1670 --A limit-3038 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3039 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1671 --A limit-3039 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-304 -j TEE --gateway fc00::2 -A limit-304 -j ACCEPT --A limit-3040 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1672 --A limit-3040 -m limit --limit 1/second -j LOG --A limit-3040 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3041 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1673 --A limit-3041 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3042 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1674 --A limit-3042 -j TEE --gateway fc00::2 --A limit-3042 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3043 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1675 --A limit-3043 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3044 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1676 --A limit-3044 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3045 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1677 --A limit-3045 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3046 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1678 --A limit-3046 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3047 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1679 --A limit-3048 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1680 --A limit-3048 -j ACCEPT -A limit-305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-305 -j TEE --gateway fc00::2 --A limit-3050 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1682 --A limit-3050 -m limit --limit 1/second -j LOG --A limit-3050 -j ACCEPT --A limit-3051 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1683 --A limit-3051 -m limit --limit 1/second -j LOG --A limit-3052 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1684 --A limit-3052 -j TEE --gateway fc00::2 --A limit-3052 -j ACCEPT --A limit-3053 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1685 --A limit-3053 -j TEE --gateway fc00::2 --A limit-3054 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1686 --A limit-3054 -j ACCEPT --A limit-3056 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1688 --A limit-3056 -j ACCEPT --A limit-3057 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1689 --A limit-3058 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1690 --A limit-3058 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3059 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1691 --A limit-3059 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-306 -j ACCEPT --A limit-3060 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1692 --A limit-3060 -m limit --limit 1/second -j LOG --A limit-3060 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3061 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1693 --A limit-3061 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3062 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1694 --A limit-3062 -j TEE --gateway fc00::2 --A limit-3062 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3063 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1695 --A limit-3063 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3064 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1696 --A limit-3064 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3065 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1697 --A limit-3065 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3066 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1698 --A limit-3066 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3067 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1699 --A limit-3068 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1700 --A limit-3068 -j ACCEPT -A limit-307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3070 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1702 --A limit-3070 -m limit --limit 1/second -j LOG --A limit-3070 -j ACCEPT --A limit-3071 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1703 --A limit-3071 -m limit --limit 1/second -j LOG --A limit-3072 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1704 --A limit-3072 -j TEE --gateway fc00::2 --A limit-3072 -j ACCEPT --A limit-3073 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1705 --A limit-3073 -j TEE --gateway fc00::2 --A limit-3074 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1706 --A limit-3074 -j ACCEPT --A limit-3076 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1708 --A limit-3076 -j ACCEPT --A limit-3077 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1709 --A limit-3078 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1710 --A limit-3078 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3079 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1711 --A limit-3079 -m recent --name user:C --rsource --mask fe00:: --set -A limit-308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-308 -j ACCEPT --A limit-3080 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1712 --A limit-3080 -m limit --limit 1/second -j LOG --A limit-3080 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3081 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1713 --A limit-3081 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3082 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1714 --A limit-3082 -j TEE --gateway fc00::2 --A limit-3082 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3083 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1715 --A limit-3083 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3084 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1716 --A limit-3084 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3085 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1717 --A limit-3085 -m recent --name user:C --rsource --mask fe00:: --set --A limit-3086 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1718 --A limit-3086 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3087 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1719 --A limit-3088 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1720 --A limit-3088 -j ACCEPT -A limit-309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3090 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1722 --A limit-3090 -m limit --limit 1/second -j LOG --A limit-3090 -j ACCEPT --A limit-3091 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1723 --A limit-3091 -m limit --limit 1/second -j LOG --A limit-3092 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1724 --A limit-3092 -j TEE --gateway fc00::2 --A limit-3092 -j ACCEPT --A limit-3093 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1725 --A limit-3093 -j TEE --gateway fc00::2 --A limit-3094 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1726 --A limit-3094 -j ACCEPT --A limit-3096 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1728 --A limit-3096 -j ACCEPT --A limit-3097 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1729 --A limit-3098 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1730 --A limit-3098 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3099 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1731 --A limit-3099 -m recent --name user:C --rdest --mask fe00:: --set -A limit-31 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-310 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-310 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3100 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1732 --A limit-3100 -m limit --limit 1/second -j LOG --A limit-3100 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3101 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1733 --A limit-3101 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3102 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1734 --A limit-3102 -j TEE --gateway fc00::2 --A limit-3102 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3103 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1735 --A limit-3103 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3104 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1736 --A limit-3104 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3105 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1737 --A limit-3105 -m recent --name user:C --rdest --mask fe00:: --set --A limit-3106 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1738 --A limit-3106 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3107 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1739 --A limit-3108 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1740 --A limit-3108 -j ACCEPT -A limit-311 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-311 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3110 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1742 --A limit-3110 -m limit --limit 1/second -j LOG --A limit-3110 -j ACCEPT --A limit-3111 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1743 --A limit-3111 -m limit --limit 1/second -j LOG --A limit-3112 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1744 --A limit-3112 -j TEE --gateway fc00::2 --A limit-3112 -j ACCEPT --A limit-3113 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1745 --A limit-3113 -j TEE --gateway fc00::2 --A limit-3114 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1746 --A limit-3114 -j ACCEPT --A limit-3116 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1748 --A limit-3116 -j ACCEPT --A limit-3117 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1749 --A limit-3118 -m recent --name limit-3118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1750 --A limit-3118 -m recent --name limit-3118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3119 -m recent --name limit-3119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1751 --A limit-3119 -m recent --name limit-3119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-312 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-312 -m limit --limit 1/second -j LOG -A limit-312 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3120 -m recent --name limit-3120 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1752 --A limit-3120 -m limit --limit 1/second -j LOG --A limit-3120 -m recent --name limit-3120 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3121 -m recent --name limit-3121 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1753 --A limit-3121 -m recent --name limit-3121 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3122 -m recent --name limit-3122 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1754 --A limit-3122 -j TEE --gateway fc00::2 --A limit-3122 -m recent --name limit-3122 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3123 -m recent --name limit-3123 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1755 --A limit-3123 -m recent --name limit-3123 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3124 -m recent --name limit-3124 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1756 --A limit-3124 -m recent --name limit-3124 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3125 -m recent --name limit-3125 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1757 --A limit-3125 -m recent --name limit-3125 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3126 -m recent --name limit-3126 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1758 --A limit-3126 -m recent --name limit-3126 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3127 -m recent --name limit-3127 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1759 --A limit-3128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1760 --A limit-3128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1761 --A limit-3129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-313 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-313 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1762 --A limit-3130 -m limit --limit 1/second -j LOG --A limit-3130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3131 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1763 --A limit-3131 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3132 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1764 --A limit-3132 -j TEE --gateway fc00::2 --A limit-3132 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3133 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1765 --A limit-3133 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3134 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1766 --A limit-3134 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3135 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1767 --A limit-3135 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3136 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1768 --A limit-3136 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3137 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1769 --A limit-3138 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1770 --A limit-3138 -j ACCEPT -A limit-314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-314 -j TEE --gateway fc00::2 -A limit-314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3140 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1772 --A limit-3140 -m limit --limit 1/second -j LOG --A limit-3140 -j ACCEPT --A limit-3141 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1773 --A limit-3141 -m limit --limit 1/second -j LOG --A limit-3142 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1774 --A limit-3142 -j TEE --gateway fc00::2 --A limit-3142 -j ACCEPT --A limit-3143 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1775 --A limit-3143 -j TEE --gateway fc00::2 --A limit-3144 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1776 --A limit-3144 -j ACCEPT --A limit-3146 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1778 --A limit-3146 -j ACCEPT --A limit-3147 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1779 --A limit-3148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1780 --A limit-3148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1781 --A limit-3149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3150 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1782 --A limit-3150 -m limit --limit 1/second -j LOG --A limit-3150 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3151 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1783 --A limit-3151 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1784 --A limit-3152 -j TEE --gateway fc00::2 --A limit-3152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1785 --A limit-3153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1786 --A limit-3154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3155 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1787 --A limit-3155 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3156 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1788 --A limit-3156 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3157 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1789 --A limit-3158 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1790 --A limit-3158 -j ACCEPT -A limit-316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3160 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1792 --A limit-3160 -m limit --limit 1/second -j LOG --A limit-3160 -j ACCEPT --A limit-3161 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1793 --A limit-3161 -m limit --limit 1/second -j LOG --A limit-3162 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1794 --A limit-3162 -j TEE --gateway fc00::2 --A limit-3162 -j ACCEPT --A limit-3163 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1795 --A limit-3163 -j TEE --gateway fc00::2 --A limit-3164 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1796 --A limit-3164 -j ACCEPT --A limit-3166 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1798 --A limit-3166 -j ACCEPT --A limit-3167 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1799 --A limit-3168 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1800 --A limit-3168 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3169 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1801 --A limit-3169 -m recent --name user:C --rsource --mask fe00:: --set -A limit-317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3170 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1802 --A limit-3170 -m limit --limit 1/second -j LOG --A limit-3170 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3171 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1803 --A limit-3171 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3172 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1804 --A limit-3172 -j TEE --gateway fc00::2 --A limit-3172 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3173 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1805 --A limit-3173 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3174 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1806 --A limit-3174 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3175 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1807 --A limit-3175 -m recent --name user:C --rsource --mask fe00:: --set --A limit-3176 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1808 --A limit-3176 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3177 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1809 --A limit-3178 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1810 --A limit-3178 -j ACCEPT -A limit-318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3180 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1812 --A limit-3180 -m limit --limit 1/second -j LOG --A limit-3180 -j ACCEPT --A limit-3181 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1813 --A limit-3181 -m limit --limit 1/second -j LOG --A limit-3182 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1814 --A limit-3182 -j TEE --gateway fc00::2 --A limit-3182 -j ACCEPT --A limit-3183 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1815 --A limit-3183 -j TEE --gateway fc00::2 --A limit-3184 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1816 --A limit-3184 -j ACCEPT --A limit-3186 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1818 --A limit-3186 -j ACCEPT --A limit-3187 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1819 --A limit-3188 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1820 --A limit-3188 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3189 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1821 --A limit-3189 -m recent --name user:C --rdest --mask fe00:: --set -A limit-319 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3190 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1822 --A limit-3190 -m limit --limit 1/second -j LOG --A limit-3190 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3191 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1823 --A limit-3191 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3192 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1824 --A limit-3192 -j TEE --gateway fc00::2 --A limit-3192 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3193 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1825 --A limit-3193 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3194 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1826 --A limit-3194 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3195 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1827 --A limit-3195 -m recent --name user:C --rdest --mask fe00:: --set --A limit-3196 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1828 --A limit-3196 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3197 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1829 --A limit-3198 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1830 --A limit-3198 -j ACCEPT -A limit-32 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-32 -m limit --limit 1/second -j LOG -A limit-32 -j ACCEPT -A limit-320 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-320 -j ACCEPT --A limit-3200 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1832 --A limit-3200 -m limit --limit 1/second -j LOG --A limit-3200 -j ACCEPT --A limit-3201 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1833 --A limit-3201 -m limit --limit 1/second -j LOG --A limit-3202 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1834 --A limit-3202 -j TEE --gateway fc00::2 --A limit-3202 -j ACCEPT --A limit-3203 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1835 --A limit-3203 -j TEE --gateway fc00::2 --A limit-3204 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1836 --A limit-3204 -j ACCEPT --A limit-3206 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1838 --A limit-3206 -j ACCEPT --A limit-3207 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1839 --A limit-3208 -m recent --name limit-3208 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3208 -m recent --name limit-3208 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3209 -m recent --name limit-3209 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3209 -m recent --name limit-3209 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-321 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3210 -m recent --name limit-3210 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3210 -m limit --limit 1/second -j LOG --A limit-3210 -m recent --name limit-3210 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3211 -m recent --name limit-3211 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3211 -m recent --name limit-3211 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3212 -m recent --name limit-3212 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3212 -j TEE --gateway fc00::2 --A limit-3212 -m recent --name limit-3212 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3213 -m recent --name limit-3213 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3213 -m recent --name limit-3213 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3214 -m recent --name limit-3214 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3214 -m recent --name limit-3214 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3215 -m recent --name limit-3215 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3215 -m recent --name limit-3215 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3216 -m recent --name limit-3216 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3216 -m recent --name limit-3216 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3217 -m recent --name limit-3217 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3218 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3218 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3219 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3219 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-322 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-322 -m limit --limit 1/second -j LOG -A limit-322 -j ACCEPT --A limit-3220 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3220 -m limit --limit 1/second -j LOG --A limit-3220 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3221 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3221 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3222 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3222 -j TEE --gateway fc00::2 --A limit-3222 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3223 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3223 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3224 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3224 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3225 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3225 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3226 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3226 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3227 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3228 -j ACCEPT -A limit-323 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-323 -m limit --limit 1/second -j LOG --A limit-3230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3230 -m limit --limit 1/second -j LOG --A limit-3230 -j ACCEPT --A limit-3231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3231 -m limit --limit 1/second -j LOG --A limit-3232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3232 -j TEE --gateway fc00::2 --A limit-3232 -j ACCEPT --A limit-3233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3233 -j TEE --gateway fc00::2 --A limit-3234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3234 -j ACCEPT --A limit-3236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3236 -j ACCEPT --A limit-3237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-324 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-324 -j TEE --gateway fc00::2 -A limit-324 -j ACCEPT --A limit-3240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3240 -m limit --limit 1/second -j LOG --A limit-3240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3242 -j TEE --gateway fc00::2 --A limit-3242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3247 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3248 -j ACCEPT -A limit-325 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-325 -j TEE --gateway fc00::2 --A limit-3250 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3250 -m limit --limit 1/second -j LOG --A limit-3250 -j ACCEPT --A limit-3251 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3251 -m limit --limit 1/second -j LOG --A limit-3252 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3252 -j TEE --gateway fc00::2 --A limit-3252 -j ACCEPT --A limit-3253 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3253 -j TEE --gateway fc00::2 --A limit-3254 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3254 -j ACCEPT --A limit-3256 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3256 -j ACCEPT --A limit-3257 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3258 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3258 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3259 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3259 -m recent --name user:C --rsource --mask fe00:: --set -A limit-326 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-326 -j ACCEPT --A limit-3260 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3260 -m limit --limit 1/second -j LOG --A limit-3260 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3261 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3261 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3262 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3262 -j TEE --gateway fc00::2 --A limit-3262 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3263 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3263 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3264 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3264 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3265 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3265 -m recent --name user:C --rsource --mask fe00:: --set --A limit-3266 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3266 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3267 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3268 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3268 -j ACCEPT -A limit-327 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3270 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3270 -m limit --limit 1/second -j LOG --A limit-3270 -j ACCEPT --A limit-3271 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3271 -m limit --limit 1/second -j LOG --A limit-3272 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3272 -j TEE --gateway fc00::2 --A limit-3272 -j ACCEPT --A limit-3273 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3273 -j TEE --gateway fc00::2 --A limit-3274 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3274 -j ACCEPT --A limit-3276 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3276 -j ACCEPT --A limit-3277 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3278 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3278 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3279 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3279 -m recent --name user:C --rdest --mask fe00:: --set -A limit-328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-328 -j ACCEPT --A limit-3280 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3280 -m limit --limit 1/second -j LOG --A limit-3280 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3281 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3281 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3282 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3282 -j TEE --gateway fc00::2 --A limit-3282 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3283 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3283 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3284 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3284 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3285 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3285 -m recent --name user:C --rdest --mask fe00:: --set --A limit-3286 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3286 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3287 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3288 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3288 -j ACCEPT -A limit-329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3290 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3290 -m limit --limit 1/second -j LOG --A limit-3290 -j ACCEPT --A limit-3291 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3291 -m limit --limit 1/second -j LOG --A limit-3292 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3292 -j TEE --gateway fc00::2 --A limit-3292 -j ACCEPT --A limit-3293 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3293 -j TEE --gateway fc00::2 --A limit-3294 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3294 -j ACCEPT --A limit-3296 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3296 -j ACCEPT --A limit-3297 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3298 -m recent --name limit-3298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1840 --A limit-3298 -m recent --name limit-3298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3299 -m recent --name limit-3299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1841 --A limit-3299 -m recent --name limit-3299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-33 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-33 -m limit --limit 1/second -j LOG -A limit-330 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-330 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3300 -m recent --name limit-3300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1842 --A limit-3300 -m limit --limit 1/second -j LOG --A limit-3300 -m recent --name limit-3300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3301 -m recent --name limit-3301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1843 --A limit-3301 -m recent --name limit-3301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3302 -m recent --name limit-3302 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1844 --A limit-3302 -j TEE --gateway fc00::2 --A limit-3302 -m recent --name limit-3302 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3303 -m recent --name limit-3303 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1845 --A limit-3303 -m recent --name limit-3303 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3304 -m recent --name limit-3304 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1846 --A limit-3304 -m recent --name limit-3304 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3305 -m recent --name limit-3305 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1847 --A limit-3305 -m recent --name limit-3305 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3306 -m recent --name limit-3306 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1848 --A limit-3306 -m recent --name limit-3306 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3307 -m recent --name limit-3307 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1849 --A limit-3308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1850 --A limit-3308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1851 --A limit-3309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-331 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-331 -m recent --name user:C --rsource --mask fe00:: --set --A limit-3310 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1852 --A limit-3310 -m limit --limit 1/second -j LOG --A limit-3310 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3311 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1853 --A limit-3311 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3312 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1854 --A limit-3312 -j TEE --gateway fc00::2 --A limit-3312 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3313 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1855 --A limit-3313 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3314 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1856 --A limit-3314 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3315 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1857 --A limit-3315 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3316 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1858 --A limit-3316 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3317 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1859 --A limit-3318 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1860 --A limit-3318 -j ACCEPT -A limit-332 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-332 -m limit --limit 1/second -j LOG -A limit-332 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3320 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1862 --A limit-3320 -m limit --limit 1/second -j LOG --A limit-3320 -j ACCEPT --A limit-3321 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1863 --A limit-3321 -m limit --limit 1/second -j LOG --A limit-3322 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1864 --A limit-3322 -j TEE --gateway fc00::2 --A limit-3322 -j ACCEPT --A limit-3323 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1865 --A limit-3323 -j TEE --gateway fc00::2 --A limit-3324 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1866 --A limit-3324 -j ACCEPT --A limit-3326 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1868 --A limit-3326 -j ACCEPT --A limit-3327 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1869 --A limit-3328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1870 --A limit-3328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1871 --A limit-3329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-333 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-333 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3330 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1872 --A limit-3330 -m limit --limit 1/second -j LOG --A limit-3330 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3331 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1873 --A limit-3331 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3332 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1874 --A limit-3332 -j TEE --gateway fc00::2 --A limit-3332 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3333 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1875 --A limit-3333 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3334 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1876 --A limit-3334 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3335 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1877 --A limit-3335 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3336 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1878 --A limit-3336 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3337 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1879 --A limit-3338 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1880 --A limit-3338 -j ACCEPT -A limit-334 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-334 -j TEE --gateway fc00::2 -A limit-334 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3340 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1882 --A limit-3340 -m limit --limit 1/second -j LOG --A limit-3340 -j ACCEPT --A limit-3341 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1883 --A limit-3341 -m limit --limit 1/second -j LOG --A limit-3342 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1884 --A limit-3342 -j TEE --gateway fc00::2 --A limit-3342 -j ACCEPT --A limit-3343 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1885 --A limit-3343 -j TEE --gateway fc00::2 --A limit-3344 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1886 --A limit-3344 -j ACCEPT --A limit-3346 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1888 --A limit-3346 -j ACCEPT --A limit-3347 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1889 --A limit-3348 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1890 --A limit-3348 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3349 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1891 --A limit-3349 -m recent --name user:C --rsource --mask fe00:: --set -A limit-335 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-335 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3350 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1892 --A limit-3350 -m limit --limit 1/second -j LOG --A limit-3350 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3351 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1893 --A limit-3351 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3352 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1894 --A limit-3352 -j TEE --gateway fc00::2 --A limit-3352 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3353 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1895 --A limit-3353 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3354 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1896 --A limit-3354 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3355 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1897 --A limit-3355 -m recent --name user:C --rsource --mask fe00:: --set --A limit-3356 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1898 --A limit-3356 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3357 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1899 --A limit-3358 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1900 --A limit-3358 -j ACCEPT -A limit-336 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-336 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3360 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1902 --A limit-3360 -m limit --limit 1/second -j LOG --A limit-3360 -j ACCEPT --A limit-3361 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1903 --A limit-3361 -m limit --limit 1/second -j LOG --A limit-3362 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1904 --A limit-3362 -j TEE --gateway fc00::2 --A limit-3362 -j ACCEPT --A limit-3363 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1905 --A limit-3363 -j TEE --gateway fc00::2 --A limit-3364 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1906 --A limit-3364 -j ACCEPT --A limit-3366 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1908 --A limit-3366 -j ACCEPT --A limit-3367 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1909 --A limit-3368 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1910 --A limit-3368 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3369 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1911 --A limit-3369 -m recent --name user:C --rdest --mask fe00:: --set -A limit-337 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-337 -m recent --name user:C --rsource --mask fe00:: --set --A limit-3370 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1912 --A limit-3370 -m limit --limit 1/second -j LOG --A limit-3370 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3371 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1913 --A limit-3371 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3372 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1914 --A limit-3372 -j TEE --gateway fc00::2 --A limit-3372 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3373 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1915 --A limit-3373 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3374 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1916 --A limit-3374 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3375 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1917 --A limit-3375 -m recent --name user:C --rdest --mask fe00:: --set --A limit-3376 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1918 --A limit-3376 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3377 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1919 --A limit-3378 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1920 --A limit-3378 -j ACCEPT -A limit-338 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-338 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3380 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1922 --A limit-3380 -m limit --limit 1/second -j LOG --A limit-3380 -j ACCEPT --A limit-3381 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1923 --A limit-3381 -m limit --limit 1/second -j LOG --A limit-3382 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1924 --A limit-3382 -j TEE --gateway fc00::2 --A limit-3382 -j ACCEPT --A limit-3383 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1925 --A limit-3383 -j TEE --gateway fc00::2 --A limit-3384 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1926 --A limit-3384 -j ACCEPT --A limit-3386 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1928 --A limit-3386 -j ACCEPT --A limit-3387 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1929 --A limit-3388 -m recent --name limit-3388 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3388 -m recent --name limit-3388 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3389 -m recent --name limit-3389 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3389 -m recent --name limit-3389 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-339 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3390 -m recent --name limit-3390 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3390 -m limit --limit 1/second -j LOG --A limit-3390 -m recent --name limit-3390 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3391 -m recent --name limit-3391 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3391 -m recent --name limit-3391 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3392 -m recent --name limit-3392 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3392 -j TEE --gateway fc00::2 --A limit-3392 -m recent --name limit-3392 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3393 -m recent --name limit-3393 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3393 -m recent --name limit-3393 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3394 -m recent --name limit-3394 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3394 -m recent --name limit-3394 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3395 -m recent --name limit-3395 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3395 -m recent --name limit-3395 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3396 -m recent --name limit-3396 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3396 -m recent --name limit-3396 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3397 -m recent --name limit-3397 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3398 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3398 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3399 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3399 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-34 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-34 -j TEE --gateway fc00::2 -A limit-34 -j ACCEPT -A limit-340 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-340 -j ACCEPT --A limit-3400 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3400 -m limit --limit 1/second -j LOG --A limit-3400 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3401 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3401 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3402 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3402 -j TEE --gateway fc00::2 --A limit-3402 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3403 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3403 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3404 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3404 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3405 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3405 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3406 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3406 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3407 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3408 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3408 -j ACCEPT -A limit-341 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3410 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3410 -m limit --limit 1/second -j LOG --A limit-3410 -j ACCEPT --A limit-3411 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3411 -m limit --limit 1/second -j LOG --A limit-3412 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3412 -j TEE --gateway fc00::2 --A limit-3412 -j ACCEPT --A limit-3413 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3413 -j TEE --gateway fc00::2 --A limit-3414 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3414 -j ACCEPT --A limit-3416 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3416 -j ACCEPT --A limit-3417 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3418 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3418 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3419 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3419 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-342 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-342 -m limit --limit 1/second -j LOG -A limit-342 -j ACCEPT --A limit-3420 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3420 -m limit --limit 1/second -j LOG --A limit-3420 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3421 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3421 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3422 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3422 -j TEE --gateway fc00::2 --A limit-3422 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3423 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3423 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3424 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3424 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3425 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3425 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3426 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3426 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3427 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3428 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3428 -j ACCEPT -A limit-343 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-343 -m limit --limit 1/second -j LOG --A limit-3430 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3430 -m limit --limit 1/second -j LOG --A limit-3430 -j ACCEPT --A limit-3431 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3431 -m limit --limit 1/second -j LOG --A limit-3432 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3432 -j TEE --gateway fc00::2 --A limit-3432 -j ACCEPT --A limit-3433 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3433 -j TEE --gateway fc00::2 --A limit-3434 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3434 -j ACCEPT --A limit-3436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3436 -j ACCEPT --A limit-3437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3438 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3438 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3439 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3439 -m recent --name user:C --rsource --mask fe00:: --set -A limit-344 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-344 -j TEE --gateway fc00::2 -A limit-344 -j ACCEPT --A limit-3440 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3440 -m limit --limit 1/second -j LOG --A limit-3440 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3441 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3441 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3442 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3442 -j TEE --gateway fc00::2 --A limit-3442 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3443 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3443 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3444 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3444 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3445 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3445 -m recent --name user:C --rsource --mask fe00:: --set --A limit-3446 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3446 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3447 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3448 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3448 -j ACCEPT -A limit-345 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-345 -j TEE --gateway fc00::2 --A limit-3450 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3450 -m limit --limit 1/second -j LOG --A limit-3450 -j ACCEPT --A limit-3451 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3451 -m limit --limit 1/second -j LOG --A limit-3452 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3452 -j TEE --gateway fc00::2 --A limit-3452 -j ACCEPT --A limit-3453 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3453 -j TEE --gateway fc00::2 --A limit-3454 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3454 -j ACCEPT --A limit-3456 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3456 -j ACCEPT --A limit-3457 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3458 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3458 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3459 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3459 -m recent --name user:C --rdest --mask fe00:: --set -A limit-346 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-346 -j ACCEPT --A limit-3460 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3460 -m limit --limit 1/second -j LOG --A limit-3460 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3461 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3461 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3462 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3462 -j TEE --gateway fc00::2 --A limit-3462 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3463 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3463 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3464 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3464 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3465 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3465 -m recent --name user:C --rdest --mask fe00:: --set --A limit-3466 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3466 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3467 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3468 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3468 -j ACCEPT -A limit-347 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3470 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3470 -m limit --limit 1/second -j LOG --A limit-3470 -j ACCEPT --A limit-3471 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3471 -m limit --limit 1/second -j LOG --A limit-3472 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3472 -j TEE --gateway fc00::2 --A limit-3472 -j ACCEPT --A limit-3473 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3473 -j TEE --gateway fc00::2 --A limit-3474 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3474 -j ACCEPT --A limit-3476 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3476 -j ACCEPT --A limit-3477 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3478 -m recent --name limit-3478 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1930 --A limit-3478 -m recent --name limit-3478 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3479 -m recent --name limit-3479 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1931 --A limit-3479 -m recent --name limit-3479 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-348 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-348 -j ACCEPT --A limit-3480 -m recent --name limit-3480 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1932 --A limit-3480 -m limit --limit 1/second -j LOG --A limit-3480 -m recent --name limit-3480 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3481 -m recent --name limit-3481 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1933 --A limit-3481 -m recent --name limit-3481 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3482 -m recent --name limit-3482 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1934 --A limit-3482 -j TEE --gateway fc00::2 --A limit-3482 -m recent --name limit-3482 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3483 -m recent --name limit-3483 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1935 --A limit-3483 -m recent --name limit-3483 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3484 -m recent --name limit-3484 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1936 --A limit-3484 -m recent --name limit-3484 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3485 -m recent --name limit-3485 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1937 --A limit-3485 -m recent --name limit-3485 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3486 -m recent --name limit-3486 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1938 --A limit-3486 -m recent --name limit-3486 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3487 -m recent --name limit-3487 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1939 --A limit-3488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1940 --A limit-3488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1941 --A limit-3489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-349 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3490 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1942 --A limit-3490 -m limit --limit 1/second -j LOG --A limit-3490 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3491 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1943 --A limit-3491 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3492 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1944 --A limit-3492 -j TEE --gateway fc00::2 --A limit-3492 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3493 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1945 --A limit-3493 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3494 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1946 --A limit-3494 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3495 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1947 --A limit-3495 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3496 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1948 --A limit-3496 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3497 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1949 --A limit-3498 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1950 --A limit-3498 -j ACCEPT -A limit-35 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-35 -j TEE --gateway fc00::2 -A limit-350 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-350 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3500 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1952 --A limit-3500 -m limit --limit 1/second -j LOG --A limit-3500 -j ACCEPT --A limit-3501 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1953 --A limit-3501 -m limit --limit 1/second -j LOG --A limit-3502 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1954 --A limit-3502 -j TEE --gateway fc00::2 --A limit-3502 -j ACCEPT --A limit-3503 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1955 --A limit-3503 -j TEE --gateway fc00::2 --A limit-3504 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1956 --A limit-3504 -j ACCEPT --A limit-3506 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1958 --A limit-3506 -j ACCEPT --A limit-3507 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1959 --A limit-3508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1960 --A limit-3508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1961 --A limit-3509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-351 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-351 -m recent --name user:C --rdest --mask fe00:: --set --A limit-3510 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1962 --A limit-3510 -m limit --limit 1/second -j LOG --A limit-3510 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3511 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1963 --A limit-3511 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3512 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1964 --A limit-3512 -j TEE --gateway fc00::2 --A limit-3512 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3513 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1965 --A limit-3513 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3514 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1966 --A limit-3514 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3515 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1967 --A limit-3515 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3516 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1968 --A limit-3516 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3517 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1969 --A limit-3518 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1970 --A limit-3518 -j ACCEPT -A limit-352 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-352 -m limit --limit 1/second -j LOG -A limit-352 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3520 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1972 --A limit-3520 -m limit --limit 1/second -j LOG --A limit-3520 -j ACCEPT --A limit-3521 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1973 --A limit-3521 -m limit --limit 1/second -j LOG --A limit-3522 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1974 --A limit-3522 -j TEE --gateway fc00::2 --A limit-3522 -j ACCEPT --A limit-3523 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1975 --A limit-3523 -j TEE --gateway fc00::2 --A limit-3524 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1976 --A limit-3524 -j ACCEPT --A limit-3526 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1978 --A limit-3526 -j ACCEPT --A limit-3527 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1979 --A limit-3528 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1980 --A limit-3528 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3529 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1981 --A limit-3529 -m recent --name user:C --rsource --mask fe00:: --set -A limit-353 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-353 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3530 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1982 --A limit-3530 -m limit --limit 1/second -j LOG --A limit-3530 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3531 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1983 --A limit-3531 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3532 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1984 --A limit-3532 -j TEE --gateway fc00::2 --A limit-3532 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3533 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1985 --A limit-3533 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3534 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1986 --A limit-3534 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3535 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1987 --A limit-3535 -m recent --name user:C --rsource --mask fe00:: --set --A limit-3536 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1988 --A limit-3536 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3537 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1989 --A limit-3538 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1990 --A limit-3538 -j ACCEPT -A limit-354 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-354 -j TEE --gateway fc00::2 -A limit-354 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3540 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1992 --A limit-3540 -m limit --limit 1/second -j LOG --A limit-3540 -j ACCEPT --A limit-3541 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1993 --A limit-3541 -m limit --limit 1/second -j LOG --A limit-3542 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1994 --A limit-3542 -j TEE --gateway fc00::2 --A limit-3542 -j ACCEPT --A limit-3543 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1995 --A limit-3543 -j TEE --gateway fc00::2 --A limit-3544 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1996 --A limit-3544 -j ACCEPT --A limit-3546 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1998 --A limit-3546 -j ACCEPT --A limit-3547 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1999 --A limit-3548 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2000 --A limit-3548 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3549 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2001 --A limit-3549 -m recent --name user:C --rdest --mask fe00:: --set -A limit-355 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-355 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3550 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2002 --A limit-3550 -m limit --limit 1/second -j LOG --A limit-3550 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3551 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2003 --A limit-3551 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3552 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2004 --A limit-3552 -j TEE --gateway fc00::2 --A limit-3552 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3553 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2005 --A limit-3553 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3554 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2006 --A limit-3554 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3555 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2007 --A limit-3555 -m recent --name user:C --rdest --mask fe00:: --set --A limit-3556 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2008 --A limit-3556 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3557 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2009 --A limit-3558 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2010 --A limit-3558 -j ACCEPT -A limit-356 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-356 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3560 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2012 --A limit-3560 -m limit --limit 1/second -j LOG --A limit-3560 -j ACCEPT --A limit-3561 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2013 --A limit-3561 -m limit --limit 1/second -j LOG --A limit-3562 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2014 --A limit-3562 -j TEE --gateway fc00::2 --A limit-3562 -j ACCEPT --A limit-3563 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2015 --A limit-3563 -j TEE --gateway fc00::2 --A limit-3564 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2016 --A limit-3564 -j ACCEPT --A limit-3566 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2018 --A limit-3566 -j ACCEPT --A limit-3567 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2019 --A limit-3568 -m recent --name limit-3568 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2020 --A limit-3568 -m recent --name limit-3568 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3569 -m recent --name limit-3569 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2021 --A limit-3569 -m recent --name limit-3569 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-357 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-357 -m recent --name user:C --rdest --mask fe00:: --set --A limit-3570 -m recent --name limit-3570 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2022 --A limit-3570 -m limit --limit 1/second -j LOG --A limit-3570 -m recent --name limit-3570 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3571 -m recent --name limit-3571 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2023 --A limit-3571 -m recent --name limit-3571 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3572 -m recent --name limit-3572 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2024 --A limit-3572 -j TEE --gateway fc00::2 --A limit-3572 -m recent --name limit-3572 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3573 -m recent --name limit-3573 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2025 --A limit-3573 -m recent --name limit-3573 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3574 -m recent --name limit-3574 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2026 --A limit-3574 -m recent --name limit-3574 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3575 -m recent --name limit-3575 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2027 --A limit-3575 -m recent --name limit-3575 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3576 -m recent --name limit-3576 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2028 --A limit-3576 -m recent --name limit-3576 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3577 -m recent --name limit-3577 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2029 --A limit-3578 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2030 --A limit-3578 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3579 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2031 --A limit-3579 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-358 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-358 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3580 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2032 --A limit-3580 -m limit --limit 1/second -j LOG --A limit-3580 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3581 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2033 --A limit-3581 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3582 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2034 --A limit-3582 -j TEE --gateway fc00::2 --A limit-3582 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3583 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2035 --A limit-3583 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3584 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2036 --A limit-3584 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3585 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2037 --A limit-3585 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2038 --A limit-3586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2039 --A limit-3588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2040 --A limit-3588 -j ACCEPT -A limit-359 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2042 --A limit-3590 -m limit --limit 1/second -j LOG --A limit-3590 -j ACCEPT --A limit-3591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2043 --A limit-3591 -m limit --limit 1/second -j LOG --A limit-3592 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2044 --A limit-3592 -j TEE --gateway fc00::2 --A limit-3592 -j ACCEPT --A limit-3593 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2045 --A limit-3593 -j TEE --gateway fc00::2 --A limit-3594 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2046 --A limit-3594 -j ACCEPT --A limit-3596 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2048 --A limit-3596 -j ACCEPT --A limit-3597 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2049 --A limit-3598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2050 --A limit-3598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2051 --A limit-3599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-36 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-36 -j ACCEPT -A limit-360 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-360 -j ACCEPT --A limit-3600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2052 --A limit-3600 -m limit --limit 1/second -j LOG --A limit-3600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2053 --A limit-3601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2054 --A limit-3602 -j TEE --gateway fc00::2 --A limit-3602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2055 --A limit-3603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2056 --A limit-3604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3605 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2057 --A limit-3605 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2058 --A limit-3606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3607 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2059 --A limit-3608 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2060 --A limit-3608 -j ACCEPT -A limit-361 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3610 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2062 --A limit-3610 -m limit --limit 1/second -j LOG --A limit-3610 -j ACCEPT --A limit-3611 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2063 --A limit-3611 -m limit --limit 1/second -j LOG --A limit-3612 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2064 --A limit-3612 -j TEE --gateway fc00::2 --A limit-3612 -j ACCEPT --A limit-3613 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2065 --A limit-3613 -j TEE --gateway fc00::2 --A limit-3614 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2066 --A limit-3614 -j ACCEPT --A limit-3616 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2068 --A limit-3616 -j ACCEPT --A limit-3617 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2069 --A limit-3618 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2070 --A limit-3618 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3619 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2071 --A limit-3619 -m recent --name user:C --rsource --mask fe00:: --set -A limit-362 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-362 -m limit --limit 1/second -j LOG -A limit-362 -j ACCEPT --A limit-3620 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2072 --A limit-3620 -m limit --limit 1/second -j LOG --A limit-3620 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3621 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2073 --A limit-3621 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3622 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2074 --A limit-3622 -j TEE --gateway fc00::2 --A limit-3622 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3623 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2075 --A limit-3623 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3624 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2076 --A limit-3624 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3625 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2077 --A limit-3625 -m recent --name user:C --rsource --mask fe00:: --set --A limit-3626 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2078 --A limit-3626 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3627 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2079 --A limit-3628 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2080 --A limit-3628 -j ACCEPT -A limit-363 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-363 -m limit --limit 1/second -j LOG --A limit-3630 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2082 --A limit-3630 -m limit --limit 1/second -j LOG --A limit-3630 -j ACCEPT --A limit-3631 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2083 --A limit-3631 -m limit --limit 1/second -j LOG --A limit-3632 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2084 --A limit-3632 -j TEE --gateway fc00::2 --A limit-3632 -j ACCEPT --A limit-3633 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2085 --A limit-3633 -j TEE --gateway fc00::2 --A limit-3634 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2086 --A limit-3634 -j ACCEPT --A limit-3636 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2088 --A limit-3636 -j ACCEPT --A limit-3637 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2089 --A limit-3638 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2090 --A limit-3638 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3639 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2091 --A limit-3639 -m recent --name user:C --rdest --mask fe00:: --set -A limit-364 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-364 -j TEE --gateway fc00::2 -A limit-364 -j ACCEPT --A limit-3640 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2092 --A limit-3640 -m limit --limit 1/second -j LOG --A limit-3640 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3641 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2093 --A limit-3641 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3642 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2094 --A limit-3642 -j TEE --gateway fc00::2 --A limit-3642 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3643 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2095 --A limit-3643 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3644 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2096 --A limit-3644 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3645 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2097 --A limit-3645 -m recent --name user:C --rdest --mask fe00:: --set --A limit-3646 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2098 --A limit-3646 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3647 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2099 --A limit-3648 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2100 --A limit-3648 -j ACCEPT -A limit-365 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-365 -j TEE --gateway fc00::2 --A limit-3650 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2102 --A limit-3650 -m limit --limit 1/second -j LOG --A limit-3650 -j ACCEPT --A limit-3651 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2103 --A limit-3651 -m limit --limit 1/second -j LOG --A limit-3652 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2104 --A limit-3652 -j TEE --gateway fc00::2 --A limit-3652 -j ACCEPT --A limit-3653 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2105 --A limit-3653 -j TEE --gateway fc00::2 --A limit-3654 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2106 --A limit-3654 -j ACCEPT --A limit-3656 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2108 --A limit-3656 -j ACCEPT --A limit-3657 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2109 --A limit-3658 -m recent --name limit-3658 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3658 -m recent --name limit-3658 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3659 -m recent --name limit-3659 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3659 -m recent --name limit-3659 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-366 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-366 -j ACCEPT --A limit-3660 -m recent --name limit-3660 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3660 -m limit --limit 1/second -j LOG --A limit-3660 -m recent --name limit-3660 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3661 -m recent --name limit-3661 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3661 -m recent --name limit-3661 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3662 -m recent --name limit-3662 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3662 -j TEE --gateway fc00::2 --A limit-3662 -m recent --name limit-3662 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3663 -m recent --name limit-3663 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3663 -m recent --name limit-3663 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3664 -m recent --name limit-3664 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3664 -m recent --name limit-3664 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3665 -m recent --name limit-3665 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3665 -m recent --name limit-3665 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3666 -m recent --name limit-3666 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3666 -m recent --name limit-3666 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3667 -m recent --name limit-3667 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3668 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3668 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3669 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3669 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-367 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3670 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3670 -m limit --limit 1/second -j LOG --A limit-3670 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3671 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3671 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3672 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3672 -j TEE --gateway fc00::2 --A limit-3672 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3673 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3673 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3674 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3674 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3675 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3675 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3676 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3676 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3677 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3678 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3678 -j ACCEPT -A limit-368 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-368 -j ACCEPT --A limit-3680 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3680 -m limit --limit 1/second -j LOG --A limit-3680 -j ACCEPT --A limit-3681 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3681 -m limit --limit 1/second -j LOG --A limit-3682 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3682 -j TEE --gateway fc00::2 --A limit-3682 -j ACCEPT --A limit-3683 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3683 -j TEE --gateway fc00::2 --A limit-3684 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3684 -j ACCEPT --A limit-3686 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3686 -j ACCEPT --A limit-3687 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3688 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3688 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3689 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3689 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-369 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3690 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3690 -m limit --limit 1/second -j LOG --A limit-3690 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3691 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3691 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3692 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3692 -j TEE --gateway fc00::2 --A limit-3692 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3693 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3693 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3694 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3694 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3695 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3695 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3696 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3696 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3697 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3698 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3698 -j ACCEPT -A limit-37 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-370 -m recent --name limit-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-190 -A limit-370 -m recent --name limit-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3700 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3700 -m limit --limit 1/second -j LOG --A limit-3700 -j ACCEPT --A limit-3701 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3701 -m limit --limit 1/second -j LOG --A limit-3702 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3702 -j TEE --gateway fc00::2 --A limit-3702 -j ACCEPT --A limit-3703 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3703 -j TEE --gateway fc00::2 --A limit-3704 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3704 -j ACCEPT --A limit-3706 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3706 -j ACCEPT --A limit-3707 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3708 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3708 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3709 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3709 -m recent --name user:C --rsource --mask fe00:: --set -A limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-191 -A limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3710 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3710 -m limit --limit 1/second -j LOG --A limit-3710 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3711 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3711 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3712 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3712 -j TEE --gateway fc00::2 --A limit-3712 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3713 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3713 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3714 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3714 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3715 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3715 -m recent --name user:C --rsource --mask fe00:: --set --A limit-3716 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3716 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3717 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3718 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3718 -j ACCEPT -A limit-372 -m recent --name limit-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-192 -A limit-372 -m limit --limit 1/second -j LOG -A limit-372 -m recent --name limit-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3720 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3720 -m limit --limit 1/second -j LOG --A limit-3720 -j ACCEPT --A limit-3721 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3721 -m limit --limit 1/second -j LOG --A limit-3722 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3722 -j TEE --gateway fc00::2 --A limit-3722 -j ACCEPT --A limit-3723 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3723 -j TEE --gateway fc00::2 --A limit-3724 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3724 -j ACCEPT --A limit-3726 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3726 -j ACCEPT --A limit-3727 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3728 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3728 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3729 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3729 -m recent --name user:C --rdest --mask fe00:: --set -A limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-193 -A limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3730 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3730 -m limit --limit 1/second -j LOG --A limit-3730 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3731 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3731 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3732 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3732 -j TEE --gateway fc00::2 --A limit-3732 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3733 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3733 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3734 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3734 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3735 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3735 -m recent --name user:C --rdest --mask fe00:: --set --A limit-3736 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3736 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3737 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3738 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3738 -j ACCEPT -A limit-374 -m recent --name limit-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-194 -A limit-374 -j TEE --gateway fc00::2 -A limit-374 -m recent --name limit-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3740 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3740 -m limit --limit 1/second -j LOG --A limit-3740 -j ACCEPT --A limit-3741 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3741 -m limit --limit 1/second -j LOG --A limit-3742 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3742 -j TEE --gateway fc00::2 --A limit-3742 -j ACCEPT --A limit-3743 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3743 -j TEE --gateway fc00::2 --A limit-3744 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3744 -j ACCEPT --A limit-3746 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3746 -j ACCEPT --A limit-3747 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3748 -m recent --name limit-3748 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2110 --A limit-3748 -m recent --name limit-3748 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3749 -m recent --name limit-3749 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2111 --A limit-3749 -m recent --name limit-3749 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-375 -m recent --name limit-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-195 -A limit-375 -m recent --name limit-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3750 -m recent --name limit-3750 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2112 --A limit-3750 -m limit --limit 1/second -j LOG --A limit-3750 -m recent --name limit-3750 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3751 -m recent --name limit-3751 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2113 --A limit-3751 -m recent --name limit-3751 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3752 -m recent --name limit-3752 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2114 --A limit-3752 -j TEE --gateway fc00::2 --A limit-3752 -m recent --name limit-3752 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3753 -m recent --name limit-3753 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2115 --A limit-3753 -m recent --name limit-3753 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3754 -m recent --name limit-3754 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2116 --A limit-3754 -m recent --name limit-3754 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3755 -m recent --name limit-3755 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2117 --A limit-3755 -m recent --name limit-3755 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3756 -m recent --name limit-3756 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2118 --A limit-3756 -m recent --name limit-3756 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3757 -m recent --name limit-3757 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2119 --A limit-3758 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2120 --A limit-3758 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3759 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2121 --A limit-3759 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-376 -m recent --name limit-376 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-196 -A limit-376 -m recent --name limit-376 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3760 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2122 --A limit-3760 -m limit --limit 1/second -j LOG --A limit-3760 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3761 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2123 --A limit-3761 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3762 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2124 --A limit-3762 -j TEE --gateway fc00::2 --A limit-3762 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3763 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2125 --A limit-3763 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3764 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2126 --A limit-3764 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3765 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2127 --A limit-3765 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3766 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2128 --A limit-3766 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3767 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2129 --A limit-3768 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2130 --A limit-3768 -j ACCEPT -A limit-377 -m recent --name limit-377 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-197 -A limit-377 -m recent --name limit-377 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3770 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2132 --A limit-3770 -m limit --limit 1/second -j LOG --A limit-3770 -j ACCEPT --A limit-3771 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2133 --A limit-3771 -m limit --limit 1/second -j LOG --A limit-3772 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2134 --A limit-3772 -j TEE --gateway fc00::2 --A limit-3772 -j ACCEPT --A limit-3773 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2135 --A limit-3773 -j TEE --gateway fc00::2 --A limit-3774 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2136 --A limit-3774 -j ACCEPT --A limit-3776 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2138 --A limit-3776 -j ACCEPT --A limit-3777 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2139 --A limit-3778 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2140 --A limit-3778 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3779 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2141 --A limit-3779 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-378 -m recent --name limit-378 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-198 -A limit-378 -m recent --name limit-378 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3780 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2142 --A limit-3780 -m limit --limit 1/second -j LOG --A limit-3780 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3781 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2143 --A limit-3781 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3782 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2144 --A limit-3782 -j TEE --gateway fc00::2 --A limit-3782 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3783 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2145 --A limit-3783 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3784 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2146 --A limit-3784 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3785 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2147 --A limit-3785 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3786 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2148 --A limit-3786 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3787 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2149 --A limit-3788 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2150 --A limit-3788 -j ACCEPT -A limit-379 -m recent --name limit-379 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-199 --A limit-3790 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2152 --A limit-3790 -m limit --limit 1/second -j LOG --A limit-3790 -j ACCEPT --A limit-3791 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2153 --A limit-3791 -m limit --limit 1/second -j LOG --A limit-3792 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2154 --A limit-3792 -j TEE --gateway fc00::2 --A limit-3792 -j ACCEPT --A limit-3793 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2155 --A limit-3793 -j TEE --gateway fc00::2 --A limit-3794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2156 --A limit-3794 -j ACCEPT --A limit-3796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2158 --A limit-3796 -j ACCEPT --A limit-3797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2159 --A limit-3798 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2160 --A limit-3798 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3799 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2161 --A limit-3799 -m recent --name user:C --rsource --mask fe00:: --set -A limit-38 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-38 -j ACCEPT -A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-200 -A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3800 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2162 --A limit-3800 -m limit --limit 1/second -j LOG --A limit-3800 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3801 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2163 --A limit-3801 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3802 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2164 --A limit-3802 -j TEE --gateway fc00::2 --A limit-3802 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3803 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2165 --A limit-3803 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3804 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2166 --A limit-3804 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3805 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2167 --A limit-3805 -m recent --name user:C --rsource --mask fe00:: --set --A limit-3806 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2168 --A limit-3806 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3807 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2169 --A limit-3808 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2170 --A limit-3808 -j ACCEPT -A limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-201 -A limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3810 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2172 --A limit-3810 -m limit --limit 1/second -j LOG --A limit-3810 -j ACCEPT --A limit-3811 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2173 --A limit-3811 -m limit --limit 1/second -j LOG --A limit-3812 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2174 --A limit-3812 -j TEE --gateway fc00::2 --A limit-3812 -j ACCEPT --A limit-3813 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2175 --A limit-3813 -j TEE --gateway fc00::2 --A limit-3814 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2176 --A limit-3814 -j ACCEPT --A limit-3816 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2178 --A limit-3816 -j ACCEPT --A limit-3817 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2179 --A limit-3818 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2180 --A limit-3818 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3819 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2181 --A limit-3819 -m recent --name user:C --rdest --mask fe00:: --set -A limit-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-202 -A limit-382 -m limit --limit 1/second -j LOG -A limit-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3820 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2182 --A limit-3820 -m limit --limit 1/second -j LOG --A limit-3820 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3821 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2183 --A limit-3821 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3822 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2184 --A limit-3822 -j TEE --gateway fc00::2 --A limit-3822 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3823 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2185 --A limit-3823 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3824 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2186 --A limit-3824 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3825 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2187 --A limit-3825 -m recent --name user:C --rdest --mask fe00:: --set --A limit-3826 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2188 --A limit-3826 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3827 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2189 --A limit-3828 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2190 --A limit-3828 -j ACCEPT -A limit-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-203 -A limit-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3830 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2192 --A limit-3830 -m limit --limit 1/second -j LOG --A limit-3830 -j ACCEPT --A limit-3831 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2193 --A limit-3831 -m limit --limit 1/second -j LOG --A limit-3832 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2194 --A limit-3832 -j TEE --gateway fc00::2 --A limit-3832 -j ACCEPT --A limit-3833 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2195 --A limit-3833 -j TEE --gateway fc00::2 --A limit-3834 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2196 --A limit-3834 -j ACCEPT --A limit-3836 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2198 --A limit-3836 -j ACCEPT --A limit-3837 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2199 --A limit-3838 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3838 -j ACCEPT --A limit-3838 -m limit --limit 1/second -j LOG --A limit-3838 -j DROP --A limit-3839 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3839 -j RETURN --A limit-3839 -m limit --limit 1/second -j LOG --A limit-3839 -j DROP -A limit-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-204 -A limit-384 -j TEE --gateway fc00::2 -A limit-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3840 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3840 -j logaccept-66 --A limit-3840 -m limit --limit 1/second -j LOG --A limit-3840 -j DROP --A limit-3841 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3841 -j logaccept-67 --A limit-3841 -m limit --limit 1/second -j LOG --A limit-3841 -j DROP --A limit-3842 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3842 -j ACCEPT --A limit-3842 -m limit --limit 1/second -j LOG --A limit-3842 -j DROP --A limit-3843 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3843 -j logaccept-68 --A limit-3843 -m limit --limit 1/second -j LOG --A limit-3843 -j DROP --A limit-3844 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3844 -j ACCEPT --A limit-3844 -j DROP --A limit-3845 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3845 -j RETURN --A limit-3845 -j DROP --A limit-3846 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3846 -j logaccept-69 --A limit-3846 -j DROP --A limit-3847 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3847 -j logaccept-70 --A limit-3847 -j DROP --A limit-3848 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3848 -j ACCEPT --A limit-3848 -j DROP --A limit-3849 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3849 -j logaccept-71 --A limit-3849 -j DROP -A limit-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-205 -A limit-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3850 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3850 -j ACCEPT --A limit-3850 -m limit --limit 1/second -j LOG --A limit-3850 -j DROP --A limit-3851 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3851 -j RETURN --A limit-3851 -m limit --limit 1/second -j LOG --A limit-3851 -j DROP --A limit-3852 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3852 -j logaccept-72 --A limit-3852 -m limit --limit 1/second -j LOG --A limit-3852 -j DROP --A limit-3853 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3853 -j logaccept-73 --A limit-3853 -m limit --limit 1/second -j LOG --A limit-3853 -j DROP --A limit-3854 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3854 -j ACCEPT --A limit-3854 -m limit --limit 1/second -j LOG --A limit-3854 -j DROP --A limit-3855 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3855 -j logaccept-74 --A limit-3855 -m limit --limit 1/second -j LOG --A limit-3855 -j DROP --A limit-3856 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3856 -j ACCEPT --A limit-3856 -j TEE --gateway fc00::2 --A limit-3856 -j DROP --A limit-3857 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3857 -j RETURN --A limit-3857 -j TEE --gateway fc00::2 --A limit-3857 -j DROP --A limit-3858 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3858 -j logaccept-75 --A limit-3858 -j TEE --gateway fc00::2 --A limit-3858 -j DROP --A limit-3859 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3859 -j logaccept-76 --A limit-3859 -j TEE --gateway fc00::2 --A limit-3859 -j DROP -A limit-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-206 -A limit-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3860 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3860 -j ACCEPT --A limit-3860 -j TEE --gateway fc00::2 --A limit-3860 -j DROP --A limit-3861 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3861 -j logaccept-77 --A limit-3861 -j TEE --gateway fc00::2 --A limit-3861 -j DROP --A limit-3862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3862 -j ACCEPT --A limit-3862 -j DROP --A limit-3863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3863 -j RETURN --A limit-3863 -j DROP --A limit-3864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3864 -j logaccept-78 --A limit-3864 -j DROP --A limit-3865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3865 -j logaccept-79 --A limit-3865 -j DROP --A limit-3866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3866 -j ACCEPT --A limit-3866 -j DROP --A limit-3867 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3867 -j logaccept-80 --A limit-3867 -j DROP --A limit-3868 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3868 -j ACCEPT --A limit-3868 -j DROP --A limit-3869 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3869 -j RETURN --A limit-3869 -j DROP -A limit-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-207 -A limit-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3870 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3870 -j logaccept-81 --A limit-3870 -j DROP --A limit-3871 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3871 -j logaccept-82 --A limit-3871 -j DROP --A limit-3872 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3872 -j ACCEPT --A limit-3872 -j DROP --A limit-3873 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3873 -j logaccept-83 --A limit-3873 -j DROP --A limit-3874 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3874 -j ACCEPT --A limit-3874 -j DROP --A limit-3875 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3875 -j RETURN --A limit-3875 -j DROP --A limit-3876 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3876 -j logaccept-84 --A limit-3876 -j DROP --A limit-3877 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3877 -j logaccept-85 --A limit-3877 -j DROP --A limit-3878 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3878 -j ACCEPT --A limit-3878 -j DROP --A limit-3879 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3879 -j logaccept-86 --A limit-3879 -j DROP -A limit-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-208 -A limit-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3880 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3880 -j ACCEPT --A limit-3880 -m limit --limit 1/second -j LOG --A limit-3880 -j DROP --A limit-3881 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3881 -j RETURN --A limit-3881 -m limit --limit 1/second -j LOG --A limit-3881 -j DROP --A limit-3882 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3882 -j logaccept-87 --A limit-3882 -m limit --limit 1/second -j LOG --A limit-3882 -j DROP --A limit-3883 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3883 -j logaccept-88 --A limit-3883 -m limit --limit 1/second -j LOG --A limit-3883 -j DROP --A limit-3884 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3884 -j ACCEPT --A limit-3884 -m limit --limit 1/second -j LOG --A limit-3884 -j DROP --A limit-3885 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3885 -j logaccept-89 --A limit-3885 -m limit --limit 1/second -j LOG --A limit-3885 -j DROP --A limit-3886 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3886 -j ACCEPT --A limit-3886 -j TEE --gateway fc00::2 --A limit-3886 -j DROP --A limit-3887 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3887 -j RETURN --A limit-3887 -j TEE --gateway fc00::2 --A limit-3887 -j DROP --A limit-3888 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3888 -j logaccept-90 --A limit-3888 -j TEE --gateway fc00::2 --A limit-3888 -j DROP --A limit-3889 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3889 -j logaccept-91 --A limit-3889 -j TEE --gateway fc00::2 --A limit-3889 -j DROP -A limit-389 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-209 --A limit-3890 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3890 -j ACCEPT --A limit-3890 -j TEE --gateway fc00::2 --A limit-3890 -j DROP --A limit-3891 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3891 -j logaccept-92 --A limit-3891 -j TEE --gateway fc00::2 --A limit-3891 -j DROP --A limit-3892 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3892 -j ACCEPT --A limit-3892 -j DROP --A limit-3893 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3893 -j RETURN --A limit-3893 -j DROP --A limit-3894 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3894 -j logaccept-93 --A limit-3894 -j DROP --A limit-3895 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3895 -j logaccept-94 --A limit-3895 -j DROP --A limit-3896 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3896 -j ACCEPT --A limit-3896 -j DROP --A limit-3897 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3897 -j logaccept-95 --A limit-3897 -j DROP --A limit-3898 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3898 -j ACCEPT --A limit-3898 -j DROP --A limit-3899 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3899 -j RETURN --A limit-3899 -j DROP -A limit-39 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-390 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-210 -A limit-390 -j ACCEPT --A limit-3900 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3900 -j logaccept-96 --A limit-3900 -j DROP --A limit-3901 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3901 -j logaccept-97 --A limit-3901 -j DROP --A limit-3902 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3902 -j ACCEPT --A limit-3902 -j DROP --A limit-3903 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3903 -j logaccept-98 --A limit-3903 -j DROP -A limit-391 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-211 -A limit-392 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-212 -A limit-392 -m limit --limit 1/second -j LOG @@ -114387,18 +112474,1925 @@ COMMIT -A limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-0 -m recent --name limit-ntp-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-0 +-A limit-ntp-0 -m recent --name limit-ntp-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-1 -m recent --name limit-ntp-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-1 +-A limit-ntp-1 -m recent --name limit-ntp-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-10 -m recent --name limit-ntp-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-10 -m recent --name limit-ntp-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-100 -m recent --name limit-ntp-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-10 +-A limit-ntp-100 -m recent --name limit-ntp-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-101 -m recent --name limit-ntp-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-11 +-A limit-ntp-101 -m recent --name limit-ntp-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-102 -m recent --name limit-ntp-102 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-12 +-A limit-ntp-102 -m limit --limit 1/second -j LOG +-A limit-ntp-102 -m recent --name limit-ntp-102 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-103 -m recent --name limit-ntp-103 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-13 +-A limit-ntp-103 -m recent --name limit-ntp-103 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-104 -m recent --name limit-ntp-104 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-14 +-A limit-ntp-104 -j TEE --gateway fc00::2 +-A limit-ntp-104 -m recent --name limit-ntp-104 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-15 +-A limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-106 -m recent --name limit-ntp-106 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-16 +-A limit-ntp-106 -m recent --name limit-ntp-106 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-107 -m recent --name limit-ntp-107 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-17 +-A limit-ntp-107 -m recent --name limit-ntp-107 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-108 -m recent --name limit-ntp-108 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-18 +-A limit-ntp-108 -m recent --name limit-ntp-108 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-109 -m recent --name limit-ntp-109 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-19 +-A limit-ntp-11 -m recent --name limit-ntp-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-11 -m recent --name limit-ntp-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-110 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-20 +-A limit-ntp-110 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-111 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-21 +-A limit-ntp-111 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-112 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-22 +-A limit-ntp-112 -m limit --limit 1/second -j LOG +-A limit-ntp-112 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-113 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-23 +-A limit-ntp-113 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-114 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-24 +-A limit-ntp-114 -j TEE --gateway fc00::2 +-A limit-ntp-114 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-115 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-25 +-A limit-ntp-115 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-116 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-26 +-A limit-ntp-116 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-117 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-27 +-A limit-ntp-117 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-118 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-28 +-A limit-ntp-118 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-119 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-29 +-A limit-ntp-12 -m recent --name limit-ntp-12 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-12 -m limit --limit 1/second -j LOG +-A limit-ntp-12 -m recent --name limit-ntp-12 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-30 +-A limit-ntp-120 -j ACCEPT +-A limit-ntp-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-32 +-A limit-ntp-122 -m limit --limit 1/second -j LOG +-A limit-ntp-122 -j ACCEPT +-A limit-ntp-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-33 +-A limit-ntp-123 -m limit --limit 1/second -j LOG +-A limit-ntp-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-34 +-A limit-ntp-124 -j TEE --gateway fc00::2 +-A limit-ntp-124 -j ACCEPT +-A limit-ntp-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-35 +-A limit-ntp-125 -j TEE --gateway fc00::2 +-A limit-ntp-126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-36 +-A limit-ntp-126 -j ACCEPT +-A limit-ntp-128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-38 +-A limit-ntp-128 -j ACCEPT +-A limit-ntp-129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-39 +-A limit-ntp-13 -m recent --name limit-ntp-13 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-13 -m recent --name limit-ntp-13 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-130 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-40 +-A limit-ntp-130 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-131 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-41 +-A limit-ntp-131 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-42 +-A limit-ntp-132 -m limit --limit 1/second -j LOG +-A limit-ntp-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-43 +-A limit-ntp-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-44 +-A limit-ntp-134 -j TEE --gateway fc00::2 +-A limit-ntp-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-45 +-A limit-ntp-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-46 +-A limit-ntp-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-47 +-A limit-ntp-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-48 +-A limit-ntp-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-139 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-49 +-A limit-ntp-14 -m recent --name limit-ntp-14 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-14 -j TEE --gateway fc00::2 +-A limit-ntp-14 -m recent --name limit-ntp-14 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-50 +-A limit-ntp-140 -j ACCEPT +-A limit-ntp-142 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-52 +-A limit-ntp-142 -m limit --limit 1/second -j LOG +-A limit-ntp-142 -j ACCEPT +-A limit-ntp-143 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-53 +-A limit-ntp-143 -m limit --limit 1/second -j LOG +-A limit-ntp-144 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-54 +-A limit-ntp-144 -j TEE --gateway fc00::2 +-A limit-ntp-144 -j ACCEPT +-A limit-ntp-145 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-55 +-A limit-ntp-145 -j TEE --gateway fc00::2 +-A limit-ntp-146 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-56 +-A limit-ntp-146 -j ACCEPT +-A limit-ntp-148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-58 +-A limit-ntp-148 -j ACCEPT +-A limit-ntp-149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-59 +-A limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-150 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-60 +-A limit-ntp-150 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-151 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-61 +-A limit-ntp-151 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-152 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-62 +-A limit-ntp-152 -m limit --limit 1/second -j LOG +-A limit-ntp-152 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-153 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-63 +-A limit-ntp-153 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-154 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-64 +-A limit-ntp-154 -j TEE --gateway fc00::2 +-A limit-ntp-154 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-155 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-65 +-A limit-ntp-155 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-156 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-66 +-A limit-ntp-156 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-157 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-67 +-A limit-ntp-157 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-158 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-68 +-A limit-ntp-158 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-159 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-69 +-A limit-ntp-16 -m recent --name limit-ntp-16 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-16 -m recent --name limit-ntp-16 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-160 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-70 +-A limit-ntp-160 -j ACCEPT +-A limit-ntp-162 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-72 +-A limit-ntp-162 -m limit --limit 1/second -j LOG +-A limit-ntp-162 -j ACCEPT +-A limit-ntp-163 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-73 +-A limit-ntp-163 -m limit --limit 1/second -j LOG +-A limit-ntp-164 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-74 +-A limit-ntp-164 -j TEE --gateway fc00::2 +-A limit-ntp-164 -j ACCEPT +-A limit-ntp-165 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-75 +-A limit-ntp-165 -j TEE --gateway fc00::2 +-A limit-ntp-166 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-76 +-A limit-ntp-166 -j ACCEPT +-A limit-ntp-168 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-78 +-A limit-ntp-168 -j ACCEPT +-A limit-ntp-169 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-79 +-A limit-ntp-17 -m recent --name limit-ntp-17 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-17 -m recent --name limit-ntp-17 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-170 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-80 +-A limit-ntp-170 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-171 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-81 +-A limit-ntp-171 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-172 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-82 +-A limit-ntp-172 -m limit --limit 1/second -j LOG +-A limit-ntp-172 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-173 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-83 +-A limit-ntp-173 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-174 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-84 +-A limit-ntp-174 -j TEE --gateway fc00::2 +-A limit-ntp-174 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-175 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-85 +-A limit-ntp-175 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-176 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-86 +-A limit-ntp-176 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-177 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-87 +-A limit-ntp-177 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-178 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-88 +-A limit-ntp-178 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-179 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-89 +-A limit-ntp-18 -m recent --name limit-ntp-18 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-18 -m recent --name limit-ntp-18 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-180 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-90 +-A limit-ntp-180 -j ACCEPT +-A limit-ntp-182 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-92 +-A limit-ntp-182 -m limit --limit 1/second -j LOG +-A limit-ntp-182 -j ACCEPT +-A limit-ntp-183 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-93 +-A limit-ntp-183 -m limit --limit 1/second -j LOG +-A limit-ntp-184 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-94 +-A limit-ntp-184 -j TEE --gateway fc00::2 +-A limit-ntp-184 -j ACCEPT +-A limit-ntp-185 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-95 +-A limit-ntp-185 -j TEE --gateway fc00::2 +-A limit-ntp-186 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-96 +-A limit-ntp-186 -j ACCEPT +-A limit-ntp-188 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-98 +-A limit-ntp-188 -j ACCEPT +-A limit-ntp-189 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-99 +-A limit-ntp-19 -m recent --name limit-ntp-19 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-190 -m recent --name limit-ntp-190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-100 +-A limit-ntp-190 -m recent --name limit-ntp-190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-191 -m recent --name limit-ntp-191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-101 +-A limit-ntp-191 -m recent --name limit-ntp-191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-192 -m recent --name limit-ntp-192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-102 +-A limit-ntp-192 -m limit --limit 1/second -j LOG +-A limit-ntp-192 -m recent --name limit-ntp-192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-193 -m recent --name limit-ntp-193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-103 +-A limit-ntp-193 -m recent --name limit-ntp-193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-194 -m recent --name limit-ntp-194 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-104 +-A limit-ntp-194 -j TEE --gateway fc00::2 +-A limit-ntp-194 -m recent --name limit-ntp-194 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-105 +-A limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-196 -m recent --name limit-ntp-196 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-106 +-A limit-ntp-196 -m recent --name limit-ntp-196 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-197 -m recent --name limit-ntp-197 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-107 +-A limit-ntp-197 -m recent --name limit-ntp-197 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-198 -m recent --name limit-ntp-198 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-108 +-A limit-ntp-198 -m recent --name limit-ntp-198 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-199 -m recent --name limit-ntp-199 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-109 +-A limit-ntp-2 -m recent --name limit-ntp-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-2 +-A limit-ntp-2 -m limit --limit 1/second -j LOG +-A limit-ntp-2 -m recent --name limit-ntp-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-110 +-A limit-ntp-200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-201 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-111 +-A limit-ntp-201 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-112 +-A limit-ntp-202 -m limit --limit 1/second -j LOG +-A limit-ntp-202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-113 +-A limit-ntp-203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-114 +-A limit-ntp-204 -j TEE --gateway fc00::2 +-A limit-ntp-204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-205 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-115 +-A limit-ntp-205 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-206 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-116 +-A limit-ntp-206 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-207 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-117 +-A limit-ntp-207 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-208 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-118 +-A limit-ntp-208 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-209 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-119 +-A limit-ntp-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-210 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-120 +-A limit-ntp-210 -j ACCEPT +-A limit-ntp-212 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-122 +-A limit-ntp-212 -m limit --limit 1/second -j LOG +-A limit-ntp-212 -j ACCEPT +-A limit-ntp-213 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-123 +-A limit-ntp-213 -m limit --limit 1/second -j LOG +-A limit-ntp-214 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-124 +-A limit-ntp-214 -j TEE --gateway fc00::2 +-A limit-ntp-214 -j ACCEPT +-A limit-ntp-215 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-125 +-A limit-ntp-215 -j TEE --gateway fc00::2 +-A limit-ntp-216 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-126 +-A limit-ntp-216 -j ACCEPT +-A limit-ntp-218 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-128 +-A limit-ntp-218 -j ACCEPT +-A limit-ntp-219 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-129 +-A limit-ntp-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-22 -m limit --limit 1/second -j LOG +-A limit-ntp-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-220 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-130 +-A limit-ntp-220 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-221 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-131 +-A limit-ntp-221 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-222 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-132 +-A limit-ntp-222 -m limit --limit 1/second -j LOG +-A limit-ntp-222 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-223 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-133 +-A limit-ntp-223 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-224 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-134 +-A limit-ntp-224 -j TEE --gateway fc00::2 +-A limit-ntp-224 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-225 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-135 +-A limit-ntp-225 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-226 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-136 +-A limit-ntp-226 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-227 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-137 +-A limit-ntp-227 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-228 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-138 +-A limit-ntp-228 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-229 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-139 +-A limit-ntp-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-230 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-140 +-A limit-ntp-230 -j ACCEPT +-A limit-ntp-232 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-142 +-A limit-ntp-232 -m limit --limit 1/second -j LOG +-A limit-ntp-232 -j ACCEPT +-A limit-ntp-233 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-143 +-A limit-ntp-233 -m limit --limit 1/second -j LOG +-A limit-ntp-234 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-144 +-A limit-ntp-234 -j TEE --gateway fc00::2 +-A limit-ntp-234 -j ACCEPT +-A limit-ntp-235 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-145 +-A limit-ntp-235 -j TEE --gateway fc00::2 +-A limit-ntp-236 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-146 +-A limit-ntp-236 -j ACCEPT +-A limit-ntp-238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-148 +-A limit-ntp-238 -j ACCEPT +-A limit-ntp-239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-149 +-A limit-ntp-24 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-24 -j TEE --gateway fc00::2 +-A limit-ntp-24 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-240 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-150 +-A limit-ntp-240 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-241 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-151 +-A limit-ntp-241 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-242 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-152 +-A limit-ntp-242 -m limit --limit 1/second -j LOG +-A limit-ntp-242 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-243 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-153 +-A limit-ntp-243 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-244 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-154 +-A limit-ntp-244 -j TEE --gateway fc00::2 +-A limit-ntp-244 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-245 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-155 +-A limit-ntp-245 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-246 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-156 +-A limit-ntp-246 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-247 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-157 +-A limit-ntp-247 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-248 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-158 +-A limit-ntp-248 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-249 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-159 +-A limit-ntp-25 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-25 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-250 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-160 +-A limit-ntp-250 -j ACCEPT +-A limit-ntp-252 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-162 +-A limit-ntp-252 -m limit --limit 1/second -j LOG +-A limit-ntp-252 -j ACCEPT +-A limit-ntp-253 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-163 +-A limit-ntp-253 -m limit --limit 1/second -j LOG +-A limit-ntp-254 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-164 +-A limit-ntp-254 -j TEE --gateway fc00::2 +-A limit-ntp-254 -j ACCEPT +-A limit-ntp-255 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-165 +-A limit-ntp-255 -j TEE --gateway fc00::2 +-A limit-ntp-256 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-166 +-A limit-ntp-256 -j ACCEPT +-A limit-ntp-258 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-168 +-A limit-ntp-258 -j ACCEPT +-A limit-ntp-259 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-169 +-A limit-ntp-26 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-26 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-260 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-170 +-A limit-ntp-260 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-261 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-171 +-A limit-ntp-261 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-262 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-172 +-A limit-ntp-262 -m limit --limit 1/second -j LOG +-A limit-ntp-262 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-263 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-173 +-A limit-ntp-263 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-264 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-174 +-A limit-ntp-264 -j TEE --gateway fc00::2 +-A limit-ntp-264 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-265 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-175 +-A limit-ntp-265 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-266 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-176 +-A limit-ntp-266 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-267 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-177 +-A limit-ntp-267 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-268 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-178 +-A limit-ntp-268 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-269 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-179 +-A limit-ntp-27 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-27 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-270 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-180 +-A limit-ntp-270 -j ACCEPT +-A limit-ntp-272 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-182 +-A limit-ntp-272 -m limit --limit 1/second -j LOG +-A limit-ntp-272 -j ACCEPT +-A limit-ntp-273 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-183 +-A limit-ntp-273 -m limit --limit 1/second -j LOG +-A limit-ntp-274 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-184 +-A limit-ntp-274 -j TEE --gateway fc00::2 +-A limit-ntp-274 -j ACCEPT +-A limit-ntp-275 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-185 +-A limit-ntp-275 -j TEE --gateway fc00::2 +-A limit-ntp-276 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-186 +-A limit-ntp-276 -j ACCEPT +-A limit-ntp-278 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-188 +-A limit-ntp-278 -j ACCEPT +-A limit-ntp-279 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-189 +-A limit-ntp-28 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-28 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-280 -m recent --name limit-ntp-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-280 -m recent --name limit-ntp-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-281 -m recent --name limit-ntp-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-281 -m recent --name limit-ntp-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-282 -m recent --name limit-ntp-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-282 -m limit --limit 1/second -j LOG +-A limit-ntp-282 -m recent --name limit-ntp-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-283 -m recent --name limit-ntp-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-283 -m recent --name limit-ntp-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-284 -m recent --name limit-ntp-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-284 -j TEE --gateway fc00::2 +-A limit-ntp-284 -m recent --name limit-ntp-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-286 -m recent --name limit-ntp-286 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-286 -m recent --name limit-ntp-286 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-287 -m recent --name limit-ntp-287 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-287 -m recent --name limit-ntp-287 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-288 -m recent --name limit-ntp-288 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-288 -m recent --name limit-ntp-288 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-289 -m recent --name limit-ntp-289 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-29 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-292 -m limit --limit 1/second -j LOG +-A limit-ntp-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-294 -j TEE --gateway fc00::2 +-A limit-ntp-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-298 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-298 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-299 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-3 -m recent --name limit-ntp-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-3 +-A limit-ntp-3 -m recent --name limit-ntp-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-30 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-30 -j ACCEPT +-A limit-ntp-300 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-300 -j ACCEPT +-A limit-ntp-302 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-302 -m limit --limit 1/second -j LOG +-A limit-ntp-302 -j ACCEPT +-A limit-ntp-303 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-303 -m limit --limit 1/second -j LOG +-A limit-ntp-304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-304 -j TEE --gateway fc00::2 +-A limit-ntp-304 -j ACCEPT +-A limit-ntp-305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-305 -j TEE --gateway fc00::2 +-A limit-ntp-306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-306 -j ACCEPT +-A limit-ntp-308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-308 -j ACCEPT +-A limit-ntp-309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-310 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-310 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-311 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-311 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-312 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-312 -m limit --limit 1/second -j LOG +-A limit-ntp-312 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-313 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-313 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-314 -j TEE --gateway fc00::2 +-A limit-ntp-314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-319 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-32 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-32 -m limit --limit 1/second -j LOG +-A limit-ntp-32 -j ACCEPT +-A limit-ntp-320 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-320 -j ACCEPT +-A limit-ntp-322 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-322 -m limit --limit 1/second -j LOG +-A limit-ntp-322 -j ACCEPT +-A limit-ntp-323 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-323 -m limit --limit 1/second -j LOG +-A limit-ntp-324 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-324 -j TEE --gateway fc00::2 +-A limit-ntp-324 -j ACCEPT +-A limit-ntp-325 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-325 -j TEE --gateway fc00::2 +-A limit-ntp-326 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-326 -j ACCEPT +-A limit-ntp-328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-328 -j ACCEPT +-A limit-ntp-329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-33 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-33 -m limit --limit 1/second -j LOG +-A limit-ntp-330 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-330 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-331 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-331 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-332 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-332 -m limit --limit 1/second -j LOG +-A limit-ntp-332 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-333 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-333 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-334 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-334 -j TEE --gateway fc00::2 +-A limit-ntp-334 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-335 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-335 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-336 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-336 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-337 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-337 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-338 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-338 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-339 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-34 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-34 -j TEE --gateway fc00::2 +-A limit-ntp-34 -j ACCEPT +-A limit-ntp-340 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-340 -j ACCEPT +-A limit-ntp-342 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-342 -m limit --limit 1/second -j LOG +-A limit-ntp-342 -j ACCEPT +-A limit-ntp-343 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-343 -m limit --limit 1/second -j LOG +-A limit-ntp-344 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-344 -j TEE --gateway fc00::2 +-A limit-ntp-344 -j ACCEPT +-A limit-ntp-345 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-345 -j TEE --gateway fc00::2 +-A limit-ntp-346 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-346 -j ACCEPT +-A limit-ntp-348 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-348 -j ACCEPT +-A limit-ntp-349 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-35 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-35 -j TEE --gateway fc00::2 +-A limit-ntp-350 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-350 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-351 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-351 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-352 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-352 -m limit --limit 1/second -j LOG +-A limit-ntp-352 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-353 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-353 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-354 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-354 -j TEE --gateway fc00::2 +-A limit-ntp-354 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-355 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-355 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-356 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-356 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-357 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-357 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-358 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-358 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-359 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-36 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-36 -j ACCEPT +-A limit-ntp-360 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-360 -j ACCEPT +-A limit-ntp-362 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-362 -m limit --limit 1/second -j LOG +-A limit-ntp-362 -j ACCEPT +-A limit-ntp-363 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-363 -m limit --limit 1/second -j LOG +-A limit-ntp-364 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-364 -j TEE --gateway fc00::2 +-A limit-ntp-364 -j ACCEPT +-A limit-ntp-365 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-365 -j TEE --gateway fc00::2 +-A limit-ntp-366 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-366 -j ACCEPT +-A limit-ntp-368 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-368 -j ACCEPT +-A limit-ntp-369 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-370 -m recent --name limit-ntp-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-190 +-A limit-ntp-370 -m recent --name limit-ntp-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-371 -m recent --name limit-ntp-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-191 +-A limit-ntp-371 -m recent --name limit-ntp-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-372 -m recent --name limit-ntp-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-192 +-A limit-ntp-372 -m limit --limit 1/second -j LOG +-A limit-ntp-372 -m recent --name limit-ntp-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-373 -m recent --name limit-ntp-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-193 +-A limit-ntp-373 -m recent --name limit-ntp-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-374 -m recent --name limit-ntp-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-194 +-A limit-ntp-374 -j TEE --gateway fc00::2 +-A limit-ntp-374 -m recent --name limit-ntp-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-195 +-A limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-376 -m recent --name limit-ntp-376 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-196 +-A limit-ntp-376 -m recent --name limit-ntp-376 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-377 -m recent --name limit-ntp-377 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-197 +-A limit-ntp-377 -m recent --name limit-ntp-377 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-378 -m recent --name limit-ntp-378 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-198 +-A limit-ntp-378 -m recent --name limit-ntp-378 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-379 -m recent --name limit-ntp-379 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-199 +-A limit-ntp-38 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-38 -j ACCEPT +-A limit-ntp-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-200 +-A limit-ntp-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-201 +-A limit-ntp-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-202 +-A limit-ntp-382 -m limit --limit 1/second -j LOG +-A limit-ntp-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-203 +-A limit-ntp-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-204 +-A limit-ntp-384 -j TEE --gateway fc00::2 +-A limit-ntp-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-205 +-A limit-ntp-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-206 +-A limit-ntp-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-207 +-A limit-ntp-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-208 +-A limit-ntp-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-389 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-209 +-A limit-ntp-39 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-390 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-210 +-A limit-ntp-390 -j ACCEPT +-A limit-ntp-392 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-212 +-A limit-ntp-392 -m limit --limit 1/second -j LOG +-A limit-ntp-392 -j ACCEPT +-A limit-ntp-393 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-213 +-A limit-ntp-393 -m limit --limit 1/second -j LOG +-A limit-ntp-394 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-214 +-A limit-ntp-394 -j TEE --gateway fc00::2 +-A limit-ntp-394 -j ACCEPT +-A limit-ntp-395 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-215 +-A limit-ntp-395 -j TEE --gateway fc00::2 +-A limit-ntp-396 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-216 +-A limit-ntp-396 -j ACCEPT +-A limit-ntp-398 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-218 +-A limit-ntp-398 -j ACCEPT +-A limit-ntp-399 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-219 +-A limit-ntp-4 -m recent --name limit-ntp-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-4 +-A limit-ntp-4 -j TEE --gateway fc00::2 +-A limit-ntp-4 -m recent --name limit-ntp-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-40 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-40 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-400 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-220 +-A limit-ntp-400 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-401 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-221 +-A limit-ntp-401 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-402 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-222 +-A limit-ntp-402 -m limit --limit 1/second -j LOG +-A limit-ntp-402 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-403 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-223 +-A limit-ntp-403 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-404 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-224 +-A limit-ntp-404 -j TEE --gateway fc00::2 +-A limit-ntp-404 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-405 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-225 +-A limit-ntp-405 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-406 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-226 +-A limit-ntp-406 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-407 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-227 +-A limit-ntp-407 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-408 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-228 +-A limit-ntp-408 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-409 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-229 +-A limit-ntp-41 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-41 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-410 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-230 +-A limit-ntp-410 -j ACCEPT +-A limit-ntp-412 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-232 +-A limit-ntp-412 -m limit --limit 1/second -j LOG +-A limit-ntp-412 -j ACCEPT +-A limit-ntp-413 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-233 +-A limit-ntp-413 -m limit --limit 1/second -j LOG +-A limit-ntp-414 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-234 +-A limit-ntp-414 -j TEE --gateway fc00::2 +-A limit-ntp-414 -j ACCEPT +-A limit-ntp-415 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-235 +-A limit-ntp-415 -j TEE --gateway fc00::2 +-A limit-ntp-416 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-236 +-A limit-ntp-416 -j ACCEPT +-A limit-ntp-418 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-238 +-A limit-ntp-418 -j ACCEPT +-A limit-ntp-419 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-239 +-A limit-ntp-42 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-42 -m limit --limit 1/second -j LOG +-A limit-ntp-42 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-420 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-240 +-A limit-ntp-420 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-421 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-241 +-A limit-ntp-421 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-422 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-242 +-A limit-ntp-422 -m limit --limit 1/second -j LOG +-A limit-ntp-422 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-423 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-243 +-A limit-ntp-423 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-424 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-244 +-A limit-ntp-424 -j TEE --gateway fc00::2 +-A limit-ntp-424 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-425 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-245 +-A limit-ntp-425 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-426 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-246 +-A limit-ntp-426 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-427 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-247 +-A limit-ntp-427 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-428 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-248 +-A limit-ntp-428 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-429 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-249 +-A limit-ntp-43 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-43 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-430 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-250 +-A limit-ntp-430 -j ACCEPT +-A limit-ntp-432 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-252 +-A limit-ntp-432 -m limit --limit 1/second -j LOG +-A limit-ntp-432 -j ACCEPT +-A limit-ntp-433 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-253 +-A limit-ntp-433 -m limit --limit 1/second -j LOG +-A limit-ntp-434 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-254 +-A limit-ntp-434 -j TEE --gateway fc00::2 +-A limit-ntp-434 -j ACCEPT +-A limit-ntp-435 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-255 +-A limit-ntp-435 -j TEE --gateway fc00::2 +-A limit-ntp-436 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-256 +-A limit-ntp-436 -j ACCEPT +-A limit-ntp-438 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-258 +-A limit-ntp-438 -j ACCEPT +-A limit-ntp-439 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-259 +-A limit-ntp-44 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-44 -j TEE --gateway fc00::2 +-A limit-ntp-44 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-440 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-260 +-A limit-ntp-440 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-441 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-261 +-A limit-ntp-441 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-442 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-262 +-A limit-ntp-442 -m limit --limit 1/second -j LOG +-A limit-ntp-442 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-443 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-263 +-A limit-ntp-443 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-444 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-264 +-A limit-ntp-444 -j TEE --gateway fc00::2 +-A limit-ntp-444 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-445 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-265 +-A limit-ntp-445 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-446 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-266 +-A limit-ntp-446 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-447 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-267 +-A limit-ntp-447 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-448 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-268 +-A limit-ntp-448 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-449 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-269 +-A limit-ntp-45 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-45 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-450 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-270 +-A limit-ntp-450 -j ACCEPT +-A limit-ntp-452 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-272 +-A limit-ntp-452 -m limit --limit 1/second -j LOG +-A limit-ntp-452 -j ACCEPT +-A limit-ntp-453 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-273 +-A limit-ntp-453 -m limit --limit 1/second -j LOG +-A limit-ntp-454 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-274 +-A limit-ntp-454 -j TEE --gateway fc00::2 +-A limit-ntp-454 -j ACCEPT +-A limit-ntp-455 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-275 +-A limit-ntp-455 -j TEE --gateway fc00::2 +-A limit-ntp-456 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-276 +-A limit-ntp-456 -j ACCEPT +-A limit-ntp-458 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-278 +-A limit-ntp-458 -j ACCEPT +-A limit-ntp-459 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-279 +-A limit-ntp-46 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-46 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-460 -m recent --name limit-ntp-460 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-460 -m recent --name limit-ntp-460 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-461 -m recent --name limit-ntp-461 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-461 -m recent --name limit-ntp-461 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-462 -m recent --name limit-ntp-462 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-462 -m limit --limit 1/second -j LOG +-A limit-ntp-462 -m recent --name limit-ntp-462 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-463 -m recent --name limit-ntp-463 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-463 -m recent --name limit-ntp-463 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-464 -m recent --name limit-ntp-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-464 -j TEE --gateway fc00::2 +-A limit-ntp-464 -m recent --name limit-ntp-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-466 -m recent --name limit-ntp-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-466 -m recent --name limit-ntp-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-467 -m recent --name limit-ntp-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-467 -m recent --name limit-ntp-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-468 -m recent --name limit-ntp-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-468 -m recent --name limit-ntp-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-469 -m recent --name limit-ntp-469 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-47 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-47 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-472 -m limit --limit 1/second -j LOG +-A limit-ntp-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-474 -j TEE --gateway fc00::2 +-A limit-ntp-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-476 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-476 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-477 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-477 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-48 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-48 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-480 -j ACCEPT +-A limit-ntp-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-482 -m limit --limit 1/second -j LOG +-A limit-ntp-482 -j ACCEPT +-A limit-ntp-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-483 -m limit --limit 1/second -j LOG +-A limit-ntp-484 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-484 -j TEE --gateway fc00::2 +-A limit-ntp-484 -j ACCEPT +-A limit-ntp-485 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-485 -j TEE --gateway fc00::2 +-A limit-ntp-486 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-486 -j ACCEPT +-A limit-ntp-488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-488 -j ACCEPT +-A limit-ntp-489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-49 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-492 -m limit --limit 1/second -j LOG +-A limit-ntp-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-494 -j TEE --gateway fc00::2 +-A limit-ntp-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-499 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-5 +-A limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-50 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-50 -j ACCEPT +-A limit-ntp-500 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-500 -j ACCEPT +-A limit-ntp-502 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-502 -m limit --limit 1/second -j LOG +-A limit-ntp-502 -j ACCEPT +-A limit-ntp-503 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-503 -m limit --limit 1/second -j LOG +-A limit-ntp-504 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-504 -j TEE --gateway fc00::2 +-A limit-ntp-504 -j ACCEPT +-A limit-ntp-505 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-505 -j TEE --gateway fc00::2 +-A limit-ntp-506 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-506 -j ACCEPT +-A limit-ntp-508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-508 -j ACCEPT +-A limit-ntp-509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-510 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-510 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-511 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-511 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-512 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-512 -m limit --limit 1/second -j LOG +-A limit-ntp-512 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-513 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-513 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-514 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-514 -j TEE --gateway fc00::2 +-A limit-ntp-514 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-515 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-515 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-516 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-516 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-517 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-517 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-518 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-518 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-519 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-52 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-52 -m limit --limit 1/second -j LOG +-A limit-ntp-52 -j ACCEPT +-A limit-ntp-520 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-520 -j ACCEPT +-A limit-ntp-522 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-522 -m limit --limit 1/second -j LOG +-A limit-ntp-522 -j ACCEPT +-A limit-ntp-523 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-523 -m limit --limit 1/second -j LOG +-A limit-ntp-524 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-524 -j TEE --gateway fc00::2 +-A limit-ntp-524 -j ACCEPT +-A limit-ntp-525 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-525 -j TEE --gateway fc00::2 +-A limit-ntp-526 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-526 -j ACCEPT +-A limit-ntp-528 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-528 -j ACCEPT +-A limit-ntp-529 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-53 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-53 -m limit --limit 1/second -j LOG +-A limit-ntp-530 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-530 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-531 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-531 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-532 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-532 -m limit --limit 1/second -j LOG +-A limit-ntp-532 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-533 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-533 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-534 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-534 -j TEE --gateway fc00::2 +-A limit-ntp-534 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-535 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-535 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-536 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-536 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-537 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-537 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-538 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-538 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-539 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-54 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-54 -j TEE --gateway fc00::2 +-A limit-ntp-54 -j ACCEPT +-A limit-ntp-540 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-540 -j ACCEPT +-A limit-ntp-542 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-542 -m limit --limit 1/second -j LOG +-A limit-ntp-542 -j ACCEPT +-A limit-ntp-543 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-543 -m limit --limit 1/second -j LOG +-A limit-ntp-544 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-544 -j TEE --gateway fc00::2 +-A limit-ntp-544 -j ACCEPT +-A limit-ntp-545 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-545 -j TEE --gateway fc00::2 +-A limit-ntp-546 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-546 -j ACCEPT +-A limit-ntp-548 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-548 -j ACCEPT +-A limit-ntp-549 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-55 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-55 -j TEE --gateway fc00::2 +-A limit-ntp-550 -m recent --name limit-ntp-550 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-280 +-A limit-ntp-550 -m recent --name limit-ntp-550 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-551 -m recent --name limit-ntp-551 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-281 +-A limit-ntp-551 -m recent --name limit-ntp-551 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-552 -m recent --name limit-ntp-552 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-282 +-A limit-ntp-552 -m limit --limit 1/second -j LOG +-A limit-ntp-552 -m recent --name limit-ntp-552 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-553 -m recent --name limit-ntp-553 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-283 +-A limit-ntp-553 -m recent --name limit-ntp-553 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-554 -m recent --name limit-ntp-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-284 +-A limit-ntp-554 -j TEE --gateway fc00::2 +-A limit-ntp-554 -m recent --name limit-ntp-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-285 +-A limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-556 -m recent --name limit-ntp-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-286 +-A limit-ntp-556 -m recent --name limit-ntp-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-557 -m recent --name limit-ntp-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-287 +-A limit-ntp-557 -m recent --name limit-ntp-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-558 -m recent --name limit-ntp-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-288 +-A limit-ntp-558 -m recent --name limit-ntp-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-559 -m recent --name limit-ntp-559 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-289 +-A limit-ntp-56 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-56 -j ACCEPT +-A limit-ntp-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-290 +-A limit-ntp-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-291 +-A limit-ntp-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-292 +-A limit-ntp-562 -m limit --limit 1/second -j LOG +-A limit-ntp-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-293 +-A limit-ntp-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-294 +-A limit-ntp-564 -j TEE --gateway fc00::2 +-A limit-ntp-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-295 +-A limit-ntp-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-296 +-A limit-ntp-566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-297 +-A limit-ntp-567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-298 +-A limit-ntp-568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-569 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-299 +-A limit-ntp-570 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-300 +-A limit-ntp-570 -j ACCEPT +-A limit-ntp-572 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-302 +-A limit-ntp-572 -m limit --limit 1/second -j LOG +-A limit-ntp-572 -j ACCEPT +-A limit-ntp-573 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-303 +-A limit-ntp-573 -m limit --limit 1/second -j LOG +-A limit-ntp-574 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-304 +-A limit-ntp-574 -j TEE --gateway fc00::2 +-A limit-ntp-574 -j ACCEPT +-A limit-ntp-575 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-305 +-A limit-ntp-575 -j TEE --gateway fc00::2 +-A limit-ntp-576 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-306 +-A limit-ntp-576 -j ACCEPT +-A limit-ntp-578 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-308 +-A limit-ntp-578 -j ACCEPT +-A limit-ntp-579 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-309 +-A limit-ntp-58 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-58 -j ACCEPT +-A limit-ntp-580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-310 +-A limit-ntp-580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-311 +-A limit-ntp-581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-312 +-A limit-ntp-582 -m limit --limit 1/second -j LOG +-A limit-ntp-582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-313 +-A limit-ntp-583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-314 +-A limit-ntp-584 -j TEE --gateway fc00::2 +-A limit-ntp-584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-585 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-315 +-A limit-ntp-585 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-586 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-316 +-A limit-ntp-586 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-587 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-317 +-A limit-ntp-587 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-588 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-318 +-A limit-ntp-588 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-589 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-319 +-A limit-ntp-59 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-590 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-320 +-A limit-ntp-590 -j ACCEPT +-A limit-ntp-592 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-322 +-A limit-ntp-592 -m limit --limit 1/second -j LOG +-A limit-ntp-592 -j ACCEPT +-A limit-ntp-593 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-323 +-A limit-ntp-593 -m limit --limit 1/second -j LOG +-A limit-ntp-594 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-324 +-A limit-ntp-594 -j TEE --gateway fc00::2 +-A limit-ntp-594 -j ACCEPT +-A limit-ntp-595 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-325 +-A limit-ntp-595 -j TEE --gateway fc00::2 +-A limit-ntp-596 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-326 +-A limit-ntp-596 -j ACCEPT +-A limit-ntp-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-328 +-A limit-ntp-598 -j ACCEPT +-A limit-ntp-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-329 +-A limit-ntp-6 -m recent --name limit-ntp-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-6 +-A limit-ntp-6 -m recent --name limit-ntp-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-60 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-60 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-600 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-330 +-A limit-ntp-600 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-601 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-331 +-A limit-ntp-601 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-602 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-332 +-A limit-ntp-602 -m limit --limit 1/second -j LOG +-A limit-ntp-602 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-603 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-333 +-A limit-ntp-603 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-604 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-334 +-A limit-ntp-604 -j TEE --gateway fc00::2 +-A limit-ntp-604 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-605 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-335 +-A limit-ntp-605 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-606 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-336 +-A limit-ntp-606 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-607 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-337 +-A limit-ntp-607 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-608 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-338 +-A limit-ntp-608 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-609 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-339 +-A limit-ntp-61 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-61 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-610 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-340 +-A limit-ntp-610 -j ACCEPT +-A limit-ntp-612 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-342 +-A limit-ntp-612 -m limit --limit 1/second -j LOG +-A limit-ntp-612 -j ACCEPT +-A limit-ntp-613 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-343 +-A limit-ntp-613 -m limit --limit 1/second -j LOG +-A limit-ntp-614 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-344 +-A limit-ntp-614 -j TEE --gateway fc00::2 +-A limit-ntp-614 -j ACCEPT +-A limit-ntp-615 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-345 +-A limit-ntp-615 -j TEE --gateway fc00::2 +-A limit-ntp-616 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-346 +-A limit-ntp-616 -j ACCEPT +-A limit-ntp-618 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-348 +-A limit-ntp-618 -j ACCEPT +-A limit-ntp-619 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-349 +-A limit-ntp-62 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-62 -m limit --limit 1/second -j LOG +-A limit-ntp-62 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-620 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-350 +-A limit-ntp-620 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-621 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-351 +-A limit-ntp-621 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-622 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-352 +-A limit-ntp-622 -m limit --limit 1/second -j LOG +-A limit-ntp-622 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-623 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-353 +-A limit-ntp-623 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-624 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-354 +-A limit-ntp-624 -j TEE --gateway fc00::2 +-A limit-ntp-624 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-625 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-355 +-A limit-ntp-625 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-626 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-356 +-A limit-ntp-626 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-627 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-357 +-A limit-ntp-627 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-628 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-358 +-A limit-ntp-628 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-629 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-359 +-A limit-ntp-63 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-63 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-630 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-360 +-A limit-ntp-630 -j ACCEPT +-A limit-ntp-632 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-362 +-A limit-ntp-632 -m limit --limit 1/second -j LOG +-A limit-ntp-632 -j ACCEPT +-A limit-ntp-633 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-363 +-A limit-ntp-633 -m limit --limit 1/second -j LOG +-A limit-ntp-634 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-364 +-A limit-ntp-634 -j TEE --gateway fc00::2 +-A limit-ntp-634 -j ACCEPT +-A limit-ntp-635 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-365 +-A limit-ntp-635 -j TEE --gateway fc00::2 +-A limit-ntp-636 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-366 +-A limit-ntp-636 -j ACCEPT +-A limit-ntp-638 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-368 +-A limit-ntp-638 -j ACCEPT +-A limit-ntp-639 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-369 +-A limit-ntp-64 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-64 -j TEE --gateway fc00::2 +-A limit-ntp-64 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-640 -m recent --name limit-ntp-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-370 +-A limit-ntp-640 -m recent --name limit-ntp-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-641 -m recent --name limit-ntp-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-371 +-A limit-ntp-641 -m recent --name limit-ntp-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-642 -m recent --name limit-ntp-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-372 +-A limit-ntp-642 -m limit --limit 1/second -j LOG +-A limit-ntp-642 -m recent --name limit-ntp-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-643 -m recent --name limit-ntp-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-373 +-A limit-ntp-643 -m recent --name limit-ntp-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-644 -m recent --name limit-ntp-644 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-374 +-A limit-ntp-644 -j TEE --gateway fc00::2 +-A limit-ntp-644 -m recent --name limit-ntp-644 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-375 +-A limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-646 -m recent --name limit-ntp-646 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-376 +-A limit-ntp-646 -m recent --name limit-ntp-646 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-647 -m recent --name limit-ntp-647 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-377 +-A limit-ntp-647 -m recent --name limit-ntp-647 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-648 -m recent --name limit-ntp-648 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-378 +-A limit-ntp-648 -m recent --name limit-ntp-648 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-649 -m recent --name limit-ntp-649 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-379 +-A limit-ntp-65 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-65 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-380 +-A limit-ntp-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-381 +-A limit-ntp-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-652 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-382 +-A limit-ntp-652 -m limit --limit 1/second -j LOG +-A limit-ntp-652 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-653 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-383 +-A limit-ntp-653 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-654 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-384 +-A limit-ntp-654 -j TEE --gateway fc00::2 +-A limit-ntp-654 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-655 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-385 +-A limit-ntp-655 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-656 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-386 +-A limit-ntp-656 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-657 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-387 +-A limit-ntp-657 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-658 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-388 +-A limit-ntp-658 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-659 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-389 +-A limit-ntp-66 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-66 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-660 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-390 +-A limit-ntp-660 -j ACCEPT +-A limit-ntp-662 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-392 +-A limit-ntp-662 -m limit --limit 1/second -j LOG +-A limit-ntp-662 -j ACCEPT +-A limit-ntp-663 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-393 +-A limit-ntp-663 -m limit --limit 1/second -j LOG +-A limit-ntp-664 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-394 +-A limit-ntp-664 -j TEE --gateway fc00::2 +-A limit-ntp-664 -j ACCEPT +-A limit-ntp-665 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-395 +-A limit-ntp-665 -j TEE --gateway fc00::2 +-A limit-ntp-666 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-396 +-A limit-ntp-666 -j ACCEPT +-A limit-ntp-668 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-398 +-A limit-ntp-668 -j ACCEPT +-A limit-ntp-669 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-399 +-A limit-ntp-67 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-67 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-670 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-400 +-A limit-ntp-670 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-671 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-401 +-A limit-ntp-671 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-672 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-402 +-A limit-ntp-672 -m limit --limit 1/second -j LOG +-A limit-ntp-672 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-673 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-403 +-A limit-ntp-673 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-674 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-404 +-A limit-ntp-674 -j TEE --gateway fc00::2 +-A limit-ntp-674 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-675 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-405 +-A limit-ntp-675 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-676 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-406 +-A limit-ntp-676 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-677 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-407 +-A limit-ntp-677 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-678 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-408 +-A limit-ntp-678 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-679 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-409 +-A limit-ntp-68 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-68 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-680 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-410 +-A limit-ntp-680 -j ACCEPT +-A limit-ntp-682 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-412 +-A limit-ntp-682 -m limit --limit 1/second -j LOG +-A limit-ntp-682 -j ACCEPT +-A limit-ntp-683 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-413 +-A limit-ntp-683 -m limit --limit 1/second -j LOG +-A limit-ntp-684 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-414 +-A limit-ntp-684 -j TEE --gateway fc00::2 +-A limit-ntp-684 -j ACCEPT +-A limit-ntp-685 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-415 +-A limit-ntp-685 -j TEE --gateway fc00::2 +-A limit-ntp-686 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-416 +-A limit-ntp-686 -j ACCEPT +-A limit-ntp-688 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-418 +-A limit-ntp-688 -j ACCEPT +-A limit-ntp-689 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-419 +-A limit-ntp-69 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-690 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-420 +-A limit-ntp-690 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-691 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-421 +-A limit-ntp-691 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-692 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-422 +-A limit-ntp-692 -m limit --limit 1/second -j LOG +-A limit-ntp-692 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-693 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-423 +-A limit-ntp-693 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-694 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-424 +-A limit-ntp-694 -j TEE --gateway fc00::2 +-A limit-ntp-694 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-695 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-425 +-A limit-ntp-695 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-696 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-426 +-A limit-ntp-696 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-697 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-427 +-A limit-ntp-697 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-698 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-428 +-A limit-ntp-698 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-699 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-429 +-A limit-ntp-7 -m recent --name limit-ntp-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-7 +-A limit-ntp-7 -m recent --name limit-ntp-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-70 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-70 -j ACCEPT +-A limit-ntp-700 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-430 +-A limit-ntp-700 -j ACCEPT +-A limit-ntp-702 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-432 +-A limit-ntp-702 -m limit --limit 1/second -j LOG +-A limit-ntp-702 -j ACCEPT +-A limit-ntp-703 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-433 +-A limit-ntp-703 -m limit --limit 1/second -j LOG +-A limit-ntp-704 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-434 +-A limit-ntp-704 -j TEE --gateway fc00::2 +-A limit-ntp-704 -j ACCEPT +-A limit-ntp-705 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-435 +-A limit-ntp-705 -j TEE --gateway fc00::2 +-A limit-ntp-706 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-436 +-A limit-ntp-706 -j ACCEPT +-A limit-ntp-708 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-438 +-A limit-ntp-708 -j ACCEPT +-A limit-ntp-709 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-439 +-A limit-ntp-710 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-440 +-A limit-ntp-710 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-711 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-441 +-A limit-ntp-711 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-712 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-442 +-A limit-ntp-712 -m limit --limit 1/second -j LOG +-A limit-ntp-712 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-713 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-443 +-A limit-ntp-713 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-714 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-444 +-A limit-ntp-714 -j TEE --gateway fc00::2 +-A limit-ntp-714 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-715 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-445 +-A limit-ntp-715 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-716 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-446 +-A limit-ntp-716 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-717 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-447 +-A limit-ntp-717 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-718 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-448 +-A limit-ntp-718 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-719 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-449 +-A limit-ntp-72 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-72 -m limit --limit 1/second -j LOG +-A limit-ntp-72 -j ACCEPT +-A limit-ntp-720 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-450 +-A limit-ntp-720 -j ACCEPT +-A limit-ntp-722 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-452 +-A limit-ntp-722 -m limit --limit 1/second -j LOG +-A limit-ntp-722 -j ACCEPT +-A limit-ntp-723 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-453 +-A limit-ntp-723 -m limit --limit 1/second -j LOG +-A limit-ntp-724 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-454 +-A limit-ntp-724 -j TEE --gateway fc00::2 +-A limit-ntp-724 -j ACCEPT +-A limit-ntp-725 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-455 +-A limit-ntp-725 -j TEE --gateway fc00::2 +-A limit-ntp-726 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-456 +-A limit-ntp-726 -j ACCEPT +-A limit-ntp-728 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-458 +-A limit-ntp-728 -j ACCEPT +-A limit-ntp-729 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-459 +-A limit-ntp-73 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-73 -m limit --limit 1/second -j LOG +-A limit-ntp-730 -m recent --name limit-ntp-730 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-730 -m recent --name limit-ntp-730 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-731 -m recent --name limit-ntp-731 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-731 -m recent --name limit-ntp-731 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-732 -m recent --name limit-ntp-732 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-732 -m limit --limit 1/second -j LOG +-A limit-ntp-732 -m recent --name limit-ntp-732 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-733 -m recent --name limit-ntp-733 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-733 -m recent --name limit-ntp-733 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-734 -m recent --name limit-ntp-734 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-734 -j TEE --gateway fc00::2 +-A limit-ntp-734 -m recent --name limit-ntp-734 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-736 -m recent --name limit-ntp-736 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-736 -m recent --name limit-ntp-736 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-737 -m recent --name limit-ntp-737 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-737 -m recent --name limit-ntp-737 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-738 -m recent --name limit-ntp-738 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-738 -m recent --name limit-ntp-738 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-739 -m recent --name limit-ntp-739 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-74 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-74 -j TEE --gateway fc00::2 +-A limit-ntp-74 -j ACCEPT +-A limit-ntp-740 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-740 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-741 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-741 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-742 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-742 -m limit --limit 1/second -j LOG +-A limit-ntp-742 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-743 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-743 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-744 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-744 -j TEE --gateway fc00::2 +-A limit-ntp-744 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-745 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-745 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-746 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-746 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-747 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-747 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-748 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-748 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-749 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-75 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-75 -j TEE --gateway fc00::2 +-A limit-ntp-750 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-750 -j ACCEPT +-A limit-ntp-752 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-752 -m limit --limit 1/second -j LOG +-A limit-ntp-752 -j ACCEPT +-A limit-ntp-753 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-753 -m limit --limit 1/second -j LOG +-A limit-ntp-754 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-754 -j TEE --gateway fc00::2 +-A limit-ntp-754 -j ACCEPT +-A limit-ntp-755 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-755 -j TEE --gateway fc00::2 +-A limit-ntp-756 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-756 -j ACCEPT +-A limit-ntp-758 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-758 -j ACCEPT +-A limit-ntp-759 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-76 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-76 -j ACCEPT +-A limit-ntp-760 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-760 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-761 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-761 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-762 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-762 -m limit --limit 1/second -j LOG +-A limit-ntp-762 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-763 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-763 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-764 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-764 -j TEE --gateway fc00::2 +-A limit-ntp-764 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-765 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-765 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-766 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-766 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-767 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-767 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-768 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-768 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-769 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-770 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-770 -j ACCEPT +-A limit-ntp-772 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-772 -m limit --limit 1/second -j LOG +-A limit-ntp-772 -j ACCEPT +-A limit-ntp-773 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-773 -m limit --limit 1/second -j LOG +-A limit-ntp-774 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-774 -j TEE --gateway fc00::2 +-A limit-ntp-774 -j ACCEPT +-A limit-ntp-775 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-775 -j TEE --gateway fc00::2 +-A limit-ntp-776 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-776 -j ACCEPT +-A limit-ntp-778 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-778 -j ACCEPT +-A limit-ntp-779 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-78 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-78 -j ACCEPT +-A limit-ntp-780 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-780 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-781 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-781 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-782 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-782 -m limit --limit 1/second -j LOG +-A limit-ntp-782 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-783 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-783 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-784 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-784 -j TEE --gateway fc00::2 +-A limit-ntp-784 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-785 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-785 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-786 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-786 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-787 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-787 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-788 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-788 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-789 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-79 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-790 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-790 -j ACCEPT +-A limit-ntp-792 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-792 -m limit --limit 1/second -j LOG +-A limit-ntp-792 -j ACCEPT +-A limit-ntp-793 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-793 -m limit --limit 1/second -j LOG +-A limit-ntp-794 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-794 -j TEE --gateway fc00::2 +-A limit-ntp-794 -j ACCEPT +-A limit-ntp-795 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-795 -j TEE --gateway fc00::2 +-A limit-ntp-796 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-796 -j ACCEPT +-A limit-ntp-798 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-798 -j ACCEPT +-A limit-ntp-799 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-8 -m recent --name limit-ntp-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-8 +-A limit-ntp-8 -m recent --name limit-ntp-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-80 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-80 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-800 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-800 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-801 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-801 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-802 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-802 -m limit --limit 1/second -j LOG +-A limit-ntp-802 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-803 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-803 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-804 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-804 -j TEE --gateway fc00::2 +-A limit-ntp-804 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-805 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-805 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-806 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-806 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-807 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-807 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-808 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-808 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-809 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-81 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-81 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-810 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-810 -j ACCEPT +-A limit-ntp-812 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-812 -m limit --limit 1/second -j LOG +-A limit-ntp-812 -j ACCEPT +-A limit-ntp-813 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-813 -m limit --limit 1/second -j LOG +-A limit-ntp-814 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-814 -j TEE --gateway fc00::2 +-A limit-ntp-814 -j ACCEPT +-A limit-ntp-815 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-815 -j TEE --gateway fc00::2 +-A limit-ntp-816 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-816 -j ACCEPT +-A limit-ntp-818 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-818 -j ACCEPT +-A limit-ntp-819 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-82 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-82 -m limit --limit 1/second -j LOG +-A limit-ntp-82 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-820 -m recent --name limit-ntp-820 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-460 +-A limit-ntp-820 -m recent --name limit-ntp-820 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-821 -m recent --name limit-ntp-821 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-461 +-A limit-ntp-821 -m recent --name limit-ntp-821 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-822 -m recent --name limit-ntp-822 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-462 +-A limit-ntp-822 -m limit --limit 1/second -j LOG +-A limit-ntp-822 -m recent --name limit-ntp-822 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-823 -m recent --name limit-ntp-823 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-463 +-A limit-ntp-823 -m recent --name limit-ntp-823 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-824 -m recent --name limit-ntp-824 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-464 +-A limit-ntp-824 -j TEE --gateway fc00::2 +-A limit-ntp-824 -m recent --name limit-ntp-824 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-465 +-A limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-826 -m recent --name limit-ntp-826 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-466 +-A limit-ntp-826 -m recent --name limit-ntp-826 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-827 -m recent --name limit-ntp-827 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-467 +-A limit-ntp-827 -m recent --name limit-ntp-827 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-828 -m recent --name limit-ntp-828 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-468 +-A limit-ntp-828 -m recent --name limit-ntp-828 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-829 -m recent --name limit-ntp-829 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-469 +-A limit-ntp-83 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-83 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-830 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-470 +-A limit-ntp-830 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-831 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-471 +-A limit-ntp-831 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-832 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-472 +-A limit-ntp-832 -m limit --limit 1/second -j LOG +-A limit-ntp-832 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-833 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-473 +-A limit-ntp-833 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-834 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-474 +-A limit-ntp-834 -j TEE --gateway fc00::2 +-A limit-ntp-834 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-835 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-475 +-A limit-ntp-835 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-476 +-A limit-ntp-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-477 +-A limit-ntp-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-478 +-A limit-ntp-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-479 +-A limit-ntp-84 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-84 -j TEE --gateway fc00::2 +-A limit-ntp-84 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-480 +-A limit-ntp-840 -j ACCEPT +-A limit-ntp-842 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-482 +-A limit-ntp-842 -m limit --limit 1/second -j LOG +-A limit-ntp-842 -j ACCEPT +-A limit-ntp-843 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-483 +-A limit-ntp-843 -m limit --limit 1/second -j LOG +-A limit-ntp-844 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-484 +-A limit-ntp-844 -j TEE --gateway fc00::2 +-A limit-ntp-844 -j ACCEPT +-A limit-ntp-845 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-485 +-A limit-ntp-845 -j TEE --gateway fc00::2 +-A limit-ntp-846 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-486 +-A limit-ntp-846 -j ACCEPT +-A limit-ntp-848 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-488 +-A limit-ntp-848 -j ACCEPT +-A limit-ntp-849 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-489 +-A limit-ntp-85 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-85 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-490 +-A limit-ntp-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-491 +-A limit-ntp-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-492 +-A limit-ntp-852 -m limit --limit 1/second -j LOG +-A limit-ntp-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-493 +-A limit-ntp-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-494 +-A limit-ntp-854 -j TEE --gateway fc00::2 +-A limit-ntp-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-495 +-A limit-ntp-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-496 +-A limit-ntp-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-497 +-A limit-ntp-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-498 +-A limit-ntp-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-859 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-499 +-A limit-ntp-86 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-86 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-860 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-500 +-A limit-ntp-860 -j ACCEPT +-A limit-ntp-862 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-502 +-A limit-ntp-862 -m limit --limit 1/second -j LOG +-A limit-ntp-862 -j ACCEPT +-A limit-ntp-863 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-503 +-A limit-ntp-863 -m limit --limit 1/second -j LOG +-A limit-ntp-864 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-504 +-A limit-ntp-864 -j TEE --gateway fc00::2 +-A limit-ntp-864 -j ACCEPT +-A limit-ntp-865 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-505 +-A limit-ntp-865 -j TEE --gateway fc00::2 +-A limit-ntp-866 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-506 +-A limit-ntp-866 -j ACCEPT +-A limit-ntp-868 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-508 +-A limit-ntp-868 -j ACCEPT +-A limit-ntp-869 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-509 +-A limit-ntp-87 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-87 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-870 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-510 +-A limit-ntp-870 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-871 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-511 +-A limit-ntp-871 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-872 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-512 +-A limit-ntp-872 -m limit --limit 1/second -j LOG +-A limit-ntp-872 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-873 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-513 +-A limit-ntp-873 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-874 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-514 +-A limit-ntp-874 -j TEE --gateway fc00::2 +-A limit-ntp-874 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-875 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-515 +-A limit-ntp-875 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-876 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-516 +-A limit-ntp-876 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-877 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-517 +-A limit-ntp-877 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-878 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-518 +-A limit-ntp-878 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-879 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-519 +-A limit-ntp-88 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-88 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-880 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-520 +-A limit-ntp-880 -j ACCEPT +-A limit-ntp-882 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-522 +-A limit-ntp-882 -m limit --limit 1/second -j LOG +-A limit-ntp-882 -j ACCEPT +-A limit-ntp-883 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-523 +-A limit-ntp-883 -m limit --limit 1/second -j LOG +-A limit-ntp-884 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-524 +-A limit-ntp-884 -j TEE --gateway fc00::2 +-A limit-ntp-884 -j ACCEPT +-A limit-ntp-885 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-525 +-A limit-ntp-885 -j TEE --gateway fc00::2 +-A limit-ntp-886 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-526 +-A limit-ntp-886 -j ACCEPT +-A limit-ntp-888 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-528 +-A limit-ntp-888 -j ACCEPT +-A limit-ntp-889 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-529 +-A limit-ntp-89 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-890 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-530 +-A limit-ntp-890 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-891 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-531 +-A limit-ntp-891 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-892 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-532 +-A limit-ntp-892 -m limit --limit 1/second -j LOG +-A limit-ntp-892 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-893 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-533 +-A limit-ntp-893 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-894 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-534 +-A limit-ntp-894 -j TEE --gateway fc00::2 +-A limit-ntp-894 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-895 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-535 +-A limit-ntp-895 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-896 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-536 +-A limit-ntp-896 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-897 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-537 +-A limit-ntp-897 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-898 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-538 +-A limit-ntp-898 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-899 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-539 +-A limit-ntp-9 -m recent --name limit-ntp-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-9 +-A limit-ntp-90 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-90 -j ACCEPT +-A limit-ntp-900 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-540 +-A limit-ntp-900 -j ACCEPT +-A limit-ntp-902 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-542 +-A limit-ntp-902 -m limit --limit 1/second -j LOG +-A limit-ntp-902 -j ACCEPT +-A limit-ntp-903 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-543 +-A limit-ntp-903 -m limit --limit 1/second -j LOG +-A limit-ntp-904 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-544 +-A limit-ntp-904 -j TEE --gateway fc00::2 +-A limit-ntp-904 -j ACCEPT +-A limit-ntp-905 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-545 +-A limit-ntp-905 -j TEE --gateway fc00::2 +-A limit-ntp-906 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-546 +-A limit-ntp-906 -j ACCEPT +-A limit-ntp-908 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-548 +-A limit-ntp-908 -j ACCEPT +-A limit-ntp-909 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-549 +-A limit-ntp-910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-910 -j ACCEPT +-A limit-ntp-910 -m limit --limit 1/second -j LOG +-A limit-ntp-910 -j DROP +-A limit-ntp-911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-911 -j RETURN +-A limit-ntp-911 -m limit --limit 1/second -j LOG +-A limit-ntp-911 -j DROP +-A limit-ntp-912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-912 -j logaccept-ntp-0 +-A limit-ntp-912 -m limit --limit 1/second -j LOG +-A limit-ntp-912 -j DROP +-A limit-ntp-913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-913 -j logaccept-ntp-1 +-A limit-ntp-913 -m limit --limit 1/second -j LOG +-A limit-ntp-913 -j DROP +-A limit-ntp-914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-914 -j ACCEPT +-A limit-ntp-914 -m limit --limit 1/second -j LOG +-A limit-ntp-914 -j DROP +-A limit-ntp-915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-915 -j logaccept-ntp-2 +-A limit-ntp-915 -m limit --limit 1/second -j LOG +-A limit-ntp-915 -j DROP +-A limit-ntp-916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-916 -j ACCEPT +-A limit-ntp-916 -j DROP +-A limit-ntp-917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-917 -j RETURN +-A limit-ntp-917 -j DROP +-A limit-ntp-918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-918 -j logaccept-ntp-3 +-A limit-ntp-918 -j DROP +-A limit-ntp-919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-919 -j logaccept-ntp-4 +-A limit-ntp-919 -j DROP +-A limit-ntp-92 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-92 -m limit --limit 1/second -j LOG +-A limit-ntp-92 -j ACCEPT +-A limit-ntp-920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-920 -j ACCEPT +-A limit-ntp-920 -j DROP +-A limit-ntp-921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-921 -j logaccept-ntp-5 +-A limit-ntp-921 -j DROP +-A limit-ntp-922 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-922 -j ACCEPT +-A limit-ntp-922 -m limit --limit 1/second -j LOG +-A limit-ntp-922 -j DROP +-A limit-ntp-923 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-923 -j RETURN +-A limit-ntp-923 -m limit --limit 1/second -j LOG +-A limit-ntp-923 -j DROP +-A limit-ntp-924 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-924 -j logaccept-ntp-6 +-A limit-ntp-924 -m limit --limit 1/second -j LOG +-A limit-ntp-924 -j DROP +-A limit-ntp-925 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-925 -j logaccept-ntp-7 +-A limit-ntp-925 -m limit --limit 1/second -j LOG +-A limit-ntp-925 -j DROP +-A limit-ntp-926 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-926 -j ACCEPT +-A limit-ntp-926 -m limit --limit 1/second -j LOG +-A limit-ntp-926 -j DROP +-A limit-ntp-927 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-927 -j logaccept-ntp-8 +-A limit-ntp-927 -m limit --limit 1/second -j LOG +-A limit-ntp-927 -j DROP +-A limit-ntp-928 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-928 -j ACCEPT +-A limit-ntp-928 -j TEE --gateway fc00::2 +-A limit-ntp-928 -j DROP +-A limit-ntp-929 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-929 -j RETURN +-A limit-ntp-929 -j TEE --gateway fc00::2 +-A limit-ntp-929 -j DROP +-A limit-ntp-93 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-93 -m limit --limit 1/second -j LOG +-A limit-ntp-930 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-930 -j logaccept-ntp-9 +-A limit-ntp-930 -j TEE --gateway fc00::2 +-A limit-ntp-930 -j DROP +-A limit-ntp-931 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-931 -j logaccept-ntp-10 +-A limit-ntp-931 -j TEE --gateway fc00::2 +-A limit-ntp-931 -j DROP +-A limit-ntp-932 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-932 -j ACCEPT +-A limit-ntp-932 -j TEE --gateway fc00::2 +-A limit-ntp-932 -j DROP +-A limit-ntp-933 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-933 -j logaccept-ntp-11 +-A limit-ntp-933 -j TEE --gateway fc00::2 +-A limit-ntp-933 -j DROP +-A limit-ntp-934 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-934 -j ACCEPT +-A limit-ntp-934 -j DROP +-A limit-ntp-935 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-935 -j RETURN +-A limit-ntp-935 -j DROP +-A limit-ntp-936 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-936 -j logaccept-ntp-12 +-A limit-ntp-936 -j DROP +-A limit-ntp-937 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-937 -j logaccept-ntp-13 +-A limit-ntp-937 -j DROP +-A limit-ntp-938 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-938 -j ACCEPT +-A limit-ntp-938 -j DROP +-A limit-ntp-939 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-939 -j logaccept-ntp-14 +-A limit-ntp-939 -j DROP +-A limit-ntp-94 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-94 -j TEE --gateway fc00::2 +-A limit-ntp-94 -j ACCEPT +-A limit-ntp-940 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-940 -j ACCEPT +-A limit-ntp-940 -j DROP +-A limit-ntp-941 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-941 -j RETURN +-A limit-ntp-941 -j DROP +-A limit-ntp-942 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-942 -j logaccept-ntp-15 +-A limit-ntp-942 -j DROP +-A limit-ntp-943 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-943 -j logaccept-ntp-16 +-A limit-ntp-943 -j DROP +-A limit-ntp-944 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-944 -j ACCEPT +-A limit-ntp-944 -j DROP +-A limit-ntp-945 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-945 -j logaccept-ntp-17 +-A limit-ntp-945 -j DROP +-A limit-ntp-946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-946 -j ACCEPT +-A limit-ntp-946 -j DROP +-A limit-ntp-947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-947 -j RETURN +-A limit-ntp-947 -j DROP +-A limit-ntp-948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-948 -j logaccept-ntp-18 +-A limit-ntp-948 -j DROP +-A limit-ntp-949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-949 -j logaccept-ntp-19 +-A limit-ntp-949 -j DROP +-A limit-ntp-95 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-95 -j TEE --gateway fc00::2 +-A limit-ntp-950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-950 -j ACCEPT +-A limit-ntp-950 -j DROP +-A limit-ntp-951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-951 -j logaccept-ntp-20 +-A limit-ntp-951 -j DROP +-A limit-ntp-952 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-952 -j ACCEPT +-A limit-ntp-952 -m limit --limit 1/second -j LOG +-A limit-ntp-952 -j DROP +-A limit-ntp-953 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-953 -j RETURN +-A limit-ntp-953 -m limit --limit 1/second -j LOG +-A limit-ntp-953 -j DROP +-A limit-ntp-954 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-954 -j logaccept-ntp-21 +-A limit-ntp-954 -m limit --limit 1/second -j LOG +-A limit-ntp-954 -j DROP +-A limit-ntp-955 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-955 -j logaccept-ntp-22 +-A limit-ntp-955 -m limit --limit 1/second -j LOG +-A limit-ntp-955 -j DROP +-A limit-ntp-956 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-956 -j ACCEPT +-A limit-ntp-956 -m limit --limit 1/second -j LOG +-A limit-ntp-956 -j DROP +-A limit-ntp-957 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-957 -j logaccept-ntp-23 +-A limit-ntp-957 -m limit --limit 1/second -j LOG +-A limit-ntp-957 -j DROP +-A limit-ntp-958 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-958 -j ACCEPT +-A limit-ntp-958 -j TEE --gateway fc00::2 +-A limit-ntp-958 -j DROP +-A limit-ntp-959 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-959 -j RETURN +-A limit-ntp-959 -j TEE --gateway fc00::2 +-A limit-ntp-959 -j DROP +-A limit-ntp-96 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-96 -j ACCEPT +-A limit-ntp-960 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-960 -j logaccept-ntp-24 +-A limit-ntp-960 -j TEE --gateway fc00::2 +-A limit-ntp-960 -j DROP +-A limit-ntp-961 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-961 -j logaccept-ntp-25 +-A limit-ntp-961 -j TEE --gateway fc00::2 +-A limit-ntp-961 -j DROP +-A limit-ntp-962 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-962 -j ACCEPT +-A limit-ntp-962 -j TEE --gateway fc00::2 +-A limit-ntp-962 -j DROP +-A limit-ntp-963 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-963 -j logaccept-ntp-26 +-A limit-ntp-963 -j TEE --gateway fc00::2 +-A limit-ntp-963 -j DROP +-A limit-ntp-964 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-964 -j ACCEPT +-A limit-ntp-964 -j DROP +-A limit-ntp-965 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-965 -j RETURN +-A limit-ntp-965 -j DROP +-A limit-ntp-966 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-966 -j logaccept-ntp-27 +-A limit-ntp-966 -j DROP +-A limit-ntp-967 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-967 -j logaccept-ntp-28 +-A limit-ntp-967 -j DROP +-A limit-ntp-968 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-968 -j ACCEPT +-A limit-ntp-968 -j DROP +-A limit-ntp-969 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-969 -j logaccept-ntp-29 +-A limit-ntp-969 -j DROP +-A limit-ntp-970 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-970 -j ACCEPT +-A limit-ntp-970 -j DROP +-A limit-ntp-971 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-971 -j RETURN +-A limit-ntp-971 -j DROP +-A limit-ntp-972 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-972 -j logaccept-ntp-30 +-A limit-ntp-972 -j DROP +-A limit-ntp-973 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-973 -j logaccept-ntp-31 +-A limit-ntp-973 -j DROP +-A limit-ntp-974 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-974 -j ACCEPT +-A limit-ntp-974 -j DROP +-A limit-ntp-975 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-975 -j logaccept-ntp-32 +-A limit-ntp-975 -j DROP +-A limit-ntp-98 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-98 -j ACCEPT +-A limit-ntp-99 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT -A logaccept-1 -j TEE --gateway fc00::2 -A logaccept-1 -j ACCEPT -A logaccept-10 -j TEE --gateway fc00::2 -A logaccept-10 -j ACCEPT --A logaccept-100 -j LOG --A logaccept-100 -j TEE --gateway fc00::1 --A logaccept-100 -j ACCEPT --A logaccept-101 -j TEE --gateway fc00::2 --A logaccept-101 -j ACCEPT --A logaccept-102 -j ACCEPT -A logaccept-11 -j ACCEPT -A logaccept-12 -m limit --limit 1/second -j LOG -A logaccept-12 -j ACCEPT @@ -114500,66 +114494,17 @@ COMMIT -A logaccept-65 -j ACCEPT -A logaccept-66 -m limit --limit 1/second -j LOG -A logaccept-66 -j ACCEPT --A logaccept-67 -j TEE --gateway fc00::2 +-A logaccept-67 -j LOG +-A logaccept-67 -j TEE --gateway fc00::1 -A logaccept-67 -j ACCEPT +-A logaccept-68 -j TEE --gateway fc00::2 -A logaccept-68 -j ACCEPT --A logaccept-69 -m limit --limit 1/second -j LOG -A logaccept-69 -j ACCEPT -A logaccept-7 -j TEE --gateway fc00::2 -A logaccept-7 -j ACCEPT --A logaccept-70 -j TEE --gateway fc00::2 --A logaccept-70 -j ACCEPT --A logaccept-71 -j ACCEPT --A logaccept-72 -m limit --limit 1/second -j LOG --A logaccept-72 -j ACCEPT --A logaccept-73 -j TEE --gateway fc00::2 --A logaccept-73 -j ACCEPT --A logaccept-74 -j ACCEPT --A logaccept-75 -m limit --limit 1/second -j LOG --A logaccept-75 -j ACCEPT --A logaccept-76 -j TEE --gateway fc00::2 --A logaccept-76 -j ACCEPT --A logaccept-77 -j ACCEPT --A logaccept-78 -m limit --limit 1/second -j LOG --A logaccept-78 -j ACCEPT --A logaccept-79 -j TEE --gateway fc00::2 --A logaccept-79 -j ACCEPT -A logaccept-8 -j ACCEPT --A logaccept-80 -j ACCEPT --A logaccept-81 -m limit --limit 1/second -j LOG --A logaccept-81 -j ACCEPT --A logaccept-82 -j TEE --gateway fc00::2 --A logaccept-82 -j ACCEPT --A logaccept-83 -j ACCEPT --A logaccept-84 -m limit --limit 1/second -j LOG --A logaccept-84 -j ACCEPT --A logaccept-85 -j TEE --gateway fc00::2 --A logaccept-85 -j ACCEPT --A logaccept-86 -j ACCEPT --A logaccept-87 -m limit --limit 1/second -j LOG --A logaccept-87 -j ACCEPT --A logaccept-88 -j TEE --gateway fc00::2 --A logaccept-88 -j ACCEPT --A logaccept-89 -j ACCEPT -A logaccept-9 -m limit --limit 1/second -j LOG -A logaccept-9 -j ACCEPT --A logaccept-90 -m limit --limit 1/second -j LOG --A logaccept-90 -j ACCEPT --A logaccept-91 -j TEE --gateway fc00::2 --A logaccept-91 -j ACCEPT --A logaccept-92 -j ACCEPT --A logaccept-93 -m limit --limit 1/second -j LOG --A logaccept-93 -j ACCEPT --A logaccept-94 -j TEE --gateway fc00::2 --A logaccept-94 -j ACCEPT --A logaccept-95 -j ACCEPT --A logaccept-96 -m limit --limit 1/second -j LOG --A logaccept-96 -j ACCEPT --A logaccept-97 -j TEE --gateway fc00::2 --A logaccept-97 -j ACCEPT --A logaccept-98 -j ACCEPT --A logaccept-99 -m limit --limit 1/second -j LOG --A logaccept-99 -j ACCEPT -A logaccept-final-0 -m limit --limit 1/second -j LOG -A logaccept-final-0 -j ACCEPT -A logaccept-final-1 -j TEE --gateway fc00::2 @@ -115070,6 +115015,61 @@ COMMIT -A logaccept-final-98 -j ACCEPT -A logaccept-final-99 -m limit --limit 1/second -j LOG -A logaccept-final-99 -j ACCEPT +-A logaccept-ntp-0 -m limit --limit 1/second -j LOG +-A logaccept-ntp-0 -j ACCEPT +-A logaccept-ntp-1 -j TEE --gateway fc00::2 +-A logaccept-ntp-1 -j ACCEPT +-A logaccept-ntp-10 -j TEE --gateway fc00::2 +-A logaccept-ntp-10 -j ACCEPT +-A logaccept-ntp-11 -j ACCEPT +-A logaccept-ntp-12 -m limit --limit 1/second -j LOG +-A logaccept-ntp-12 -j ACCEPT +-A logaccept-ntp-13 -j TEE --gateway fc00::2 +-A logaccept-ntp-13 -j ACCEPT +-A logaccept-ntp-14 -j ACCEPT +-A logaccept-ntp-15 -m limit --limit 1/second -j LOG +-A logaccept-ntp-15 -j ACCEPT +-A logaccept-ntp-16 -j TEE --gateway fc00::2 +-A logaccept-ntp-16 -j ACCEPT +-A logaccept-ntp-17 -j ACCEPT +-A logaccept-ntp-18 -m limit --limit 1/second -j LOG +-A logaccept-ntp-18 -j ACCEPT +-A logaccept-ntp-19 -j TEE --gateway fc00::2 +-A logaccept-ntp-19 -j ACCEPT +-A logaccept-ntp-2 -j ACCEPT +-A logaccept-ntp-20 -j ACCEPT +-A logaccept-ntp-21 -m limit --limit 1/second -j LOG +-A logaccept-ntp-21 -j ACCEPT +-A logaccept-ntp-22 -j TEE --gateway fc00::2 +-A logaccept-ntp-22 -j ACCEPT +-A logaccept-ntp-23 -j ACCEPT +-A logaccept-ntp-24 -m limit --limit 1/second -j LOG +-A logaccept-ntp-24 -j ACCEPT +-A logaccept-ntp-25 -j TEE --gateway fc00::2 +-A logaccept-ntp-25 -j ACCEPT +-A logaccept-ntp-26 -j ACCEPT +-A logaccept-ntp-27 -m limit --limit 1/second -j LOG +-A logaccept-ntp-27 -j ACCEPT +-A logaccept-ntp-28 -j TEE --gateway fc00::2 +-A logaccept-ntp-28 -j ACCEPT +-A logaccept-ntp-29 -j ACCEPT +-A logaccept-ntp-3 -m limit --limit 1/second -j LOG +-A logaccept-ntp-3 -j ACCEPT +-A logaccept-ntp-30 -m limit --limit 1/second -j LOG +-A logaccept-ntp-30 -j ACCEPT +-A logaccept-ntp-31 -j TEE --gateway fc00::2 +-A logaccept-ntp-31 -j ACCEPT +-A logaccept-ntp-32 -j ACCEPT +-A logaccept-ntp-4 -j TEE --gateway fc00::2 +-A logaccept-ntp-4 -j ACCEPT +-A logaccept-ntp-5 -j ACCEPT +-A logaccept-ntp-6 -m limit --limit 1/second -j LOG +-A logaccept-ntp-6 -j ACCEPT +-A logaccept-ntp-7 -j TEE --gateway fc00::2 +-A logaccept-ntp-7 -j ACCEPT +-A logaccept-ntp-8 -j ACCEPT +-A logaccept-ntp-9 -m limit --limit 1/second -j LOG +-A logaccept-ntp-9 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG @@ -116254,1025 +116254,105 @@ COMMIT -A logdrop-1650 -j DROP -A logdrop-1651 -m limit --limit 1/second -j LOG -A logdrop-1651 -j DROP --A logdrop-1652 -m limit --limit 1/second -j LOG +-A logdrop-1652 -j LOG +-A logdrop-1652 -j TEE --gateway fc00::1 -A logdrop-1652 -j DROP --A logdrop-1653 -m limit --limit 1/second -j LOG +-A logdrop-1653 -j TEE --gateway fc00::2 -A logdrop-1653 -j DROP --A logdrop-1654 -m limit --limit 1/second -j LOG -A logdrop-1654 -j DROP --A logdrop-1655 -m limit --limit 1/second -j LOG --A logdrop-1655 -j DROP --A logdrop-1656 -m limit --limit 1/second -j LOG --A logdrop-1656 -j DROP --A logdrop-1657 -m limit --limit 1/second -j LOG --A logdrop-1657 -j DROP --A logdrop-1658 -m limit --limit 1/second -j LOG --A logdrop-1658 -j DROP --A logdrop-1659 -m limit --limit 1/second -j LOG --A logdrop-1659 -j DROP -A logdrop-166 -j TEE --gateway fc00::2 -A logdrop-166 -j DROP --A logdrop-1660 -m limit --limit 1/second -j LOG --A logdrop-1660 -j DROP --A logdrop-1661 -m limit --limit 1/second -j LOG --A logdrop-1661 -j DROP --A logdrop-1662 -m limit --limit 1/second -j LOG --A logdrop-1662 -j DROP --A logdrop-1663 -m limit --limit 1/second -j LOG --A logdrop-1663 -j DROP --A logdrop-1664 -m limit --limit 1/second -j LOG --A logdrop-1664 -j DROP --A logdrop-1665 -m limit --limit 1/second -j LOG --A logdrop-1665 -j DROP --A logdrop-1666 -m limit --limit 1/second -j LOG --A logdrop-1666 -j DROP --A logdrop-1667 -m limit --limit 1/second -j LOG --A logdrop-1667 -j DROP --A logdrop-1668 -m limit --limit 1/second -j LOG --A logdrop-1668 -j DROP --A logdrop-1669 -m limit --limit 1/second -j LOG --A logdrop-1669 -j DROP -A logdrop-167 -j TEE --gateway fc00::2 -A logdrop-167 -j DROP --A logdrop-1670 -m limit --limit 1/second -j LOG --A logdrop-1670 -j DROP --A logdrop-1671 -m limit --limit 1/second -j LOG --A logdrop-1671 -j DROP --A logdrop-1672 -m limit --limit 1/second -j LOG --A logdrop-1672 -j DROP --A logdrop-1673 -m limit --limit 1/second -j LOG --A logdrop-1673 -j DROP --A logdrop-1674 -m limit --limit 1/second -j LOG --A logdrop-1674 -j DROP --A logdrop-1675 -m limit --limit 1/second -j LOG --A logdrop-1675 -j DROP --A logdrop-1676 -m limit --limit 1/second -j LOG --A logdrop-1676 -j DROP --A logdrop-1677 -m limit --limit 1/second -j LOG --A logdrop-1677 -j DROP --A logdrop-1678 -m limit --limit 1/second -j LOG --A logdrop-1678 -j DROP --A logdrop-1679 -m limit --limit 1/second -j LOG --A logdrop-1679 -j DROP -A logdrop-168 -j TEE --gateway fc00::2 -A logdrop-168 -j DROP --A logdrop-1680 -m limit --limit 1/second -j LOG --A logdrop-1680 -j DROP --A logdrop-1681 -m limit --limit 1/second -j LOG --A logdrop-1681 -j DROP --A logdrop-1682 -m limit --limit 1/second -j LOG --A logdrop-1682 -j DROP --A logdrop-1683 -m limit --limit 1/second -j LOG --A logdrop-1683 -j DROP --A logdrop-1684 -m limit --limit 1/second -j LOG --A logdrop-1684 -j DROP --A logdrop-1685 -m limit --limit 1/second -j LOG --A logdrop-1685 -j DROP --A logdrop-1686 -m limit --limit 1/second -j LOG --A logdrop-1686 -j DROP --A logdrop-1687 -m limit --limit 1/second -j LOG --A logdrop-1687 -j DROP --A logdrop-1688 -m limit --limit 1/second -j LOG --A logdrop-1688 -j DROP --A logdrop-1689 -m limit --limit 1/second -j LOG --A logdrop-1689 -j DROP -A logdrop-169 -j TEE --gateway fc00::2 -A logdrop-169 -j DROP --A logdrop-1690 -m limit --limit 1/second -j LOG --A logdrop-1690 -j DROP --A logdrop-1691 -m limit --limit 1/second -j LOG --A logdrop-1691 -j DROP --A logdrop-1692 -m limit --limit 1/second -j LOG --A logdrop-1692 -j DROP --A logdrop-1693 -m limit --limit 1/second -j LOG --A logdrop-1693 -j DROP --A logdrop-1694 -m limit --limit 1/second -j LOG --A logdrop-1694 -j DROP --A logdrop-1695 -m limit --limit 1/second -j LOG --A logdrop-1695 -j DROP --A logdrop-1696 -m limit --limit 1/second -j LOG --A logdrop-1696 -j DROP --A logdrop-1697 -m limit --limit 1/second -j LOG --A logdrop-1697 -j DROP --A logdrop-1698 -m limit --limit 1/second -j LOG --A logdrop-1698 -j DROP --A logdrop-1699 -m limit --limit 1/second -j LOG --A logdrop-1699 -j DROP -A logdrop-17 -m limit --limit 1/second -j LOG -A logdrop-17 -j DROP -A logdrop-170 -j TEE --gateway fc00::2 -A logdrop-170 -j DROP --A logdrop-1700 -m limit --limit 1/second -j LOG --A logdrop-1700 -j DROP --A logdrop-1701 -m limit --limit 1/second -j LOG --A logdrop-1701 -j DROP --A logdrop-1702 -m limit --limit 1/second -j LOG --A logdrop-1702 -j DROP --A logdrop-1703 -m limit --limit 1/second -j LOG --A logdrop-1703 -j DROP --A logdrop-1704 -m limit --limit 1/second -j LOG --A logdrop-1704 -j DROP --A logdrop-1705 -m limit --limit 1/second -j LOG --A logdrop-1705 -j DROP --A logdrop-1706 -m limit --limit 1/second -j LOG --A logdrop-1706 -j DROP --A logdrop-1707 -m limit --limit 1/second -j LOG --A logdrop-1707 -j DROP --A logdrop-1708 -m limit --limit 1/second -j LOG --A logdrop-1708 -j DROP --A logdrop-1709 -m limit --limit 1/second -j LOG --A logdrop-1709 -j DROP -A logdrop-171 -j TEE --gateway fc00::2 -A logdrop-171 -j DROP --A logdrop-1710 -m limit --limit 1/second -j LOG --A logdrop-1710 -j DROP --A logdrop-1711 -m limit --limit 1/second -j LOG --A logdrop-1711 -j DROP --A logdrop-1712 -m limit --limit 1/second -j LOG --A logdrop-1712 -j DROP --A logdrop-1713 -m limit --limit 1/second -j LOG --A logdrop-1713 -j DROP --A logdrop-1714 -m limit --limit 1/second -j LOG --A logdrop-1714 -j DROP --A logdrop-1715 -m limit --limit 1/second -j LOG --A logdrop-1715 -j DROP --A logdrop-1716 -m limit --limit 1/second -j LOG --A logdrop-1716 -j DROP --A logdrop-1717 -m limit --limit 1/second -j LOG --A logdrop-1717 -j DROP --A logdrop-1718 -m limit --limit 1/second -j LOG --A logdrop-1718 -j DROP --A logdrop-1719 -m limit --limit 1/second -j LOG --A logdrop-1719 -j DROP -A logdrop-172 -j TEE --gateway fc00::2 -A logdrop-172 -j DROP --A logdrop-1720 -m limit --limit 1/second -j LOG --A logdrop-1720 -j DROP --A logdrop-1721 -m limit --limit 1/second -j LOG --A logdrop-1721 -j DROP --A logdrop-1722 -m limit --limit 1/second -j LOG --A logdrop-1722 -j DROP --A logdrop-1723 -m limit --limit 1/second -j LOG --A logdrop-1723 -j DROP --A logdrop-1724 -m limit --limit 1/second -j LOG --A logdrop-1724 -j DROP --A logdrop-1725 -m limit --limit 1/second -j LOG --A logdrop-1725 -j DROP --A logdrop-1726 -m limit --limit 1/second -j LOG --A logdrop-1726 -j DROP --A logdrop-1727 -m limit --limit 1/second -j LOG --A logdrop-1727 -j DROP --A logdrop-1728 -m limit --limit 1/second -j LOG --A logdrop-1728 -j DROP --A logdrop-1729 -m limit --limit 1/second -j LOG --A logdrop-1729 -j DROP -A logdrop-173 -j TEE --gateway fc00::2 -A logdrop-173 -j DROP --A logdrop-1730 -m limit --limit 1/second -j LOG --A logdrop-1730 -j DROP --A logdrop-1731 -m limit --limit 1/second -j LOG --A logdrop-1731 -j DROP --A logdrop-1732 -m limit --limit 1/second -j LOG --A logdrop-1732 -j DROP --A logdrop-1733 -m limit --limit 1/second -j LOG --A logdrop-1733 -j DROP --A logdrop-1734 -m limit --limit 1/second -j LOG --A logdrop-1734 -j DROP --A logdrop-1735 -m limit --limit 1/second -j LOG --A logdrop-1735 -j DROP --A logdrop-1736 -m limit --limit 1/second -j LOG --A logdrop-1736 -j DROP --A logdrop-1737 -m limit --limit 1/second -j LOG --A logdrop-1737 -j DROP --A logdrop-1738 -m limit --limit 1/second -j LOG --A logdrop-1738 -j DROP --A logdrop-1739 -m limit --limit 1/second -j LOG --A logdrop-1739 -j DROP -A logdrop-174 -j TEE --gateway fc00::2 -A logdrop-174 -j DROP --A logdrop-1740 -m limit --limit 1/second -j LOG --A logdrop-1740 -j DROP --A logdrop-1741 -m limit --limit 1/second -j LOG --A logdrop-1741 -j DROP --A logdrop-1742 -m limit --limit 1/second -j LOG --A logdrop-1742 -j DROP --A logdrop-1743 -m limit --limit 1/second -j LOG --A logdrop-1743 -j DROP --A logdrop-1744 -m limit --limit 1/second -j LOG --A logdrop-1744 -j DROP --A logdrop-1745 -m limit --limit 1/second -j LOG --A logdrop-1745 -j DROP --A logdrop-1746 -m limit --limit 1/second -j LOG --A logdrop-1746 -j DROP --A logdrop-1747 -m limit --limit 1/second -j LOG --A logdrop-1747 -j DROP --A logdrop-1748 -m limit --limit 1/second -j LOG --A logdrop-1748 -j DROP --A logdrop-1749 -m limit --limit 1/second -j LOG --A logdrop-1749 -j DROP -A logdrop-175 -j TEE --gateway fc00::2 -A logdrop-175 -j DROP --A logdrop-1750 -j TEE --gateway fc00::2 --A logdrop-1750 -j DROP --A logdrop-1751 -j TEE --gateway fc00::2 --A logdrop-1751 -j DROP --A logdrop-1752 -j TEE --gateway fc00::2 --A logdrop-1752 -j DROP --A logdrop-1753 -j TEE --gateway fc00::2 --A logdrop-1753 -j DROP --A logdrop-1754 -j TEE --gateway fc00::2 --A logdrop-1754 -j DROP --A logdrop-1755 -j TEE --gateway fc00::2 --A logdrop-1755 -j DROP --A logdrop-1756 -j TEE --gateway fc00::2 --A logdrop-1756 -j DROP --A logdrop-1757 -j TEE --gateway fc00::2 --A logdrop-1757 -j DROP --A logdrop-1758 -j TEE --gateway fc00::2 --A logdrop-1758 -j DROP --A logdrop-1759 -j TEE --gateway fc00::2 --A logdrop-1759 -j DROP -A logdrop-176 -j TEE --gateway fc00::2 -A logdrop-176 -j DROP --A logdrop-1760 -j TEE --gateway fc00::2 --A logdrop-1760 -j DROP --A logdrop-1761 -j TEE --gateway fc00::2 --A logdrop-1761 -j DROP --A logdrop-1762 -j TEE --gateway fc00::2 --A logdrop-1762 -j DROP --A logdrop-1763 -j TEE --gateway fc00::2 --A logdrop-1763 -j DROP --A logdrop-1764 -j TEE --gateway fc00::2 --A logdrop-1764 -j DROP --A logdrop-1765 -j TEE --gateway fc00::2 --A logdrop-1765 -j DROP --A logdrop-1766 -j TEE --gateway fc00::2 --A logdrop-1766 -j DROP --A logdrop-1767 -j TEE --gateway fc00::2 --A logdrop-1767 -j DROP --A logdrop-1768 -j TEE --gateway fc00::2 --A logdrop-1768 -j DROP --A logdrop-1769 -j TEE --gateway fc00::2 --A logdrop-1769 -j DROP -A logdrop-177 -j TEE --gateway fc00::2 -A logdrop-177 -j DROP --A logdrop-1770 -j TEE --gateway fc00::2 --A logdrop-1770 -j DROP --A logdrop-1771 -j TEE --gateway fc00::2 --A logdrop-1771 -j DROP --A logdrop-1772 -j TEE --gateway fc00::2 --A logdrop-1772 -j DROP --A logdrop-1773 -j TEE --gateway fc00::2 --A logdrop-1773 -j DROP --A logdrop-1774 -j TEE --gateway fc00::2 --A logdrop-1774 -j DROP --A logdrop-1775 -j TEE --gateway fc00::2 --A logdrop-1775 -j DROP --A logdrop-1776 -j TEE --gateway fc00::2 --A logdrop-1776 -j DROP --A logdrop-1777 -j TEE --gateway fc00::2 --A logdrop-1777 -j DROP --A logdrop-1778 -j TEE --gateway fc00::2 --A logdrop-1778 -j DROP --A logdrop-1779 -j TEE --gateway fc00::2 --A logdrop-1779 -j DROP -A logdrop-178 -j TEE --gateway fc00::2 -A logdrop-178 -j DROP --A logdrop-1780 -j TEE --gateway fc00::2 --A logdrop-1780 -j DROP --A logdrop-1781 -j TEE --gateway fc00::2 --A logdrop-1781 -j DROP --A logdrop-1782 -j TEE --gateway fc00::2 --A logdrop-1782 -j DROP --A logdrop-1783 -j TEE --gateway fc00::2 --A logdrop-1783 -j DROP --A logdrop-1784 -j TEE --gateway fc00::2 --A logdrop-1784 -j DROP --A logdrop-1785 -j TEE --gateway fc00::2 --A logdrop-1785 -j DROP --A logdrop-1786 -j TEE --gateway fc00::2 --A logdrop-1786 -j DROP --A logdrop-1787 -j TEE --gateway fc00::2 --A logdrop-1787 -j DROP --A logdrop-1788 -j TEE --gateway fc00::2 --A logdrop-1788 -j DROP --A logdrop-1789 -j TEE --gateway fc00::2 --A logdrop-1789 -j DROP -A logdrop-179 -j TEE --gateway fc00::2 -A logdrop-179 -j DROP --A logdrop-1790 -j TEE --gateway fc00::2 --A logdrop-1790 -j DROP --A logdrop-1791 -j TEE --gateway fc00::2 --A logdrop-1791 -j DROP --A logdrop-1792 -j TEE --gateway fc00::2 --A logdrop-1792 -j DROP --A logdrop-1793 -j TEE --gateway fc00::2 --A logdrop-1793 -j DROP --A logdrop-1794 -j TEE --gateway fc00::2 --A logdrop-1794 -j DROP --A logdrop-1795 -j TEE --gateway fc00::2 --A logdrop-1795 -j DROP --A logdrop-1796 -j TEE --gateway fc00::2 --A logdrop-1796 -j DROP --A logdrop-1797 -j TEE --gateway fc00::2 --A logdrop-1797 -j DROP --A logdrop-1798 -j TEE --gateway fc00::2 --A logdrop-1798 -j DROP --A logdrop-1799 -j TEE --gateway fc00::2 --A logdrop-1799 -j DROP -A logdrop-18 -m limit --limit 1/second -j LOG -A logdrop-18 -j DROP -A logdrop-180 -j TEE --gateway fc00::2 -A logdrop-180 -j DROP --A logdrop-1800 -j TEE --gateway fc00::2 --A logdrop-1800 -j DROP --A logdrop-1801 -j TEE --gateway fc00::2 --A logdrop-1801 -j DROP --A logdrop-1802 -j TEE --gateway fc00::2 --A logdrop-1802 -j DROP --A logdrop-1803 -j TEE --gateway fc00::2 --A logdrop-1803 -j DROP --A logdrop-1804 -j TEE --gateway fc00::2 --A logdrop-1804 -j DROP --A logdrop-1805 -j TEE --gateway fc00::2 --A logdrop-1805 -j DROP --A logdrop-1806 -j TEE --gateway fc00::2 --A logdrop-1806 -j DROP --A logdrop-1807 -j TEE --gateway fc00::2 --A logdrop-1807 -j DROP --A logdrop-1808 -j TEE --gateway fc00::2 --A logdrop-1808 -j DROP --A logdrop-1809 -j TEE --gateway fc00::2 --A logdrop-1809 -j DROP -A logdrop-181 -j TEE --gateway fc00::2 -A logdrop-181 -j DROP --A logdrop-1810 -j TEE --gateway fc00::2 --A logdrop-1810 -j DROP --A logdrop-1811 -j TEE --gateway fc00::2 --A logdrop-1811 -j DROP --A logdrop-1812 -j TEE --gateway fc00::2 --A logdrop-1812 -j DROP --A logdrop-1813 -j TEE --gateway fc00::2 --A logdrop-1813 -j DROP --A logdrop-1814 -j TEE --gateway fc00::2 --A logdrop-1814 -j DROP --A logdrop-1815 -j TEE --gateway fc00::2 --A logdrop-1815 -j DROP --A logdrop-1816 -j TEE --gateway fc00::2 --A logdrop-1816 -j DROP --A logdrop-1817 -j TEE --gateway fc00::2 --A logdrop-1817 -j DROP --A logdrop-1818 -j TEE --gateway fc00::2 --A logdrop-1818 -j DROP --A logdrop-1819 -j TEE --gateway fc00::2 --A logdrop-1819 -j DROP -A logdrop-182 -j TEE --gateway fc00::2 -A logdrop-182 -j DROP --A logdrop-1820 -j TEE --gateway fc00::2 --A logdrop-1820 -j DROP --A logdrop-1821 -j TEE --gateway fc00::2 --A logdrop-1821 -j DROP --A logdrop-1822 -j TEE --gateway fc00::2 --A logdrop-1822 -j DROP --A logdrop-1823 -j TEE --gateway fc00::2 --A logdrop-1823 -j DROP --A logdrop-1824 -j TEE --gateway fc00::2 --A logdrop-1824 -j DROP --A logdrop-1825 -j TEE --gateway fc00::2 --A logdrop-1825 -j DROP --A logdrop-1826 -j TEE --gateway fc00::2 --A logdrop-1826 -j DROP --A logdrop-1827 -j TEE --gateway fc00::2 --A logdrop-1827 -j DROP --A logdrop-1828 -j TEE --gateway fc00::2 --A logdrop-1828 -j DROP --A logdrop-1829 -j TEE --gateway fc00::2 --A logdrop-1829 -j DROP -A logdrop-183 -j TEE --gateway fc00::2 -A logdrop-183 -j DROP --A logdrop-1830 -j TEE --gateway fc00::2 --A logdrop-1830 -j DROP --A logdrop-1831 -j TEE --gateway fc00::2 --A logdrop-1831 -j DROP --A logdrop-1832 -j TEE --gateway fc00::2 --A logdrop-1832 -j DROP --A logdrop-1833 -j TEE --gateway fc00::2 --A logdrop-1833 -j DROP --A logdrop-1834 -j TEE --gateway fc00::2 --A logdrop-1834 -j DROP --A logdrop-1835 -j TEE --gateway fc00::2 --A logdrop-1835 -j DROP --A logdrop-1836 -j TEE --gateway fc00::2 --A logdrop-1836 -j DROP --A logdrop-1837 -j TEE --gateway fc00::2 --A logdrop-1837 -j DROP --A logdrop-1838 -j TEE --gateway fc00::2 --A logdrop-1838 -j DROP --A logdrop-1839 -j TEE --gateway fc00::2 --A logdrop-1839 -j DROP -A logdrop-184 -j TEE --gateway fc00::2 -A logdrop-184 -j DROP --A logdrop-1840 -j DROP --A logdrop-1841 -j DROP --A logdrop-1842 -j DROP --A logdrop-1843 -j DROP --A logdrop-1844 -j DROP --A logdrop-1845 -j DROP --A logdrop-1846 -j DROP --A logdrop-1847 -j DROP --A logdrop-1848 -j DROP --A logdrop-1849 -j DROP -A logdrop-185 -j TEE --gateway fc00::2 -A logdrop-185 -j DROP --A logdrop-1850 -j DROP --A logdrop-1851 -j DROP --A logdrop-1852 -j DROP --A logdrop-1853 -j DROP --A logdrop-1854 -j DROP --A logdrop-1855 -j DROP --A logdrop-1856 -j DROP --A logdrop-1857 -j DROP --A logdrop-1858 -j DROP --A logdrop-1859 -j DROP -A logdrop-186 -j TEE --gateway fc00::2 -A logdrop-186 -j DROP --A logdrop-1860 -j DROP --A logdrop-1861 -j DROP --A logdrop-1862 -j DROP --A logdrop-1863 -j DROP --A logdrop-1864 -j DROP --A logdrop-1865 -j DROP --A logdrop-1866 -j DROP --A logdrop-1867 -j DROP --A logdrop-1868 -j DROP --A logdrop-1869 -j DROP -A logdrop-187 -j TEE --gateway fc00::2 -A logdrop-187 -j DROP --A logdrop-1870 -j DROP --A logdrop-1871 -j DROP --A logdrop-1872 -j DROP --A logdrop-1873 -j DROP --A logdrop-1874 -j DROP --A logdrop-1875 -j DROP --A logdrop-1876 -j DROP --A logdrop-1877 -j DROP --A logdrop-1878 -j DROP --A logdrop-1879 -j DROP -A logdrop-188 -j TEE --gateway fc00::2 -A logdrop-188 -j DROP --A logdrop-1880 -j DROP --A logdrop-1881 -j DROP --A logdrop-1882 -j DROP --A logdrop-1883 -j DROP --A logdrop-1884 -j DROP --A logdrop-1885 -j DROP --A logdrop-1886 -j DROP --A logdrop-1887 -j DROP --A logdrop-1888 -j DROP --A logdrop-1889 -j DROP -A logdrop-189 -j TEE --gateway fc00::2 -A logdrop-189 -j DROP --A logdrop-1890 -j DROP --A logdrop-1891 -j DROP --A logdrop-1892 -j DROP --A logdrop-1893 -j DROP --A logdrop-1894 -j DROP --A logdrop-1895 -j DROP --A logdrop-1896 -j DROP --A logdrop-1897 -j DROP --A logdrop-1898 -j DROP --A logdrop-1899 -j DROP -A logdrop-19 -m limit --limit 1/second -j LOG -A logdrop-19 -j DROP -A logdrop-190 -j DROP --A logdrop-1900 -j DROP --A logdrop-1901 -j DROP --A logdrop-1902 -j DROP --A logdrop-1903 -j DROP --A logdrop-1904 -j DROP --A logdrop-1905 -j DROP --A logdrop-1906 -j DROP --A logdrop-1907 -j DROP --A logdrop-1908 -j DROP --A logdrop-1909 -j DROP -A logdrop-191 -j DROP --A logdrop-1910 -j DROP --A logdrop-1911 -j DROP --A logdrop-1912 -j DROP --A logdrop-1913 -j DROP --A logdrop-1914 -j DROP --A logdrop-1915 -j DROP --A logdrop-1916 -j DROP --A logdrop-1917 -j DROP --A logdrop-1918 -j DROP --A logdrop-1919 -j DROP -A logdrop-192 -j DROP --A logdrop-1920 -j DROP --A logdrop-1921 -j DROP --A logdrop-1922 -j DROP --A logdrop-1923 -j DROP --A logdrop-1924 -j DROP --A logdrop-1925 -j DROP --A logdrop-1926 -j DROP --A logdrop-1927 -j DROP --A logdrop-1928 -j DROP --A logdrop-1929 -j DROP -A logdrop-193 -j DROP --A logdrop-1930 -m limit --limit 1/second -j LOG --A logdrop-1930 -j DROP --A logdrop-1931 -m limit --limit 1/second -j LOG --A logdrop-1931 -j DROP --A logdrop-1932 -m limit --limit 1/second -j LOG --A logdrop-1932 -j DROP --A logdrop-1933 -m limit --limit 1/second -j LOG --A logdrop-1933 -j DROP --A logdrop-1934 -m limit --limit 1/second -j LOG --A logdrop-1934 -j DROP --A logdrop-1935 -m limit --limit 1/second -j LOG --A logdrop-1935 -j DROP --A logdrop-1936 -m limit --limit 1/second -j LOG --A logdrop-1936 -j DROP --A logdrop-1937 -m limit --limit 1/second -j LOG --A logdrop-1937 -j DROP --A logdrop-1938 -m limit --limit 1/second -j LOG --A logdrop-1938 -j DROP --A logdrop-1939 -m limit --limit 1/second -j LOG --A logdrop-1939 -j DROP -A logdrop-194 -j DROP --A logdrop-1940 -m limit --limit 1/second -j LOG --A logdrop-1940 -j DROP --A logdrop-1941 -m limit --limit 1/second -j LOG --A logdrop-1941 -j DROP --A logdrop-1942 -m limit --limit 1/second -j LOG --A logdrop-1942 -j DROP --A logdrop-1943 -m limit --limit 1/second -j LOG --A logdrop-1943 -j DROP --A logdrop-1944 -m limit --limit 1/second -j LOG --A logdrop-1944 -j DROP --A logdrop-1945 -m limit --limit 1/second -j LOG --A logdrop-1945 -j DROP --A logdrop-1946 -m limit --limit 1/second -j LOG --A logdrop-1946 -j DROP --A logdrop-1947 -m limit --limit 1/second -j LOG --A logdrop-1947 -j DROP --A logdrop-1948 -m limit --limit 1/second -j LOG --A logdrop-1948 -j DROP --A logdrop-1949 -m limit --limit 1/second -j LOG --A logdrop-1949 -j DROP -A logdrop-195 -j DROP --A logdrop-1950 -m limit --limit 1/second -j LOG --A logdrop-1950 -j DROP --A logdrop-1951 -m limit --limit 1/second -j LOG --A logdrop-1951 -j DROP --A logdrop-1952 -m limit --limit 1/second -j LOG --A logdrop-1952 -j DROP --A logdrop-1953 -m limit --limit 1/second -j LOG --A logdrop-1953 -j DROP --A logdrop-1954 -m limit --limit 1/second -j LOG --A logdrop-1954 -j DROP --A logdrop-1955 -m limit --limit 1/second -j LOG --A logdrop-1955 -j DROP --A logdrop-1956 -m limit --limit 1/second -j LOG --A logdrop-1956 -j DROP --A logdrop-1957 -m limit --limit 1/second -j LOG --A logdrop-1957 -j DROP --A logdrop-1958 -m limit --limit 1/second -j LOG --A logdrop-1958 -j DROP --A logdrop-1959 -m limit --limit 1/second -j LOG --A logdrop-1959 -j DROP -A logdrop-196 -j DROP --A logdrop-1960 -m limit --limit 1/second -j LOG --A logdrop-1960 -j DROP --A logdrop-1961 -m limit --limit 1/second -j LOG --A logdrop-1961 -j DROP --A logdrop-1962 -m limit --limit 1/second -j LOG --A logdrop-1962 -j DROP --A logdrop-1963 -m limit --limit 1/second -j LOG --A logdrop-1963 -j DROP --A logdrop-1964 -m limit --limit 1/second -j LOG --A logdrop-1964 -j DROP --A logdrop-1965 -m limit --limit 1/second -j LOG --A logdrop-1965 -j DROP --A logdrop-1966 -m limit --limit 1/second -j LOG --A logdrop-1966 -j DROP --A logdrop-1967 -m limit --limit 1/second -j LOG --A logdrop-1967 -j DROP --A logdrop-1968 -m limit --limit 1/second -j LOG --A logdrop-1968 -j DROP --A logdrop-1969 -m limit --limit 1/second -j LOG --A logdrop-1969 -j DROP -A logdrop-197 -j DROP --A logdrop-1970 -m limit --limit 1/second -j LOG --A logdrop-1970 -j DROP --A logdrop-1971 -m limit --limit 1/second -j LOG --A logdrop-1971 -j DROP --A logdrop-1972 -m limit --limit 1/second -j LOG --A logdrop-1972 -j DROP --A logdrop-1973 -m limit --limit 1/second -j LOG --A logdrop-1973 -j DROP --A logdrop-1974 -m limit --limit 1/second -j LOG --A logdrop-1974 -j DROP --A logdrop-1975 -m limit --limit 1/second -j LOG --A logdrop-1975 -j DROP --A logdrop-1976 -m limit --limit 1/second -j LOG --A logdrop-1976 -j DROP --A logdrop-1977 -m limit --limit 1/second -j LOG --A logdrop-1977 -j DROP --A logdrop-1978 -m limit --limit 1/second -j LOG --A logdrop-1978 -j DROP --A logdrop-1979 -m limit --limit 1/second -j LOG --A logdrop-1979 -j DROP -A logdrop-198 -j DROP --A logdrop-1980 -m limit --limit 1/second -j LOG --A logdrop-1980 -j DROP --A logdrop-1981 -m limit --limit 1/second -j LOG --A logdrop-1981 -j DROP --A logdrop-1982 -m limit --limit 1/second -j LOG --A logdrop-1982 -j DROP --A logdrop-1983 -m limit --limit 1/second -j LOG --A logdrop-1983 -j DROP --A logdrop-1984 -m limit --limit 1/second -j LOG --A logdrop-1984 -j DROP --A logdrop-1985 -m limit --limit 1/second -j LOG --A logdrop-1985 -j DROP --A logdrop-1986 -m limit --limit 1/second -j LOG --A logdrop-1986 -j DROP --A logdrop-1987 -m limit --limit 1/second -j LOG --A logdrop-1987 -j DROP --A logdrop-1988 -m limit --limit 1/second -j LOG --A logdrop-1988 -j DROP --A logdrop-1989 -m limit --limit 1/second -j LOG --A logdrop-1989 -j DROP -A logdrop-199 -j DROP --A logdrop-1990 -m limit --limit 1/second -j LOG --A logdrop-1990 -j DROP --A logdrop-1991 -m limit --limit 1/second -j LOG --A logdrop-1991 -j DROP --A logdrop-1992 -m limit --limit 1/second -j LOG --A logdrop-1992 -j DROP --A logdrop-1993 -m limit --limit 1/second -j LOG --A logdrop-1993 -j DROP --A logdrop-1994 -m limit --limit 1/second -j LOG --A logdrop-1994 -j DROP --A logdrop-1995 -m limit --limit 1/second -j LOG --A logdrop-1995 -j DROP --A logdrop-1996 -m limit --limit 1/second -j LOG --A logdrop-1996 -j DROP --A logdrop-1997 -m limit --limit 1/second -j LOG --A logdrop-1997 -j DROP --A logdrop-1998 -m limit --limit 1/second -j LOG --A logdrop-1998 -j DROP --A logdrop-1999 -m limit --limit 1/second -j LOG --A logdrop-1999 -j DROP -A logdrop-2 -m limit --limit 1/second -j LOG -A logdrop-2 -j DROP -A logdrop-20 -m limit --limit 1/second -j LOG -A logdrop-20 -j DROP -A logdrop-200 -j DROP --A logdrop-2000 -m limit --limit 1/second -j LOG --A logdrop-2000 -j DROP --A logdrop-2001 -m limit --limit 1/second -j LOG --A logdrop-2001 -j DROP --A logdrop-2002 -m limit --limit 1/second -j LOG --A logdrop-2002 -j DROP --A logdrop-2003 -m limit --limit 1/second -j LOG --A logdrop-2003 -j DROP --A logdrop-2004 -m limit --limit 1/second -j LOG --A logdrop-2004 -j DROP --A logdrop-2005 -m limit --limit 1/second -j LOG --A logdrop-2005 -j DROP --A logdrop-2006 -m limit --limit 1/second -j LOG --A logdrop-2006 -j DROP --A logdrop-2007 -m limit --limit 1/second -j LOG --A logdrop-2007 -j DROP --A logdrop-2008 -m limit --limit 1/second -j LOG --A logdrop-2008 -j DROP --A logdrop-2009 -m limit --limit 1/second -j LOG --A logdrop-2009 -j DROP -A logdrop-201 -j DROP --A logdrop-2010 -m limit --limit 1/second -j LOG --A logdrop-2010 -j DROP --A logdrop-2011 -m limit --limit 1/second -j LOG --A logdrop-2011 -j DROP --A logdrop-2012 -m limit --limit 1/second -j LOG --A logdrop-2012 -j DROP --A logdrop-2013 -m limit --limit 1/second -j LOG --A logdrop-2013 -j DROP --A logdrop-2014 -m limit --limit 1/second -j LOG --A logdrop-2014 -j DROP --A logdrop-2015 -m limit --limit 1/second -j LOG --A logdrop-2015 -j DROP --A logdrop-2016 -m limit --limit 1/second -j LOG --A logdrop-2016 -j DROP --A logdrop-2017 -m limit --limit 1/second -j LOG --A logdrop-2017 -j DROP --A logdrop-2018 -m limit --limit 1/second -j LOG --A logdrop-2018 -j DROP --A logdrop-2019 -m limit --limit 1/second -j LOG --A logdrop-2019 -j DROP -A logdrop-202 -j DROP --A logdrop-2020 -j TEE --gateway fc00::2 --A logdrop-2020 -j DROP --A logdrop-2021 -j TEE --gateway fc00::2 --A logdrop-2021 -j DROP --A logdrop-2022 -j TEE --gateway fc00::2 --A logdrop-2022 -j DROP --A logdrop-2023 -j TEE --gateway fc00::2 --A logdrop-2023 -j DROP --A logdrop-2024 -j TEE --gateway fc00::2 --A logdrop-2024 -j DROP --A logdrop-2025 -j TEE --gateway fc00::2 --A logdrop-2025 -j DROP --A logdrop-2026 -j TEE --gateway fc00::2 --A logdrop-2026 -j DROP --A logdrop-2027 -j TEE --gateway fc00::2 --A logdrop-2027 -j DROP --A logdrop-2028 -j TEE --gateway fc00::2 --A logdrop-2028 -j DROP --A logdrop-2029 -j TEE --gateway fc00::2 --A logdrop-2029 -j DROP -A logdrop-203 -j DROP --A logdrop-2030 -j TEE --gateway fc00::2 --A logdrop-2030 -j DROP --A logdrop-2031 -j TEE --gateway fc00::2 --A logdrop-2031 -j DROP --A logdrop-2032 -j TEE --gateway fc00::2 --A logdrop-2032 -j DROP --A logdrop-2033 -j TEE --gateway fc00::2 --A logdrop-2033 -j DROP --A logdrop-2034 -j TEE --gateway fc00::2 --A logdrop-2034 -j DROP --A logdrop-2035 -j TEE --gateway fc00::2 --A logdrop-2035 -j DROP --A logdrop-2036 -j TEE --gateway fc00::2 --A logdrop-2036 -j DROP --A logdrop-2037 -j TEE --gateway fc00::2 --A logdrop-2037 -j DROP --A logdrop-2038 -j TEE --gateway fc00::2 --A logdrop-2038 -j DROP --A logdrop-2039 -j TEE --gateway fc00::2 --A logdrop-2039 -j DROP -A logdrop-204 -j DROP --A logdrop-2040 -j TEE --gateway fc00::2 --A logdrop-2040 -j DROP --A logdrop-2041 -j TEE --gateway fc00::2 --A logdrop-2041 -j DROP --A logdrop-2042 -j TEE --gateway fc00::2 --A logdrop-2042 -j DROP --A logdrop-2043 -j TEE --gateway fc00::2 --A logdrop-2043 -j DROP --A logdrop-2044 -j TEE --gateway fc00::2 --A logdrop-2044 -j DROP --A logdrop-2045 -j TEE --gateway fc00::2 --A logdrop-2045 -j DROP --A logdrop-2046 -j TEE --gateway fc00::2 --A logdrop-2046 -j DROP --A logdrop-2047 -j TEE --gateway fc00::2 --A logdrop-2047 -j DROP --A logdrop-2048 -j TEE --gateway fc00::2 --A logdrop-2048 -j DROP --A logdrop-2049 -j TEE --gateway fc00::2 --A logdrop-2049 -j DROP -A logdrop-205 -j DROP --A logdrop-2050 -j TEE --gateway fc00::2 --A logdrop-2050 -j DROP --A logdrop-2051 -j TEE --gateway fc00::2 --A logdrop-2051 -j DROP --A logdrop-2052 -j TEE --gateway fc00::2 --A logdrop-2052 -j DROP --A logdrop-2053 -j TEE --gateway fc00::2 --A logdrop-2053 -j DROP --A logdrop-2054 -j TEE --gateway fc00::2 --A logdrop-2054 -j DROP --A logdrop-2055 -j TEE --gateway fc00::2 --A logdrop-2055 -j DROP --A logdrop-2056 -j TEE --gateway fc00::2 --A logdrop-2056 -j DROP --A logdrop-2057 -j TEE --gateway fc00::2 --A logdrop-2057 -j DROP --A logdrop-2058 -j TEE --gateway fc00::2 --A logdrop-2058 -j DROP --A logdrop-2059 -j TEE --gateway fc00::2 --A logdrop-2059 -j DROP -A logdrop-206 -j DROP --A logdrop-2060 -j TEE --gateway fc00::2 --A logdrop-2060 -j DROP --A logdrop-2061 -j TEE --gateway fc00::2 --A logdrop-2061 -j DROP --A logdrop-2062 -j TEE --gateway fc00::2 --A logdrop-2062 -j DROP --A logdrop-2063 -j TEE --gateway fc00::2 --A logdrop-2063 -j DROP --A logdrop-2064 -j TEE --gateway fc00::2 --A logdrop-2064 -j DROP --A logdrop-2065 -j TEE --gateway fc00::2 --A logdrop-2065 -j DROP --A logdrop-2066 -j TEE --gateway fc00::2 --A logdrop-2066 -j DROP --A logdrop-2067 -j TEE --gateway fc00::2 --A logdrop-2067 -j DROP --A logdrop-2068 -j TEE --gateway fc00::2 --A logdrop-2068 -j DROP --A logdrop-2069 -j TEE --gateway fc00::2 --A logdrop-2069 -j DROP -A logdrop-207 -j DROP --A logdrop-2070 -j TEE --gateway fc00::2 --A logdrop-2070 -j DROP --A logdrop-2071 -j TEE --gateway fc00::2 --A logdrop-2071 -j DROP --A logdrop-2072 -j TEE --gateway fc00::2 --A logdrop-2072 -j DROP --A logdrop-2073 -j TEE --gateway fc00::2 --A logdrop-2073 -j DROP --A logdrop-2074 -j TEE --gateway fc00::2 --A logdrop-2074 -j DROP --A logdrop-2075 -j TEE --gateway fc00::2 --A logdrop-2075 -j DROP --A logdrop-2076 -j TEE --gateway fc00::2 --A logdrop-2076 -j DROP --A logdrop-2077 -j TEE --gateway fc00::2 --A logdrop-2077 -j DROP --A logdrop-2078 -j TEE --gateway fc00::2 --A logdrop-2078 -j DROP --A logdrop-2079 -j TEE --gateway fc00::2 --A logdrop-2079 -j DROP -A logdrop-208 -j DROP --A logdrop-2080 -j TEE --gateway fc00::2 --A logdrop-2080 -j DROP --A logdrop-2081 -j TEE --gateway fc00::2 --A logdrop-2081 -j DROP --A logdrop-2082 -j TEE --gateway fc00::2 --A logdrop-2082 -j DROP --A logdrop-2083 -j TEE --gateway fc00::2 --A logdrop-2083 -j DROP --A logdrop-2084 -j TEE --gateway fc00::2 --A logdrop-2084 -j DROP --A logdrop-2085 -j TEE --gateway fc00::2 --A logdrop-2085 -j DROP --A logdrop-2086 -j TEE --gateway fc00::2 --A logdrop-2086 -j DROP --A logdrop-2087 -j TEE --gateway fc00::2 --A logdrop-2087 -j DROP --A logdrop-2088 -j TEE --gateway fc00::2 --A logdrop-2088 -j DROP --A logdrop-2089 -j TEE --gateway fc00::2 --A logdrop-2089 -j DROP -A logdrop-209 -j DROP --A logdrop-2090 -j TEE --gateway fc00::2 --A logdrop-2090 -j DROP --A logdrop-2091 -j TEE --gateway fc00::2 --A logdrop-2091 -j DROP --A logdrop-2092 -j TEE --gateway fc00::2 --A logdrop-2092 -j DROP --A logdrop-2093 -j TEE --gateway fc00::2 --A logdrop-2093 -j DROP --A logdrop-2094 -j TEE --gateway fc00::2 --A logdrop-2094 -j DROP --A logdrop-2095 -j TEE --gateway fc00::2 --A logdrop-2095 -j DROP --A logdrop-2096 -j TEE --gateway fc00::2 --A logdrop-2096 -j DROP --A logdrop-2097 -j TEE --gateway fc00::2 --A logdrop-2097 -j DROP --A logdrop-2098 -j TEE --gateway fc00::2 --A logdrop-2098 -j DROP --A logdrop-2099 -j TEE --gateway fc00::2 --A logdrop-2099 -j DROP -A logdrop-21 -m limit --limit 1/second -j LOG -A logdrop-21 -j DROP -A logdrop-210 -j DROP --A logdrop-2100 -j TEE --gateway fc00::2 --A logdrop-2100 -j DROP --A logdrop-2101 -j TEE --gateway fc00::2 --A logdrop-2101 -j DROP --A logdrop-2102 -j TEE --gateway fc00::2 --A logdrop-2102 -j DROP --A logdrop-2103 -j TEE --gateway fc00::2 --A logdrop-2103 -j DROP --A logdrop-2104 -j TEE --gateway fc00::2 --A logdrop-2104 -j DROP --A logdrop-2105 -j TEE --gateway fc00::2 --A logdrop-2105 -j DROP --A logdrop-2106 -j TEE --gateway fc00::2 --A logdrop-2106 -j DROP --A logdrop-2107 -j TEE --gateway fc00::2 --A logdrop-2107 -j DROP --A logdrop-2108 -j TEE --gateway fc00::2 --A logdrop-2108 -j DROP --A logdrop-2109 -j TEE --gateway fc00::2 --A logdrop-2109 -j DROP -A logdrop-211 -j DROP --A logdrop-2110 -j DROP --A logdrop-2111 -j DROP --A logdrop-2112 -j DROP --A logdrop-2113 -j DROP --A logdrop-2114 -j DROP --A logdrop-2115 -j DROP --A logdrop-2116 -j DROP --A logdrop-2117 -j DROP --A logdrop-2118 -j DROP --A logdrop-2119 -j DROP -A logdrop-212 -j DROP --A logdrop-2120 -j DROP --A logdrop-2121 -j DROP --A logdrop-2122 -j DROP --A logdrop-2123 -j DROP --A logdrop-2124 -j DROP --A logdrop-2125 -j DROP --A logdrop-2126 -j DROP --A logdrop-2127 -j DROP --A logdrop-2128 -j DROP --A logdrop-2129 -j DROP -A logdrop-213 -j DROP --A logdrop-2130 -j DROP --A logdrop-2131 -j DROP --A logdrop-2132 -j DROP --A logdrop-2133 -j DROP --A logdrop-2134 -j DROP --A logdrop-2135 -j DROP --A logdrop-2136 -j DROP --A logdrop-2137 -j DROP --A logdrop-2138 -j DROP --A logdrop-2139 -j DROP -A logdrop-214 -j DROP --A logdrop-2140 -j DROP --A logdrop-2141 -j DROP --A logdrop-2142 -j DROP --A logdrop-2143 -j DROP --A logdrop-2144 -j DROP --A logdrop-2145 -j DROP --A logdrop-2146 -j DROP --A logdrop-2147 -j DROP --A logdrop-2148 -j DROP --A logdrop-2149 -j DROP -A logdrop-215 -j DROP --A logdrop-2150 -j DROP --A logdrop-2151 -j DROP --A logdrop-2152 -j DROP --A logdrop-2153 -j DROP --A logdrop-2154 -j DROP --A logdrop-2155 -j DROP --A logdrop-2156 -j DROP --A logdrop-2157 -j DROP --A logdrop-2158 -j DROP --A logdrop-2159 -j DROP -A logdrop-216 -j DROP --A logdrop-2160 -j DROP --A logdrop-2161 -j DROP --A logdrop-2162 -j DROP --A logdrop-2163 -j DROP --A logdrop-2164 -j DROP --A logdrop-2165 -j DROP --A logdrop-2166 -j DROP --A logdrop-2167 -j DROP --A logdrop-2168 -j DROP --A logdrop-2169 -j DROP -A logdrop-217 -j DROP --A logdrop-2170 -j DROP --A logdrop-2171 -j DROP --A logdrop-2172 -j DROP --A logdrop-2173 -j DROP --A logdrop-2174 -j DROP --A logdrop-2175 -j DROP --A logdrop-2176 -j DROP --A logdrop-2177 -j DROP --A logdrop-2178 -j DROP --A logdrop-2179 -j DROP -A logdrop-218 -j DROP --A logdrop-2180 -j DROP --A logdrop-2181 -j DROP --A logdrop-2182 -j DROP --A logdrop-2183 -j DROP --A logdrop-2184 -j DROP --A logdrop-2185 -j DROP --A logdrop-2186 -j DROP --A logdrop-2187 -j DROP --A logdrop-2188 -j DROP --A logdrop-2189 -j DROP -A logdrop-219 -j DROP --A logdrop-2190 -j DROP --A logdrop-2191 -j DROP --A logdrop-2192 -j DROP --A logdrop-2193 -j DROP --A logdrop-2194 -j DROP --A logdrop-2195 -j DROP --A logdrop-2196 -j DROP --A logdrop-2197 -j DROP --A logdrop-2198 -j DROP --A logdrop-2199 -j DROP -A logdrop-22 -m limit --limit 1/second -j LOG -A logdrop-22 -j DROP -A logdrop-220 -j DROP --A logdrop-2200 -m limit --limit 1/second -j LOG --A logdrop-2200 -j DROP --A logdrop-2201 -m limit --limit 1/second -j LOG --A logdrop-2201 -j DROP --A logdrop-2202 -j LOG --A logdrop-2202 -j TEE --gateway fc00::1 --A logdrop-2202 -j DROP --A logdrop-2203 -j TEE --gateway fc00::2 --A logdrop-2203 -j DROP --A logdrop-2204 -j DROP -A logdrop-221 -j DROP -A logdrop-222 -j DROP -A logdrop-223 -j DROP @@ -118760,6 +117840,926 @@ COMMIT -A logdrop-998 -j DROP -A logdrop-999 -j TEE --gateway fc00::2 -A logdrop-999 -j DROP +-A logdrop-ntp-0 -m limit --limit 1/second -j LOG +-A logdrop-ntp-0 -j DROP +-A logdrop-ntp-1 -m limit --limit 1/second -j LOG +-A logdrop-ntp-1 -j DROP +-A logdrop-ntp-10 -m limit --limit 1/second -j LOG +-A logdrop-ntp-10 -j DROP +-A logdrop-ntp-100 -j TEE --gateway fc00::2 +-A logdrop-ntp-100 -j DROP +-A logdrop-ntp-101 -j TEE --gateway fc00::2 +-A logdrop-ntp-101 -j DROP +-A logdrop-ntp-102 -j TEE --gateway fc00::2 +-A logdrop-ntp-102 -j DROP +-A logdrop-ntp-103 -j TEE --gateway fc00::2 +-A logdrop-ntp-103 -j DROP +-A logdrop-ntp-104 -j TEE --gateway fc00::2 +-A logdrop-ntp-104 -j DROP +-A logdrop-ntp-105 -j TEE --gateway fc00::2 +-A logdrop-ntp-105 -j DROP +-A logdrop-ntp-106 -j TEE --gateway fc00::2 +-A logdrop-ntp-106 -j DROP +-A logdrop-ntp-107 -j TEE --gateway fc00::2 +-A logdrop-ntp-107 -j DROP +-A logdrop-ntp-108 -j TEE --gateway fc00::2 +-A logdrop-ntp-108 -j DROP +-A logdrop-ntp-109 -j TEE --gateway fc00::2 +-A logdrop-ntp-109 -j DROP +-A logdrop-ntp-11 -m limit --limit 1/second -j LOG +-A logdrop-ntp-11 -j DROP +-A logdrop-ntp-110 -j TEE --gateway fc00::2 +-A logdrop-ntp-110 -j DROP +-A logdrop-ntp-111 -j TEE --gateway fc00::2 +-A logdrop-ntp-111 -j DROP +-A logdrop-ntp-112 -j TEE --gateway fc00::2 +-A logdrop-ntp-112 -j DROP +-A logdrop-ntp-113 -j TEE --gateway fc00::2 +-A logdrop-ntp-113 -j DROP +-A logdrop-ntp-114 -j TEE --gateway fc00::2 +-A logdrop-ntp-114 -j DROP +-A logdrop-ntp-115 -j TEE --gateway fc00::2 +-A logdrop-ntp-115 -j DROP +-A logdrop-ntp-116 -j TEE --gateway fc00::2 +-A logdrop-ntp-116 -j DROP +-A logdrop-ntp-117 -j TEE --gateway fc00::2 +-A logdrop-ntp-117 -j DROP +-A logdrop-ntp-118 -j TEE --gateway fc00::2 +-A logdrop-ntp-118 -j DROP +-A logdrop-ntp-119 -j TEE --gateway fc00::2 +-A logdrop-ntp-119 -j DROP +-A logdrop-ntp-12 -m limit --limit 1/second -j LOG +-A logdrop-ntp-12 -j DROP +-A logdrop-ntp-120 -j TEE --gateway fc00::2 +-A logdrop-ntp-120 -j DROP +-A logdrop-ntp-121 -j TEE --gateway fc00::2 +-A logdrop-ntp-121 -j DROP +-A logdrop-ntp-122 -j TEE --gateway fc00::2 +-A logdrop-ntp-122 -j DROP +-A logdrop-ntp-123 -j TEE --gateway fc00::2 +-A logdrop-ntp-123 -j DROP +-A logdrop-ntp-124 -j TEE --gateway fc00::2 +-A logdrop-ntp-124 -j DROP +-A logdrop-ntp-125 -j TEE --gateway fc00::2 +-A logdrop-ntp-125 -j DROP +-A logdrop-ntp-126 -j TEE --gateway fc00::2 +-A logdrop-ntp-126 -j DROP +-A logdrop-ntp-127 -j TEE --gateway fc00::2 +-A logdrop-ntp-127 -j DROP +-A logdrop-ntp-128 -j TEE --gateway fc00::2 +-A logdrop-ntp-128 -j DROP +-A logdrop-ntp-129 -j TEE --gateway fc00::2 +-A logdrop-ntp-129 -j DROP +-A logdrop-ntp-13 -m limit --limit 1/second -j LOG +-A logdrop-ntp-13 -j DROP +-A logdrop-ntp-130 -j TEE --gateway fc00::2 +-A logdrop-ntp-130 -j DROP +-A logdrop-ntp-131 -j TEE --gateway fc00::2 +-A logdrop-ntp-131 -j DROP +-A logdrop-ntp-132 -j TEE --gateway fc00::2 +-A logdrop-ntp-132 -j DROP +-A logdrop-ntp-133 -j TEE --gateway fc00::2 +-A logdrop-ntp-133 -j DROP +-A logdrop-ntp-134 -j TEE --gateway fc00::2 +-A logdrop-ntp-134 -j DROP +-A logdrop-ntp-135 -j TEE --gateway fc00::2 +-A logdrop-ntp-135 -j DROP +-A logdrop-ntp-136 -j TEE --gateway fc00::2 +-A logdrop-ntp-136 -j DROP +-A logdrop-ntp-137 -j TEE --gateway fc00::2 +-A logdrop-ntp-137 -j DROP +-A logdrop-ntp-138 -j TEE --gateway fc00::2 +-A logdrop-ntp-138 -j DROP +-A logdrop-ntp-139 -j TEE --gateway fc00::2 +-A logdrop-ntp-139 -j DROP +-A logdrop-ntp-14 -m limit --limit 1/second -j LOG +-A logdrop-ntp-14 -j DROP +-A logdrop-ntp-140 -j TEE --gateway fc00::2 +-A logdrop-ntp-140 -j DROP +-A logdrop-ntp-141 -j TEE --gateway fc00::2 +-A logdrop-ntp-141 -j DROP +-A logdrop-ntp-142 -j TEE --gateway fc00::2 +-A logdrop-ntp-142 -j DROP +-A logdrop-ntp-143 -j TEE --gateway fc00::2 +-A logdrop-ntp-143 -j DROP +-A logdrop-ntp-144 -j TEE --gateway fc00::2 +-A logdrop-ntp-144 -j DROP +-A logdrop-ntp-145 -j TEE --gateway fc00::2 +-A logdrop-ntp-145 -j DROP +-A logdrop-ntp-146 -j TEE --gateway fc00::2 +-A logdrop-ntp-146 -j DROP +-A logdrop-ntp-147 -j TEE --gateway fc00::2 +-A logdrop-ntp-147 -j DROP +-A logdrop-ntp-148 -j TEE --gateway fc00::2 +-A logdrop-ntp-148 -j DROP +-A logdrop-ntp-149 -j TEE --gateway fc00::2 +-A logdrop-ntp-149 -j DROP +-A logdrop-ntp-15 -m limit --limit 1/second -j LOG +-A logdrop-ntp-15 -j DROP +-A logdrop-ntp-150 -j TEE --gateway fc00::2 +-A logdrop-ntp-150 -j DROP +-A logdrop-ntp-151 -j TEE --gateway fc00::2 +-A logdrop-ntp-151 -j DROP +-A logdrop-ntp-152 -j TEE --gateway fc00::2 +-A logdrop-ntp-152 -j DROP +-A logdrop-ntp-153 -j TEE --gateway fc00::2 +-A logdrop-ntp-153 -j DROP +-A logdrop-ntp-154 -j TEE --gateway fc00::2 +-A logdrop-ntp-154 -j DROP +-A logdrop-ntp-155 -j TEE --gateway fc00::2 +-A logdrop-ntp-155 -j DROP +-A logdrop-ntp-156 -j TEE --gateway fc00::2 +-A logdrop-ntp-156 -j DROP +-A logdrop-ntp-157 -j TEE --gateway fc00::2 +-A logdrop-ntp-157 -j DROP +-A logdrop-ntp-158 -j TEE --gateway fc00::2 +-A logdrop-ntp-158 -j DROP +-A logdrop-ntp-159 -j TEE --gateway fc00::2 +-A logdrop-ntp-159 -j DROP +-A logdrop-ntp-16 -m limit --limit 1/second -j LOG +-A logdrop-ntp-16 -j DROP +-A logdrop-ntp-160 -j TEE --gateway fc00::2 +-A logdrop-ntp-160 -j DROP +-A logdrop-ntp-161 -j TEE --gateway fc00::2 +-A logdrop-ntp-161 -j DROP +-A logdrop-ntp-162 -j TEE --gateway fc00::2 +-A logdrop-ntp-162 -j DROP +-A logdrop-ntp-163 -j TEE --gateway fc00::2 +-A logdrop-ntp-163 -j DROP +-A logdrop-ntp-164 -j TEE --gateway fc00::2 +-A logdrop-ntp-164 -j DROP +-A logdrop-ntp-165 -j TEE --gateway fc00::2 +-A logdrop-ntp-165 -j DROP +-A logdrop-ntp-166 -j TEE --gateway fc00::2 +-A logdrop-ntp-166 -j DROP +-A logdrop-ntp-167 -j TEE --gateway fc00::2 +-A logdrop-ntp-167 -j DROP +-A logdrop-ntp-168 -j TEE --gateway fc00::2 +-A logdrop-ntp-168 -j DROP +-A logdrop-ntp-169 -j TEE --gateway fc00::2 +-A logdrop-ntp-169 -j DROP +-A logdrop-ntp-17 -m limit --limit 1/second -j LOG +-A logdrop-ntp-17 -j DROP +-A logdrop-ntp-170 -j TEE --gateway fc00::2 +-A logdrop-ntp-170 -j DROP +-A logdrop-ntp-171 -j TEE --gateway fc00::2 +-A logdrop-ntp-171 -j DROP +-A logdrop-ntp-172 -j TEE --gateway fc00::2 +-A logdrop-ntp-172 -j DROP +-A logdrop-ntp-173 -j TEE --gateway fc00::2 +-A logdrop-ntp-173 -j DROP +-A logdrop-ntp-174 -j TEE --gateway fc00::2 +-A logdrop-ntp-174 -j DROP +-A logdrop-ntp-175 -j TEE --gateway fc00::2 +-A logdrop-ntp-175 -j DROP +-A logdrop-ntp-176 -j TEE --gateway fc00::2 +-A logdrop-ntp-176 -j DROP +-A logdrop-ntp-177 -j TEE --gateway fc00::2 +-A logdrop-ntp-177 -j DROP +-A logdrop-ntp-178 -j TEE --gateway fc00::2 +-A logdrop-ntp-178 -j DROP +-A logdrop-ntp-179 -j TEE --gateway fc00::2 +-A logdrop-ntp-179 -j DROP +-A logdrop-ntp-18 -m limit --limit 1/second -j LOG +-A logdrop-ntp-18 -j DROP +-A logdrop-ntp-180 -j TEE --gateway fc00::2 +-A logdrop-ntp-180 -j DROP +-A logdrop-ntp-181 -j TEE --gateway fc00::2 +-A logdrop-ntp-181 -j DROP +-A logdrop-ntp-182 -j TEE --gateway fc00::2 +-A logdrop-ntp-182 -j DROP +-A logdrop-ntp-183 -j TEE --gateway fc00::2 +-A logdrop-ntp-183 -j DROP +-A logdrop-ntp-184 -j TEE --gateway fc00::2 +-A logdrop-ntp-184 -j DROP +-A logdrop-ntp-185 -j TEE --gateway fc00::2 +-A logdrop-ntp-185 -j DROP +-A logdrop-ntp-186 -j TEE --gateway fc00::2 +-A logdrop-ntp-186 -j DROP +-A logdrop-ntp-187 -j TEE --gateway fc00::2 +-A logdrop-ntp-187 -j DROP +-A logdrop-ntp-188 -j TEE --gateway fc00::2 +-A logdrop-ntp-188 -j DROP +-A logdrop-ntp-189 -j TEE --gateway fc00::2 +-A logdrop-ntp-189 -j DROP +-A logdrop-ntp-19 -m limit --limit 1/second -j LOG +-A logdrop-ntp-19 -j DROP +-A logdrop-ntp-190 -j DROP +-A logdrop-ntp-191 -j DROP +-A logdrop-ntp-192 -j DROP +-A logdrop-ntp-193 -j DROP +-A logdrop-ntp-194 -j DROP +-A logdrop-ntp-195 -j DROP +-A logdrop-ntp-196 -j DROP +-A logdrop-ntp-197 -j DROP +-A logdrop-ntp-198 -j DROP +-A logdrop-ntp-199 -j DROP +-A logdrop-ntp-2 -m limit --limit 1/second -j LOG +-A logdrop-ntp-2 -j DROP +-A logdrop-ntp-20 -m limit --limit 1/second -j LOG +-A logdrop-ntp-20 -j DROP +-A logdrop-ntp-200 -j DROP +-A logdrop-ntp-201 -j DROP +-A logdrop-ntp-202 -j DROP +-A logdrop-ntp-203 -j DROP +-A logdrop-ntp-204 -j DROP +-A logdrop-ntp-205 -j DROP +-A logdrop-ntp-206 -j DROP +-A logdrop-ntp-207 -j DROP +-A logdrop-ntp-208 -j DROP +-A logdrop-ntp-209 -j DROP +-A logdrop-ntp-21 -m limit --limit 1/second -j LOG +-A logdrop-ntp-21 -j DROP +-A logdrop-ntp-210 -j DROP +-A logdrop-ntp-211 -j DROP +-A logdrop-ntp-212 -j DROP +-A logdrop-ntp-213 -j DROP +-A logdrop-ntp-214 -j DROP +-A logdrop-ntp-215 -j DROP +-A logdrop-ntp-216 -j DROP +-A logdrop-ntp-217 -j DROP +-A logdrop-ntp-218 -j DROP +-A logdrop-ntp-219 -j DROP +-A logdrop-ntp-22 -m limit --limit 1/second -j LOG +-A logdrop-ntp-22 -j DROP +-A logdrop-ntp-220 -j DROP +-A logdrop-ntp-221 -j DROP +-A logdrop-ntp-222 -j DROP +-A logdrop-ntp-223 -j DROP +-A logdrop-ntp-224 -j DROP +-A logdrop-ntp-225 -j DROP +-A logdrop-ntp-226 -j DROP +-A logdrop-ntp-227 -j DROP +-A logdrop-ntp-228 -j DROP +-A logdrop-ntp-229 -j DROP +-A logdrop-ntp-23 -m limit --limit 1/second -j LOG +-A logdrop-ntp-23 -j DROP +-A logdrop-ntp-230 -j DROP +-A logdrop-ntp-231 -j DROP +-A logdrop-ntp-232 -j DROP +-A logdrop-ntp-233 -j DROP +-A logdrop-ntp-234 -j DROP +-A logdrop-ntp-235 -j DROP +-A logdrop-ntp-236 -j DROP +-A logdrop-ntp-237 -j DROP +-A logdrop-ntp-238 -j DROP +-A logdrop-ntp-239 -j DROP +-A logdrop-ntp-24 -m limit --limit 1/second -j LOG +-A logdrop-ntp-24 -j DROP +-A logdrop-ntp-240 -j DROP +-A logdrop-ntp-241 -j DROP +-A logdrop-ntp-242 -j DROP +-A logdrop-ntp-243 -j DROP +-A logdrop-ntp-244 -j DROP +-A logdrop-ntp-245 -j DROP +-A logdrop-ntp-246 -j DROP +-A logdrop-ntp-247 -j DROP +-A logdrop-ntp-248 -j DROP +-A logdrop-ntp-249 -j DROP +-A logdrop-ntp-25 -m limit --limit 1/second -j LOG +-A logdrop-ntp-25 -j DROP +-A logdrop-ntp-250 -j DROP +-A logdrop-ntp-251 -j DROP +-A logdrop-ntp-252 -j DROP +-A logdrop-ntp-253 -j DROP +-A logdrop-ntp-254 -j DROP +-A logdrop-ntp-255 -j DROP +-A logdrop-ntp-256 -j DROP +-A logdrop-ntp-257 -j DROP +-A logdrop-ntp-258 -j DROP +-A logdrop-ntp-259 -j DROP +-A logdrop-ntp-26 -m limit --limit 1/second -j LOG +-A logdrop-ntp-26 -j DROP +-A logdrop-ntp-260 -j DROP +-A logdrop-ntp-261 -j DROP +-A logdrop-ntp-262 -j DROP +-A logdrop-ntp-263 -j DROP +-A logdrop-ntp-264 -j DROP +-A logdrop-ntp-265 -j DROP +-A logdrop-ntp-266 -j DROP +-A logdrop-ntp-267 -j DROP +-A logdrop-ntp-268 -j DROP +-A logdrop-ntp-269 -j DROP +-A logdrop-ntp-27 -m limit --limit 1/second -j LOG +-A logdrop-ntp-27 -j DROP +-A logdrop-ntp-270 -j DROP +-A logdrop-ntp-271 -j DROP +-A logdrop-ntp-272 -j DROP +-A logdrop-ntp-273 -j DROP +-A logdrop-ntp-274 -j DROP +-A logdrop-ntp-275 -j DROP +-A logdrop-ntp-276 -j DROP +-A logdrop-ntp-277 -j DROP +-A logdrop-ntp-278 -j DROP +-A logdrop-ntp-279 -j DROP +-A logdrop-ntp-28 -m limit --limit 1/second -j LOG +-A logdrop-ntp-28 -j DROP +-A logdrop-ntp-280 -m limit --limit 1/second -j LOG +-A logdrop-ntp-280 -j DROP +-A logdrop-ntp-281 -m limit --limit 1/second -j LOG +-A logdrop-ntp-281 -j DROP +-A logdrop-ntp-282 -m limit --limit 1/second -j LOG +-A logdrop-ntp-282 -j DROP +-A logdrop-ntp-283 -m limit --limit 1/second -j LOG +-A logdrop-ntp-283 -j DROP +-A logdrop-ntp-284 -m limit --limit 1/second -j LOG +-A logdrop-ntp-284 -j DROP +-A logdrop-ntp-285 -m limit --limit 1/second -j LOG +-A logdrop-ntp-285 -j DROP +-A logdrop-ntp-286 -m limit --limit 1/second -j LOG +-A logdrop-ntp-286 -j DROP +-A logdrop-ntp-287 -m limit --limit 1/second -j LOG +-A logdrop-ntp-287 -j DROP +-A logdrop-ntp-288 -m limit --limit 1/second -j LOG +-A logdrop-ntp-288 -j DROP +-A logdrop-ntp-289 -m limit --limit 1/second -j LOG +-A logdrop-ntp-289 -j DROP +-A logdrop-ntp-29 -m limit --limit 1/second -j LOG +-A logdrop-ntp-29 -j DROP +-A logdrop-ntp-290 -m limit --limit 1/second -j LOG +-A logdrop-ntp-290 -j DROP +-A logdrop-ntp-291 -m limit --limit 1/second -j LOG +-A logdrop-ntp-291 -j DROP +-A logdrop-ntp-292 -m limit --limit 1/second -j LOG +-A logdrop-ntp-292 -j DROP +-A logdrop-ntp-293 -m limit --limit 1/second -j LOG +-A logdrop-ntp-293 -j DROP +-A logdrop-ntp-294 -m limit --limit 1/second -j LOG +-A logdrop-ntp-294 -j DROP +-A logdrop-ntp-295 -m limit --limit 1/second -j LOG +-A logdrop-ntp-295 -j DROP +-A logdrop-ntp-296 -m limit --limit 1/second -j LOG +-A logdrop-ntp-296 -j DROP +-A logdrop-ntp-297 -m limit --limit 1/second -j LOG +-A logdrop-ntp-297 -j DROP +-A logdrop-ntp-298 -m limit --limit 1/second -j LOG +-A logdrop-ntp-298 -j DROP +-A logdrop-ntp-299 -m limit --limit 1/second -j LOG +-A logdrop-ntp-299 -j DROP +-A logdrop-ntp-3 -m limit --limit 1/second -j LOG +-A logdrop-ntp-3 -j DROP +-A logdrop-ntp-30 -m limit --limit 1/second -j LOG +-A logdrop-ntp-30 -j DROP +-A logdrop-ntp-300 -m limit --limit 1/second -j LOG +-A logdrop-ntp-300 -j DROP +-A logdrop-ntp-301 -m limit --limit 1/second -j LOG +-A logdrop-ntp-301 -j DROP +-A logdrop-ntp-302 -m limit --limit 1/second -j LOG +-A logdrop-ntp-302 -j DROP +-A logdrop-ntp-303 -m limit --limit 1/second -j LOG +-A logdrop-ntp-303 -j DROP +-A logdrop-ntp-304 -m limit --limit 1/second -j LOG +-A logdrop-ntp-304 -j DROP +-A logdrop-ntp-305 -m limit --limit 1/second -j LOG +-A logdrop-ntp-305 -j DROP +-A logdrop-ntp-306 -m limit --limit 1/second -j LOG +-A logdrop-ntp-306 -j DROP +-A logdrop-ntp-307 -m limit --limit 1/second -j LOG +-A logdrop-ntp-307 -j DROP +-A logdrop-ntp-308 -m limit --limit 1/second -j LOG +-A logdrop-ntp-308 -j DROP +-A logdrop-ntp-309 -m limit --limit 1/second -j LOG +-A logdrop-ntp-309 -j DROP +-A logdrop-ntp-31 -m limit --limit 1/second -j LOG +-A logdrop-ntp-31 -j DROP +-A logdrop-ntp-310 -m limit --limit 1/second -j LOG +-A logdrop-ntp-310 -j DROP +-A logdrop-ntp-311 -m limit --limit 1/second -j LOG +-A logdrop-ntp-311 -j DROP +-A logdrop-ntp-312 -m limit --limit 1/second -j LOG +-A logdrop-ntp-312 -j DROP +-A logdrop-ntp-313 -m limit --limit 1/second -j LOG +-A logdrop-ntp-313 -j DROP +-A logdrop-ntp-314 -m limit --limit 1/second -j LOG +-A logdrop-ntp-314 -j DROP +-A logdrop-ntp-315 -m limit --limit 1/second -j LOG +-A logdrop-ntp-315 -j DROP +-A logdrop-ntp-316 -m limit --limit 1/second -j LOG +-A logdrop-ntp-316 -j DROP +-A logdrop-ntp-317 -m limit --limit 1/second -j LOG +-A logdrop-ntp-317 -j DROP +-A logdrop-ntp-318 -m limit --limit 1/second -j LOG +-A logdrop-ntp-318 -j DROP +-A logdrop-ntp-319 -m limit --limit 1/second -j LOG +-A logdrop-ntp-319 -j DROP +-A logdrop-ntp-32 -m limit --limit 1/second -j LOG +-A logdrop-ntp-32 -j DROP +-A logdrop-ntp-320 -m limit --limit 1/second -j LOG +-A logdrop-ntp-320 -j DROP +-A logdrop-ntp-321 -m limit --limit 1/second -j LOG +-A logdrop-ntp-321 -j DROP +-A logdrop-ntp-322 -m limit --limit 1/second -j LOG +-A logdrop-ntp-322 -j DROP +-A logdrop-ntp-323 -m limit --limit 1/second -j LOG +-A logdrop-ntp-323 -j DROP +-A logdrop-ntp-324 -m limit --limit 1/second -j LOG +-A logdrop-ntp-324 -j DROP +-A logdrop-ntp-325 -m limit --limit 1/second -j LOG +-A logdrop-ntp-325 -j DROP +-A logdrop-ntp-326 -m limit --limit 1/second -j LOG +-A logdrop-ntp-326 -j DROP +-A logdrop-ntp-327 -m limit --limit 1/second -j LOG +-A logdrop-ntp-327 -j DROP +-A logdrop-ntp-328 -m limit --limit 1/second -j LOG +-A logdrop-ntp-328 -j DROP +-A logdrop-ntp-329 -m limit --limit 1/second -j LOG +-A logdrop-ntp-329 -j DROP +-A logdrop-ntp-33 -m limit --limit 1/second -j LOG +-A logdrop-ntp-33 -j DROP +-A logdrop-ntp-330 -m limit --limit 1/second -j LOG +-A logdrop-ntp-330 -j DROP +-A logdrop-ntp-331 -m limit --limit 1/second -j LOG +-A logdrop-ntp-331 -j DROP +-A logdrop-ntp-332 -m limit --limit 1/second -j LOG +-A logdrop-ntp-332 -j DROP +-A logdrop-ntp-333 -m limit --limit 1/second -j LOG +-A logdrop-ntp-333 -j DROP +-A logdrop-ntp-334 -m limit --limit 1/second -j LOG +-A logdrop-ntp-334 -j DROP +-A logdrop-ntp-335 -m limit --limit 1/second -j LOG +-A logdrop-ntp-335 -j DROP +-A logdrop-ntp-336 -m limit --limit 1/second -j LOG +-A logdrop-ntp-336 -j DROP +-A logdrop-ntp-337 -m limit --limit 1/second -j LOG +-A logdrop-ntp-337 -j DROP +-A logdrop-ntp-338 -m limit --limit 1/second -j LOG +-A logdrop-ntp-338 -j DROP +-A logdrop-ntp-339 -m limit --limit 1/second -j LOG +-A logdrop-ntp-339 -j DROP +-A logdrop-ntp-34 -m limit --limit 1/second -j LOG +-A logdrop-ntp-34 -j DROP +-A logdrop-ntp-340 -m limit --limit 1/second -j LOG +-A logdrop-ntp-340 -j DROP +-A logdrop-ntp-341 -m limit --limit 1/second -j LOG +-A logdrop-ntp-341 -j DROP +-A logdrop-ntp-342 -m limit --limit 1/second -j LOG +-A logdrop-ntp-342 -j DROP +-A logdrop-ntp-343 -m limit --limit 1/second -j LOG +-A logdrop-ntp-343 -j DROP +-A logdrop-ntp-344 -m limit --limit 1/second -j LOG +-A logdrop-ntp-344 -j DROP +-A logdrop-ntp-345 -m limit --limit 1/second -j LOG +-A logdrop-ntp-345 -j DROP +-A logdrop-ntp-346 -m limit --limit 1/second -j LOG +-A logdrop-ntp-346 -j DROP +-A logdrop-ntp-347 -m limit --limit 1/second -j LOG +-A logdrop-ntp-347 -j DROP +-A logdrop-ntp-348 -m limit --limit 1/second -j LOG +-A logdrop-ntp-348 -j DROP +-A logdrop-ntp-349 -m limit --limit 1/second -j LOG +-A logdrop-ntp-349 -j DROP +-A logdrop-ntp-35 -m limit --limit 1/second -j LOG +-A logdrop-ntp-35 -j DROP +-A logdrop-ntp-350 -m limit --limit 1/second -j LOG +-A logdrop-ntp-350 -j DROP +-A logdrop-ntp-351 -m limit --limit 1/second -j LOG +-A logdrop-ntp-351 -j DROP +-A logdrop-ntp-352 -m limit --limit 1/second -j LOG +-A logdrop-ntp-352 -j DROP +-A logdrop-ntp-353 -m limit --limit 1/second -j LOG +-A logdrop-ntp-353 -j DROP +-A logdrop-ntp-354 -m limit --limit 1/second -j LOG +-A logdrop-ntp-354 -j DROP +-A logdrop-ntp-355 -m limit --limit 1/second -j LOG +-A logdrop-ntp-355 -j DROP +-A logdrop-ntp-356 -m limit --limit 1/second -j LOG +-A logdrop-ntp-356 -j DROP +-A logdrop-ntp-357 -m limit --limit 1/second -j LOG +-A logdrop-ntp-357 -j DROP +-A logdrop-ntp-358 -m limit --limit 1/second -j LOG +-A logdrop-ntp-358 -j DROP +-A logdrop-ntp-359 -m limit --limit 1/second -j LOG +-A logdrop-ntp-359 -j DROP +-A logdrop-ntp-36 -m limit --limit 1/second -j LOG +-A logdrop-ntp-36 -j DROP +-A logdrop-ntp-360 -m limit --limit 1/second -j LOG +-A logdrop-ntp-360 -j DROP +-A logdrop-ntp-361 -m limit --limit 1/second -j LOG +-A logdrop-ntp-361 -j DROP +-A logdrop-ntp-362 -m limit --limit 1/second -j LOG +-A logdrop-ntp-362 -j DROP +-A logdrop-ntp-363 -m limit --limit 1/second -j LOG +-A logdrop-ntp-363 -j DROP +-A logdrop-ntp-364 -m limit --limit 1/second -j LOG +-A logdrop-ntp-364 -j DROP +-A logdrop-ntp-365 -m limit --limit 1/second -j LOG +-A logdrop-ntp-365 -j DROP +-A logdrop-ntp-366 -m limit --limit 1/second -j LOG +-A logdrop-ntp-366 -j DROP +-A logdrop-ntp-367 -m limit --limit 1/second -j LOG +-A logdrop-ntp-367 -j DROP +-A logdrop-ntp-368 -m limit --limit 1/second -j LOG +-A logdrop-ntp-368 -j DROP +-A logdrop-ntp-369 -m limit --limit 1/second -j LOG +-A logdrop-ntp-369 -j DROP +-A logdrop-ntp-37 -m limit --limit 1/second -j LOG +-A logdrop-ntp-37 -j DROP +-A logdrop-ntp-370 -j TEE --gateway fc00::2 +-A logdrop-ntp-370 -j DROP +-A logdrop-ntp-371 -j TEE --gateway fc00::2 +-A logdrop-ntp-371 -j DROP +-A logdrop-ntp-372 -j TEE --gateway fc00::2 +-A logdrop-ntp-372 -j DROP +-A logdrop-ntp-373 -j TEE --gateway fc00::2 +-A logdrop-ntp-373 -j DROP +-A logdrop-ntp-374 -j TEE --gateway fc00::2 +-A logdrop-ntp-374 -j DROP +-A logdrop-ntp-375 -j TEE --gateway fc00::2 +-A logdrop-ntp-375 -j DROP +-A logdrop-ntp-376 -j TEE --gateway fc00::2 +-A logdrop-ntp-376 -j DROP +-A logdrop-ntp-377 -j TEE --gateway fc00::2 +-A logdrop-ntp-377 -j DROP +-A logdrop-ntp-378 -j TEE --gateway fc00::2 +-A logdrop-ntp-378 -j DROP +-A logdrop-ntp-379 -j TEE --gateway fc00::2 +-A logdrop-ntp-379 -j DROP +-A logdrop-ntp-38 -m limit --limit 1/second -j LOG +-A logdrop-ntp-38 -j DROP +-A logdrop-ntp-380 -j TEE --gateway fc00::2 +-A logdrop-ntp-380 -j DROP +-A logdrop-ntp-381 -j TEE --gateway fc00::2 +-A logdrop-ntp-381 -j DROP +-A logdrop-ntp-382 -j TEE --gateway fc00::2 +-A logdrop-ntp-382 -j DROP +-A logdrop-ntp-383 -j TEE --gateway fc00::2 +-A logdrop-ntp-383 -j DROP +-A logdrop-ntp-384 -j TEE --gateway fc00::2 +-A logdrop-ntp-384 -j DROP +-A logdrop-ntp-385 -j TEE --gateway fc00::2 +-A logdrop-ntp-385 -j DROP +-A logdrop-ntp-386 -j TEE --gateway fc00::2 +-A logdrop-ntp-386 -j DROP +-A logdrop-ntp-387 -j TEE --gateway fc00::2 +-A logdrop-ntp-387 -j DROP +-A logdrop-ntp-388 -j TEE --gateway fc00::2 +-A logdrop-ntp-388 -j DROP +-A logdrop-ntp-389 -j TEE --gateway fc00::2 +-A logdrop-ntp-389 -j DROP +-A logdrop-ntp-39 -m limit --limit 1/second -j LOG +-A logdrop-ntp-39 -j DROP +-A logdrop-ntp-390 -j TEE --gateway fc00::2 +-A logdrop-ntp-390 -j DROP +-A logdrop-ntp-391 -j TEE --gateway fc00::2 +-A logdrop-ntp-391 -j DROP +-A logdrop-ntp-392 -j TEE --gateway fc00::2 +-A logdrop-ntp-392 -j DROP +-A logdrop-ntp-393 -j TEE --gateway fc00::2 +-A logdrop-ntp-393 -j DROP +-A logdrop-ntp-394 -j TEE --gateway fc00::2 +-A logdrop-ntp-394 -j DROP +-A logdrop-ntp-395 -j TEE --gateway fc00::2 +-A logdrop-ntp-395 -j DROP +-A logdrop-ntp-396 -j TEE --gateway fc00::2 +-A logdrop-ntp-396 -j DROP +-A logdrop-ntp-397 -j TEE --gateway fc00::2 +-A logdrop-ntp-397 -j DROP +-A logdrop-ntp-398 -j TEE --gateway fc00::2 +-A logdrop-ntp-398 -j DROP +-A logdrop-ntp-399 -j TEE --gateway fc00::2 +-A logdrop-ntp-399 -j DROP +-A logdrop-ntp-4 -m limit --limit 1/second -j LOG +-A logdrop-ntp-4 -j DROP +-A logdrop-ntp-40 -m limit --limit 1/second -j LOG +-A logdrop-ntp-40 -j DROP +-A logdrop-ntp-400 -j TEE --gateway fc00::2 +-A logdrop-ntp-400 -j DROP +-A logdrop-ntp-401 -j TEE --gateway fc00::2 +-A logdrop-ntp-401 -j DROP +-A logdrop-ntp-402 -j TEE --gateway fc00::2 +-A logdrop-ntp-402 -j DROP +-A logdrop-ntp-403 -j TEE --gateway fc00::2 +-A logdrop-ntp-403 -j DROP +-A logdrop-ntp-404 -j TEE --gateway fc00::2 +-A logdrop-ntp-404 -j DROP +-A logdrop-ntp-405 -j TEE --gateway fc00::2 +-A logdrop-ntp-405 -j DROP +-A logdrop-ntp-406 -j TEE --gateway fc00::2 +-A logdrop-ntp-406 -j DROP +-A logdrop-ntp-407 -j TEE --gateway fc00::2 +-A logdrop-ntp-407 -j DROP +-A logdrop-ntp-408 -j TEE --gateway fc00::2 +-A logdrop-ntp-408 -j DROP +-A logdrop-ntp-409 -j TEE --gateway fc00::2 +-A logdrop-ntp-409 -j DROP +-A logdrop-ntp-41 -m limit --limit 1/second -j LOG +-A logdrop-ntp-41 -j DROP +-A logdrop-ntp-410 -j TEE --gateway fc00::2 +-A logdrop-ntp-410 -j DROP +-A logdrop-ntp-411 -j TEE --gateway fc00::2 +-A logdrop-ntp-411 -j DROP +-A logdrop-ntp-412 -j TEE --gateway fc00::2 +-A logdrop-ntp-412 -j DROP +-A logdrop-ntp-413 -j TEE --gateway fc00::2 +-A logdrop-ntp-413 -j DROP +-A logdrop-ntp-414 -j TEE --gateway fc00::2 +-A logdrop-ntp-414 -j DROP +-A logdrop-ntp-415 -j TEE --gateway fc00::2 +-A logdrop-ntp-415 -j DROP +-A logdrop-ntp-416 -j TEE --gateway fc00::2 +-A logdrop-ntp-416 -j DROP +-A logdrop-ntp-417 -j TEE --gateway fc00::2 +-A logdrop-ntp-417 -j DROP +-A logdrop-ntp-418 -j TEE --gateway fc00::2 +-A logdrop-ntp-418 -j DROP +-A logdrop-ntp-419 -j TEE --gateway fc00::2 +-A logdrop-ntp-419 -j DROP +-A logdrop-ntp-42 -m limit --limit 1/second -j LOG +-A logdrop-ntp-42 -j DROP +-A logdrop-ntp-420 -j TEE --gateway fc00::2 +-A logdrop-ntp-420 -j DROP +-A logdrop-ntp-421 -j TEE --gateway fc00::2 +-A logdrop-ntp-421 -j DROP +-A logdrop-ntp-422 -j TEE --gateway fc00::2 +-A logdrop-ntp-422 -j DROP +-A logdrop-ntp-423 -j TEE --gateway fc00::2 +-A logdrop-ntp-423 -j DROP +-A logdrop-ntp-424 -j TEE --gateway fc00::2 +-A logdrop-ntp-424 -j DROP +-A logdrop-ntp-425 -j TEE --gateway fc00::2 +-A logdrop-ntp-425 -j DROP +-A logdrop-ntp-426 -j TEE --gateway fc00::2 +-A logdrop-ntp-426 -j DROP +-A logdrop-ntp-427 -j TEE --gateway fc00::2 +-A logdrop-ntp-427 -j DROP +-A logdrop-ntp-428 -j TEE --gateway fc00::2 +-A logdrop-ntp-428 -j DROP +-A logdrop-ntp-429 -j TEE --gateway fc00::2 +-A logdrop-ntp-429 -j DROP +-A logdrop-ntp-43 -m limit --limit 1/second -j LOG +-A logdrop-ntp-43 -j DROP +-A logdrop-ntp-430 -j TEE --gateway fc00::2 +-A logdrop-ntp-430 -j DROP +-A logdrop-ntp-431 -j TEE --gateway fc00::2 +-A logdrop-ntp-431 -j DROP +-A logdrop-ntp-432 -j TEE --gateway fc00::2 +-A logdrop-ntp-432 -j DROP +-A logdrop-ntp-433 -j TEE --gateway fc00::2 +-A logdrop-ntp-433 -j DROP +-A logdrop-ntp-434 -j TEE --gateway fc00::2 +-A logdrop-ntp-434 -j DROP +-A logdrop-ntp-435 -j TEE --gateway fc00::2 +-A logdrop-ntp-435 -j DROP +-A logdrop-ntp-436 -j TEE --gateway fc00::2 +-A logdrop-ntp-436 -j DROP +-A logdrop-ntp-437 -j TEE --gateway fc00::2 +-A logdrop-ntp-437 -j DROP +-A logdrop-ntp-438 -j TEE --gateway fc00::2 +-A logdrop-ntp-438 -j DROP +-A logdrop-ntp-439 -j TEE --gateway fc00::2 +-A logdrop-ntp-439 -j DROP +-A logdrop-ntp-44 -m limit --limit 1/second -j LOG +-A logdrop-ntp-44 -j DROP +-A logdrop-ntp-440 -j TEE --gateway fc00::2 +-A logdrop-ntp-440 -j DROP +-A logdrop-ntp-441 -j TEE --gateway fc00::2 +-A logdrop-ntp-441 -j DROP +-A logdrop-ntp-442 -j TEE --gateway fc00::2 +-A logdrop-ntp-442 -j DROP +-A logdrop-ntp-443 -j TEE --gateway fc00::2 +-A logdrop-ntp-443 -j DROP +-A logdrop-ntp-444 -j TEE --gateway fc00::2 +-A logdrop-ntp-444 -j DROP +-A logdrop-ntp-445 -j TEE --gateway fc00::2 +-A logdrop-ntp-445 -j DROP +-A logdrop-ntp-446 -j TEE --gateway fc00::2 +-A logdrop-ntp-446 -j DROP +-A logdrop-ntp-447 -j TEE --gateway fc00::2 +-A logdrop-ntp-447 -j DROP +-A logdrop-ntp-448 -j TEE --gateway fc00::2 +-A logdrop-ntp-448 -j DROP +-A logdrop-ntp-449 -j TEE --gateway fc00::2 +-A logdrop-ntp-449 -j DROP +-A logdrop-ntp-45 -m limit --limit 1/second -j LOG +-A logdrop-ntp-45 -j DROP +-A logdrop-ntp-450 -j TEE --gateway fc00::2 +-A logdrop-ntp-450 -j DROP +-A logdrop-ntp-451 -j TEE --gateway fc00::2 +-A logdrop-ntp-451 -j DROP +-A logdrop-ntp-452 -j TEE --gateway fc00::2 +-A logdrop-ntp-452 -j DROP +-A logdrop-ntp-453 -j TEE --gateway fc00::2 +-A logdrop-ntp-453 -j DROP +-A logdrop-ntp-454 -j TEE --gateway fc00::2 +-A logdrop-ntp-454 -j DROP +-A logdrop-ntp-455 -j TEE --gateway fc00::2 +-A logdrop-ntp-455 -j DROP +-A logdrop-ntp-456 -j TEE --gateway fc00::2 +-A logdrop-ntp-456 -j DROP +-A logdrop-ntp-457 -j TEE --gateway fc00::2 +-A logdrop-ntp-457 -j DROP +-A logdrop-ntp-458 -j TEE --gateway fc00::2 +-A logdrop-ntp-458 -j DROP +-A logdrop-ntp-459 -j TEE --gateway fc00::2 +-A logdrop-ntp-459 -j DROP +-A logdrop-ntp-46 -m limit --limit 1/second -j LOG +-A logdrop-ntp-46 -j DROP +-A logdrop-ntp-460 -j DROP +-A logdrop-ntp-461 -j DROP +-A logdrop-ntp-462 -j DROP +-A logdrop-ntp-463 -j DROP +-A logdrop-ntp-464 -j DROP +-A logdrop-ntp-465 -j DROP +-A logdrop-ntp-466 -j DROP +-A logdrop-ntp-467 -j DROP +-A logdrop-ntp-468 -j DROP +-A logdrop-ntp-469 -j DROP +-A logdrop-ntp-47 -m limit --limit 1/second -j LOG +-A logdrop-ntp-47 -j DROP +-A logdrop-ntp-470 -j DROP +-A logdrop-ntp-471 -j DROP +-A logdrop-ntp-472 -j DROP +-A logdrop-ntp-473 -j DROP +-A logdrop-ntp-474 -j DROP +-A logdrop-ntp-475 -j DROP +-A logdrop-ntp-476 -j DROP +-A logdrop-ntp-477 -j DROP +-A logdrop-ntp-478 -j DROP +-A logdrop-ntp-479 -j DROP +-A logdrop-ntp-48 -m limit --limit 1/second -j LOG +-A logdrop-ntp-48 -j DROP +-A logdrop-ntp-480 -j DROP +-A logdrop-ntp-481 -j DROP +-A logdrop-ntp-482 -j DROP +-A logdrop-ntp-483 -j DROP +-A logdrop-ntp-484 -j DROP +-A logdrop-ntp-485 -j DROP +-A logdrop-ntp-486 -j DROP +-A logdrop-ntp-487 -j DROP +-A logdrop-ntp-488 -j DROP +-A logdrop-ntp-489 -j DROP +-A logdrop-ntp-49 -m limit --limit 1/second -j LOG +-A logdrop-ntp-49 -j DROP +-A logdrop-ntp-490 -j DROP +-A logdrop-ntp-491 -j DROP +-A logdrop-ntp-492 -j DROP +-A logdrop-ntp-493 -j DROP +-A logdrop-ntp-494 -j DROP +-A logdrop-ntp-495 -j DROP +-A logdrop-ntp-496 -j DROP +-A logdrop-ntp-497 -j DROP +-A logdrop-ntp-498 -j DROP +-A logdrop-ntp-499 -j DROP +-A logdrop-ntp-5 -m limit --limit 1/second -j LOG +-A logdrop-ntp-5 -j DROP +-A logdrop-ntp-50 -m limit --limit 1/second -j LOG +-A logdrop-ntp-50 -j DROP +-A logdrop-ntp-500 -j DROP +-A logdrop-ntp-501 -j DROP +-A logdrop-ntp-502 -j DROP +-A logdrop-ntp-503 -j DROP +-A logdrop-ntp-504 -j DROP +-A logdrop-ntp-505 -j DROP +-A logdrop-ntp-506 -j DROP +-A logdrop-ntp-507 -j DROP +-A logdrop-ntp-508 -j DROP +-A logdrop-ntp-509 -j DROP +-A logdrop-ntp-51 -m limit --limit 1/second -j LOG +-A logdrop-ntp-51 -j DROP +-A logdrop-ntp-510 -j DROP +-A logdrop-ntp-511 -j DROP +-A logdrop-ntp-512 -j DROP +-A logdrop-ntp-513 -j DROP +-A logdrop-ntp-514 -j DROP +-A logdrop-ntp-515 -j DROP +-A logdrop-ntp-516 -j DROP +-A logdrop-ntp-517 -j DROP +-A logdrop-ntp-518 -j DROP +-A logdrop-ntp-519 -j DROP +-A logdrop-ntp-52 -m limit --limit 1/second -j LOG +-A logdrop-ntp-52 -j DROP +-A logdrop-ntp-520 -j DROP +-A logdrop-ntp-521 -j DROP +-A logdrop-ntp-522 -j DROP +-A logdrop-ntp-523 -j DROP +-A logdrop-ntp-524 -j DROP +-A logdrop-ntp-525 -j DROP +-A logdrop-ntp-526 -j DROP +-A logdrop-ntp-527 -j DROP +-A logdrop-ntp-528 -j DROP +-A logdrop-ntp-529 -j DROP +-A logdrop-ntp-53 -m limit --limit 1/second -j LOG +-A logdrop-ntp-53 -j DROP +-A logdrop-ntp-530 -j DROP +-A logdrop-ntp-531 -j DROP +-A logdrop-ntp-532 -j DROP +-A logdrop-ntp-533 -j DROP +-A logdrop-ntp-534 -j DROP +-A logdrop-ntp-535 -j DROP +-A logdrop-ntp-536 -j DROP +-A logdrop-ntp-537 -j DROP +-A logdrop-ntp-538 -j DROP +-A logdrop-ntp-539 -j DROP +-A logdrop-ntp-54 -m limit --limit 1/second -j LOG +-A logdrop-ntp-54 -j DROP +-A logdrop-ntp-540 -j DROP +-A logdrop-ntp-541 -j DROP +-A logdrop-ntp-542 -j DROP +-A logdrop-ntp-543 -j DROP +-A logdrop-ntp-544 -j DROP +-A logdrop-ntp-545 -j DROP +-A logdrop-ntp-546 -j DROP +-A logdrop-ntp-547 -j DROP +-A logdrop-ntp-548 -j DROP +-A logdrop-ntp-549 -j DROP +-A logdrop-ntp-55 -m limit --limit 1/second -j LOG +-A logdrop-ntp-55 -j DROP +-A logdrop-ntp-56 -m limit --limit 1/second -j LOG +-A logdrop-ntp-56 -j DROP +-A logdrop-ntp-57 -m limit --limit 1/second -j LOG +-A logdrop-ntp-57 -j DROP +-A logdrop-ntp-58 -m limit --limit 1/second -j LOG +-A logdrop-ntp-58 -j DROP +-A logdrop-ntp-59 -m limit --limit 1/second -j LOG +-A logdrop-ntp-59 -j DROP +-A logdrop-ntp-6 -m limit --limit 1/second -j LOG +-A logdrop-ntp-6 -j DROP +-A logdrop-ntp-60 -m limit --limit 1/second -j LOG +-A logdrop-ntp-60 -j DROP +-A logdrop-ntp-61 -m limit --limit 1/second -j LOG +-A logdrop-ntp-61 -j DROP +-A logdrop-ntp-62 -m limit --limit 1/second -j LOG +-A logdrop-ntp-62 -j DROP +-A logdrop-ntp-63 -m limit --limit 1/second -j LOG +-A logdrop-ntp-63 -j DROP +-A logdrop-ntp-64 -m limit --limit 1/second -j LOG +-A logdrop-ntp-64 -j DROP +-A logdrop-ntp-65 -m limit --limit 1/second -j LOG +-A logdrop-ntp-65 -j DROP +-A logdrop-ntp-66 -m limit --limit 1/second -j LOG +-A logdrop-ntp-66 -j DROP +-A logdrop-ntp-67 -m limit --limit 1/second -j LOG +-A logdrop-ntp-67 -j DROP +-A logdrop-ntp-68 -m limit --limit 1/second -j LOG +-A logdrop-ntp-68 -j DROP +-A logdrop-ntp-69 -m limit --limit 1/second -j LOG +-A logdrop-ntp-69 -j DROP +-A logdrop-ntp-7 -m limit --limit 1/second -j LOG +-A logdrop-ntp-7 -j DROP +-A logdrop-ntp-70 -m limit --limit 1/second -j LOG +-A logdrop-ntp-70 -j DROP +-A logdrop-ntp-71 -m limit --limit 1/second -j LOG +-A logdrop-ntp-71 -j DROP +-A logdrop-ntp-72 -m limit --limit 1/second -j LOG +-A logdrop-ntp-72 -j DROP +-A logdrop-ntp-73 -m limit --limit 1/second -j LOG +-A logdrop-ntp-73 -j DROP +-A logdrop-ntp-74 -m limit --limit 1/second -j LOG +-A logdrop-ntp-74 -j DROP +-A logdrop-ntp-75 -m limit --limit 1/second -j LOG +-A logdrop-ntp-75 -j DROP +-A logdrop-ntp-76 -m limit --limit 1/second -j LOG +-A logdrop-ntp-76 -j DROP +-A logdrop-ntp-77 -m limit --limit 1/second -j LOG +-A logdrop-ntp-77 -j DROP +-A logdrop-ntp-78 -m limit --limit 1/second -j LOG +-A logdrop-ntp-78 -j DROP +-A logdrop-ntp-79 -m limit --limit 1/second -j LOG +-A logdrop-ntp-79 -j DROP +-A logdrop-ntp-8 -m limit --limit 1/second -j LOG +-A logdrop-ntp-8 -j DROP +-A logdrop-ntp-80 -m limit --limit 1/second -j LOG +-A logdrop-ntp-80 -j DROP +-A logdrop-ntp-81 -m limit --limit 1/second -j LOG +-A logdrop-ntp-81 -j DROP +-A logdrop-ntp-82 -m limit --limit 1/second -j LOG +-A logdrop-ntp-82 -j DROP +-A logdrop-ntp-83 -m limit --limit 1/second -j LOG +-A logdrop-ntp-83 -j DROP +-A logdrop-ntp-84 -m limit --limit 1/second -j LOG +-A logdrop-ntp-84 -j DROP +-A logdrop-ntp-85 -m limit --limit 1/second -j LOG +-A logdrop-ntp-85 -j DROP +-A logdrop-ntp-86 -m limit --limit 1/second -j LOG +-A logdrop-ntp-86 -j DROP +-A logdrop-ntp-87 -m limit --limit 1/second -j LOG +-A logdrop-ntp-87 -j DROP +-A logdrop-ntp-88 -m limit --limit 1/second -j LOG +-A logdrop-ntp-88 -j DROP +-A logdrop-ntp-89 -m limit --limit 1/second -j LOG +-A logdrop-ntp-89 -j DROP +-A logdrop-ntp-9 -m limit --limit 1/second -j LOG +-A logdrop-ntp-9 -j DROP +-A logdrop-ntp-90 -m limit --limit 1/second -j LOG +-A logdrop-ntp-90 -j DROP +-A logdrop-ntp-91 -m limit --limit 1/second -j LOG +-A logdrop-ntp-91 -j DROP +-A logdrop-ntp-92 -m limit --limit 1/second -j LOG +-A logdrop-ntp-92 -j DROP +-A logdrop-ntp-93 -m limit --limit 1/second -j LOG +-A logdrop-ntp-93 -j DROP +-A logdrop-ntp-94 -m limit --limit 1/second -j LOG +-A logdrop-ntp-94 -j DROP +-A logdrop-ntp-95 -m limit --limit 1/second -j LOG +-A logdrop-ntp-95 -j DROP +-A logdrop-ntp-96 -m limit --limit 1/second -j LOG +-A logdrop-ntp-96 -j DROP +-A logdrop-ntp-97 -m limit --limit 1/second -j LOG +-A logdrop-ntp-97 -j DROP +-A logdrop-ntp-98 -m limit --limit 1/second -j LOG +-A logdrop-ntp-98 -j DROP +-A logdrop-ntp-99 -m limit --limit 1/second -j LOG +-A logdrop-ntp-99 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG -A logpass-1 -j LOG -A logpass-1 -j TEE --gateway fc00::1 @@ -118778,1493 +118778,1493 @@ COMMIT *raw :OUTPUT ACCEPT [0:0] :PREROUTING ACCEPT [0:0] --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -i eth0 -j CT --notrack -A PREROUTING -i eth1 -s fc00::/7 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack diff --git a/test/output/filter-limit/rules-save b/test/output/filter-limit/rules-save index 0aea3eb..03f9c88 100644 --- a/test/output/filter-limit/rules-save +++ b/test/output/filter-limit/rules-save @@ -2068,1011 +2068,115 @@ :limit-2925 - [0:0] :limit-2926 - [0:0] :limit-2927 - [0:0] -:limit-2928 - [0:0] -:limit-2929 - [0:0] :limit-293 - [0:0] -:limit-2930 - [0:0] -:limit-2931 - [0:0] -:limit-2932 - [0:0] -:limit-2933 - [0:0] -:limit-2934 - [0:0] -:limit-2935 - [0:0] -:limit-2936 - [0:0] -:limit-2937 - [0:0] -:limit-2938 - [0:0] -:limit-2939 - [0:0] :limit-294 - [0:0] -:limit-2940 - [0:0] -:limit-2941 - [0:0] -:limit-2942 - [0:0] -:limit-2943 - [0:0] -:limit-2944 - [0:0] -:limit-2945 - [0:0] -:limit-2946 - [0:0] -:limit-2947 - [0:0] -:limit-2948 - [0:0] -:limit-2949 - [0:0] :limit-295 - [0:0] -:limit-2950 - [0:0] -:limit-2951 - [0:0] -:limit-2952 - [0:0] -:limit-2953 - [0:0] -:limit-2954 - [0:0] -:limit-2955 - [0:0] -:limit-2956 - [0:0] -:limit-2957 - [0:0] -:limit-2958 - [0:0] :limit-296 - [0:0] -:limit-2960 - [0:0] -:limit-2961 - [0:0] -:limit-2962 - [0:0] -:limit-2963 - [0:0] -:limit-2964 - [0:0] -:limit-2966 - [0:0] -:limit-2967 - [0:0] -:limit-2968 - [0:0] -:limit-2969 - [0:0] :limit-297 - [0:0] -:limit-2970 - [0:0] -:limit-2971 - [0:0] -:limit-2972 - [0:0] -:limit-2973 - [0:0] -:limit-2974 - [0:0] -:limit-2975 - [0:0] -:limit-2976 - [0:0] -:limit-2977 - [0:0] -:limit-2978 - [0:0] :limit-298 - [0:0] -:limit-2980 - [0:0] -:limit-2981 - [0:0] -:limit-2982 - [0:0] -:limit-2983 - [0:0] -:limit-2984 - [0:0] -:limit-2986 - [0:0] -:limit-2987 - [0:0] -:limit-2988 - [0:0] -:limit-2989 - [0:0] :limit-299 - [0:0] -:limit-2990 - [0:0] -:limit-2991 - [0:0] -:limit-2992 - [0:0] -:limit-2993 - [0:0] -:limit-2994 - [0:0] -:limit-2995 - [0:0] -:limit-2996 - [0:0] -:limit-2997 - [0:0] -:limit-2998 - [0:0] :limit-3 - [0:0] :limit-30 - [0:0] :limit-300 - [0:0] -:limit-3000 - [0:0] -:limit-3001 - [0:0] -:limit-3002 - [0:0] -:limit-3003 - [0:0] -:limit-3004 - [0:0] -:limit-3006 - [0:0] -:limit-3007 - [0:0] -:limit-3008 - [0:0] -:limit-3009 - [0:0] :limit-301 - [0:0] -:limit-3010 - [0:0] -:limit-3011 - [0:0] -:limit-3012 - [0:0] -:limit-3013 - [0:0] -:limit-3014 - [0:0] -:limit-3015 - [0:0] -:limit-3016 - [0:0] -:limit-3017 - [0:0] -:limit-3018 - [0:0] :limit-302 - [0:0] -:limit-3020 - [0:0] -:limit-3021 - [0:0] -:limit-3022 - [0:0] -:limit-3023 - [0:0] -:limit-3024 - [0:0] -:limit-3026 - [0:0] -:limit-3027 - [0:0] -:limit-3028 - [0:0] -:limit-3029 - [0:0] :limit-303 - [0:0] -:limit-3030 - [0:0] -:limit-3031 - [0:0] -:limit-3032 - [0:0] -:limit-3033 - [0:0] -:limit-3034 - [0:0] -:limit-3035 - [0:0] -:limit-3036 - [0:0] -:limit-3037 - [0:0] -:limit-3038 - [0:0] -:limit-3039 - [0:0] :limit-304 - [0:0] -:limit-3040 - [0:0] -:limit-3041 - [0:0] -:limit-3042 - [0:0] -:limit-3043 - [0:0] -:limit-3044 - [0:0] -:limit-3045 - [0:0] -:limit-3046 - [0:0] -:limit-3047 - [0:0] -:limit-3048 - [0:0] :limit-305 - [0:0] -:limit-3050 - [0:0] -:limit-3051 - [0:0] -:limit-3052 - [0:0] -:limit-3053 - [0:0] -:limit-3054 - [0:0] -:limit-3056 - [0:0] -:limit-3057 - [0:0] -:limit-3058 - [0:0] -:limit-3059 - [0:0] :limit-306 - [0:0] -:limit-3060 - [0:0] -:limit-3061 - [0:0] -:limit-3062 - [0:0] -:limit-3063 - [0:0] -:limit-3064 - [0:0] -:limit-3065 - [0:0] -:limit-3066 - [0:0] -:limit-3067 - [0:0] -:limit-3068 - [0:0] :limit-307 - [0:0] -:limit-3070 - [0:0] -:limit-3071 - [0:0] -:limit-3072 - [0:0] -:limit-3073 - [0:0] -:limit-3074 - [0:0] -:limit-3076 - [0:0] -:limit-3077 - [0:0] -:limit-3078 - [0:0] -:limit-3079 - [0:0] :limit-308 - [0:0] -:limit-3080 - [0:0] -:limit-3081 - [0:0] -:limit-3082 - [0:0] -:limit-3083 - [0:0] -:limit-3084 - [0:0] -:limit-3085 - [0:0] -:limit-3086 - [0:0] -:limit-3087 - [0:0] -:limit-3088 - [0:0] :limit-309 - [0:0] -:limit-3090 - [0:0] -:limit-3091 - [0:0] -:limit-3092 - [0:0] -:limit-3093 - [0:0] -:limit-3094 - [0:0] -:limit-3096 - [0:0] -:limit-3097 - [0:0] -:limit-3098 - [0:0] -:limit-3099 - [0:0] :limit-31 - [0:0] :limit-310 - [0:0] -:limit-3100 - [0:0] -:limit-3101 - [0:0] -:limit-3102 - [0:0] -:limit-3103 - [0:0] -:limit-3104 - [0:0] -:limit-3105 - [0:0] -:limit-3106 - [0:0] -:limit-3107 - [0:0] -:limit-3108 - [0:0] :limit-311 - [0:0] -:limit-3110 - [0:0] -:limit-3111 - [0:0] -:limit-3112 - [0:0] -:limit-3113 - [0:0] -:limit-3114 - [0:0] -:limit-3116 - [0:0] -:limit-3117 - [0:0] -:limit-3118 - [0:0] -:limit-3119 - [0:0] :limit-312 - [0:0] -:limit-3120 - [0:0] -:limit-3121 - [0:0] -:limit-3122 - [0:0] -:limit-3123 - [0:0] -:limit-3124 - [0:0] -:limit-3125 - [0:0] -:limit-3126 - [0:0] -:limit-3127 - [0:0] -:limit-3128 - [0:0] -:limit-3129 - [0:0] :limit-313 - [0:0] -:limit-3130 - [0:0] -:limit-3131 - [0:0] -:limit-3132 - [0:0] -:limit-3133 - [0:0] -:limit-3134 - [0:0] -:limit-3135 - [0:0] -:limit-3136 - [0:0] -:limit-3137 - [0:0] -:limit-3138 - [0:0] :limit-314 - [0:0] -:limit-3140 - [0:0] -:limit-3141 - [0:0] -:limit-3142 - [0:0] -:limit-3143 - [0:0] -:limit-3144 - [0:0] -:limit-3146 - [0:0] -:limit-3147 - [0:0] -:limit-3148 - [0:0] -:limit-3149 - [0:0] :limit-315 - [0:0] -:limit-3150 - [0:0] -:limit-3151 - [0:0] -:limit-3152 - [0:0] -:limit-3153 - [0:0] -:limit-3154 - [0:0] -:limit-3155 - [0:0] -:limit-3156 - [0:0] -:limit-3157 - [0:0] -:limit-3158 - [0:0] :limit-316 - [0:0] -:limit-3160 - [0:0] -:limit-3161 - [0:0] -:limit-3162 - [0:0] -:limit-3163 - [0:0] -:limit-3164 - [0:0] -:limit-3166 - [0:0] -:limit-3167 - [0:0] -:limit-3168 - [0:0] -:limit-3169 - [0:0] :limit-317 - [0:0] -:limit-3170 - [0:0] -:limit-3171 - [0:0] -:limit-3172 - [0:0] -:limit-3173 - [0:0] -:limit-3174 - [0:0] -:limit-3175 - [0:0] -:limit-3176 - [0:0] -:limit-3177 - [0:0] -:limit-3178 - [0:0] :limit-318 - [0:0] -:limit-3180 - [0:0] -:limit-3181 - [0:0] -:limit-3182 - [0:0] -:limit-3183 - [0:0] -:limit-3184 - [0:0] -:limit-3186 - [0:0] -:limit-3187 - [0:0] -:limit-3188 - [0:0] -:limit-3189 - [0:0] :limit-319 - [0:0] -:limit-3190 - [0:0] -:limit-3191 - [0:0] -:limit-3192 - [0:0] -:limit-3193 - [0:0] -:limit-3194 - [0:0] -:limit-3195 - [0:0] -:limit-3196 - [0:0] -:limit-3197 - [0:0] -:limit-3198 - [0:0] :limit-32 - [0:0] :limit-320 - [0:0] -:limit-3200 - [0:0] -:limit-3201 - [0:0] -:limit-3202 - [0:0] -:limit-3203 - [0:0] -:limit-3204 - [0:0] -:limit-3206 - [0:0] -:limit-3207 - [0:0] -:limit-3208 - [0:0] -:limit-3209 - [0:0] :limit-321 - [0:0] -:limit-3210 - [0:0] -:limit-3211 - [0:0] -:limit-3212 - [0:0] -:limit-3213 - [0:0] -:limit-3214 - [0:0] -:limit-3215 - [0:0] -:limit-3216 - [0:0] -:limit-3217 - [0:0] -:limit-3218 - [0:0] -:limit-3219 - [0:0] :limit-322 - [0:0] -:limit-3220 - [0:0] -:limit-3221 - [0:0] -:limit-3222 - [0:0] -:limit-3223 - [0:0] -:limit-3224 - [0:0] -:limit-3225 - [0:0] -:limit-3226 - [0:0] -:limit-3227 - [0:0] -:limit-3228 - [0:0] :limit-323 - [0:0] -:limit-3230 - [0:0] -:limit-3231 - [0:0] -:limit-3232 - [0:0] -:limit-3233 - [0:0] -:limit-3234 - [0:0] -:limit-3236 - [0:0] -:limit-3237 - [0:0] -:limit-3238 - [0:0] -:limit-3239 - [0:0] :limit-324 - [0:0] -:limit-3240 - [0:0] -:limit-3241 - [0:0] -:limit-3242 - [0:0] -:limit-3243 - [0:0] -:limit-3244 - [0:0] -:limit-3245 - [0:0] -:limit-3246 - [0:0] -:limit-3247 - [0:0] -:limit-3248 - [0:0] :limit-325 - [0:0] -:limit-3250 - [0:0] -:limit-3251 - [0:0] -:limit-3252 - [0:0] -:limit-3253 - [0:0] -:limit-3254 - [0:0] -:limit-3256 - [0:0] -:limit-3257 - [0:0] -:limit-3258 - [0:0] -:limit-3259 - [0:0] :limit-326 - [0:0] -:limit-3260 - [0:0] -:limit-3261 - [0:0] -:limit-3262 - [0:0] -:limit-3263 - [0:0] -:limit-3264 - [0:0] -:limit-3265 - [0:0] -:limit-3266 - [0:0] -:limit-3267 - [0:0] -:limit-3268 - [0:0] :limit-327 - [0:0] -:limit-3270 - [0:0] -:limit-3271 - [0:0] -:limit-3272 - [0:0] -:limit-3273 - [0:0] -:limit-3274 - [0:0] -:limit-3276 - [0:0] -:limit-3277 - [0:0] -:limit-3278 - [0:0] -:limit-3279 - [0:0] :limit-328 - [0:0] -:limit-3280 - [0:0] -:limit-3281 - [0:0] -:limit-3282 - [0:0] -:limit-3283 - [0:0] -:limit-3284 - [0:0] -:limit-3285 - [0:0] -:limit-3286 - [0:0] -:limit-3287 - [0:0] -:limit-3288 - [0:0] :limit-329 - [0:0] -:limit-3290 - [0:0] -:limit-3291 - [0:0] -:limit-3292 - [0:0] -:limit-3293 - [0:0] -:limit-3294 - [0:0] -:limit-3296 - [0:0] -:limit-3297 - [0:0] -:limit-3298 - [0:0] -:limit-3299 - [0:0] :limit-33 - [0:0] :limit-330 - [0:0] -:limit-3300 - [0:0] -:limit-3301 - [0:0] -:limit-3302 - [0:0] -:limit-3303 - [0:0] -:limit-3304 - [0:0] -:limit-3305 - [0:0] -:limit-3306 - [0:0] -:limit-3307 - [0:0] -:limit-3308 - [0:0] -:limit-3309 - [0:0] :limit-331 - [0:0] -:limit-3310 - [0:0] -:limit-3311 - [0:0] -:limit-3312 - [0:0] -:limit-3313 - [0:0] -:limit-3314 - [0:0] -:limit-3315 - [0:0] -:limit-3316 - [0:0] -:limit-3317 - [0:0] -:limit-3318 - [0:0] :limit-332 - [0:0] -:limit-3320 - [0:0] -:limit-3321 - [0:0] -:limit-3322 - [0:0] -:limit-3323 - [0:0] -:limit-3324 - [0:0] -:limit-3326 - [0:0] -:limit-3327 - [0:0] -:limit-3328 - [0:0] -:limit-3329 - [0:0] :limit-333 - [0:0] -:limit-3330 - [0:0] -:limit-3331 - [0:0] -:limit-3332 - [0:0] -:limit-3333 - [0:0] -:limit-3334 - [0:0] -:limit-3335 - [0:0] -:limit-3336 - [0:0] -:limit-3337 - [0:0] -:limit-3338 - [0:0] :limit-334 - [0:0] -:limit-3340 - [0:0] -:limit-3341 - [0:0] -:limit-3342 - [0:0] -:limit-3343 - [0:0] -:limit-3344 - [0:0] -:limit-3346 - [0:0] -:limit-3347 - [0:0] -:limit-3348 - [0:0] -:limit-3349 - [0:0] :limit-335 - [0:0] -:limit-3350 - [0:0] -:limit-3351 - [0:0] -:limit-3352 - [0:0] -:limit-3353 - [0:0] -:limit-3354 - [0:0] -:limit-3355 - [0:0] -:limit-3356 - [0:0] -:limit-3357 - [0:0] -:limit-3358 - [0:0] :limit-336 - [0:0] -:limit-3360 - [0:0] -:limit-3361 - [0:0] -:limit-3362 - [0:0] -:limit-3363 - [0:0] -:limit-3364 - [0:0] -:limit-3366 - [0:0] -:limit-3367 - [0:0] -:limit-3368 - [0:0] -:limit-3369 - [0:0] :limit-337 - [0:0] -:limit-3370 - [0:0] -:limit-3371 - [0:0] -:limit-3372 - [0:0] -:limit-3373 - [0:0] -:limit-3374 - [0:0] -:limit-3375 - [0:0] -:limit-3376 - [0:0] -:limit-3377 - [0:0] -:limit-3378 - [0:0] :limit-338 - [0:0] -:limit-3380 - [0:0] -:limit-3381 - [0:0] -:limit-3382 - [0:0] -:limit-3383 - [0:0] -:limit-3384 - [0:0] -:limit-3386 - [0:0] -:limit-3387 - [0:0] -:limit-3388 - [0:0] -:limit-3389 - [0:0] :limit-339 - [0:0] -:limit-3390 - [0:0] -:limit-3391 - [0:0] -:limit-3392 - [0:0] -:limit-3393 - [0:0] -:limit-3394 - [0:0] -:limit-3395 - [0:0] -:limit-3396 - [0:0] -:limit-3397 - [0:0] -:limit-3398 - [0:0] -:limit-3399 - [0:0] :limit-34 - [0:0] :limit-340 - [0:0] -:limit-3400 - [0:0] -:limit-3401 - [0:0] -:limit-3402 - [0:0] -:limit-3403 - [0:0] -:limit-3404 - [0:0] -:limit-3405 - [0:0] -:limit-3406 - [0:0] -:limit-3407 - [0:0] -:limit-3408 - [0:0] :limit-341 - [0:0] -:limit-3410 - [0:0] -:limit-3411 - [0:0] -:limit-3412 - [0:0] -:limit-3413 - [0:0] -:limit-3414 - [0:0] -:limit-3416 - [0:0] -:limit-3417 - [0:0] -:limit-3418 - [0:0] -:limit-3419 - [0:0] :limit-342 - [0:0] -:limit-3420 - [0:0] -:limit-3421 - [0:0] -:limit-3422 - [0:0] -:limit-3423 - [0:0] -:limit-3424 - [0:0] -:limit-3425 - [0:0] -:limit-3426 - [0:0] -:limit-3427 - [0:0] -:limit-3428 - [0:0] :limit-343 - [0:0] -:limit-3430 - [0:0] -:limit-3431 - [0:0] -:limit-3432 - [0:0] -:limit-3433 - [0:0] -:limit-3434 - [0:0] -:limit-3436 - [0:0] -:limit-3437 - [0:0] -:limit-3438 - [0:0] -:limit-3439 - [0:0] :limit-344 - [0:0] -:limit-3440 - [0:0] -:limit-3441 - [0:0] -:limit-3442 - [0:0] -:limit-3443 - [0:0] -:limit-3444 - [0:0] -:limit-3445 - [0:0] -:limit-3446 - [0:0] -:limit-3447 - [0:0] -:limit-3448 - [0:0] :limit-345 - [0:0] -:limit-3450 - [0:0] -:limit-3451 - [0:0] -:limit-3452 - [0:0] -:limit-3453 - [0:0] -:limit-3454 - [0:0] -:limit-3456 - [0:0] -:limit-3457 - [0:0] -:limit-3458 - [0:0] -:limit-3459 - [0:0] :limit-346 - [0:0] -:limit-3460 - [0:0] -:limit-3461 - [0:0] -:limit-3462 - [0:0] -:limit-3463 - [0:0] -:limit-3464 - [0:0] -:limit-3465 - [0:0] -:limit-3466 - [0:0] -:limit-3467 - [0:0] -:limit-3468 - [0:0] :limit-347 - [0:0] -:limit-3470 - [0:0] -:limit-3471 - [0:0] -:limit-3472 - [0:0] -:limit-3473 - [0:0] -:limit-3474 - [0:0] -:limit-3476 - [0:0] -:limit-3477 - [0:0] -:limit-3478 - [0:0] -:limit-3479 - [0:0] :limit-348 - [0:0] -:limit-3480 - [0:0] -:limit-3481 - [0:0] -:limit-3482 - [0:0] -:limit-3483 - [0:0] -:limit-3484 - [0:0] -:limit-3485 - [0:0] -:limit-3486 - [0:0] -:limit-3487 - [0:0] -:limit-3488 - [0:0] -:limit-3489 - [0:0] :limit-349 - [0:0] -:limit-3490 - [0:0] -:limit-3491 - [0:0] -:limit-3492 - [0:0] -:limit-3493 - [0:0] -:limit-3494 - [0:0] -:limit-3495 - [0:0] -:limit-3496 - [0:0] -:limit-3497 - [0:0] -:limit-3498 - [0:0] :limit-35 - [0:0] :limit-350 - [0:0] -:limit-3500 - [0:0] -:limit-3501 - [0:0] -:limit-3502 - [0:0] -:limit-3503 - [0:0] -:limit-3504 - [0:0] -:limit-3506 - [0:0] -:limit-3507 - [0:0] -:limit-3508 - [0:0] -:limit-3509 - [0:0] :limit-351 - [0:0] -:limit-3510 - [0:0] -:limit-3511 - [0:0] -:limit-3512 - [0:0] -:limit-3513 - [0:0] -:limit-3514 - [0:0] -:limit-3515 - [0:0] -:limit-3516 - [0:0] -:limit-3517 - [0:0] -:limit-3518 - [0:0] :limit-352 - [0:0] -:limit-3520 - [0:0] -:limit-3521 - [0:0] -:limit-3522 - [0:0] -:limit-3523 - [0:0] -:limit-3524 - [0:0] -:limit-3526 - [0:0] -:limit-3527 - [0:0] -:limit-3528 - [0:0] -:limit-3529 - [0:0] :limit-353 - [0:0] -:limit-3530 - [0:0] -:limit-3531 - [0:0] -:limit-3532 - [0:0] -:limit-3533 - [0:0] -:limit-3534 - [0:0] -:limit-3535 - [0:0] -:limit-3536 - [0:0] -:limit-3537 - [0:0] -:limit-3538 - [0:0] :limit-354 - [0:0] -:limit-3540 - [0:0] -:limit-3541 - [0:0] -:limit-3542 - [0:0] -:limit-3543 - [0:0] -:limit-3544 - [0:0] -:limit-3546 - [0:0] -:limit-3547 - [0:0] -:limit-3548 - [0:0] -:limit-3549 - [0:0] :limit-355 - [0:0] -:limit-3550 - [0:0] -:limit-3551 - [0:0] -:limit-3552 - [0:0] -:limit-3553 - [0:0] -:limit-3554 - [0:0] -:limit-3555 - [0:0] -:limit-3556 - [0:0] -:limit-3557 - [0:0] -:limit-3558 - [0:0] :limit-356 - [0:0] -:limit-3560 - [0:0] -:limit-3561 - [0:0] -:limit-3562 - [0:0] -:limit-3563 - [0:0] -:limit-3564 - [0:0] -:limit-3566 - [0:0] -:limit-3567 - [0:0] -:limit-3568 - [0:0] -:limit-3569 - [0:0] :limit-357 - [0:0] -:limit-3570 - [0:0] -:limit-3571 - [0:0] -:limit-3572 - [0:0] -:limit-3573 - [0:0] -:limit-3574 - [0:0] -:limit-3575 - [0:0] -:limit-3576 - [0:0] -:limit-3577 - [0:0] -:limit-3578 - [0:0] -:limit-3579 - [0:0] :limit-358 - [0:0] -:limit-3580 - [0:0] -:limit-3581 - [0:0] -:limit-3582 - [0:0] -:limit-3583 - [0:0] -:limit-3584 - [0:0] -:limit-3585 - [0:0] -:limit-3586 - [0:0] -:limit-3587 - [0:0] -:limit-3588 - [0:0] :limit-359 - [0:0] -:limit-3590 - [0:0] -:limit-3591 - [0:0] -:limit-3592 - [0:0] -:limit-3593 - [0:0] -:limit-3594 - [0:0] -:limit-3596 - [0:0] -:limit-3597 - [0:0] -:limit-3598 - [0:0] -:limit-3599 - [0:0] :limit-36 - [0:0] :limit-360 - [0:0] -:limit-3600 - [0:0] -:limit-3601 - [0:0] -:limit-3602 - [0:0] -:limit-3603 - [0:0] -:limit-3604 - [0:0] -:limit-3605 - [0:0] -:limit-3606 - [0:0] -:limit-3607 - [0:0] -:limit-3608 - [0:0] :limit-361 - [0:0] -:limit-3610 - [0:0] -:limit-3611 - [0:0] -:limit-3612 - [0:0] -:limit-3613 - [0:0] -:limit-3614 - [0:0] -:limit-3616 - [0:0] -:limit-3617 - [0:0] -:limit-3618 - [0:0] -:limit-3619 - [0:0] :limit-362 - [0:0] -:limit-3620 - [0:0] -:limit-3621 - [0:0] -:limit-3622 - [0:0] -:limit-3623 - [0:0] -:limit-3624 - [0:0] -:limit-3625 - [0:0] -:limit-3626 - [0:0] -:limit-3627 - [0:0] -:limit-3628 - [0:0] :limit-363 - [0:0] -:limit-3630 - [0:0] -:limit-3631 - [0:0] -:limit-3632 - [0:0] -:limit-3633 - [0:0] -:limit-3634 - [0:0] -:limit-3636 - [0:0] -:limit-3637 - [0:0] -:limit-3638 - [0:0] -:limit-3639 - [0:0] :limit-364 - [0:0] -:limit-3640 - [0:0] -:limit-3641 - [0:0] -:limit-3642 - [0:0] -:limit-3643 - [0:0] -:limit-3644 - [0:0] -:limit-3645 - [0:0] -:limit-3646 - [0:0] -:limit-3647 - [0:0] -:limit-3648 - [0:0] :limit-365 - [0:0] -:limit-3650 - [0:0] -:limit-3651 - [0:0] -:limit-3652 - [0:0] -:limit-3653 - [0:0] -:limit-3654 - [0:0] -:limit-3656 - [0:0] -:limit-3657 - [0:0] -:limit-3658 - [0:0] -:limit-3659 - [0:0] :limit-366 - [0:0] -:limit-3660 - [0:0] -:limit-3661 - [0:0] -:limit-3662 - [0:0] -:limit-3663 - [0:0] -:limit-3664 - [0:0] -:limit-3665 - [0:0] -:limit-3666 - [0:0] -:limit-3667 - [0:0] -:limit-3668 - [0:0] -:limit-3669 - [0:0] :limit-367 - [0:0] -:limit-3670 - [0:0] -:limit-3671 - [0:0] -:limit-3672 - [0:0] -:limit-3673 - [0:0] -:limit-3674 - [0:0] -:limit-3675 - [0:0] -:limit-3676 - [0:0] -:limit-3677 - [0:0] -:limit-3678 - [0:0] :limit-368 - [0:0] -:limit-3680 - [0:0] -:limit-3681 - [0:0] -:limit-3682 - [0:0] -:limit-3683 - [0:0] -:limit-3684 - [0:0] -:limit-3686 - [0:0] -:limit-3687 - [0:0] -:limit-3688 - [0:0] -:limit-3689 - [0:0] :limit-369 - [0:0] -:limit-3690 - [0:0] -:limit-3691 - [0:0] -:limit-3692 - [0:0] -:limit-3693 - [0:0] -:limit-3694 - [0:0] -:limit-3695 - [0:0] -:limit-3696 - [0:0] -:limit-3697 - [0:0] -:limit-3698 - [0:0] :limit-37 - [0:0] :limit-370 - [0:0] -:limit-3700 - [0:0] -:limit-3701 - [0:0] -:limit-3702 - [0:0] -:limit-3703 - [0:0] -:limit-3704 - [0:0] -:limit-3706 - [0:0] -:limit-3707 - [0:0] -:limit-3708 - [0:0] -:limit-3709 - [0:0] :limit-371 - [0:0] -:limit-3710 - [0:0] -:limit-3711 - [0:0] -:limit-3712 - [0:0] -:limit-3713 - [0:0] -:limit-3714 - [0:0] -:limit-3715 - [0:0] -:limit-3716 - [0:0] -:limit-3717 - [0:0] -:limit-3718 - [0:0] :limit-372 - [0:0] -:limit-3720 - [0:0] -:limit-3721 - [0:0] -:limit-3722 - [0:0] -:limit-3723 - [0:0] -:limit-3724 - [0:0] -:limit-3726 - [0:0] -:limit-3727 - [0:0] -:limit-3728 - [0:0] -:limit-3729 - [0:0] :limit-373 - [0:0] -:limit-3730 - [0:0] -:limit-3731 - [0:0] -:limit-3732 - [0:0] -:limit-3733 - [0:0] -:limit-3734 - [0:0] -:limit-3735 - [0:0] -:limit-3736 - [0:0] -:limit-3737 - [0:0] -:limit-3738 - [0:0] :limit-374 - [0:0] -:limit-3740 - [0:0] -:limit-3741 - [0:0] -:limit-3742 - [0:0] -:limit-3743 - [0:0] -:limit-3744 - [0:0] -:limit-3746 - [0:0] -:limit-3747 - [0:0] -:limit-3748 - [0:0] -:limit-3749 - [0:0] :limit-375 - [0:0] -:limit-3750 - [0:0] -:limit-3751 - [0:0] -:limit-3752 - [0:0] -:limit-3753 - [0:0] -:limit-3754 - [0:0] -:limit-3755 - [0:0] -:limit-3756 - [0:0] -:limit-3757 - [0:0] -:limit-3758 - [0:0] -:limit-3759 - [0:0] :limit-376 - [0:0] -:limit-3760 - [0:0] -:limit-3761 - [0:0] -:limit-3762 - [0:0] -:limit-3763 - [0:0] -:limit-3764 - [0:0] -:limit-3765 - [0:0] -:limit-3766 - [0:0] -:limit-3767 - [0:0] -:limit-3768 - [0:0] :limit-377 - [0:0] -:limit-3770 - [0:0] -:limit-3771 - [0:0] -:limit-3772 - [0:0] -:limit-3773 - [0:0] -:limit-3774 - [0:0] -:limit-3776 - [0:0] -:limit-3777 - [0:0] -:limit-3778 - [0:0] -:limit-3779 - [0:0] :limit-378 - [0:0] -:limit-3780 - [0:0] -:limit-3781 - [0:0] -:limit-3782 - [0:0] -:limit-3783 - [0:0] -:limit-3784 - [0:0] -:limit-3785 - [0:0] -:limit-3786 - [0:0] -:limit-3787 - [0:0] -:limit-3788 - [0:0] :limit-379 - [0:0] -:limit-3790 - [0:0] -:limit-3791 - [0:0] -:limit-3792 - [0:0] -:limit-3793 - [0:0] -:limit-3794 - [0:0] -:limit-3796 - [0:0] -:limit-3797 - [0:0] -:limit-3798 - [0:0] -:limit-3799 - [0:0] :limit-38 - [0:0] :limit-380 - [0:0] -:limit-3800 - [0:0] -:limit-3801 - [0:0] -:limit-3802 - [0:0] -:limit-3803 - [0:0] -:limit-3804 - [0:0] -:limit-3805 - [0:0] -:limit-3806 - [0:0] -:limit-3807 - [0:0] -:limit-3808 - [0:0] :limit-381 - [0:0] -:limit-3810 - [0:0] -:limit-3811 - [0:0] -:limit-3812 - [0:0] -:limit-3813 - [0:0] -:limit-3814 - [0:0] -:limit-3816 - [0:0] -:limit-3817 - [0:0] -:limit-3818 - [0:0] -:limit-3819 - [0:0] :limit-382 - [0:0] -:limit-3820 - [0:0] -:limit-3821 - [0:0] -:limit-3822 - [0:0] -:limit-3823 - [0:0] -:limit-3824 - [0:0] -:limit-3825 - [0:0] -:limit-3826 - [0:0] -:limit-3827 - [0:0] -:limit-3828 - [0:0] :limit-383 - [0:0] -:limit-3830 - [0:0] -:limit-3831 - [0:0] -:limit-3832 - [0:0] -:limit-3833 - [0:0] -:limit-3834 - [0:0] -:limit-3836 - [0:0] -:limit-3837 - [0:0] -:limit-3838 - [0:0] -:limit-3839 - [0:0] :limit-384 - [0:0] -:limit-3840 - [0:0] -:limit-3841 - [0:0] -:limit-3842 - [0:0] -:limit-3843 - [0:0] -:limit-3844 - [0:0] -:limit-3845 - [0:0] -:limit-3846 - [0:0] -:limit-3847 - [0:0] -:limit-3848 - [0:0] -:limit-3849 - [0:0] :limit-385 - [0:0] -:limit-3850 - [0:0] -:limit-3851 - [0:0] -:limit-3852 - [0:0] -:limit-3853 - [0:0] -:limit-3854 - [0:0] -:limit-3855 - [0:0] -:limit-3856 - [0:0] -:limit-3857 - [0:0] -:limit-3858 - [0:0] -:limit-3859 - [0:0] :limit-386 - [0:0] -:limit-3860 - [0:0] -:limit-3861 - [0:0] -:limit-3862 - [0:0] -:limit-3863 - [0:0] -:limit-3864 - [0:0] -:limit-3865 - [0:0] -:limit-3866 - [0:0] -:limit-3867 - [0:0] -:limit-3868 - [0:0] -:limit-3869 - [0:0] :limit-387 - [0:0] -:limit-3870 - [0:0] -:limit-3871 - [0:0] -:limit-3872 - [0:0] -:limit-3873 - [0:0] -:limit-3874 - [0:0] -:limit-3875 - [0:0] -:limit-3876 - [0:0] -:limit-3877 - [0:0] -:limit-3878 - [0:0] -:limit-3879 - [0:0] :limit-388 - [0:0] -:limit-3880 - [0:0] -:limit-3881 - [0:0] -:limit-3882 - [0:0] -:limit-3883 - [0:0] -:limit-3884 - [0:0] -:limit-3885 - [0:0] -:limit-3886 - [0:0] -:limit-3887 - [0:0] -:limit-3888 - [0:0] -:limit-3889 - [0:0] :limit-389 - [0:0] -:limit-3890 - [0:0] -:limit-3891 - [0:0] -:limit-3892 - [0:0] -:limit-3893 - [0:0] -:limit-3894 - [0:0] -:limit-3895 - [0:0] -:limit-3896 - [0:0] -:limit-3897 - [0:0] -:limit-3898 - [0:0] -:limit-3899 - [0:0] :limit-39 - [0:0] :limit-390 - [0:0] -:limit-3900 - [0:0] -:limit-3901 - [0:0] -:limit-3902 - [0:0] -:limit-3903 - [0:0] :limit-391 - [0:0] :limit-392 - [0:0] :limit-393 - [0:0] @@ -3748,12 +2852,905 @@ :limit-997 - [0:0] :limit-998 - [0:0] :limit-999 - [0:0] +:limit-ntp-0 - [0:0] +:limit-ntp-1 - [0:0] +:limit-ntp-10 - [0:0] +:limit-ntp-100 - [0:0] +:limit-ntp-101 - [0:0] +:limit-ntp-102 - [0:0] +:limit-ntp-103 - [0:0] +:limit-ntp-104 - [0:0] +:limit-ntp-105 - [0:0] +:limit-ntp-106 - [0:0] +:limit-ntp-107 - [0:0] +:limit-ntp-108 - [0:0] +:limit-ntp-109 - [0:0] +:limit-ntp-11 - [0:0] +:limit-ntp-110 - [0:0] +:limit-ntp-111 - [0:0] +:limit-ntp-112 - [0:0] +:limit-ntp-113 - [0:0] +:limit-ntp-114 - [0:0] +:limit-ntp-115 - [0:0] +:limit-ntp-116 - [0:0] +:limit-ntp-117 - [0:0] +:limit-ntp-118 - [0:0] +:limit-ntp-119 - [0:0] +:limit-ntp-12 - [0:0] +:limit-ntp-120 - [0:0] +:limit-ntp-122 - [0:0] +:limit-ntp-123 - [0:0] +:limit-ntp-124 - [0:0] +:limit-ntp-125 - [0:0] +:limit-ntp-126 - [0:0] +:limit-ntp-128 - [0:0] +:limit-ntp-129 - [0:0] +:limit-ntp-13 - [0:0] +:limit-ntp-130 - [0:0] +:limit-ntp-131 - [0:0] +:limit-ntp-132 - [0:0] +:limit-ntp-133 - [0:0] +:limit-ntp-134 - [0:0] +:limit-ntp-135 - [0:0] +:limit-ntp-136 - [0:0] +:limit-ntp-137 - [0:0] +:limit-ntp-138 - [0:0] +:limit-ntp-139 - [0:0] +:limit-ntp-14 - [0:0] +:limit-ntp-140 - [0:0] +:limit-ntp-142 - [0:0] +:limit-ntp-143 - [0:0] +:limit-ntp-144 - [0:0] +:limit-ntp-145 - [0:0] +:limit-ntp-146 - [0:0] +:limit-ntp-148 - [0:0] +:limit-ntp-149 - [0:0] +:limit-ntp-15 - [0:0] +:limit-ntp-150 - [0:0] +:limit-ntp-151 - [0:0] +:limit-ntp-152 - [0:0] +:limit-ntp-153 - [0:0] +:limit-ntp-154 - [0:0] +:limit-ntp-155 - [0:0] +:limit-ntp-156 - [0:0] +:limit-ntp-157 - [0:0] +:limit-ntp-158 - [0:0] +:limit-ntp-159 - [0:0] +:limit-ntp-16 - [0:0] +:limit-ntp-160 - [0:0] +:limit-ntp-162 - [0:0] +:limit-ntp-163 - [0:0] +:limit-ntp-164 - [0:0] +:limit-ntp-165 - [0:0] +:limit-ntp-166 - [0:0] +:limit-ntp-168 - [0:0] +:limit-ntp-169 - [0:0] +:limit-ntp-17 - [0:0] +:limit-ntp-170 - [0:0] +:limit-ntp-171 - [0:0] +:limit-ntp-172 - [0:0] +:limit-ntp-173 - [0:0] +:limit-ntp-174 - [0:0] +:limit-ntp-175 - [0:0] +:limit-ntp-176 - [0:0] +:limit-ntp-177 - [0:0] +:limit-ntp-178 - [0:0] +:limit-ntp-179 - [0:0] +:limit-ntp-18 - [0:0] +:limit-ntp-180 - [0:0] +:limit-ntp-182 - [0:0] +:limit-ntp-183 - [0:0] +:limit-ntp-184 - [0:0] +:limit-ntp-185 - [0:0] +:limit-ntp-186 - [0:0] +:limit-ntp-188 - [0:0] +:limit-ntp-189 - [0:0] +:limit-ntp-19 - [0:0] +:limit-ntp-190 - [0:0] +:limit-ntp-191 - [0:0] +:limit-ntp-192 - [0:0] +:limit-ntp-193 - [0:0] +:limit-ntp-194 - [0:0] +:limit-ntp-195 - [0:0] +:limit-ntp-196 - [0:0] +:limit-ntp-197 - [0:0] +:limit-ntp-198 - [0:0] +:limit-ntp-199 - [0:0] +:limit-ntp-2 - [0:0] +:limit-ntp-20 - [0:0] +:limit-ntp-200 - [0:0] +:limit-ntp-201 - [0:0] +:limit-ntp-202 - [0:0] +:limit-ntp-203 - [0:0] +:limit-ntp-204 - [0:0] +:limit-ntp-205 - [0:0] +:limit-ntp-206 - [0:0] +:limit-ntp-207 - [0:0] +:limit-ntp-208 - [0:0] +:limit-ntp-209 - [0:0] +:limit-ntp-21 - [0:0] +:limit-ntp-210 - [0:0] +:limit-ntp-212 - [0:0] +:limit-ntp-213 - [0:0] +:limit-ntp-214 - [0:0] +:limit-ntp-215 - [0:0] +:limit-ntp-216 - [0:0] +:limit-ntp-218 - [0:0] +:limit-ntp-219 - [0:0] +:limit-ntp-22 - [0:0] +:limit-ntp-220 - [0:0] +:limit-ntp-221 - [0:0] +:limit-ntp-222 - [0:0] +:limit-ntp-223 - [0:0] +:limit-ntp-224 - [0:0] +:limit-ntp-225 - [0:0] +:limit-ntp-226 - [0:0] +:limit-ntp-227 - [0:0] +:limit-ntp-228 - [0:0] +:limit-ntp-229 - [0:0] +:limit-ntp-23 - [0:0] +:limit-ntp-230 - [0:0] +:limit-ntp-232 - [0:0] +:limit-ntp-233 - [0:0] +:limit-ntp-234 - [0:0] +:limit-ntp-235 - [0:0] +:limit-ntp-236 - [0:0] +:limit-ntp-238 - [0:0] +:limit-ntp-239 - [0:0] +:limit-ntp-24 - [0:0] +:limit-ntp-240 - [0:0] +:limit-ntp-241 - [0:0] +:limit-ntp-242 - [0:0] +:limit-ntp-243 - [0:0] +:limit-ntp-244 - [0:0] +:limit-ntp-245 - [0:0] +:limit-ntp-246 - [0:0] +:limit-ntp-247 - [0:0] +:limit-ntp-248 - [0:0] +:limit-ntp-249 - [0:0] +:limit-ntp-25 - [0:0] +:limit-ntp-250 - [0:0] +:limit-ntp-252 - [0:0] +:limit-ntp-253 - [0:0] +:limit-ntp-254 - [0:0] +:limit-ntp-255 - [0:0] +:limit-ntp-256 - [0:0] +:limit-ntp-258 - [0:0] +:limit-ntp-259 - [0:0] +:limit-ntp-26 - [0:0] +:limit-ntp-260 - [0:0] +:limit-ntp-261 - [0:0] +:limit-ntp-262 - [0:0] +:limit-ntp-263 - [0:0] +:limit-ntp-264 - [0:0] +:limit-ntp-265 - [0:0] +:limit-ntp-266 - [0:0] +:limit-ntp-267 - [0:0] +:limit-ntp-268 - [0:0] +:limit-ntp-269 - [0:0] +:limit-ntp-27 - [0:0] +:limit-ntp-270 - [0:0] +:limit-ntp-272 - [0:0] +:limit-ntp-273 - [0:0] +:limit-ntp-274 - [0:0] +:limit-ntp-275 - [0:0] +:limit-ntp-276 - [0:0] +:limit-ntp-278 - [0:0] +:limit-ntp-279 - [0:0] +:limit-ntp-28 - [0:0] +:limit-ntp-280 - [0:0] +:limit-ntp-281 - [0:0] +:limit-ntp-282 - [0:0] +:limit-ntp-283 - [0:0] +:limit-ntp-284 - [0:0] +:limit-ntp-285 - [0:0] +:limit-ntp-286 - [0:0] +:limit-ntp-287 - [0:0] +:limit-ntp-288 - [0:0] +:limit-ntp-289 - [0:0] +:limit-ntp-29 - [0:0] +:limit-ntp-290 - [0:0] +:limit-ntp-291 - [0:0] +:limit-ntp-292 - [0:0] +:limit-ntp-293 - [0:0] +:limit-ntp-294 - [0:0] +:limit-ntp-295 - [0:0] +:limit-ntp-296 - [0:0] +:limit-ntp-297 - [0:0] +:limit-ntp-298 - [0:0] +:limit-ntp-299 - [0:0] +:limit-ntp-3 - [0:0] +:limit-ntp-30 - [0:0] +:limit-ntp-300 - [0:0] +:limit-ntp-302 - [0:0] +:limit-ntp-303 - [0:0] +:limit-ntp-304 - [0:0] +:limit-ntp-305 - [0:0] +:limit-ntp-306 - [0:0] +:limit-ntp-308 - [0:0] +:limit-ntp-309 - [0:0] +:limit-ntp-310 - [0:0] +:limit-ntp-311 - [0:0] +:limit-ntp-312 - [0:0] +:limit-ntp-313 - [0:0] +:limit-ntp-314 - [0:0] +:limit-ntp-315 - [0:0] +:limit-ntp-316 - [0:0] +:limit-ntp-317 - [0:0] +:limit-ntp-318 - [0:0] +:limit-ntp-319 - [0:0] +:limit-ntp-32 - [0:0] +:limit-ntp-320 - [0:0] +:limit-ntp-322 - [0:0] +:limit-ntp-323 - [0:0] +:limit-ntp-324 - [0:0] +:limit-ntp-325 - [0:0] +:limit-ntp-326 - [0:0] +:limit-ntp-328 - [0:0] +:limit-ntp-329 - [0:0] +:limit-ntp-33 - [0:0] +:limit-ntp-330 - [0:0] +:limit-ntp-331 - [0:0] +:limit-ntp-332 - [0:0] +:limit-ntp-333 - [0:0] +:limit-ntp-334 - [0:0] +:limit-ntp-335 - [0:0] +:limit-ntp-336 - [0:0] +:limit-ntp-337 - [0:0] +:limit-ntp-338 - [0:0] +:limit-ntp-339 - [0:0] +:limit-ntp-34 - [0:0] +:limit-ntp-340 - [0:0] +:limit-ntp-342 - [0:0] +:limit-ntp-343 - [0:0] +:limit-ntp-344 - [0:0] +:limit-ntp-345 - [0:0] +:limit-ntp-346 - [0:0] +:limit-ntp-348 - [0:0] +:limit-ntp-349 - [0:0] +:limit-ntp-35 - [0:0] +:limit-ntp-350 - [0:0] +:limit-ntp-351 - [0:0] +:limit-ntp-352 - [0:0] +:limit-ntp-353 - [0:0] +:limit-ntp-354 - [0:0] +:limit-ntp-355 - [0:0] +:limit-ntp-356 - [0:0] +:limit-ntp-357 - [0:0] +:limit-ntp-358 - [0:0] +:limit-ntp-359 - [0:0] +:limit-ntp-36 - [0:0] +:limit-ntp-360 - [0:0] +:limit-ntp-362 - [0:0] +:limit-ntp-363 - [0:0] +:limit-ntp-364 - [0:0] +:limit-ntp-365 - [0:0] +:limit-ntp-366 - [0:0] +:limit-ntp-368 - [0:0] +:limit-ntp-369 - [0:0] +:limit-ntp-370 - [0:0] +:limit-ntp-371 - [0:0] +:limit-ntp-372 - [0:0] +:limit-ntp-373 - [0:0] +:limit-ntp-374 - [0:0] +:limit-ntp-375 - [0:0] +:limit-ntp-376 - [0:0] +:limit-ntp-377 - [0:0] +:limit-ntp-378 - [0:0] +:limit-ntp-379 - [0:0] +:limit-ntp-38 - [0:0] +:limit-ntp-380 - [0:0] +:limit-ntp-381 - [0:0] +:limit-ntp-382 - [0:0] +:limit-ntp-383 - [0:0] +:limit-ntp-384 - [0:0] +:limit-ntp-385 - [0:0] +:limit-ntp-386 - [0:0] +:limit-ntp-387 - [0:0] +:limit-ntp-388 - [0:0] +:limit-ntp-389 - [0:0] +:limit-ntp-39 - [0:0] +:limit-ntp-390 - [0:0] +:limit-ntp-392 - [0:0] +:limit-ntp-393 - [0:0] +:limit-ntp-394 - [0:0] +:limit-ntp-395 - [0:0] +:limit-ntp-396 - [0:0] +:limit-ntp-398 - [0:0] +:limit-ntp-399 - [0:0] +:limit-ntp-4 - [0:0] +:limit-ntp-40 - [0:0] +:limit-ntp-400 - [0:0] +:limit-ntp-401 - [0:0] +:limit-ntp-402 - [0:0] +:limit-ntp-403 - [0:0] +:limit-ntp-404 - [0:0] +:limit-ntp-405 - [0:0] +:limit-ntp-406 - [0:0] +:limit-ntp-407 - [0:0] +:limit-ntp-408 - [0:0] +:limit-ntp-409 - [0:0] +:limit-ntp-41 - [0:0] +:limit-ntp-410 - [0:0] +:limit-ntp-412 - [0:0] +:limit-ntp-413 - [0:0] +:limit-ntp-414 - [0:0] +:limit-ntp-415 - [0:0] +:limit-ntp-416 - [0:0] +:limit-ntp-418 - [0:0] +:limit-ntp-419 - [0:0] +:limit-ntp-42 - [0:0] +:limit-ntp-420 - [0:0] +:limit-ntp-421 - [0:0] +:limit-ntp-422 - [0:0] +:limit-ntp-423 - [0:0] +:limit-ntp-424 - [0:0] +:limit-ntp-425 - [0:0] +:limit-ntp-426 - [0:0] +:limit-ntp-427 - [0:0] +:limit-ntp-428 - [0:0] +:limit-ntp-429 - [0:0] +:limit-ntp-43 - [0:0] +:limit-ntp-430 - [0:0] +:limit-ntp-432 - [0:0] +:limit-ntp-433 - [0:0] +:limit-ntp-434 - [0:0] +:limit-ntp-435 - [0:0] +:limit-ntp-436 - [0:0] +:limit-ntp-438 - [0:0] +:limit-ntp-439 - [0:0] +:limit-ntp-44 - [0:0] +:limit-ntp-440 - [0:0] +:limit-ntp-441 - [0:0] +:limit-ntp-442 - [0:0] +:limit-ntp-443 - [0:0] +:limit-ntp-444 - [0:0] +:limit-ntp-445 - [0:0] +:limit-ntp-446 - [0:0] +:limit-ntp-447 - [0:0] +:limit-ntp-448 - [0:0] +:limit-ntp-449 - [0:0] +:limit-ntp-45 - [0:0] +:limit-ntp-450 - [0:0] +:limit-ntp-452 - [0:0] +:limit-ntp-453 - [0:0] +:limit-ntp-454 - [0:0] +:limit-ntp-455 - [0:0] +:limit-ntp-456 - [0:0] +:limit-ntp-458 - [0:0] +:limit-ntp-459 - [0:0] +:limit-ntp-46 - [0:0] +:limit-ntp-460 - [0:0] +:limit-ntp-461 - [0:0] +:limit-ntp-462 - [0:0] +:limit-ntp-463 - [0:0] +:limit-ntp-464 - [0:0] +:limit-ntp-465 - [0:0] +:limit-ntp-466 - [0:0] +:limit-ntp-467 - [0:0] +:limit-ntp-468 - [0:0] +:limit-ntp-469 - [0:0] +:limit-ntp-47 - [0:0] +:limit-ntp-470 - [0:0] +:limit-ntp-471 - [0:0] +:limit-ntp-472 - [0:0] +:limit-ntp-473 - [0:0] +:limit-ntp-474 - [0:0] +:limit-ntp-475 - [0:0] +:limit-ntp-476 - [0:0] +:limit-ntp-477 - [0:0] +:limit-ntp-478 - [0:0] +:limit-ntp-479 - [0:0] +:limit-ntp-48 - [0:0] +:limit-ntp-480 - [0:0] +:limit-ntp-482 - [0:0] +:limit-ntp-483 - [0:0] +:limit-ntp-484 - [0:0] +:limit-ntp-485 - [0:0] +:limit-ntp-486 - [0:0] +:limit-ntp-488 - [0:0] +:limit-ntp-489 - [0:0] +:limit-ntp-49 - [0:0] +:limit-ntp-490 - [0:0] +:limit-ntp-491 - [0:0] +:limit-ntp-492 - [0:0] +:limit-ntp-493 - [0:0] +:limit-ntp-494 - [0:0] +:limit-ntp-495 - [0:0] +:limit-ntp-496 - [0:0] +:limit-ntp-497 - [0:0] +:limit-ntp-498 - [0:0] +:limit-ntp-499 - [0:0] +:limit-ntp-5 - [0:0] +:limit-ntp-50 - [0:0] +:limit-ntp-500 - [0:0] +:limit-ntp-502 - [0:0] +:limit-ntp-503 - [0:0] +:limit-ntp-504 - [0:0] +:limit-ntp-505 - [0:0] +:limit-ntp-506 - [0:0] +:limit-ntp-508 - [0:0] +:limit-ntp-509 - [0:0] +:limit-ntp-510 - [0:0] +:limit-ntp-511 - [0:0] +:limit-ntp-512 - [0:0] +:limit-ntp-513 - [0:0] +:limit-ntp-514 - [0:0] +:limit-ntp-515 - [0:0] +:limit-ntp-516 - [0:0] +:limit-ntp-517 - [0:0] +:limit-ntp-518 - [0:0] +:limit-ntp-519 - [0:0] +:limit-ntp-52 - [0:0] +:limit-ntp-520 - [0:0] +:limit-ntp-522 - [0:0] +:limit-ntp-523 - [0:0] +:limit-ntp-524 - [0:0] +:limit-ntp-525 - [0:0] +:limit-ntp-526 - [0:0] +:limit-ntp-528 - [0:0] +:limit-ntp-529 - [0:0] +:limit-ntp-53 - [0:0] +:limit-ntp-530 - [0:0] +:limit-ntp-531 - [0:0] +:limit-ntp-532 - [0:0] +:limit-ntp-533 - [0:0] +:limit-ntp-534 - [0:0] +:limit-ntp-535 - [0:0] +:limit-ntp-536 - [0:0] +:limit-ntp-537 - [0:0] +:limit-ntp-538 - [0:0] +:limit-ntp-539 - [0:0] +:limit-ntp-54 - [0:0] +:limit-ntp-540 - [0:0] +:limit-ntp-542 - [0:0] +:limit-ntp-543 - [0:0] +:limit-ntp-544 - [0:0] +:limit-ntp-545 - [0:0] +:limit-ntp-546 - [0:0] +:limit-ntp-548 - [0:0] +:limit-ntp-549 - [0:0] +:limit-ntp-55 - [0:0] +:limit-ntp-550 - [0:0] +:limit-ntp-551 - [0:0] +:limit-ntp-552 - [0:0] +:limit-ntp-553 - [0:0] +:limit-ntp-554 - [0:0] +:limit-ntp-555 - [0:0] +:limit-ntp-556 - [0:0] +:limit-ntp-557 - [0:0] +:limit-ntp-558 - [0:0] +:limit-ntp-559 - [0:0] +:limit-ntp-56 - [0:0] +:limit-ntp-560 - [0:0] +:limit-ntp-561 - [0:0] +:limit-ntp-562 - [0:0] +:limit-ntp-563 - [0:0] +:limit-ntp-564 - [0:0] +:limit-ntp-565 - [0:0] +:limit-ntp-566 - [0:0] +:limit-ntp-567 - [0:0] +:limit-ntp-568 - [0:0] +:limit-ntp-569 - [0:0] +:limit-ntp-570 - [0:0] +:limit-ntp-572 - [0:0] +:limit-ntp-573 - [0:0] +:limit-ntp-574 - [0:0] +:limit-ntp-575 - [0:0] +:limit-ntp-576 - [0:0] +:limit-ntp-578 - [0:0] +:limit-ntp-579 - [0:0] +:limit-ntp-58 - [0:0] +:limit-ntp-580 - [0:0] +:limit-ntp-581 - [0:0] +:limit-ntp-582 - [0:0] +:limit-ntp-583 - [0:0] +:limit-ntp-584 - [0:0] +:limit-ntp-585 - [0:0] +:limit-ntp-586 - [0:0] +:limit-ntp-587 - [0:0] +:limit-ntp-588 - [0:0] +:limit-ntp-589 - [0:0] +:limit-ntp-59 - [0:0] +:limit-ntp-590 - [0:0] +:limit-ntp-592 - [0:0] +:limit-ntp-593 - [0:0] +:limit-ntp-594 - [0:0] +:limit-ntp-595 - [0:0] +:limit-ntp-596 - [0:0] +:limit-ntp-598 - [0:0] +:limit-ntp-599 - [0:0] +:limit-ntp-6 - [0:0] +:limit-ntp-60 - [0:0] +:limit-ntp-600 - [0:0] +:limit-ntp-601 - [0:0] +:limit-ntp-602 - [0:0] +:limit-ntp-603 - [0:0] +:limit-ntp-604 - [0:0] +:limit-ntp-605 - [0:0] +:limit-ntp-606 - [0:0] +:limit-ntp-607 - [0:0] +:limit-ntp-608 - [0:0] +:limit-ntp-609 - [0:0] +:limit-ntp-61 - [0:0] +:limit-ntp-610 - [0:0] +:limit-ntp-612 - [0:0] +:limit-ntp-613 - [0:0] +:limit-ntp-614 - [0:0] +:limit-ntp-615 - [0:0] +:limit-ntp-616 - [0:0] +:limit-ntp-618 - [0:0] +:limit-ntp-619 - [0:0] +:limit-ntp-62 - [0:0] +:limit-ntp-620 - [0:0] +:limit-ntp-621 - [0:0] +:limit-ntp-622 - [0:0] +:limit-ntp-623 - [0:0] +:limit-ntp-624 - [0:0] +:limit-ntp-625 - [0:0] +:limit-ntp-626 - [0:0] +:limit-ntp-627 - [0:0] +:limit-ntp-628 - [0:0] +:limit-ntp-629 - [0:0] +:limit-ntp-63 - [0:0] +:limit-ntp-630 - [0:0] +:limit-ntp-632 - [0:0] +:limit-ntp-633 - [0:0] +:limit-ntp-634 - [0:0] +:limit-ntp-635 - [0:0] +:limit-ntp-636 - [0:0] +:limit-ntp-638 - [0:0] +:limit-ntp-639 - [0:0] +:limit-ntp-64 - [0:0] +:limit-ntp-640 - [0:0] +:limit-ntp-641 - [0:0] +:limit-ntp-642 - [0:0] +:limit-ntp-643 - [0:0] +:limit-ntp-644 - [0:0] +:limit-ntp-645 - [0:0] +:limit-ntp-646 - [0:0] +:limit-ntp-647 - [0:0] +:limit-ntp-648 - [0:0] +:limit-ntp-649 - [0:0] +:limit-ntp-65 - [0:0] +:limit-ntp-650 - [0:0] +:limit-ntp-651 - [0:0] +:limit-ntp-652 - [0:0] +:limit-ntp-653 - [0:0] +:limit-ntp-654 - [0:0] +:limit-ntp-655 - [0:0] +:limit-ntp-656 - [0:0] +:limit-ntp-657 - [0:0] +:limit-ntp-658 - [0:0] +:limit-ntp-659 - [0:0] +:limit-ntp-66 - [0:0] +:limit-ntp-660 - [0:0] +:limit-ntp-662 - [0:0] +:limit-ntp-663 - [0:0] +:limit-ntp-664 - [0:0] +:limit-ntp-665 - [0:0] +:limit-ntp-666 - [0:0] +:limit-ntp-668 - [0:0] +:limit-ntp-669 - [0:0] +:limit-ntp-67 - [0:0] +:limit-ntp-670 - [0:0] +:limit-ntp-671 - [0:0] +:limit-ntp-672 - [0:0] +:limit-ntp-673 - [0:0] +:limit-ntp-674 - [0:0] +:limit-ntp-675 - [0:0] +:limit-ntp-676 - [0:0] +:limit-ntp-677 - [0:0] +:limit-ntp-678 - [0:0] +:limit-ntp-679 - [0:0] +:limit-ntp-68 - [0:0] +:limit-ntp-680 - [0:0] +:limit-ntp-682 - [0:0] +:limit-ntp-683 - [0:0] +:limit-ntp-684 - [0:0] +:limit-ntp-685 - [0:0] +:limit-ntp-686 - [0:0] +:limit-ntp-688 - [0:0] +:limit-ntp-689 - [0:0] +:limit-ntp-69 - [0:0] +:limit-ntp-690 - [0:0] +:limit-ntp-691 - [0:0] +:limit-ntp-692 - [0:0] +:limit-ntp-693 - [0:0] +:limit-ntp-694 - [0:0] +:limit-ntp-695 - [0:0] +:limit-ntp-696 - [0:0] +:limit-ntp-697 - [0:0] +:limit-ntp-698 - [0:0] +:limit-ntp-699 - [0:0] +:limit-ntp-7 - [0:0] +:limit-ntp-70 - [0:0] +:limit-ntp-700 - [0:0] +:limit-ntp-702 - [0:0] +:limit-ntp-703 - [0:0] +:limit-ntp-704 - [0:0] +:limit-ntp-705 - [0:0] +:limit-ntp-706 - [0:0] +:limit-ntp-708 - [0:0] +:limit-ntp-709 - [0:0] +:limit-ntp-710 - [0:0] +:limit-ntp-711 - [0:0] +:limit-ntp-712 - [0:0] +:limit-ntp-713 - [0:0] +:limit-ntp-714 - [0:0] +:limit-ntp-715 - [0:0] +:limit-ntp-716 - [0:0] +:limit-ntp-717 - [0:0] +:limit-ntp-718 - [0:0] +:limit-ntp-719 - [0:0] +:limit-ntp-72 - [0:0] +:limit-ntp-720 - [0:0] +:limit-ntp-722 - [0:0] +:limit-ntp-723 - [0:0] +:limit-ntp-724 - [0:0] +:limit-ntp-725 - [0:0] +:limit-ntp-726 - [0:0] +:limit-ntp-728 - [0:0] +:limit-ntp-729 - [0:0] +:limit-ntp-73 - [0:0] +:limit-ntp-730 - [0:0] +:limit-ntp-731 - [0:0] +:limit-ntp-732 - [0:0] +:limit-ntp-733 - [0:0] +:limit-ntp-734 - [0:0] +:limit-ntp-735 - [0:0] +:limit-ntp-736 - [0:0] +:limit-ntp-737 - [0:0] +:limit-ntp-738 - [0:0] +:limit-ntp-739 - [0:0] +:limit-ntp-74 - [0:0] +:limit-ntp-740 - [0:0] +:limit-ntp-741 - [0:0] +:limit-ntp-742 - [0:0] +:limit-ntp-743 - [0:0] +:limit-ntp-744 - [0:0] +:limit-ntp-745 - [0:0] +:limit-ntp-746 - [0:0] +:limit-ntp-747 - [0:0] +:limit-ntp-748 - [0:0] +:limit-ntp-749 - [0:0] +:limit-ntp-75 - [0:0] +:limit-ntp-750 - [0:0] +:limit-ntp-752 - [0:0] +:limit-ntp-753 - [0:0] +:limit-ntp-754 - [0:0] +:limit-ntp-755 - [0:0] +:limit-ntp-756 - [0:0] +:limit-ntp-758 - [0:0] +:limit-ntp-759 - [0:0] +:limit-ntp-76 - [0:0] +:limit-ntp-760 - [0:0] +:limit-ntp-761 - [0:0] +:limit-ntp-762 - [0:0] +:limit-ntp-763 - [0:0] +:limit-ntp-764 - [0:0] +:limit-ntp-765 - [0:0] +:limit-ntp-766 - [0:0] +:limit-ntp-767 - [0:0] +:limit-ntp-768 - [0:0] +:limit-ntp-769 - [0:0] +:limit-ntp-770 - [0:0] +:limit-ntp-772 - [0:0] +:limit-ntp-773 - [0:0] +:limit-ntp-774 - [0:0] +:limit-ntp-775 - [0:0] +:limit-ntp-776 - [0:0] +:limit-ntp-778 - [0:0] +:limit-ntp-779 - [0:0] +:limit-ntp-78 - [0:0] +:limit-ntp-780 - [0:0] +:limit-ntp-781 - [0:0] +:limit-ntp-782 - [0:0] +:limit-ntp-783 - [0:0] +:limit-ntp-784 - [0:0] +:limit-ntp-785 - [0:0] +:limit-ntp-786 - [0:0] +:limit-ntp-787 - [0:0] +:limit-ntp-788 - [0:0] +:limit-ntp-789 - [0:0] +:limit-ntp-79 - [0:0] +:limit-ntp-790 - [0:0] +:limit-ntp-792 - [0:0] +:limit-ntp-793 - [0:0] +:limit-ntp-794 - [0:0] +:limit-ntp-795 - [0:0] +:limit-ntp-796 - [0:0] +:limit-ntp-798 - [0:0] +:limit-ntp-799 - [0:0] +:limit-ntp-8 - [0:0] +:limit-ntp-80 - [0:0] +:limit-ntp-800 - [0:0] +:limit-ntp-801 - [0:0] +:limit-ntp-802 - [0:0] +:limit-ntp-803 - [0:0] +:limit-ntp-804 - [0:0] +:limit-ntp-805 - [0:0] +:limit-ntp-806 - [0:0] +:limit-ntp-807 - [0:0] +:limit-ntp-808 - [0:0] +:limit-ntp-809 - [0:0] +:limit-ntp-81 - [0:0] +:limit-ntp-810 - [0:0] +:limit-ntp-812 - [0:0] +:limit-ntp-813 - [0:0] +:limit-ntp-814 - [0:0] +:limit-ntp-815 - [0:0] +:limit-ntp-816 - [0:0] +:limit-ntp-818 - [0:0] +:limit-ntp-819 - [0:0] +:limit-ntp-82 - [0:0] +:limit-ntp-820 - [0:0] +:limit-ntp-821 - [0:0] +:limit-ntp-822 - [0:0] +:limit-ntp-823 - [0:0] +:limit-ntp-824 - [0:0] +:limit-ntp-825 - [0:0] +:limit-ntp-826 - [0:0] +:limit-ntp-827 - [0:0] +:limit-ntp-828 - [0:0] +:limit-ntp-829 - [0:0] +:limit-ntp-83 - [0:0] +:limit-ntp-830 - [0:0] +:limit-ntp-831 - [0:0] +:limit-ntp-832 - [0:0] +:limit-ntp-833 - [0:0] +:limit-ntp-834 - [0:0] +:limit-ntp-835 - [0:0] +:limit-ntp-836 - [0:0] +:limit-ntp-837 - [0:0] +:limit-ntp-838 - [0:0] +:limit-ntp-839 - [0:0] +:limit-ntp-84 - [0:0] +:limit-ntp-840 - [0:0] +:limit-ntp-842 - [0:0] +:limit-ntp-843 - [0:0] +:limit-ntp-844 - [0:0] +:limit-ntp-845 - [0:0] +:limit-ntp-846 - [0:0] +:limit-ntp-848 - [0:0] +:limit-ntp-849 - [0:0] +:limit-ntp-85 - [0:0] +:limit-ntp-850 - [0:0] +:limit-ntp-851 - [0:0] +:limit-ntp-852 - [0:0] +:limit-ntp-853 - [0:0] +:limit-ntp-854 - [0:0] +:limit-ntp-855 - [0:0] +:limit-ntp-856 - [0:0] +:limit-ntp-857 - [0:0] +:limit-ntp-858 - [0:0] +:limit-ntp-859 - [0:0] +:limit-ntp-86 - [0:0] +:limit-ntp-860 - [0:0] +:limit-ntp-862 - [0:0] +:limit-ntp-863 - [0:0] +:limit-ntp-864 - [0:0] +:limit-ntp-865 - [0:0] +:limit-ntp-866 - [0:0] +:limit-ntp-868 - [0:0] +:limit-ntp-869 - [0:0] +:limit-ntp-87 - [0:0] +:limit-ntp-870 - [0:0] +:limit-ntp-871 - [0:0] +:limit-ntp-872 - [0:0] +:limit-ntp-873 - [0:0] +:limit-ntp-874 - [0:0] +:limit-ntp-875 - [0:0] +:limit-ntp-876 - [0:0] +:limit-ntp-877 - [0:0] +:limit-ntp-878 - [0:0] +:limit-ntp-879 - [0:0] +:limit-ntp-88 - [0:0] +:limit-ntp-880 - [0:0] +:limit-ntp-882 - [0:0] +:limit-ntp-883 - [0:0] +:limit-ntp-884 - [0:0] +:limit-ntp-885 - [0:0] +:limit-ntp-886 - [0:0] +:limit-ntp-888 - [0:0] +:limit-ntp-889 - [0:0] +:limit-ntp-89 - [0:0] +:limit-ntp-890 - [0:0] +:limit-ntp-891 - [0:0] +:limit-ntp-892 - [0:0] +:limit-ntp-893 - [0:0] +:limit-ntp-894 - [0:0] +:limit-ntp-895 - [0:0] +:limit-ntp-896 - [0:0] +:limit-ntp-897 - [0:0] +:limit-ntp-898 - [0:0] +:limit-ntp-899 - [0:0] +:limit-ntp-9 - [0:0] +:limit-ntp-90 - [0:0] +:limit-ntp-900 - [0:0] +:limit-ntp-902 - [0:0] +:limit-ntp-903 - [0:0] +:limit-ntp-904 - [0:0] +:limit-ntp-905 - [0:0] +:limit-ntp-906 - [0:0] +:limit-ntp-908 - [0:0] +:limit-ntp-909 - [0:0] +:limit-ntp-910 - [0:0] +:limit-ntp-911 - [0:0] +:limit-ntp-912 - [0:0] +:limit-ntp-913 - [0:0] +:limit-ntp-914 - [0:0] +:limit-ntp-915 - [0:0] +:limit-ntp-916 - [0:0] +:limit-ntp-917 - [0:0] +:limit-ntp-918 - [0:0] +:limit-ntp-919 - [0:0] +:limit-ntp-92 - [0:0] +:limit-ntp-920 - [0:0] +:limit-ntp-921 - [0:0] +:limit-ntp-922 - [0:0] +:limit-ntp-923 - [0:0] +:limit-ntp-924 - [0:0] +:limit-ntp-925 - [0:0] +:limit-ntp-926 - [0:0] +:limit-ntp-927 - [0:0] +:limit-ntp-928 - [0:0] +:limit-ntp-929 - [0:0] +:limit-ntp-93 - [0:0] +:limit-ntp-930 - [0:0] +:limit-ntp-931 - [0:0] +:limit-ntp-932 - [0:0] +:limit-ntp-933 - [0:0] +:limit-ntp-934 - [0:0] +:limit-ntp-935 - [0:0] +:limit-ntp-936 - [0:0] +:limit-ntp-937 - [0:0] +:limit-ntp-938 - [0:0] +:limit-ntp-939 - [0:0] +:limit-ntp-94 - [0:0] +:limit-ntp-940 - [0:0] +:limit-ntp-941 - [0:0] +:limit-ntp-942 - [0:0] +:limit-ntp-943 - [0:0] +:limit-ntp-944 - [0:0] +:limit-ntp-945 - [0:0] +:limit-ntp-946 - [0:0] +:limit-ntp-947 - [0:0] +:limit-ntp-948 - [0:0] +:limit-ntp-949 - [0:0] +:limit-ntp-95 - [0:0] +:limit-ntp-950 - [0:0] +:limit-ntp-951 - [0:0] +:limit-ntp-952 - [0:0] +:limit-ntp-953 - [0:0] +:limit-ntp-954 - [0:0] +:limit-ntp-955 - [0:0] +:limit-ntp-956 - [0:0] +:limit-ntp-957 - [0:0] +:limit-ntp-958 - [0:0] +:limit-ntp-959 - [0:0] +:limit-ntp-96 - [0:0] +:limit-ntp-960 - [0:0] +:limit-ntp-961 - [0:0] +:limit-ntp-962 - [0:0] +:limit-ntp-963 - [0:0] +:limit-ntp-964 - [0:0] +:limit-ntp-965 - [0:0] +:limit-ntp-966 - [0:0] +:limit-ntp-967 - [0:0] +:limit-ntp-968 - [0:0] +:limit-ntp-969 - [0:0] +:limit-ntp-970 - [0:0] +:limit-ntp-971 - [0:0] +:limit-ntp-972 - [0:0] +:limit-ntp-973 - [0:0] +:limit-ntp-974 - [0:0] +:limit-ntp-975 - [0:0] +:limit-ntp-98 - [0:0] +:limit-ntp-99 - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] :logaccept-10 - [0:0] -:logaccept-100 - [0:0] -:logaccept-101 - [0:0] -:logaccept-102 - [0:0] :logaccept-11 - [0:0] :logaccept-12 - [0:0] :logaccept-13 - [0:0] @@ -3819,38 +3816,8 @@ :logaccept-68 - [0:0] :logaccept-69 - [0:0] :logaccept-7 - [0:0] -:logaccept-70 - [0:0] -:logaccept-71 - [0:0] -:logaccept-72 - [0:0] -:logaccept-73 - [0:0] -:logaccept-74 - [0:0] -:logaccept-75 - [0:0] -:logaccept-76 - [0:0] -:logaccept-77 - [0:0] -:logaccept-78 - [0:0] -:logaccept-79 - [0:0] :logaccept-8 - [0:0] -:logaccept-80 - [0:0] -:logaccept-81 - [0:0] -:logaccept-82 - [0:0] -:logaccept-83 - [0:0] -:logaccept-84 - [0:0] -:logaccept-85 - [0:0] -:logaccept-86 - [0:0] -:logaccept-87 - [0:0] -:logaccept-88 - [0:0] -:logaccept-89 - [0:0] :logaccept-9 - [0:0] -:logaccept-90 - [0:0] -:logaccept-91 - [0:0] -:logaccept-92 - [0:0] -:logaccept-93 - [0:0] -:logaccept-94 - [0:0] -:logaccept-95 - [0:0] -:logaccept-96 - [0:0] -:logaccept-97 - [0:0] -:logaccept-98 - [0:0] -:logaccept-99 - [0:0] :logaccept-final-0 - [0:0] :logaccept-final-1 - [0:0] :logaccept-final-10 - [0:0] @@ -4157,6 +4124,39 @@ :logaccept-final-97 - [0:0] :logaccept-final-98 - [0:0] :logaccept-final-99 - [0:0] +:logaccept-ntp-0 - [0:0] +:logaccept-ntp-1 - [0:0] +:logaccept-ntp-10 - [0:0] +:logaccept-ntp-11 - [0:0] +:logaccept-ntp-12 - [0:0] +:logaccept-ntp-13 - [0:0] +:logaccept-ntp-14 - [0:0] +:logaccept-ntp-15 - [0:0] +:logaccept-ntp-16 - [0:0] +:logaccept-ntp-17 - [0:0] +:logaccept-ntp-18 - [0:0] +:logaccept-ntp-19 - [0:0] +:logaccept-ntp-2 - [0:0] +:logaccept-ntp-20 - [0:0] +:logaccept-ntp-21 - [0:0] +:logaccept-ntp-22 - [0:0] +:logaccept-ntp-23 - [0:0] +:logaccept-ntp-24 - [0:0] +:logaccept-ntp-25 - [0:0] +:logaccept-ntp-26 - [0:0] +:logaccept-ntp-27 - [0:0] +:logaccept-ntp-28 - [0:0] +:logaccept-ntp-29 - [0:0] +:logaccept-ntp-3 - [0:0] +:logaccept-ntp-30 - [0:0] +:logaccept-ntp-31 - [0:0] +:logaccept-ntp-32 - [0:0] +:logaccept-ntp-4 - [0:0] +:logaccept-ntp-5 - [0:0] +:logaccept-ntp-6 - [0:0] +:logaccept-ntp-7 - [0:0] +:logaccept-ntp-8 - [0:0] +:logaccept-ntp-9 - [0:0] :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-10 - [0:0] @@ -4887,618 +4887,68 @@ :logdrop-1652 - [0:0] :logdrop-1653 - [0:0] :logdrop-1654 - [0:0] -:logdrop-1655 - [0:0] -:logdrop-1656 - [0:0] -:logdrop-1657 - [0:0] -:logdrop-1658 - [0:0] -:logdrop-1659 - [0:0] :logdrop-166 - [0:0] -:logdrop-1660 - [0:0] -:logdrop-1661 - [0:0] -:logdrop-1662 - [0:0] -:logdrop-1663 - [0:0] -:logdrop-1664 - [0:0] -:logdrop-1665 - [0:0] -:logdrop-1666 - [0:0] -:logdrop-1667 - [0:0] -:logdrop-1668 - [0:0] -:logdrop-1669 - [0:0] :logdrop-167 - [0:0] -:logdrop-1670 - [0:0] -:logdrop-1671 - [0:0] -:logdrop-1672 - [0:0] -:logdrop-1673 - [0:0] -:logdrop-1674 - [0:0] -:logdrop-1675 - [0:0] -:logdrop-1676 - [0:0] -:logdrop-1677 - [0:0] -:logdrop-1678 - [0:0] -:logdrop-1679 - [0:0] :logdrop-168 - [0:0] -:logdrop-1680 - [0:0] -:logdrop-1681 - [0:0] -:logdrop-1682 - [0:0] -:logdrop-1683 - [0:0] -:logdrop-1684 - [0:0] -:logdrop-1685 - [0:0] -:logdrop-1686 - [0:0] -:logdrop-1687 - [0:0] -:logdrop-1688 - [0:0] -:logdrop-1689 - [0:0] :logdrop-169 - [0:0] -:logdrop-1690 - [0:0] -:logdrop-1691 - [0:0] -:logdrop-1692 - [0:0] -:logdrop-1693 - [0:0] -:logdrop-1694 - [0:0] -:logdrop-1695 - [0:0] -:logdrop-1696 - [0:0] -:logdrop-1697 - [0:0] -:logdrop-1698 - [0:0] -:logdrop-1699 - [0:0] :logdrop-17 - [0:0] :logdrop-170 - [0:0] -:logdrop-1700 - [0:0] -:logdrop-1701 - [0:0] -:logdrop-1702 - [0:0] -:logdrop-1703 - [0:0] -:logdrop-1704 - [0:0] -:logdrop-1705 - [0:0] -:logdrop-1706 - [0:0] -:logdrop-1707 - [0:0] -:logdrop-1708 - [0:0] -:logdrop-1709 - [0:0] :logdrop-171 - [0:0] -:logdrop-1710 - [0:0] -:logdrop-1711 - [0:0] -:logdrop-1712 - [0:0] -:logdrop-1713 - [0:0] -:logdrop-1714 - [0:0] -:logdrop-1715 - [0:0] -:logdrop-1716 - [0:0] -:logdrop-1717 - [0:0] -:logdrop-1718 - [0:0] -:logdrop-1719 - [0:0] :logdrop-172 - [0:0] -:logdrop-1720 - [0:0] -:logdrop-1721 - [0:0] -:logdrop-1722 - [0:0] -:logdrop-1723 - [0:0] -:logdrop-1724 - [0:0] -:logdrop-1725 - [0:0] -:logdrop-1726 - [0:0] -:logdrop-1727 - [0:0] -:logdrop-1728 - [0:0] -:logdrop-1729 - [0:0] :logdrop-173 - [0:0] -:logdrop-1730 - [0:0] -:logdrop-1731 - [0:0] -:logdrop-1732 - [0:0] -:logdrop-1733 - [0:0] -:logdrop-1734 - [0:0] -:logdrop-1735 - [0:0] -:logdrop-1736 - [0:0] -:logdrop-1737 - [0:0] -:logdrop-1738 - [0:0] -:logdrop-1739 - [0:0] :logdrop-174 - [0:0] -:logdrop-1740 - [0:0] -:logdrop-1741 - [0:0] -:logdrop-1742 - [0:0] -:logdrop-1743 - [0:0] -:logdrop-1744 - [0:0] -:logdrop-1745 - [0:0] -:logdrop-1746 - [0:0] -:logdrop-1747 - [0:0] -:logdrop-1748 - [0:0] -:logdrop-1749 - [0:0] :logdrop-175 - [0:0] -:logdrop-1750 - [0:0] -:logdrop-1751 - [0:0] -:logdrop-1752 - [0:0] -:logdrop-1753 - [0:0] -:logdrop-1754 - [0:0] -:logdrop-1755 - [0:0] -:logdrop-1756 - [0:0] -:logdrop-1757 - [0:0] -:logdrop-1758 - [0:0] -:logdrop-1759 - [0:0] :logdrop-176 - [0:0] -:logdrop-1760 - [0:0] -:logdrop-1761 - [0:0] -:logdrop-1762 - [0:0] -:logdrop-1763 - [0:0] -:logdrop-1764 - [0:0] -:logdrop-1765 - [0:0] -:logdrop-1766 - [0:0] -:logdrop-1767 - [0:0] -:logdrop-1768 - [0:0] -:logdrop-1769 - [0:0] :logdrop-177 - [0:0] -:logdrop-1770 - [0:0] -:logdrop-1771 - [0:0] -:logdrop-1772 - [0:0] -:logdrop-1773 - [0:0] -:logdrop-1774 - [0:0] -:logdrop-1775 - [0:0] -:logdrop-1776 - [0:0] -:logdrop-1777 - [0:0] -:logdrop-1778 - [0:0] -:logdrop-1779 - [0:0] :logdrop-178 - [0:0] -:logdrop-1780 - [0:0] -:logdrop-1781 - [0:0] -:logdrop-1782 - [0:0] -:logdrop-1783 - [0:0] -:logdrop-1784 - [0:0] -:logdrop-1785 - [0:0] -:logdrop-1786 - [0:0] -:logdrop-1787 - [0:0] -:logdrop-1788 - [0:0] -:logdrop-1789 - [0:0] :logdrop-179 - [0:0] -:logdrop-1790 - [0:0] -:logdrop-1791 - [0:0] -:logdrop-1792 - [0:0] -:logdrop-1793 - [0:0] -:logdrop-1794 - [0:0] -:logdrop-1795 - [0:0] -:logdrop-1796 - [0:0] -:logdrop-1797 - [0:0] -:logdrop-1798 - [0:0] -:logdrop-1799 - [0:0] :logdrop-18 - [0:0] :logdrop-180 - [0:0] -:logdrop-1800 - [0:0] -:logdrop-1801 - [0:0] -:logdrop-1802 - [0:0] -:logdrop-1803 - [0:0] -:logdrop-1804 - [0:0] -:logdrop-1805 - [0:0] -:logdrop-1806 - [0:0] -:logdrop-1807 - [0:0] -:logdrop-1808 - [0:0] -:logdrop-1809 - [0:0] :logdrop-181 - [0:0] -:logdrop-1810 - [0:0] -:logdrop-1811 - [0:0] -:logdrop-1812 - [0:0] -:logdrop-1813 - [0:0] -:logdrop-1814 - [0:0] -:logdrop-1815 - [0:0] -:logdrop-1816 - [0:0] -:logdrop-1817 - [0:0] -:logdrop-1818 - [0:0] -:logdrop-1819 - [0:0] :logdrop-182 - [0:0] -:logdrop-1820 - [0:0] -:logdrop-1821 - [0:0] -:logdrop-1822 - [0:0] -:logdrop-1823 - [0:0] -:logdrop-1824 - [0:0] -:logdrop-1825 - [0:0] -:logdrop-1826 - [0:0] -:logdrop-1827 - [0:0] -:logdrop-1828 - [0:0] -:logdrop-1829 - [0:0] :logdrop-183 - [0:0] -:logdrop-1830 - [0:0] -:logdrop-1831 - [0:0] -:logdrop-1832 - [0:0] -:logdrop-1833 - [0:0] -:logdrop-1834 - [0:0] -:logdrop-1835 - [0:0] -:logdrop-1836 - [0:0] -:logdrop-1837 - [0:0] -:logdrop-1838 - [0:0] -:logdrop-1839 - [0:0] :logdrop-184 - [0:0] -:logdrop-1840 - [0:0] -:logdrop-1841 - [0:0] -:logdrop-1842 - [0:0] -:logdrop-1843 - [0:0] -:logdrop-1844 - [0:0] -:logdrop-1845 - [0:0] -:logdrop-1846 - [0:0] -:logdrop-1847 - [0:0] -:logdrop-1848 - [0:0] -:logdrop-1849 - [0:0] :logdrop-185 - [0:0] -:logdrop-1850 - [0:0] -:logdrop-1851 - [0:0] -:logdrop-1852 - [0:0] -:logdrop-1853 - [0:0] -:logdrop-1854 - [0:0] -:logdrop-1855 - [0:0] -:logdrop-1856 - [0:0] -:logdrop-1857 - [0:0] -:logdrop-1858 - [0:0] -:logdrop-1859 - [0:0] :logdrop-186 - [0:0] -:logdrop-1860 - [0:0] -:logdrop-1861 - [0:0] -:logdrop-1862 - [0:0] -:logdrop-1863 - [0:0] -:logdrop-1864 - [0:0] -:logdrop-1865 - [0:0] -:logdrop-1866 - [0:0] -:logdrop-1867 - [0:0] -:logdrop-1868 - [0:0] -:logdrop-1869 - [0:0] :logdrop-187 - [0:0] -:logdrop-1870 - [0:0] -:logdrop-1871 - [0:0] -:logdrop-1872 - [0:0] -:logdrop-1873 - [0:0] -:logdrop-1874 - [0:0] -:logdrop-1875 - [0:0] -:logdrop-1876 - [0:0] -:logdrop-1877 - [0:0] -:logdrop-1878 - [0:0] -:logdrop-1879 - [0:0] :logdrop-188 - [0:0] -:logdrop-1880 - [0:0] -:logdrop-1881 - [0:0] -:logdrop-1882 - [0:0] -:logdrop-1883 - [0:0] -:logdrop-1884 - [0:0] -:logdrop-1885 - [0:0] -:logdrop-1886 - [0:0] -:logdrop-1887 - [0:0] -:logdrop-1888 - [0:0] -:logdrop-1889 - [0:0] :logdrop-189 - [0:0] -:logdrop-1890 - [0:0] -:logdrop-1891 - [0:0] -:logdrop-1892 - [0:0] -:logdrop-1893 - [0:0] -:logdrop-1894 - [0:0] -:logdrop-1895 - [0:0] -:logdrop-1896 - [0:0] -:logdrop-1897 - [0:0] -:logdrop-1898 - [0:0] -:logdrop-1899 - [0:0] :logdrop-19 - [0:0] :logdrop-190 - [0:0] -:logdrop-1900 - [0:0] -:logdrop-1901 - [0:0] -:logdrop-1902 - [0:0] -:logdrop-1903 - [0:0] -:logdrop-1904 - [0:0] -:logdrop-1905 - [0:0] -:logdrop-1906 - [0:0] -:logdrop-1907 - [0:0] -:logdrop-1908 - [0:0] -:logdrop-1909 - [0:0] :logdrop-191 - [0:0] -:logdrop-1910 - [0:0] -:logdrop-1911 - [0:0] -:logdrop-1912 - [0:0] -:logdrop-1913 - [0:0] -:logdrop-1914 - [0:0] -:logdrop-1915 - [0:0] -:logdrop-1916 - [0:0] -:logdrop-1917 - [0:0] -:logdrop-1918 - [0:0] -:logdrop-1919 - [0:0] :logdrop-192 - [0:0] -:logdrop-1920 - [0:0] -:logdrop-1921 - [0:0] -:logdrop-1922 - [0:0] -:logdrop-1923 - [0:0] -:logdrop-1924 - [0:0] -:logdrop-1925 - [0:0] -:logdrop-1926 - [0:0] -:logdrop-1927 - [0:0] -:logdrop-1928 - [0:0] -:logdrop-1929 - [0:0] :logdrop-193 - [0:0] -:logdrop-1930 - [0:0] -:logdrop-1931 - [0:0] -:logdrop-1932 - [0:0] -:logdrop-1933 - [0:0] -:logdrop-1934 - [0:0] -:logdrop-1935 - [0:0] -:logdrop-1936 - [0:0] -:logdrop-1937 - [0:0] -:logdrop-1938 - [0:0] -:logdrop-1939 - [0:0] :logdrop-194 - [0:0] -:logdrop-1940 - [0:0] -:logdrop-1941 - [0:0] -:logdrop-1942 - [0:0] -:logdrop-1943 - [0:0] -:logdrop-1944 - [0:0] -:logdrop-1945 - [0:0] -:logdrop-1946 - [0:0] -:logdrop-1947 - [0:0] -:logdrop-1948 - [0:0] -:logdrop-1949 - [0:0] :logdrop-195 - [0:0] -:logdrop-1950 - [0:0] -:logdrop-1951 - [0:0] -:logdrop-1952 - [0:0] -:logdrop-1953 - [0:0] -:logdrop-1954 - [0:0] -:logdrop-1955 - [0:0] -:logdrop-1956 - [0:0] -:logdrop-1957 - [0:0] -:logdrop-1958 - [0:0] -:logdrop-1959 - [0:0] :logdrop-196 - [0:0] -:logdrop-1960 - [0:0] -:logdrop-1961 - [0:0] -:logdrop-1962 - [0:0] -:logdrop-1963 - [0:0] -:logdrop-1964 - [0:0] -:logdrop-1965 - [0:0] -:logdrop-1966 - [0:0] -:logdrop-1967 - [0:0] -:logdrop-1968 - [0:0] -:logdrop-1969 - [0:0] :logdrop-197 - [0:0] -:logdrop-1970 - [0:0] -:logdrop-1971 - [0:0] -:logdrop-1972 - [0:0] -:logdrop-1973 - [0:0] -:logdrop-1974 - [0:0] -:logdrop-1975 - [0:0] -:logdrop-1976 - [0:0] -:logdrop-1977 - [0:0] -:logdrop-1978 - [0:0] -:logdrop-1979 - [0:0] :logdrop-198 - [0:0] -:logdrop-1980 - [0:0] -:logdrop-1981 - [0:0] -:logdrop-1982 - [0:0] -:logdrop-1983 - [0:0] -:logdrop-1984 - [0:0] -:logdrop-1985 - [0:0] -:logdrop-1986 - [0:0] -:logdrop-1987 - [0:0] -:logdrop-1988 - [0:0] -:logdrop-1989 - [0:0] :logdrop-199 - [0:0] -:logdrop-1990 - [0:0] -:logdrop-1991 - [0:0] -:logdrop-1992 - [0:0] -:logdrop-1993 - [0:0] -:logdrop-1994 - [0:0] -:logdrop-1995 - [0:0] -:logdrop-1996 - [0:0] -:logdrop-1997 - [0:0] -:logdrop-1998 - [0:0] -:logdrop-1999 - [0:0] :logdrop-2 - [0:0] :logdrop-20 - [0:0] :logdrop-200 - [0:0] -:logdrop-2000 - [0:0] -:logdrop-2001 - [0:0] -:logdrop-2002 - [0:0] -:logdrop-2003 - [0:0] -:logdrop-2004 - [0:0] -:logdrop-2005 - [0:0] -:logdrop-2006 - [0:0] -:logdrop-2007 - [0:0] -:logdrop-2008 - [0:0] -:logdrop-2009 - [0:0] :logdrop-201 - [0:0] -:logdrop-2010 - [0:0] -:logdrop-2011 - [0:0] -:logdrop-2012 - [0:0] -:logdrop-2013 - [0:0] -:logdrop-2014 - [0:0] -:logdrop-2015 - [0:0] -:logdrop-2016 - [0:0] -:logdrop-2017 - [0:0] -:logdrop-2018 - [0:0] -:logdrop-2019 - [0:0] :logdrop-202 - [0:0] -:logdrop-2020 - [0:0] -:logdrop-2021 - [0:0] -:logdrop-2022 - [0:0] -:logdrop-2023 - [0:0] -:logdrop-2024 - [0:0] -:logdrop-2025 - [0:0] -:logdrop-2026 - [0:0] -:logdrop-2027 - [0:0] -:logdrop-2028 - [0:0] -:logdrop-2029 - [0:0] :logdrop-203 - [0:0] -:logdrop-2030 - [0:0] -:logdrop-2031 - [0:0] -:logdrop-2032 - [0:0] -:logdrop-2033 - [0:0] -:logdrop-2034 - [0:0] -:logdrop-2035 - [0:0] -:logdrop-2036 - [0:0] -:logdrop-2037 - [0:0] -:logdrop-2038 - [0:0] -:logdrop-2039 - [0:0] :logdrop-204 - [0:0] -:logdrop-2040 - [0:0] -:logdrop-2041 - [0:0] -:logdrop-2042 - [0:0] -:logdrop-2043 - [0:0] -:logdrop-2044 - [0:0] -:logdrop-2045 - [0:0] -:logdrop-2046 - [0:0] -:logdrop-2047 - [0:0] -:logdrop-2048 - [0:0] -:logdrop-2049 - [0:0] :logdrop-205 - [0:0] -:logdrop-2050 - [0:0] -:logdrop-2051 - [0:0] -:logdrop-2052 - [0:0] -:logdrop-2053 - [0:0] -:logdrop-2054 - [0:0] -:logdrop-2055 - [0:0] -:logdrop-2056 - [0:0] -:logdrop-2057 - [0:0] -:logdrop-2058 - [0:0] -:logdrop-2059 - [0:0] :logdrop-206 - [0:0] -:logdrop-2060 - [0:0] -:logdrop-2061 - [0:0] -:logdrop-2062 - [0:0] -:logdrop-2063 - [0:0] -:logdrop-2064 - [0:0] -:logdrop-2065 - [0:0] -:logdrop-2066 - [0:0] -:logdrop-2067 - [0:0] -:logdrop-2068 - [0:0] -:logdrop-2069 - [0:0] :logdrop-207 - [0:0] -:logdrop-2070 - [0:0] -:logdrop-2071 - [0:0] -:logdrop-2072 - [0:0] -:logdrop-2073 - [0:0] -:logdrop-2074 - [0:0] -:logdrop-2075 - [0:0] -:logdrop-2076 - [0:0] -:logdrop-2077 - [0:0] -:logdrop-2078 - [0:0] -:logdrop-2079 - [0:0] :logdrop-208 - [0:0] -:logdrop-2080 - [0:0] -:logdrop-2081 - [0:0] -:logdrop-2082 - [0:0] -:logdrop-2083 - [0:0] -:logdrop-2084 - [0:0] -:logdrop-2085 - [0:0] -:logdrop-2086 - [0:0] -:logdrop-2087 - [0:0] -:logdrop-2088 - [0:0] -:logdrop-2089 - [0:0] :logdrop-209 - [0:0] -:logdrop-2090 - [0:0] -:logdrop-2091 - [0:0] -:logdrop-2092 - [0:0] -:logdrop-2093 - [0:0] -:logdrop-2094 - [0:0] -:logdrop-2095 - [0:0] -:logdrop-2096 - [0:0] -:logdrop-2097 - [0:0] -:logdrop-2098 - [0:0] -:logdrop-2099 - [0:0] :logdrop-21 - [0:0] :logdrop-210 - [0:0] -:logdrop-2100 - [0:0] -:logdrop-2101 - [0:0] -:logdrop-2102 - [0:0] -:logdrop-2103 - [0:0] -:logdrop-2104 - [0:0] -:logdrop-2105 - [0:0] -:logdrop-2106 - [0:0] -:logdrop-2107 - [0:0] -:logdrop-2108 - [0:0] -:logdrop-2109 - [0:0] :logdrop-211 - [0:0] -:logdrop-2110 - [0:0] -:logdrop-2111 - [0:0] -:logdrop-2112 - [0:0] -:logdrop-2113 - [0:0] -:logdrop-2114 - [0:0] -:logdrop-2115 - [0:0] -:logdrop-2116 - [0:0] -:logdrop-2117 - [0:0] -:logdrop-2118 - [0:0] -:logdrop-2119 - [0:0] :logdrop-212 - [0:0] -:logdrop-2120 - [0:0] -:logdrop-2121 - [0:0] -:logdrop-2122 - [0:0] -:logdrop-2123 - [0:0] -:logdrop-2124 - [0:0] -:logdrop-2125 - [0:0] -:logdrop-2126 - [0:0] -:logdrop-2127 - [0:0] -:logdrop-2128 - [0:0] -:logdrop-2129 - [0:0] :logdrop-213 - [0:0] -:logdrop-2130 - [0:0] -:logdrop-2131 - [0:0] -:logdrop-2132 - [0:0] -:logdrop-2133 - [0:0] -:logdrop-2134 - [0:0] -:logdrop-2135 - [0:0] -:logdrop-2136 - [0:0] -:logdrop-2137 - [0:0] -:logdrop-2138 - [0:0] -:logdrop-2139 - [0:0] :logdrop-214 - [0:0] -:logdrop-2140 - [0:0] -:logdrop-2141 - [0:0] -:logdrop-2142 - [0:0] -:logdrop-2143 - [0:0] -:logdrop-2144 - [0:0] -:logdrop-2145 - [0:0] -:logdrop-2146 - [0:0] -:logdrop-2147 - [0:0] -:logdrop-2148 - [0:0] -:logdrop-2149 - [0:0] :logdrop-215 - [0:0] -:logdrop-2150 - [0:0] -:logdrop-2151 - [0:0] -:logdrop-2152 - [0:0] -:logdrop-2153 - [0:0] -:logdrop-2154 - [0:0] -:logdrop-2155 - [0:0] -:logdrop-2156 - [0:0] -:logdrop-2157 - [0:0] -:logdrop-2158 - [0:0] -:logdrop-2159 - [0:0] :logdrop-216 - [0:0] -:logdrop-2160 - [0:0] -:logdrop-2161 - [0:0] -:logdrop-2162 - [0:0] -:logdrop-2163 - [0:0] -:logdrop-2164 - [0:0] -:logdrop-2165 - [0:0] -:logdrop-2166 - [0:0] -:logdrop-2167 - [0:0] -:logdrop-2168 - [0:0] -:logdrop-2169 - [0:0] :logdrop-217 - [0:0] -:logdrop-2170 - [0:0] -:logdrop-2171 - [0:0] -:logdrop-2172 - [0:0] -:logdrop-2173 - [0:0] -:logdrop-2174 - [0:0] -:logdrop-2175 - [0:0] -:logdrop-2176 - [0:0] -:logdrop-2177 - [0:0] -:logdrop-2178 - [0:0] -:logdrop-2179 - [0:0] :logdrop-218 - [0:0] -:logdrop-2180 - [0:0] -:logdrop-2181 - [0:0] -:logdrop-2182 - [0:0] -:logdrop-2183 - [0:0] -:logdrop-2184 - [0:0] -:logdrop-2185 - [0:0] -:logdrop-2186 - [0:0] -:logdrop-2187 - [0:0] -:logdrop-2188 - [0:0] -:logdrop-2189 - [0:0] :logdrop-219 - [0:0] -:logdrop-2190 - [0:0] -:logdrop-2191 - [0:0] -:logdrop-2192 - [0:0] -:logdrop-2193 - [0:0] -:logdrop-2194 - [0:0] -:logdrop-2195 - [0:0] -:logdrop-2196 - [0:0] -:logdrop-2197 - [0:0] -:logdrop-2198 - [0:0] -:logdrop-2199 - [0:0] :logdrop-22 - [0:0] :logdrop-220 - [0:0] -:logdrop-2200 - [0:0] -:logdrop-2201 - [0:0] -:logdrop-2202 - [0:0] -:logdrop-2203 - [0:0] -:logdrop-2204 - [0:0] :logdrop-221 - [0:0] :logdrop-222 - [0:0] :logdrop-223 - [0:0] @@ -6362,6 +5812,556 @@ :logdrop-997 - [0:0] :logdrop-998 - [0:0] :logdrop-999 - [0:0] +:logdrop-ntp-0 - [0:0] +:logdrop-ntp-1 - [0:0] +:logdrop-ntp-10 - [0:0] +:logdrop-ntp-100 - [0:0] +:logdrop-ntp-101 - [0:0] +:logdrop-ntp-102 - [0:0] +:logdrop-ntp-103 - [0:0] +:logdrop-ntp-104 - [0:0] +:logdrop-ntp-105 - [0:0] +:logdrop-ntp-106 - [0:0] +:logdrop-ntp-107 - [0:0] +:logdrop-ntp-108 - [0:0] +:logdrop-ntp-109 - [0:0] +:logdrop-ntp-11 - [0:0] +:logdrop-ntp-110 - [0:0] +:logdrop-ntp-111 - [0:0] +:logdrop-ntp-112 - [0:0] +:logdrop-ntp-113 - [0:0] +:logdrop-ntp-114 - [0:0] +:logdrop-ntp-115 - [0:0] +:logdrop-ntp-116 - [0:0] +:logdrop-ntp-117 - [0:0] +:logdrop-ntp-118 - [0:0] +:logdrop-ntp-119 - [0:0] +:logdrop-ntp-12 - [0:0] +:logdrop-ntp-120 - [0:0] +:logdrop-ntp-121 - [0:0] +:logdrop-ntp-122 - [0:0] +:logdrop-ntp-123 - [0:0] +:logdrop-ntp-124 - [0:0] +:logdrop-ntp-125 - [0:0] +:logdrop-ntp-126 - [0:0] +:logdrop-ntp-127 - [0:0] +:logdrop-ntp-128 - [0:0] +:logdrop-ntp-129 - [0:0] +:logdrop-ntp-13 - [0:0] +:logdrop-ntp-130 - [0:0] +:logdrop-ntp-131 - [0:0] +:logdrop-ntp-132 - [0:0] +:logdrop-ntp-133 - [0:0] +:logdrop-ntp-134 - [0:0] +:logdrop-ntp-135 - [0:0] +:logdrop-ntp-136 - [0:0] +:logdrop-ntp-137 - [0:0] +:logdrop-ntp-138 - [0:0] +:logdrop-ntp-139 - [0:0] +:logdrop-ntp-14 - [0:0] +:logdrop-ntp-140 - [0:0] +:logdrop-ntp-141 - [0:0] +:logdrop-ntp-142 - [0:0] +:logdrop-ntp-143 - [0:0] +:logdrop-ntp-144 - [0:0] +:logdrop-ntp-145 - [0:0] +:logdrop-ntp-146 - [0:0] +:logdrop-ntp-147 - [0:0] +:logdrop-ntp-148 - [0:0] +:logdrop-ntp-149 - [0:0] +:logdrop-ntp-15 - [0:0] +:logdrop-ntp-150 - [0:0] +:logdrop-ntp-151 - [0:0] +:logdrop-ntp-152 - [0:0] +:logdrop-ntp-153 - [0:0] +:logdrop-ntp-154 - [0:0] +:logdrop-ntp-155 - [0:0] +:logdrop-ntp-156 - [0:0] +:logdrop-ntp-157 - [0:0] +:logdrop-ntp-158 - [0:0] +:logdrop-ntp-159 - [0:0] +:logdrop-ntp-16 - [0:0] +:logdrop-ntp-160 - [0:0] +:logdrop-ntp-161 - [0:0] +:logdrop-ntp-162 - [0:0] +:logdrop-ntp-163 - [0:0] +:logdrop-ntp-164 - [0:0] +:logdrop-ntp-165 - [0:0] +:logdrop-ntp-166 - [0:0] +:logdrop-ntp-167 - [0:0] +:logdrop-ntp-168 - [0:0] +:logdrop-ntp-169 - [0:0] +:logdrop-ntp-17 - [0:0] +:logdrop-ntp-170 - [0:0] +:logdrop-ntp-171 - [0:0] +:logdrop-ntp-172 - [0:0] +:logdrop-ntp-173 - [0:0] +:logdrop-ntp-174 - [0:0] +:logdrop-ntp-175 - [0:0] +:logdrop-ntp-176 - [0:0] +:logdrop-ntp-177 - [0:0] +:logdrop-ntp-178 - [0:0] +:logdrop-ntp-179 - [0:0] +:logdrop-ntp-18 - [0:0] +:logdrop-ntp-180 - [0:0] +:logdrop-ntp-181 - [0:0] +:logdrop-ntp-182 - [0:0] +:logdrop-ntp-183 - [0:0] +:logdrop-ntp-184 - [0:0] +:logdrop-ntp-185 - [0:0] +:logdrop-ntp-186 - [0:0] +:logdrop-ntp-187 - [0:0] +:logdrop-ntp-188 - [0:0] +:logdrop-ntp-189 - [0:0] +:logdrop-ntp-19 - [0:0] +:logdrop-ntp-190 - [0:0] +:logdrop-ntp-191 - [0:0] +:logdrop-ntp-192 - [0:0] +:logdrop-ntp-193 - [0:0] +:logdrop-ntp-194 - [0:0] +:logdrop-ntp-195 - [0:0] +:logdrop-ntp-196 - [0:0] +:logdrop-ntp-197 - [0:0] +:logdrop-ntp-198 - [0:0] +:logdrop-ntp-199 - [0:0] +:logdrop-ntp-2 - [0:0] +:logdrop-ntp-20 - [0:0] +:logdrop-ntp-200 - [0:0] +:logdrop-ntp-201 - [0:0] +:logdrop-ntp-202 - [0:0] +:logdrop-ntp-203 - [0:0] +:logdrop-ntp-204 - [0:0] +:logdrop-ntp-205 - [0:0] +:logdrop-ntp-206 - [0:0] +:logdrop-ntp-207 - [0:0] +:logdrop-ntp-208 - [0:0] +:logdrop-ntp-209 - [0:0] +:logdrop-ntp-21 - [0:0] +:logdrop-ntp-210 - [0:0] +:logdrop-ntp-211 - [0:0] +:logdrop-ntp-212 - [0:0] +:logdrop-ntp-213 - [0:0] +:logdrop-ntp-214 - [0:0] +:logdrop-ntp-215 - [0:0] +:logdrop-ntp-216 - [0:0] +:logdrop-ntp-217 - [0:0] +:logdrop-ntp-218 - [0:0] +:logdrop-ntp-219 - [0:0] +:logdrop-ntp-22 - [0:0] +:logdrop-ntp-220 - [0:0] +:logdrop-ntp-221 - [0:0] +:logdrop-ntp-222 - [0:0] +:logdrop-ntp-223 - [0:0] +:logdrop-ntp-224 - [0:0] +:logdrop-ntp-225 - [0:0] +:logdrop-ntp-226 - [0:0] +:logdrop-ntp-227 - [0:0] +:logdrop-ntp-228 - [0:0] +:logdrop-ntp-229 - [0:0] +:logdrop-ntp-23 - [0:0] +:logdrop-ntp-230 - [0:0] +:logdrop-ntp-231 - [0:0] +:logdrop-ntp-232 - [0:0] +:logdrop-ntp-233 - [0:0] +:logdrop-ntp-234 - [0:0] +:logdrop-ntp-235 - [0:0] +:logdrop-ntp-236 - [0:0] +:logdrop-ntp-237 - [0:0] +:logdrop-ntp-238 - [0:0] +:logdrop-ntp-239 - [0:0] +:logdrop-ntp-24 - [0:0] +:logdrop-ntp-240 - [0:0] +:logdrop-ntp-241 - [0:0] +:logdrop-ntp-242 - [0:0] +:logdrop-ntp-243 - [0:0] +:logdrop-ntp-244 - [0:0] +:logdrop-ntp-245 - [0:0] +:logdrop-ntp-246 - [0:0] +:logdrop-ntp-247 - [0:0] +:logdrop-ntp-248 - [0:0] +:logdrop-ntp-249 - [0:0] +:logdrop-ntp-25 - [0:0] +:logdrop-ntp-250 - [0:0] +:logdrop-ntp-251 - [0:0] +:logdrop-ntp-252 - [0:0] +:logdrop-ntp-253 - [0:0] +:logdrop-ntp-254 - [0:0] +:logdrop-ntp-255 - [0:0] +:logdrop-ntp-256 - [0:0] +:logdrop-ntp-257 - [0:0] +:logdrop-ntp-258 - [0:0] +:logdrop-ntp-259 - [0:0] +:logdrop-ntp-26 - [0:0] +:logdrop-ntp-260 - [0:0] +:logdrop-ntp-261 - [0:0] +:logdrop-ntp-262 - [0:0] +:logdrop-ntp-263 - [0:0] +:logdrop-ntp-264 - [0:0] +:logdrop-ntp-265 - [0:0] +:logdrop-ntp-266 - [0:0] +:logdrop-ntp-267 - [0:0] +:logdrop-ntp-268 - [0:0] +:logdrop-ntp-269 - [0:0] +:logdrop-ntp-27 - [0:0] +:logdrop-ntp-270 - [0:0] +:logdrop-ntp-271 - [0:0] +:logdrop-ntp-272 - [0:0] +:logdrop-ntp-273 - [0:0] +:logdrop-ntp-274 - [0:0] +:logdrop-ntp-275 - [0:0] +:logdrop-ntp-276 - [0:0] +:logdrop-ntp-277 - [0:0] +:logdrop-ntp-278 - [0:0] +:logdrop-ntp-279 - [0:0] +:logdrop-ntp-28 - [0:0] +:logdrop-ntp-280 - [0:0] +:logdrop-ntp-281 - [0:0] +:logdrop-ntp-282 - [0:0] +:logdrop-ntp-283 - [0:0] +:logdrop-ntp-284 - [0:0] +:logdrop-ntp-285 - [0:0] +:logdrop-ntp-286 - [0:0] +:logdrop-ntp-287 - [0:0] +:logdrop-ntp-288 - [0:0] +:logdrop-ntp-289 - [0:0] +:logdrop-ntp-29 - [0:0] +:logdrop-ntp-290 - [0:0] +:logdrop-ntp-291 - [0:0] +:logdrop-ntp-292 - [0:0] +:logdrop-ntp-293 - [0:0] +:logdrop-ntp-294 - [0:0] +:logdrop-ntp-295 - [0:0] +:logdrop-ntp-296 - [0:0] +:logdrop-ntp-297 - [0:0] +:logdrop-ntp-298 - [0:0] +:logdrop-ntp-299 - [0:0] +:logdrop-ntp-3 - [0:0] +:logdrop-ntp-30 - [0:0] +:logdrop-ntp-300 - [0:0] +:logdrop-ntp-301 - [0:0] +:logdrop-ntp-302 - [0:0] +:logdrop-ntp-303 - [0:0] +:logdrop-ntp-304 - [0:0] +:logdrop-ntp-305 - [0:0] +:logdrop-ntp-306 - [0:0] +:logdrop-ntp-307 - [0:0] +:logdrop-ntp-308 - [0:0] +:logdrop-ntp-309 - [0:0] +:logdrop-ntp-31 - [0:0] +:logdrop-ntp-310 - [0:0] +:logdrop-ntp-311 - [0:0] +:logdrop-ntp-312 - [0:0] +:logdrop-ntp-313 - [0:0] +:logdrop-ntp-314 - [0:0] +:logdrop-ntp-315 - [0:0] +:logdrop-ntp-316 - [0:0] +:logdrop-ntp-317 - [0:0] +:logdrop-ntp-318 - [0:0] +:logdrop-ntp-319 - [0:0] +:logdrop-ntp-32 - [0:0] +:logdrop-ntp-320 - [0:0] +:logdrop-ntp-321 - [0:0] +:logdrop-ntp-322 - [0:0] +:logdrop-ntp-323 - [0:0] +:logdrop-ntp-324 - [0:0] +:logdrop-ntp-325 - [0:0] +:logdrop-ntp-326 - [0:0] +:logdrop-ntp-327 - [0:0] +:logdrop-ntp-328 - [0:0] +:logdrop-ntp-329 - [0:0] +:logdrop-ntp-33 - [0:0] +:logdrop-ntp-330 - [0:0] +:logdrop-ntp-331 - [0:0] +:logdrop-ntp-332 - [0:0] +:logdrop-ntp-333 - [0:0] +:logdrop-ntp-334 - [0:0] +:logdrop-ntp-335 - [0:0] +:logdrop-ntp-336 - [0:0] +:logdrop-ntp-337 - [0:0] +:logdrop-ntp-338 - [0:0] +:logdrop-ntp-339 - [0:0] +:logdrop-ntp-34 - [0:0] +:logdrop-ntp-340 - [0:0] +:logdrop-ntp-341 - [0:0] +:logdrop-ntp-342 - [0:0] +:logdrop-ntp-343 - [0:0] +:logdrop-ntp-344 - [0:0] +:logdrop-ntp-345 - [0:0] +:logdrop-ntp-346 - [0:0] +:logdrop-ntp-347 - [0:0] +:logdrop-ntp-348 - [0:0] +:logdrop-ntp-349 - [0:0] +:logdrop-ntp-35 - [0:0] +:logdrop-ntp-350 - [0:0] +:logdrop-ntp-351 - [0:0] +:logdrop-ntp-352 - [0:0] +:logdrop-ntp-353 - [0:0] +:logdrop-ntp-354 - [0:0] +:logdrop-ntp-355 - [0:0] +:logdrop-ntp-356 - [0:0] +:logdrop-ntp-357 - [0:0] +:logdrop-ntp-358 - [0:0] +:logdrop-ntp-359 - [0:0] +:logdrop-ntp-36 - [0:0] +:logdrop-ntp-360 - [0:0] +:logdrop-ntp-361 - [0:0] +:logdrop-ntp-362 - [0:0] +:logdrop-ntp-363 - [0:0] +:logdrop-ntp-364 - [0:0] +:logdrop-ntp-365 - [0:0] +:logdrop-ntp-366 - [0:0] +:logdrop-ntp-367 - [0:0] +:logdrop-ntp-368 - [0:0] +:logdrop-ntp-369 - [0:0] +:logdrop-ntp-37 - [0:0] +:logdrop-ntp-370 - [0:0] +:logdrop-ntp-371 - [0:0] +:logdrop-ntp-372 - [0:0] +:logdrop-ntp-373 - [0:0] +:logdrop-ntp-374 - [0:0] +:logdrop-ntp-375 - [0:0] +:logdrop-ntp-376 - [0:0] +:logdrop-ntp-377 - [0:0] +:logdrop-ntp-378 - [0:0] +:logdrop-ntp-379 - [0:0] +:logdrop-ntp-38 - [0:0] +:logdrop-ntp-380 - [0:0] +:logdrop-ntp-381 - [0:0] +:logdrop-ntp-382 - [0:0] +:logdrop-ntp-383 - [0:0] +:logdrop-ntp-384 - [0:0] +:logdrop-ntp-385 - [0:0] +:logdrop-ntp-386 - [0:0] +:logdrop-ntp-387 - [0:0] +:logdrop-ntp-388 - [0:0] +:logdrop-ntp-389 - [0:0] +:logdrop-ntp-39 - [0:0] +:logdrop-ntp-390 - [0:0] +:logdrop-ntp-391 - [0:0] +:logdrop-ntp-392 - [0:0] +:logdrop-ntp-393 - [0:0] +:logdrop-ntp-394 - [0:0] +:logdrop-ntp-395 - [0:0] +:logdrop-ntp-396 - [0:0] +:logdrop-ntp-397 - [0:0] +:logdrop-ntp-398 - [0:0] +:logdrop-ntp-399 - [0:0] +:logdrop-ntp-4 - [0:0] +:logdrop-ntp-40 - [0:0] +:logdrop-ntp-400 - [0:0] +:logdrop-ntp-401 - [0:0] +:logdrop-ntp-402 - [0:0] +:logdrop-ntp-403 - [0:0] +:logdrop-ntp-404 - [0:0] +:logdrop-ntp-405 - [0:0] +:logdrop-ntp-406 - [0:0] +:logdrop-ntp-407 - [0:0] +:logdrop-ntp-408 - [0:0] +:logdrop-ntp-409 - [0:0] +:logdrop-ntp-41 - [0:0] +:logdrop-ntp-410 - [0:0] +:logdrop-ntp-411 - [0:0] +:logdrop-ntp-412 - [0:0] +:logdrop-ntp-413 - [0:0] +:logdrop-ntp-414 - [0:0] +:logdrop-ntp-415 - [0:0] +:logdrop-ntp-416 - [0:0] +:logdrop-ntp-417 - [0:0] +:logdrop-ntp-418 - [0:0] +:logdrop-ntp-419 - [0:0] +:logdrop-ntp-42 - [0:0] +:logdrop-ntp-420 - [0:0] +:logdrop-ntp-421 - [0:0] +:logdrop-ntp-422 - [0:0] +:logdrop-ntp-423 - [0:0] +:logdrop-ntp-424 - [0:0] +:logdrop-ntp-425 - [0:0] +:logdrop-ntp-426 - [0:0] +:logdrop-ntp-427 - [0:0] +:logdrop-ntp-428 - [0:0] +:logdrop-ntp-429 - [0:0] +:logdrop-ntp-43 - [0:0] +:logdrop-ntp-430 - [0:0] +:logdrop-ntp-431 - [0:0] +:logdrop-ntp-432 - [0:0] +:logdrop-ntp-433 - [0:0] +:logdrop-ntp-434 - [0:0] +:logdrop-ntp-435 - [0:0] +:logdrop-ntp-436 - [0:0] +:logdrop-ntp-437 - [0:0] +:logdrop-ntp-438 - [0:0] +:logdrop-ntp-439 - [0:0] +:logdrop-ntp-44 - [0:0] +:logdrop-ntp-440 - [0:0] +:logdrop-ntp-441 - [0:0] +:logdrop-ntp-442 - [0:0] +:logdrop-ntp-443 - [0:0] +:logdrop-ntp-444 - [0:0] +:logdrop-ntp-445 - [0:0] +:logdrop-ntp-446 - [0:0] +:logdrop-ntp-447 - [0:0] +:logdrop-ntp-448 - [0:0] +:logdrop-ntp-449 - [0:0] +:logdrop-ntp-45 - [0:0] +:logdrop-ntp-450 - [0:0] +:logdrop-ntp-451 - [0:0] +:logdrop-ntp-452 - [0:0] +:logdrop-ntp-453 - [0:0] +:logdrop-ntp-454 - [0:0] +:logdrop-ntp-455 - [0:0] +:logdrop-ntp-456 - [0:0] +:logdrop-ntp-457 - [0:0] +:logdrop-ntp-458 - [0:0] +:logdrop-ntp-459 - [0:0] +:logdrop-ntp-46 - [0:0] +:logdrop-ntp-460 - [0:0] +:logdrop-ntp-461 - [0:0] +:logdrop-ntp-462 - [0:0] +:logdrop-ntp-463 - [0:0] +:logdrop-ntp-464 - [0:0] +:logdrop-ntp-465 - [0:0] +:logdrop-ntp-466 - [0:0] +:logdrop-ntp-467 - [0:0] +:logdrop-ntp-468 - [0:0] +:logdrop-ntp-469 - [0:0] +:logdrop-ntp-47 - [0:0] +:logdrop-ntp-470 - [0:0] +:logdrop-ntp-471 - [0:0] +:logdrop-ntp-472 - [0:0] +:logdrop-ntp-473 - [0:0] +:logdrop-ntp-474 - [0:0] +:logdrop-ntp-475 - [0:0] +:logdrop-ntp-476 - [0:0] +:logdrop-ntp-477 - [0:0] +:logdrop-ntp-478 - [0:0] +:logdrop-ntp-479 - [0:0] +:logdrop-ntp-48 - [0:0] +:logdrop-ntp-480 - [0:0] +:logdrop-ntp-481 - [0:0] +:logdrop-ntp-482 - [0:0] +:logdrop-ntp-483 - [0:0] +:logdrop-ntp-484 - [0:0] +:logdrop-ntp-485 - [0:0] +:logdrop-ntp-486 - [0:0] +:logdrop-ntp-487 - [0:0] +:logdrop-ntp-488 - [0:0] +:logdrop-ntp-489 - [0:0] +:logdrop-ntp-49 - [0:0] +:logdrop-ntp-490 - [0:0] +:logdrop-ntp-491 - [0:0] +:logdrop-ntp-492 - [0:0] +:logdrop-ntp-493 - [0:0] +:logdrop-ntp-494 - [0:0] +:logdrop-ntp-495 - [0:0] +:logdrop-ntp-496 - [0:0] +:logdrop-ntp-497 - [0:0] +:logdrop-ntp-498 - [0:0] +:logdrop-ntp-499 - [0:0] +:logdrop-ntp-5 - [0:0] +:logdrop-ntp-50 - [0:0] +:logdrop-ntp-500 - [0:0] +:logdrop-ntp-501 - [0:0] +:logdrop-ntp-502 - [0:0] +:logdrop-ntp-503 - [0:0] +:logdrop-ntp-504 - [0:0] +:logdrop-ntp-505 - [0:0] +:logdrop-ntp-506 - [0:0] +:logdrop-ntp-507 - [0:0] +:logdrop-ntp-508 - [0:0] +:logdrop-ntp-509 - [0:0] +:logdrop-ntp-51 - [0:0] +:logdrop-ntp-510 - [0:0] +:logdrop-ntp-511 - [0:0] +:logdrop-ntp-512 - [0:0] +:logdrop-ntp-513 - [0:0] +:logdrop-ntp-514 - [0:0] +:logdrop-ntp-515 - [0:0] +:logdrop-ntp-516 - [0:0] +:logdrop-ntp-517 - [0:0] +:logdrop-ntp-518 - [0:0] +:logdrop-ntp-519 - [0:0] +:logdrop-ntp-52 - [0:0] +:logdrop-ntp-520 - [0:0] +:logdrop-ntp-521 - [0:0] +:logdrop-ntp-522 - [0:0] +:logdrop-ntp-523 - [0:0] +:logdrop-ntp-524 - [0:0] +:logdrop-ntp-525 - [0:0] +:logdrop-ntp-526 - [0:0] +:logdrop-ntp-527 - [0:0] +:logdrop-ntp-528 - [0:0] +:logdrop-ntp-529 - [0:0] +:logdrop-ntp-53 - [0:0] +:logdrop-ntp-530 - [0:0] +:logdrop-ntp-531 - [0:0] +:logdrop-ntp-532 - [0:0] +:logdrop-ntp-533 - [0:0] +:logdrop-ntp-534 - [0:0] +:logdrop-ntp-535 - [0:0] +:logdrop-ntp-536 - [0:0] +:logdrop-ntp-537 - [0:0] +:logdrop-ntp-538 - [0:0] +:logdrop-ntp-539 - [0:0] +:logdrop-ntp-54 - [0:0] +:logdrop-ntp-540 - [0:0] +:logdrop-ntp-541 - [0:0] +:logdrop-ntp-542 - [0:0] +:logdrop-ntp-543 - [0:0] +:logdrop-ntp-544 - [0:0] +:logdrop-ntp-545 - [0:0] +:logdrop-ntp-546 - [0:0] +:logdrop-ntp-547 - [0:0] +:logdrop-ntp-548 - [0:0] +:logdrop-ntp-549 - [0:0] +:logdrop-ntp-55 - [0:0] +:logdrop-ntp-56 - [0:0] +:logdrop-ntp-57 - [0:0] +:logdrop-ntp-58 - [0:0] +:logdrop-ntp-59 - [0:0] +:logdrop-ntp-6 - [0:0] +:logdrop-ntp-60 - [0:0] +:logdrop-ntp-61 - [0:0] +:logdrop-ntp-62 - [0:0] +:logdrop-ntp-63 - [0:0] +:logdrop-ntp-64 - [0:0] +:logdrop-ntp-65 - [0:0] +:logdrop-ntp-66 - [0:0] +:logdrop-ntp-67 - [0:0] +:logdrop-ntp-68 - [0:0] +:logdrop-ntp-69 - [0:0] +:logdrop-ntp-7 - [0:0] +:logdrop-ntp-70 - [0:0] +:logdrop-ntp-71 - [0:0] +:logdrop-ntp-72 - [0:0] +:logdrop-ntp-73 - [0:0] +:logdrop-ntp-74 - [0:0] +:logdrop-ntp-75 - [0:0] +:logdrop-ntp-76 - [0:0] +:logdrop-ntp-77 - [0:0] +:logdrop-ntp-78 - [0:0] +:logdrop-ntp-79 - [0:0] +:logdrop-ntp-8 - [0:0] +:logdrop-ntp-80 - [0:0] +:logdrop-ntp-81 - [0:0] +:logdrop-ntp-82 - [0:0] +:logdrop-ntp-83 - [0:0] +:logdrop-ntp-84 - [0:0] +:logdrop-ntp-85 - [0:0] +:logdrop-ntp-86 - [0:0] +:logdrop-ntp-87 - [0:0] +:logdrop-ntp-88 - [0:0] +:logdrop-ntp-89 - [0:0] +:logdrop-ntp-9 - [0:0] +:logdrop-ntp-90 - [0:0] +:logdrop-ntp-91 - [0:0] +:logdrop-ntp-92 - [0:0] +:logdrop-ntp-93 - [0:0] +:logdrop-ntp-94 - [0:0] +:logdrop-ntp-95 - [0:0] +:logdrop-ntp-96 - [0:0] +:logdrop-ntp-97 - [0:0] +:logdrop-ntp-98 - [0:0] +:logdrop-ntp-99 - [0:0] :logpass-0 - [0:0] :logpass-1 - [0:0] :logpass-2 - [0:0] @@ -8838,25 +8838,25 @@ -A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set -A FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set -A FORWARD -j ACCEPT --A FORWARD -j logdrop-2200 +-A FORWARD -j logdrop-1650 -A FORWARD -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-99 --A FORWARD -j logdrop-2201 +-A FORWARD -j logaccept-66 +-A FORWARD -j logdrop-1651 -A FORWARD -j logpass-0 --A FORWARD -j logaccept-100 --A FORWARD -j logdrop-2202 +-A FORWARD -j logaccept-67 +-A FORWARD -j logdrop-1652 -A FORWARD -j logpass-1 --A FORWARD -j logaccept-101 --A FORWARD -j logdrop-2203 +-A FORWARD -j logaccept-68 +-A FORWARD -j logdrop-1653 -A FORWARD -j logpass-2 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-102 --A FORWARD -j logdrop-2204 +-A FORWARD -j logaccept-69 +-A FORWARD -j logdrop-1654 -A FORWARD -j logpass-3 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT @@ -10402,982 +10402,982 @@ -A INPUT -j logaccept-final-304 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-305 --A INPUT -i eth0 -j limit-2928 --A INPUT -i eth0 -j limit-2929 --A INPUT -i eth0 -j limit-2930 --A INPUT -i eth0 -j limit-2931 --A INPUT -i eth0 -j limit-2932 --A INPUT -i eth0 -j limit-2933 --A INPUT -i eth0 -j limit-2934 --A INPUT -i eth0 -j limit-2935 --A INPUT -i eth0 -j limit-2936 --A INPUT -i eth0 -j limit-2937 --A INPUT -i eth0 -j limit-2938 --A INPUT -i eth0 -j limit-2939 --A INPUT -i eth0 -j limit-2940 --A INPUT -i eth0 -j limit-2941 --A INPUT -i eth0 -j limit-2942 --A INPUT -i eth0 -j limit-2943 --A INPUT -i eth0 -j limit-2944 --A INPUT -i eth0 -j limit-2945 --A INPUT -i eth0 -j limit-2946 --A INPUT -i eth0 -j limit-2947 --A INPUT -i eth0 -j limit-2948 --A INPUT -i eth0 -j limit-2949 --A INPUT -i eth0 -j limit-2950 --A INPUT -i eth0 -j limit-2951 --A INPUT -i eth0 -j limit-2952 --A INPUT -i eth0 -j limit-2953 --A INPUT -i eth0 -j limit-2954 --A INPUT -i eth0 -j limit-2955 --A INPUT -i eth0 -j limit-2956 --A INPUT -i eth0 -j limit-2957 --A INPUT -i eth0 -j limit-2958 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2960 --A INPUT -i eth0 -j limit-2961 --A INPUT -i eth0 -j limit-2962 --A INPUT -i eth0 -j limit-2963 --A INPUT -i eth0 -j limit-2964 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2966 --A INPUT -i eth0 -j limit-2967 --A INPUT -i eth0 -j limit-2968 --A INPUT -i eth0 -j limit-2969 --A INPUT -i eth0 -j limit-2970 --A INPUT -i eth0 -j limit-2971 --A INPUT -i eth0 -j limit-2972 --A INPUT -i eth0 -j limit-2973 --A INPUT -i eth0 -j limit-2974 --A INPUT -i eth0 -j limit-2975 --A INPUT -i eth0 -j limit-2976 --A INPUT -i eth0 -j limit-2977 --A INPUT -i eth0 -j limit-2978 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2980 --A INPUT -i eth0 -j limit-2981 --A INPUT -i eth0 -j limit-2982 --A INPUT -i eth0 -j limit-2983 --A INPUT -i eth0 -j limit-2984 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2986 --A INPUT -i eth0 -j limit-2987 --A INPUT -i eth0 -j limit-2988 --A INPUT -i eth0 -j limit-2989 --A INPUT -i eth0 -j limit-2990 --A INPUT -i eth0 -j limit-2991 --A INPUT -i eth0 -j limit-2992 --A INPUT -i eth0 -j limit-2993 --A INPUT -i eth0 -j limit-2994 --A INPUT -i eth0 -j limit-2995 --A INPUT -i eth0 -j limit-2996 --A INPUT -i eth0 -j limit-2997 --A INPUT -i eth0 -j limit-2998 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3000 --A INPUT -i eth0 -j limit-3001 --A INPUT -i eth0 -j limit-3002 --A INPUT -i eth0 -j limit-3003 --A INPUT -i eth0 -j limit-3004 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3006 --A INPUT -i eth0 -j limit-3007 --A INPUT -i eth0 -j limit-3008 --A INPUT -i eth0 -j limit-3009 --A INPUT -i eth0 -j limit-3010 --A INPUT -i eth0 -j limit-3011 --A INPUT -i eth0 -j limit-3012 --A INPUT -i eth0 -j limit-3013 --A INPUT -i eth0 -j limit-3014 --A INPUT -i eth0 -j limit-3015 --A INPUT -i eth0 -j limit-3016 --A INPUT -i eth0 -j limit-3017 --A INPUT -i eth0 -j limit-3018 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3020 --A INPUT -i eth0 -j limit-3021 --A INPUT -i eth0 -j limit-3022 --A INPUT -i eth0 -j limit-3023 --A INPUT -i eth0 -j limit-3024 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3026 --A INPUT -i eth0 -j limit-3027 --A INPUT -i eth0 -j limit-3028 --A INPUT -i eth0 -j limit-3029 --A INPUT -i eth0 -j limit-3030 --A INPUT -i eth0 -j limit-3031 --A INPUT -i eth0 -j limit-3032 --A INPUT -i eth0 -j limit-3033 --A INPUT -i eth0 -j limit-3034 --A INPUT -i eth0 -j limit-3035 --A INPUT -i eth0 -j limit-3036 --A INPUT -i eth0 -j limit-3037 --A INPUT -i eth0 -j limit-3038 --A INPUT -i eth0 -j limit-3039 --A INPUT -i eth0 -j limit-3040 --A INPUT -i eth0 -j limit-3041 --A INPUT -i eth0 -j limit-3042 --A INPUT -i eth0 -j limit-3043 --A INPUT -i eth0 -j limit-3044 --A INPUT -i eth0 -j limit-3045 --A INPUT -i eth0 -j limit-3046 --A INPUT -i eth0 -j limit-3047 --A INPUT -i eth0 -j limit-3048 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1681 --A INPUT -i eth0 -j limit-3050 --A INPUT -i eth0 -j limit-3051 --A INPUT -i eth0 -j limit-3052 --A INPUT -i eth0 -j limit-3053 --A INPUT -i eth0 -j limit-3054 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1687 --A INPUT -i eth0 -j limit-3056 --A INPUT -i eth0 -j limit-3057 --A INPUT -i eth0 -j limit-3058 --A INPUT -i eth0 -j limit-3059 --A INPUT -i eth0 -j limit-3060 --A INPUT -i eth0 -j limit-3061 --A INPUT -i eth0 -j limit-3062 --A INPUT -i eth0 -j limit-3063 --A INPUT -i eth0 -j limit-3064 --A INPUT -i eth0 -j limit-3065 --A INPUT -i eth0 -j limit-3066 --A INPUT -i eth0 -j limit-3067 --A INPUT -i eth0 -j limit-3068 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1701 --A INPUT -i eth0 -j limit-3070 --A INPUT -i eth0 -j limit-3071 --A INPUT -i eth0 -j limit-3072 --A INPUT -i eth0 -j limit-3073 --A INPUT -i eth0 -j limit-3074 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1707 --A INPUT -i eth0 -j limit-3076 --A INPUT -i eth0 -j limit-3077 --A INPUT -i eth0 -j limit-3078 --A INPUT -i eth0 -j limit-3079 --A INPUT -i eth0 -j limit-3080 --A INPUT -i eth0 -j limit-3081 --A INPUT -i eth0 -j limit-3082 --A INPUT -i eth0 -j limit-3083 --A INPUT -i eth0 -j limit-3084 --A INPUT -i eth0 -j limit-3085 --A INPUT -i eth0 -j limit-3086 --A INPUT -i eth0 -j limit-3087 --A INPUT -i eth0 -j limit-3088 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1721 --A INPUT -i eth0 -j limit-3090 --A INPUT -i eth0 -j limit-3091 --A INPUT -i eth0 -j limit-3092 --A INPUT -i eth0 -j limit-3093 --A INPUT -i eth0 -j limit-3094 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1727 --A INPUT -i eth0 -j limit-3096 --A INPUT -i eth0 -j limit-3097 --A INPUT -i eth0 -j limit-3098 --A INPUT -i eth0 -j limit-3099 --A INPUT -i eth0 -j limit-3100 --A INPUT -i eth0 -j limit-3101 --A INPUT -i eth0 -j limit-3102 --A INPUT -i eth0 -j limit-3103 --A INPUT -i eth0 -j limit-3104 --A INPUT -i eth0 -j limit-3105 --A INPUT -i eth0 -j limit-3106 --A INPUT -i eth0 -j limit-3107 --A INPUT -i eth0 -j limit-3108 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1741 --A INPUT -i eth0 -j limit-3110 --A INPUT -i eth0 -j limit-3111 --A INPUT -i eth0 -j limit-3112 --A INPUT -i eth0 -j limit-3113 --A INPUT -i eth0 -j limit-3114 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1747 --A INPUT -i eth0 -j limit-3116 --A INPUT -i eth0 -j limit-3117 --A INPUT -i eth0 -j limit-3118 --A INPUT -i eth0 -j limit-3119 --A INPUT -i eth0 -j limit-3120 --A INPUT -i eth0 -j limit-3121 --A INPUT -i eth0 -j limit-3122 --A INPUT -i eth0 -j limit-3123 --A INPUT -i eth0 -j limit-3124 --A INPUT -i eth0 -j limit-3125 --A INPUT -i eth0 -j limit-3126 --A INPUT -i eth0 -j limit-3127 --A INPUT -i eth0 -j limit-3128 --A INPUT -i eth0 -j limit-3129 --A INPUT -i eth0 -j limit-3130 --A INPUT -i eth0 -j limit-3131 --A INPUT -i eth0 -j limit-3132 --A INPUT -i eth0 -j limit-3133 --A INPUT -i eth0 -j limit-3134 --A INPUT -i eth0 -j limit-3135 --A INPUT -i eth0 -j limit-3136 --A INPUT -i eth0 -j limit-3137 --A INPUT -i eth0 -j limit-3138 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1771 --A INPUT -i eth0 -j limit-3140 --A INPUT -i eth0 -j limit-3141 --A INPUT -i eth0 -j limit-3142 --A INPUT -i eth0 -j limit-3143 --A INPUT -i eth0 -j limit-3144 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1777 --A INPUT -i eth0 -j limit-3146 --A INPUT -i eth0 -j limit-3147 --A INPUT -i eth0 -j limit-3148 --A INPUT -i eth0 -j limit-3149 --A INPUT -i eth0 -j limit-3150 --A INPUT -i eth0 -j limit-3151 --A INPUT -i eth0 -j limit-3152 --A INPUT -i eth0 -j limit-3153 --A INPUT -i eth0 -j limit-3154 --A INPUT -i eth0 -j limit-3155 --A INPUT -i eth0 -j limit-3156 --A INPUT -i eth0 -j limit-3157 --A INPUT -i eth0 -j limit-3158 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1791 --A INPUT -i eth0 -j limit-3160 --A INPUT -i eth0 -j limit-3161 --A INPUT -i eth0 -j limit-3162 --A INPUT -i eth0 -j limit-3163 --A INPUT -i eth0 -j limit-3164 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1797 --A INPUT -i eth0 -j limit-3166 --A INPUT -i eth0 -j limit-3167 --A INPUT -i eth0 -j limit-3168 --A INPUT -i eth0 -j limit-3169 --A INPUT -i eth0 -j limit-3170 --A INPUT -i eth0 -j limit-3171 --A INPUT -i eth0 -j limit-3172 --A INPUT -i eth0 -j limit-3173 --A INPUT -i eth0 -j limit-3174 --A INPUT -i eth0 -j limit-3175 --A INPUT -i eth0 -j limit-3176 --A INPUT -i eth0 -j limit-3177 --A INPUT -i eth0 -j limit-3178 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1811 --A INPUT -i eth0 -j limit-3180 --A INPUT -i eth0 -j limit-3181 --A INPUT -i eth0 -j limit-3182 --A INPUT -i eth0 -j limit-3183 --A INPUT -i eth0 -j limit-3184 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1817 --A INPUT -i eth0 -j limit-3186 --A INPUT -i eth0 -j limit-3187 --A INPUT -i eth0 -j limit-3188 --A INPUT -i eth0 -j limit-3189 --A INPUT -i eth0 -j limit-3190 --A INPUT -i eth0 -j limit-3191 --A INPUT -i eth0 -j limit-3192 --A INPUT -i eth0 -j limit-3193 --A INPUT -i eth0 -j limit-3194 --A INPUT -i eth0 -j limit-3195 --A INPUT -i eth0 -j limit-3196 --A INPUT -i eth0 -j limit-3197 --A INPUT -i eth0 -j limit-3198 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1831 --A INPUT -i eth0 -j limit-3200 --A INPUT -i eth0 -j limit-3201 --A INPUT -i eth0 -j limit-3202 --A INPUT -i eth0 -j limit-3203 --A INPUT -i eth0 -j limit-3204 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1837 --A INPUT -i eth0 -j limit-3206 --A INPUT -i eth0 -j limit-3207 --A INPUT -i eth0 -j limit-3208 --A INPUT -i eth0 -j limit-3209 --A INPUT -i eth0 -j limit-3210 --A INPUT -i eth0 -j limit-3211 --A INPUT -i eth0 -j limit-3212 --A INPUT -i eth0 -j limit-3213 --A INPUT -i eth0 -j limit-3214 --A INPUT -i eth0 -j limit-3215 --A INPUT -i eth0 -j limit-3216 --A INPUT -i eth0 -j limit-3217 --A INPUT -i eth0 -j limit-3218 --A INPUT -i eth0 -j limit-3219 --A INPUT -i eth0 -j limit-3220 --A INPUT -i eth0 -j limit-3221 --A INPUT -i eth0 -j limit-3222 --A INPUT -i eth0 -j limit-3223 --A INPUT -i eth0 -j limit-3224 --A INPUT -i eth0 -j limit-3225 --A INPUT -i eth0 -j limit-3226 --A INPUT -i eth0 -j limit-3227 --A INPUT -i eth0 -j limit-3228 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3230 --A INPUT -i eth0 -j limit-3231 --A INPUT -i eth0 -j limit-3232 --A INPUT -i eth0 -j limit-3233 --A INPUT -i eth0 -j limit-3234 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3236 --A INPUT -i eth0 -j limit-3237 --A INPUT -i eth0 -j limit-3238 --A INPUT -i eth0 -j limit-3239 --A INPUT -i eth0 -j limit-3240 --A INPUT -i eth0 -j limit-3241 --A INPUT -i eth0 -j limit-3242 --A INPUT -i eth0 -j limit-3243 --A INPUT -i eth0 -j limit-3244 --A INPUT -i eth0 -j limit-3245 --A INPUT -i eth0 -j limit-3246 --A INPUT -i eth0 -j limit-3247 --A INPUT -i eth0 -j limit-3248 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3250 --A INPUT -i eth0 -j limit-3251 --A INPUT -i eth0 -j limit-3252 --A INPUT -i eth0 -j limit-3253 --A INPUT -i eth0 -j limit-3254 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3256 --A INPUT -i eth0 -j limit-3257 --A INPUT -i eth0 -j limit-3258 --A INPUT -i eth0 -j limit-3259 --A INPUT -i eth0 -j limit-3260 --A INPUT -i eth0 -j limit-3261 --A INPUT -i eth0 -j limit-3262 --A INPUT -i eth0 -j limit-3263 --A INPUT -i eth0 -j limit-3264 --A INPUT -i eth0 -j limit-3265 --A INPUT -i eth0 -j limit-3266 --A INPUT -i eth0 -j limit-3267 --A INPUT -i eth0 -j limit-3268 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3270 --A INPUT -i eth0 -j limit-3271 --A INPUT -i eth0 -j limit-3272 --A INPUT -i eth0 -j limit-3273 --A INPUT -i eth0 -j limit-3274 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3276 --A INPUT -i eth0 -j limit-3277 --A INPUT -i eth0 -j limit-3278 --A INPUT -i eth0 -j limit-3279 --A INPUT -i eth0 -j limit-3280 --A INPUT -i eth0 -j limit-3281 --A INPUT -i eth0 -j limit-3282 --A INPUT -i eth0 -j limit-3283 --A INPUT -i eth0 -j limit-3284 --A INPUT -i eth0 -j limit-3285 --A INPUT -i eth0 -j limit-3286 --A INPUT -i eth0 -j limit-3287 --A INPUT -i eth0 -j limit-3288 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3290 --A INPUT -i eth0 -j limit-3291 --A INPUT -i eth0 -j limit-3292 --A INPUT -i eth0 -j limit-3293 --A INPUT -i eth0 -j limit-3294 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3296 --A INPUT -i eth0 -j limit-3297 --A INPUT -i eth0 -j limit-3298 --A INPUT -i eth0 -j limit-3299 --A INPUT -i eth0 -j limit-3300 --A INPUT -i eth0 -j limit-3301 --A INPUT -i eth0 -j limit-3302 --A INPUT -i eth0 -j limit-3303 --A INPUT -i eth0 -j limit-3304 --A INPUT -i eth0 -j limit-3305 --A INPUT -i eth0 -j limit-3306 --A INPUT -i eth0 -j limit-3307 --A INPUT -i eth0 -j limit-3308 --A INPUT -i eth0 -j limit-3309 --A INPUT -i eth0 -j limit-3310 --A INPUT -i eth0 -j limit-3311 --A INPUT -i eth0 -j limit-3312 --A INPUT -i eth0 -j limit-3313 --A INPUT -i eth0 -j limit-3314 --A INPUT -i eth0 -j limit-3315 --A INPUT -i eth0 -j limit-3316 --A INPUT -i eth0 -j limit-3317 --A INPUT -i eth0 -j limit-3318 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1861 --A INPUT -i eth0 -j limit-3320 --A INPUT -i eth0 -j limit-3321 --A INPUT -i eth0 -j limit-3322 --A INPUT -i eth0 -j limit-3323 --A INPUT -i eth0 -j limit-3324 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1867 --A INPUT -i eth0 -j limit-3326 --A INPUT -i eth0 -j limit-3327 --A INPUT -i eth0 -j limit-3328 --A INPUT -i eth0 -j limit-3329 --A INPUT -i eth0 -j limit-3330 --A INPUT -i eth0 -j limit-3331 --A INPUT -i eth0 -j limit-3332 --A INPUT -i eth0 -j limit-3333 --A INPUT -i eth0 -j limit-3334 --A INPUT -i eth0 -j limit-3335 --A INPUT -i eth0 -j limit-3336 --A INPUT -i eth0 -j limit-3337 --A INPUT -i eth0 -j limit-3338 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1881 --A INPUT -i eth0 -j limit-3340 --A INPUT -i eth0 -j limit-3341 --A INPUT -i eth0 -j limit-3342 --A INPUT -i eth0 -j limit-3343 --A INPUT -i eth0 -j limit-3344 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1887 --A INPUT -i eth0 -j limit-3346 --A INPUT -i eth0 -j limit-3347 --A INPUT -i eth0 -j limit-3348 --A INPUT -i eth0 -j limit-3349 --A INPUT -i eth0 -j limit-3350 --A INPUT -i eth0 -j limit-3351 --A INPUT -i eth0 -j limit-3352 --A INPUT -i eth0 -j limit-3353 --A INPUT -i eth0 -j limit-3354 --A INPUT -i eth0 -j limit-3355 --A INPUT -i eth0 -j limit-3356 --A INPUT -i eth0 -j limit-3357 --A INPUT -i eth0 -j limit-3358 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1901 --A INPUT -i eth0 -j limit-3360 --A INPUT -i eth0 -j limit-3361 --A INPUT -i eth0 -j limit-3362 --A INPUT -i eth0 -j limit-3363 --A INPUT -i eth0 -j limit-3364 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1907 --A INPUT -i eth0 -j limit-3366 --A INPUT -i eth0 -j limit-3367 --A INPUT -i eth0 -j limit-3368 --A INPUT -i eth0 -j limit-3369 --A INPUT -i eth0 -j limit-3370 --A INPUT -i eth0 -j limit-3371 --A INPUT -i eth0 -j limit-3372 --A INPUT -i eth0 -j limit-3373 --A INPUT -i eth0 -j limit-3374 --A INPUT -i eth0 -j limit-3375 --A INPUT -i eth0 -j limit-3376 --A INPUT -i eth0 -j limit-3377 --A INPUT -i eth0 -j limit-3378 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1921 --A INPUT -i eth0 -j limit-3380 --A INPUT -i eth0 -j limit-3381 --A INPUT -i eth0 -j limit-3382 --A INPUT -i eth0 -j limit-3383 --A INPUT -i eth0 -j limit-3384 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1927 --A INPUT -i eth0 -j limit-3386 --A INPUT -i eth0 -j limit-3387 --A INPUT -i eth0 -j limit-3388 --A INPUT -i eth0 -j limit-3389 --A INPUT -i eth0 -j limit-3390 --A INPUT -i eth0 -j limit-3391 --A INPUT -i eth0 -j limit-3392 --A INPUT -i eth0 -j limit-3393 --A INPUT -i eth0 -j limit-3394 --A INPUT -i eth0 -j limit-3395 --A INPUT -i eth0 -j limit-3396 --A INPUT -i eth0 -j limit-3397 --A INPUT -i eth0 -j limit-3398 --A INPUT -i eth0 -j limit-3399 --A INPUT -i eth0 -j limit-3400 --A INPUT -i eth0 -j limit-3401 --A INPUT -i eth0 -j limit-3402 --A INPUT -i eth0 -j limit-3403 --A INPUT -i eth0 -j limit-3404 --A INPUT -i eth0 -j limit-3405 --A INPUT -i eth0 -j limit-3406 --A INPUT -i eth0 -j limit-3407 --A INPUT -i eth0 -j limit-3408 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3410 --A INPUT -i eth0 -j limit-3411 --A INPUT -i eth0 -j limit-3412 --A INPUT -i eth0 -j limit-3413 --A INPUT -i eth0 -j limit-3414 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3416 --A INPUT -i eth0 -j limit-3417 --A INPUT -i eth0 -j limit-3418 --A INPUT -i eth0 -j limit-3419 --A INPUT -i eth0 -j limit-3420 --A INPUT -i eth0 -j limit-3421 --A INPUT -i eth0 -j limit-3422 --A INPUT -i eth0 -j limit-3423 --A INPUT -i eth0 -j limit-3424 --A INPUT -i eth0 -j limit-3425 --A INPUT -i eth0 -j limit-3426 --A INPUT -i eth0 -j limit-3427 --A INPUT -i eth0 -j limit-3428 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3430 --A INPUT -i eth0 -j limit-3431 --A INPUT -i eth0 -j limit-3432 --A INPUT -i eth0 -j limit-3433 --A INPUT -i eth0 -j limit-3434 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3436 --A INPUT -i eth0 -j limit-3437 --A INPUT -i eth0 -j limit-3438 --A INPUT -i eth0 -j limit-3439 --A INPUT -i eth0 -j limit-3440 --A INPUT -i eth0 -j limit-3441 --A INPUT -i eth0 -j limit-3442 --A INPUT -i eth0 -j limit-3443 --A INPUT -i eth0 -j limit-3444 --A INPUT -i eth0 -j limit-3445 --A INPUT -i eth0 -j limit-3446 --A INPUT -i eth0 -j limit-3447 --A INPUT -i eth0 -j limit-3448 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3450 --A INPUT -i eth0 -j limit-3451 --A INPUT -i eth0 -j limit-3452 --A INPUT -i eth0 -j limit-3453 --A INPUT -i eth0 -j limit-3454 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3456 --A INPUT -i eth0 -j limit-3457 --A INPUT -i eth0 -j limit-3458 --A INPUT -i eth0 -j limit-3459 --A INPUT -i eth0 -j limit-3460 --A INPUT -i eth0 -j limit-3461 --A INPUT -i eth0 -j limit-3462 --A INPUT -i eth0 -j limit-3463 --A INPUT -i eth0 -j limit-3464 --A INPUT -i eth0 -j limit-3465 --A INPUT -i eth0 -j limit-3466 --A INPUT -i eth0 -j limit-3467 --A INPUT -i eth0 -j limit-3468 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3470 --A INPUT -i eth0 -j limit-3471 --A INPUT -i eth0 -j limit-3472 --A INPUT -i eth0 -j limit-3473 --A INPUT -i eth0 -j limit-3474 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3476 --A INPUT -i eth0 -j limit-3477 --A INPUT -i eth0 -j limit-3478 --A INPUT -i eth0 -j limit-3479 --A INPUT -i eth0 -j limit-3480 --A INPUT -i eth0 -j limit-3481 --A INPUT -i eth0 -j limit-3482 --A INPUT -i eth0 -j limit-3483 --A INPUT -i eth0 -j limit-3484 --A INPUT -i eth0 -j limit-3485 --A INPUT -i eth0 -j limit-3486 --A INPUT -i eth0 -j limit-3487 --A INPUT -i eth0 -j limit-3488 --A INPUT -i eth0 -j limit-3489 --A INPUT -i eth0 -j limit-3490 --A INPUT -i eth0 -j limit-3491 --A INPUT -i eth0 -j limit-3492 --A INPUT -i eth0 -j limit-3493 --A INPUT -i eth0 -j limit-3494 --A INPUT -i eth0 -j limit-3495 --A INPUT -i eth0 -j limit-3496 --A INPUT -i eth0 -j limit-3497 --A INPUT -i eth0 -j limit-3498 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1951 --A INPUT -i eth0 -j limit-3500 --A INPUT -i eth0 -j limit-3501 --A INPUT -i eth0 -j limit-3502 --A INPUT -i eth0 -j limit-3503 --A INPUT -i eth0 -j limit-3504 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1957 --A INPUT -i eth0 -j limit-3506 --A INPUT -i eth0 -j limit-3507 --A INPUT -i eth0 -j limit-3508 --A INPUT -i eth0 -j limit-3509 --A INPUT -i eth0 -j limit-3510 --A INPUT -i eth0 -j limit-3511 --A INPUT -i eth0 -j limit-3512 --A INPUT -i eth0 -j limit-3513 --A INPUT -i eth0 -j limit-3514 --A INPUT -i eth0 -j limit-3515 --A INPUT -i eth0 -j limit-3516 --A INPUT -i eth0 -j limit-3517 --A INPUT -i eth0 -j limit-3518 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1971 --A INPUT -i eth0 -j limit-3520 --A INPUT -i eth0 -j limit-3521 --A INPUT -i eth0 -j limit-3522 --A INPUT -i eth0 -j limit-3523 --A INPUT -i eth0 -j limit-3524 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1977 --A INPUT -i eth0 -j limit-3526 --A INPUT -i eth0 -j limit-3527 --A INPUT -i eth0 -j limit-3528 --A INPUT -i eth0 -j limit-3529 --A INPUT -i eth0 -j limit-3530 --A INPUT -i eth0 -j limit-3531 --A INPUT -i eth0 -j limit-3532 --A INPUT -i eth0 -j limit-3533 --A INPUT -i eth0 -j limit-3534 --A INPUT -i eth0 -j limit-3535 --A INPUT -i eth0 -j limit-3536 --A INPUT -i eth0 -j limit-3537 --A INPUT -i eth0 -j limit-3538 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1991 --A INPUT -i eth0 -j limit-3540 --A INPUT -i eth0 -j limit-3541 --A INPUT -i eth0 -j limit-3542 --A INPUT -i eth0 -j limit-3543 --A INPUT -i eth0 -j limit-3544 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1997 --A INPUT -i eth0 -j limit-3546 --A INPUT -i eth0 -j limit-3547 --A INPUT -i eth0 -j limit-3548 --A INPUT -i eth0 -j limit-3549 --A INPUT -i eth0 -j limit-3550 --A INPUT -i eth0 -j limit-3551 --A INPUT -i eth0 -j limit-3552 --A INPUT -i eth0 -j limit-3553 --A INPUT -i eth0 -j limit-3554 --A INPUT -i eth0 -j limit-3555 --A INPUT -i eth0 -j limit-3556 --A INPUT -i eth0 -j limit-3557 --A INPUT -i eth0 -j limit-3558 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2011 --A INPUT -i eth0 -j limit-3560 --A INPUT -i eth0 -j limit-3561 --A INPUT -i eth0 -j limit-3562 --A INPUT -i eth0 -j limit-3563 --A INPUT -i eth0 -j limit-3564 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2017 --A INPUT -i eth0 -j limit-3566 --A INPUT -i eth0 -j limit-3567 --A INPUT -i eth0 -j limit-3568 --A INPUT -i eth0 -j limit-3569 --A INPUT -i eth0 -j limit-3570 --A INPUT -i eth0 -j limit-3571 --A INPUT -i eth0 -j limit-3572 --A INPUT -i eth0 -j limit-3573 --A INPUT -i eth0 -j limit-3574 --A INPUT -i eth0 -j limit-3575 --A INPUT -i eth0 -j limit-3576 --A INPUT -i eth0 -j limit-3577 --A INPUT -i eth0 -j limit-3578 --A INPUT -i eth0 -j limit-3579 --A INPUT -i eth0 -j limit-3580 --A INPUT -i eth0 -j limit-3581 --A INPUT -i eth0 -j limit-3582 --A INPUT -i eth0 -j limit-3583 --A INPUT -i eth0 -j limit-3584 --A INPUT -i eth0 -j limit-3585 --A INPUT -i eth0 -j limit-3586 --A INPUT -i eth0 -j limit-3587 --A INPUT -i eth0 -j limit-3588 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2041 --A INPUT -i eth0 -j limit-3590 --A INPUT -i eth0 -j limit-3591 --A INPUT -i eth0 -j limit-3592 --A INPUT -i eth0 -j limit-3593 --A INPUT -i eth0 -j limit-3594 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2047 --A INPUT -i eth0 -j limit-3596 --A INPUT -i eth0 -j limit-3597 --A INPUT -i eth0 -j limit-3598 --A INPUT -i eth0 -j limit-3599 --A INPUT -i eth0 -j limit-3600 --A INPUT -i eth0 -j limit-3601 --A INPUT -i eth0 -j limit-3602 --A INPUT -i eth0 -j limit-3603 --A INPUT -i eth0 -j limit-3604 --A INPUT -i eth0 -j limit-3605 --A INPUT -i eth0 -j limit-3606 --A INPUT -i eth0 -j limit-3607 --A INPUT -i eth0 -j limit-3608 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2061 --A INPUT -i eth0 -j limit-3610 --A INPUT -i eth0 -j limit-3611 --A INPUT -i eth0 -j limit-3612 --A INPUT -i eth0 -j limit-3613 --A INPUT -i eth0 -j limit-3614 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2067 --A INPUT -i eth0 -j limit-3616 --A INPUT -i eth0 -j limit-3617 --A INPUT -i eth0 -j limit-3618 --A INPUT -i eth0 -j limit-3619 --A INPUT -i eth0 -j limit-3620 --A INPUT -i eth0 -j limit-3621 --A INPUT -i eth0 -j limit-3622 --A INPUT -i eth0 -j limit-3623 --A INPUT -i eth0 -j limit-3624 --A INPUT -i eth0 -j limit-3625 --A INPUT -i eth0 -j limit-3626 --A INPUT -i eth0 -j limit-3627 --A INPUT -i eth0 -j limit-3628 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2081 --A INPUT -i eth0 -j limit-3630 --A INPUT -i eth0 -j limit-3631 --A INPUT -i eth0 -j limit-3632 --A INPUT -i eth0 -j limit-3633 --A INPUT -i eth0 -j limit-3634 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2087 --A INPUT -i eth0 -j limit-3636 --A INPUT -i eth0 -j limit-3637 --A INPUT -i eth0 -j limit-3638 --A INPUT -i eth0 -j limit-3639 --A INPUT -i eth0 -j limit-3640 --A INPUT -i eth0 -j limit-3641 --A INPUT -i eth0 -j limit-3642 --A INPUT -i eth0 -j limit-3643 --A INPUT -i eth0 -j limit-3644 --A INPUT -i eth0 -j limit-3645 --A INPUT -i eth0 -j limit-3646 --A INPUT -i eth0 -j limit-3647 --A INPUT -i eth0 -j limit-3648 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2101 --A INPUT -i eth0 -j limit-3650 --A INPUT -i eth0 -j limit-3651 --A INPUT -i eth0 -j limit-3652 --A INPUT -i eth0 -j limit-3653 --A INPUT -i eth0 -j limit-3654 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2107 --A INPUT -i eth0 -j limit-3656 --A INPUT -i eth0 -j limit-3657 --A INPUT -i eth0 -j limit-3658 --A INPUT -i eth0 -j limit-3659 --A INPUT -i eth0 -j limit-3660 --A INPUT -i eth0 -j limit-3661 --A INPUT -i eth0 -j limit-3662 --A INPUT -i eth0 -j limit-3663 --A INPUT -i eth0 -j limit-3664 --A INPUT -i eth0 -j limit-3665 --A INPUT -i eth0 -j limit-3666 --A INPUT -i eth0 -j limit-3667 --A INPUT -i eth0 -j limit-3668 --A INPUT -i eth0 -j limit-3669 --A INPUT -i eth0 -j limit-3670 --A INPUT -i eth0 -j limit-3671 --A INPUT -i eth0 -j limit-3672 --A INPUT -i eth0 -j limit-3673 --A INPUT -i eth0 -j limit-3674 --A INPUT -i eth0 -j limit-3675 --A INPUT -i eth0 -j limit-3676 --A INPUT -i eth0 -j limit-3677 --A INPUT -i eth0 -j limit-3678 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3680 --A INPUT -i eth0 -j limit-3681 --A INPUT -i eth0 -j limit-3682 --A INPUT -i eth0 -j limit-3683 --A INPUT -i eth0 -j limit-3684 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3686 --A INPUT -i eth0 -j limit-3687 --A INPUT -i eth0 -j limit-3688 --A INPUT -i eth0 -j limit-3689 --A INPUT -i eth0 -j limit-3690 --A INPUT -i eth0 -j limit-3691 --A INPUT -i eth0 -j limit-3692 --A INPUT -i eth0 -j limit-3693 --A INPUT -i eth0 -j limit-3694 --A INPUT -i eth0 -j limit-3695 --A INPUT -i eth0 -j limit-3696 --A INPUT -i eth0 -j limit-3697 --A INPUT -i eth0 -j limit-3698 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3700 --A INPUT -i eth0 -j limit-3701 --A INPUT -i eth0 -j limit-3702 --A INPUT -i eth0 -j limit-3703 --A INPUT -i eth0 -j limit-3704 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3706 --A INPUT -i eth0 -j limit-3707 --A INPUT -i eth0 -j limit-3708 --A INPUT -i eth0 -j limit-3709 --A INPUT -i eth0 -j limit-3710 --A INPUT -i eth0 -j limit-3711 --A INPUT -i eth0 -j limit-3712 --A INPUT -i eth0 -j limit-3713 --A INPUT -i eth0 -j limit-3714 --A INPUT -i eth0 -j limit-3715 --A INPUT -i eth0 -j limit-3716 --A INPUT -i eth0 -j limit-3717 --A INPUT -i eth0 -j limit-3718 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3720 --A INPUT -i eth0 -j limit-3721 --A INPUT -i eth0 -j limit-3722 --A INPUT -i eth0 -j limit-3723 --A INPUT -i eth0 -j limit-3724 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3726 --A INPUT -i eth0 -j limit-3727 --A INPUT -i eth0 -j limit-3728 --A INPUT -i eth0 -j limit-3729 --A INPUT -i eth0 -j limit-3730 --A INPUT -i eth0 -j limit-3731 --A INPUT -i eth0 -j limit-3732 --A INPUT -i eth0 -j limit-3733 --A INPUT -i eth0 -j limit-3734 --A INPUT -i eth0 -j limit-3735 --A INPUT -i eth0 -j limit-3736 --A INPUT -i eth0 -j limit-3737 --A INPUT -i eth0 -j limit-3738 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3740 --A INPUT -i eth0 -j limit-3741 --A INPUT -i eth0 -j limit-3742 --A INPUT -i eth0 -j limit-3743 --A INPUT -i eth0 -j limit-3744 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3746 --A INPUT -i eth0 -j limit-3747 --A INPUT -i eth0 -j limit-3748 --A INPUT -i eth0 -j limit-3749 --A INPUT -i eth0 -j limit-3750 --A INPUT -i eth0 -j limit-3751 --A INPUT -i eth0 -j limit-3752 --A INPUT -i eth0 -j limit-3753 --A INPUT -i eth0 -j limit-3754 --A INPUT -i eth0 -j limit-3755 --A INPUT -i eth0 -j limit-3756 --A INPUT -i eth0 -j limit-3757 --A INPUT -i eth0 -j limit-3758 --A INPUT -i eth0 -j limit-3759 --A INPUT -i eth0 -j limit-3760 --A INPUT -i eth0 -j limit-3761 --A INPUT -i eth0 -j limit-3762 --A INPUT -i eth0 -j limit-3763 --A INPUT -i eth0 -j limit-3764 --A INPUT -i eth0 -j limit-3765 --A INPUT -i eth0 -j limit-3766 --A INPUT -i eth0 -j limit-3767 --A INPUT -i eth0 -j limit-3768 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2131 --A INPUT -i eth0 -j limit-3770 --A INPUT -i eth0 -j limit-3771 --A INPUT -i eth0 -j limit-3772 --A INPUT -i eth0 -j limit-3773 --A INPUT -i eth0 -j limit-3774 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2137 --A INPUT -i eth0 -j limit-3776 --A INPUT -i eth0 -j limit-3777 --A INPUT -i eth0 -j limit-3778 --A INPUT -i eth0 -j limit-3779 --A INPUT -i eth0 -j limit-3780 --A INPUT -i eth0 -j limit-3781 --A INPUT -i eth0 -j limit-3782 --A INPUT -i eth0 -j limit-3783 --A INPUT -i eth0 -j limit-3784 --A INPUT -i eth0 -j limit-3785 --A INPUT -i eth0 -j limit-3786 --A INPUT -i eth0 -j limit-3787 --A INPUT -i eth0 -j limit-3788 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2151 --A INPUT -i eth0 -j limit-3790 --A INPUT -i eth0 -j limit-3791 --A INPUT -i eth0 -j limit-3792 --A INPUT -i eth0 -j limit-3793 --A INPUT -i eth0 -j limit-3794 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2157 --A INPUT -i eth0 -j limit-3796 --A INPUT -i eth0 -j limit-3797 --A INPUT -i eth0 -j limit-3798 --A INPUT -i eth0 -j limit-3799 --A INPUT -i eth0 -j limit-3800 --A INPUT -i eth0 -j limit-3801 --A INPUT -i eth0 -j limit-3802 --A INPUT -i eth0 -j limit-3803 --A INPUT -i eth0 -j limit-3804 --A INPUT -i eth0 -j limit-3805 --A INPUT -i eth0 -j limit-3806 --A INPUT -i eth0 -j limit-3807 --A INPUT -i eth0 -j limit-3808 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2171 --A INPUT -i eth0 -j limit-3810 --A INPUT -i eth0 -j limit-3811 --A INPUT -i eth0 -j limit-3812 --A INPUT -i eth0 -j limit-3813 --A INPUT -i eth0 -j limit-3814 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2177 --A INPUT -i eth0 -j limit-3816 --A INPUT -i eth0 -j limit-3817 --A INPUT -i eth0 -j limit-3818 --A INPUT -i eth0 -j limit-3819 --A INPUT -i eth0 -j limit-3820 --A INPUT -i eth0 -j limit-3821 --A INPUT -i eth0 -j limit-3822 --A INPUT -i eth0 -j limit-3823 --A INPUT -i eth0 -j limit-3824 --A INPUT -i eth0 -j limit-3825 --A INPUT -i eth0 -j limit-3826 --A INPUT -i eth0 -j limit-3827 --A INPUT -i eth0 -j limit-3828 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2191 --A INPUT -i eth0 -j limit-3830 --A INPUT -i eth0 -j limit-3831 --A INPUT -i eth0 -j limit-3832 --A INPUT -i eth0 -j limit-3833 --A INPUT -i eth0 -j limit-3834 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2197 --A INPUT -i eth0 -j limit-3836 --A INPUT -i eth0 -j limit-3837 --A INPUT -i eth0 -j limit-3838 --A INPUT -i eth0 -j limit-3839 --A INPUT -i eth0 -j limit-3840 --A INPUT -i eth0 -j limit-3841 --A INPUT -i eth0 -j limit-3842 --A INPUT -i eth0 -j limit-3843 --A INPUT -i eth0 -j limit-3844 --A INPUT -i eth0 -j limit-3845 --A INPUT -i eth0 -j limit-3846 --A INPUT -i eth0 -j limit-3847 --A INPUT -i eth0 -j limit-3848 --A INPUT -i eth0 -j limit-3849 --A INPUT -i eth0 -j limit-3850 --A INPUT -i eth0 -j limit-3851 --A INPUT -i eth0 -j limit-3852 --A INPUT -i eth0 -j limit-3853 --A INPUT -i eth0 -j limit-3854 --A INPUT -i eth0 -j limit-3855 --A INPUT -i eth0 -j limit-3856 --A INPUT -i eth0 -j limit-3857 --A INPUT -i eth0 -j limit-3858 --A INPUT -i eth0 -j limit-3859 --A INPUT -i eth0 -j limit-3860 --A INPUT -i eth0 -j limit-3861 --A INPUT -i eth0 -j limit-3862 --A INPUT -i eth0 -j limit-3863 --A INPUT -i eth0 -j limit-3864 --A INPUT -i eth0 -j limit-3865 --A INPUT -i eth0 -j limit-3866 --A INPUT -i eth0 -j limit-3867 --A INPUT -i eth0 -j limit-3868 --A INPUT -i eth0 -j limit-3869 --A INPUT -i eth0 -j limit-3870 --A INPUT -i eth0 -j limit-3871 --A INPUT -i eth0 -j limit-3872 --A INPUT -i eth0 -j limit-3873 --A INPUT -i eth0 -j limit-3874 --A INPUT -i eth0 -j limit-3875 --A INPUT -i eth0 -j limit-3876 --A INPUT -i eth0 -j limit-3877 --A INPUT -i eth0 -j limit-3878 --A INPUT -i eth0 -j limit-3879 --A INPUT -i eth0 -j limit-3880 --A INPUT -i eth0 -j limit-3881 --A INPUT -i eth0 -j limit-3882 --A INPUT -i eth0 -j limit-3883 --A INPUT -i eth0 -j limit-3884 --A INPUT -i eth0 -j limit-3885 --A INPUT -i eth0 -j limit-3886 --A INPUT -i eth0 -j limit-3887 --A INPUT -i eth0 -j limit-3888 --A INPUT -i eth0 -j limit-3889 --A INPUT -i eth0 -j limit-3890 --A INPUT -i eth0 -j limit-3891 --A INPUT -i eth0 -j limit-3892 --A INPUT -i eth0 -j limit-3893 --A INPUT -i eth0 -j limit-3894 --A INPUT -i eth0 -j limit-3895 --A INPUT -i eth0 -j limit-3896 --A INPUT -i eth0 -j limit-3897 --A INPUT -i eth0 -j limit-3898 --A INPUT -i eth0 -j limit-3899 --A INPUT -i eth0 -j limit-3900 --A INPUT -i eth0 -j limit-3901 --A INPUT -i eth0 -j limit-3902 --A INPUT -i eth0 -j limit-3903 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-0 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-1 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-2 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-3 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-4 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-5 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-6 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-7 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-8 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-9 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-10 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-11 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-12 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-13 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-14 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-15 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-16 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-17 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-18 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-19 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-20 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-21 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-22 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-23 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-24 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-25 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-26 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-27 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-28 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-29 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-30 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-32 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-33 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-34 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-35 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-36 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-38 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-39 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-40 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-41 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-42 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-43 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-44 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-45 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-46 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-47 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-48 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-49 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-50 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-52 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-53 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-54 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-55 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-56 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-58 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-59 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-60 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-61 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-62 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-63 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-64 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-65 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-66 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-67 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-68 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-69 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-70 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-72 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-73 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-74 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-75 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-76 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-78 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-79 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-80 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-81 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-82 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-83 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-84 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-85 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-86 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-87 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-88 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-89 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-90 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-92 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-93 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-94 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-95 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-96 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-98 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-99 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-100 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-101 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-102 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-103 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-104 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-105 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-106 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-107 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-108 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-109 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-110 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-111 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-112 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-113 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-114 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-115 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-116 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-117 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-118 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-119 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-120 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-31 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-122 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-123 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-124 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-125 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-126 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-37 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-128 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-129 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-130 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-131 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-132 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-133 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-134 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-135 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-136 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-137 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-138 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-139 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-140 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-51 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-142 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-143 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-144 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-145 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-146 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-57 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-148 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-149 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-150 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-151 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-152 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-153 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-154 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-155 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-156 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-157 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-158 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-159 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-160 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-71 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-162 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-163 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-164 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-165 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-166 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-77 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-168 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-169 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-170 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-171 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-172 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-173 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-174 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-175 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-176 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-177 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-178 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-179 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-180 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-91 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-182 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-183 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-184 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-185 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-186 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-97 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-188 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-189 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-190 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-191 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-192 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-193 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-194 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-195 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-196 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-197 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-198 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-199 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-200 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-201 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-202 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-203 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-204 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-205 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-206 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-207 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-208 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-209 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-210 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-121 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-212 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-213 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-214 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-215 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-216 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-127 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-218 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-219 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-220 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-221 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-222 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-223 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-224 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-225 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-226 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-227 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-228 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-229 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-230 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-141 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-232 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-233 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-234 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-235 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-236 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-147 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-238 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-239 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-240 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-241 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-242 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-243 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-244 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-245 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-246 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-247 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-248 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-249 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-250 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-161 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-252 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-253 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-254 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-255 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-256 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-167 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-258 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-259 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-260 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-261 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-262 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-263 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-264 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-265 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-266 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-267 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-268 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-269 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-270 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-181 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-272 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-273 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-274 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-275 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-276 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-187 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-278 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-279 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-280 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-281 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-282 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-283 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-284 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-285 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-286 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-287 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-288 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-289 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-290 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-291 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-292 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-293 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-294 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-295 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-296 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-297 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-298 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-299 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-300 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-302 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-303 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-304 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-305 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-306 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-308 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-309 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-310 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-311 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-312 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-313 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-314 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-315 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-316 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-317 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-318 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-319 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-320 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-322 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-323 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-324 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-325 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-326 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-328 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-329 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-330 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-331 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-332 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-333 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-334 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-335 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-336 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-337 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-338 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-339 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-340 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-342 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-343 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-344 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-345 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-346 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-348 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-349 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-350 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-351 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-352 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-353 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-354 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-355 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-356 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-357 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-358 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-359 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-360 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-362 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-363 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-364 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-365 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-366 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-368 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-369 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-370 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-371 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-372 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-373 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-374 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-375 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-376 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-377 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-378 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-379 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-380 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-381 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-382 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-383 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-384 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-385 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-386 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-387 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-388 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-389 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-390 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-211 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-392 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-393 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-394 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-395 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-396 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-217 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-398 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-399 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-400 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-401 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-402 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-403 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-404 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-405 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-406 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-407 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-408 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-409 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-410 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-231 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-412 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-413 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-414 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-415 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-416 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-237 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-418 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-419 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-420 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-421 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-422 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-423 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-424 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-425 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-426 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-427 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-428 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-429 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-430 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-251 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-432 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-433 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-434 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-435 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-436 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-257 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-438 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-439 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-440 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-441 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-442 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-443 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-444 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-445 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-446 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-447 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-448 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-449 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-450 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-271 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-452 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-453 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-454 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-455 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-456 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-277 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-458 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-459 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-460 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-461 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-462 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-463 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-464 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-465 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-466 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-467 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-468 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-469 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-470 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-471 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-472 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-473 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-474 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-475 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-476 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-477 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-478 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-479 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-480 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-482 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-483 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-484 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-485 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-486 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-488 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-489 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-490 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-491 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-492 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-493 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-494 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-495 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-496 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-497 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-498 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-499 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-500 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-502 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-503 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-504 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-505 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-506 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-508 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-509 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-510 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-511 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-512 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-513 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-514 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-515 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-516 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-517 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-518 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-519 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-520 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-522 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-523 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-524 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-525 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-526 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-528 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-529 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-530 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-531 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-532 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-533 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-534 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-535 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-536 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-537 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-538 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-539 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-540 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-542 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-543 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-544 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-545 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-546 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-548 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-549 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-550 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-551 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-552 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-553 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-554 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-555 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-556 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-557 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-558 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-559 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-560 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-561 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-562 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-563 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-564 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-565 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-566 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-567 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-568 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-569 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-570 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-301 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-572 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-573 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-574 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-575 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-576 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-307 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-578 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-579 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-580 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-581 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-582 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-583 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-584 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-585 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-586 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-587 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-588 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-589 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-590 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-321 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-592 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-593 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-594 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-595 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-596 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-327 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-598 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-599 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-600 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-601 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-602 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-603 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-604 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-605 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-606 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-607 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-608 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-609 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-610 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-341 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-612 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-613 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-614 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-615 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-616 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-347 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-618 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-619 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-620 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-621 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-622 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-623 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-624 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-625 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-626 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-627 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-628 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-629 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-630 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-361 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-632 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-633 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-634 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-635 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-636 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-367 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-638 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-639 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-640 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-641 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-642 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-643 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-644 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-645 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-646 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-647 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-648 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-649 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-650 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-651 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-652 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-653 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-654 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-655 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-656 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-657 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-658 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-659 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-660 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-391 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-662 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-663 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-664 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-665 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-666 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-397 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-668 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-669 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-670 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-671 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-672 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-673 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-674 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-675 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-676 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-677 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-678 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-679 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-680 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-411 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-682 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-683 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-684 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-685 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-686 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-417 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-688 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-689 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-690 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-691 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-692 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-693 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-694 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-695 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-696 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-697 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-698 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-699 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-700 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-431 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-702 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-703 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-704 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-705 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-706 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-437 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-708 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-709 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-710 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-711 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-712 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-713 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-714 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-715 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-716 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-717 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-718 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-719 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-720 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-451 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-722 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-723 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-724 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-725 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-726 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-457 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-728 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-729 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-730 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-731 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-732 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-733 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-734 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-735 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-736 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-737 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-738 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-739 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-740 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-741 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-742 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-743 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-744 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-745 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-746 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-747 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-748 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-749 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-750 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-752 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-753 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-754 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-755 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-756 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-758 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-759 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-760 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-761 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-762 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-763 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-764 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-765 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-766 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-767 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-768 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-769 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-770 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-772 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-773 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-774 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-775 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-776 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-778 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-779 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-780 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-781 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-782 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-783 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-784 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-785 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-786 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-787 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-788 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-789 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-790 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-792 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-793 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-794 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-795 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-796 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-798 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-799 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-800 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-801 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-802 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-803 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-804 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-805 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-806 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-807 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-808 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-809 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-810 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-812 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-813 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-814 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-815 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-816 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-818 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-819 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-820 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-821 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-822 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-823 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-824 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-825 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-826 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-827 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-828 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-829 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-830 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-831 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-832 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-833 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-834 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-835 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-836 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-837 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-838 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-839 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-840 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-481 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-842 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-843 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-844 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-845 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-846 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-487 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-848 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-849 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-850 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-851 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-852 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-853 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-854 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-855 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-856 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-857 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-858 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-859 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-860 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-501 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-862 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-863 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-864 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-865 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-866 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-507 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-868 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-869 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-870 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-871 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-872 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-873 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-874 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-875 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-876 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-877 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-878 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-879 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-880 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-521 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-882 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-883 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-884 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-885 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-886 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-527 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-888 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-889 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-890 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-891 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-892 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-893 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-894 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-895 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-896 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-897 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-898 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-899 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-900 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-541 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-902 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-903 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-904 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-905 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-906 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-547 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-908 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-909 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-910 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-911 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-912 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-913 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-914 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-915 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-916 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-917 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-918 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-919 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-920 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-921 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-922 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-923 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-924 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-925 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-926 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-927 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-928 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-929 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-930 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-931 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-932 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-933 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-934 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-935 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-936 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-937 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-938 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-939 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-940 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-941 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-942 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-943 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-944 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-945 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-946 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-947 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-948 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-949 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-950 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-951 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-952 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-953 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-954 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-955 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-956 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-957 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-958 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-959 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-960 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-961 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-962 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-963 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-964 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-965 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-966 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-967 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-968 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-969 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-970 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-971 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-972 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-973 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-974 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-975 -A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set -A INPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set -A INPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set @@ -11385,25 +11385,25 @@ -A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set -A INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set -A INPUT -j ACCEPT --A INPUT -j logdrop-2200 +-A INPUT -j logdrop-1650 -A INPUT -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-99 --A INPUT -j logdrop-2201 +-A INPUT -j logaccept-66 +-A INPUT -j logdrop-1651 -A INPUT -j logpass-0 --A INPUT -j logaccept-100 --A INPUT -j logdrop-2202 +-A INPUT -j logaccept-67 +-A INPUT -j logdrop-1652 -A INPUT -j logpass-1 --A INPUT -j logaccept-101 --A INPUT -j logdrop-2203 +-A INPUT -j logaccept-68 +-A INPUT -j logdrop-1653 -A INPUT -j logpass-2 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-102 --A INPUT -j logdrop-2204 +-A INPUT -j logaccept-69 +-A INPUT -j logdrop-1654 -A INPUT -j logpass-3 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT @@ -14850,516 +14850,516 @@ -A OUTPUT -j logaccept-final-304 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-305 --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set -A OUTPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set -A OUTPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set @@ -15367,25 +15367,25 @@ -A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set -A OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set -A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-2200 +-A OUTPUT -j logdrop-1650 -A OUTPUT -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-99 --A OUTPUT -j logdrop-2201 +-A OUTPUT -j logaccept-66 +-A OUTPUT -j logdrop-1651 -A OUTPUT -j logpass-0 --A OUTPUT -j logaccept-100 --A OUTPUT -j logdrop-2202 +-A OUTPUT -j logaccept-67 +-A OUTPUT -j logdrop-1652 -A OUTPUT -j logpass-1 --A OUTPUT -j logaccept-101 --A OUTPUT -j logdrop-2203 +-A OUTPUT -j logaccept-68 +-A OUTPUT -j logdrop-1653 -A OUTPUT -j logpass-2 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-102 --A OUTPUT -j logdrop-2204 +-A OUTPUT -j logaccept-69 +-A OUTPUT -j logdrop-1654 -A OUTPUT -j logpass-3 -A OUTPUT -m limit --limit 12/minute -j ULOG -A OUTPUT -j ACCEPT @@ -19976,2569 +19976,268 @@ -A limit-2927 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2927 -j RETURN -A limit-2927 -m limit --limit 12/minute -j ULOG -A limit-2927 -j DROP --A limit-2928 -m recent --name limit-2928 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1650 --A limit-2928 -m recent --name limit-2928 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2929 -m recent --name limit-2929 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1651 --A limit-2929 -m recent --name limit-2929 --rsource --mask 255.255.255.255 --set -A limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2930 -m recent --name limit-2930 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1652 --A limit-2930 -m limit --limit 1/second -j LOG --A limit-2930 -m recent --name limit-2930 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2931 -m recent --name limit-2931 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1653 --A limit-2931 -m recent --name limit-2931 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2932 -m recent --name limit-2932 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1654 --A limit-2932 -j TEE --gateway 10.0.0.1 --A limit-2932 -j TEE --gateway 10.0.0.2 --A limit-2932 -m recent --name limit-2932 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2933 -m recent --name limit-2933 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1655 --A limit-2933 -m recent --name limit-2933 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-2933 -m recent --name limit-2933 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-2934 -m recent --name limit-2934 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1656 --A limit-2934 -m recent --name limit-2934 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2935 -m recent --name limit-2935 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1657 --A limit-2935 -m recent --name limit-2935 --rsource --mask 255.255.255.255 --set --A limit-2936 -m recent --name limit-2936 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1658 --A limit-2936 -m limit --limit 12/minute -j ULOG --A limit-2936 -m recent --name limit-2936 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2937 -m recent --name limit-2937 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1659 --A limit-2937 -m recent --name limit-2937 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2938 -m recent --name limit-2938 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2938 -m recent --name limit-2938 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2939 -m recent --name limit-2939 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2939 -m recent --name limit-2939 --rsource --mask 255.255.255.255 --set -A limit-294 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-294 -j TEE --gateway 10.0.0.1 -A limit-294 -j TEE --gateway 10.0.0.2 -A limit-294 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2940 -m recent --name limit-2940 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2940 -m limit --limit 1/second -j LOG --A limit-2940 -m recent --name limit-2940 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2941 -m recent --name limit-2941 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2941 -m recent --name limit-2941 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2942 -m recent --name limit-2942 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2942 -j TEE --gateway 10.0.0.1 --A limit-2942 -j TEE --gateway 10.0.0.2 --A limit-2942 -m recent --name limit-2942 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2943 -m recent --name limit-2943 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2943 -m recent --name limit-2943 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-2943 -m recent --name limit-2943 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-2944 -m recent --name limit-2944 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2944 -m recent --name limit-2944 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2945 -m recent --name limit-2945 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2945 -m recent --name limit-2945 --rsource --mask 255.255.255.255 --set --A limit-2946 -m recent --name limit-2946 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2946 -m limit --limit 12/minute -j ULOG --A limit-2946 -m recent --name limit-2946 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2947 -m recent --name limit-2947 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2947 -m recent --name limit-2947 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2948 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2948 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2949 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2949 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-2950 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2950 -m limit --limit 1/second -j LOG --A limit-2950 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2951 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2951 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2952 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2952 -j TEE --gateway 10.0.0.1 --A limit-2952 -j TEE --gateway 10.0.0.2 --A limit-2952 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2953 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2953 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-2953 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-2954 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2954 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2955 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2955 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2956 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2956 -m limit --limit 12/minute -j ULOG --A limit-2956 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2957 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2957 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2958 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2958 -j ACCEPT -A limit-296 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-296 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2960 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2960 -m limit --limit 1/second -j LOG --A limit-2960 -j ACCEPT --A limit-2961 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2961 -m limit --limit 1/second -j LOG --A limit-2962 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2962 -j TEE --gateway 10.0.0.1 --A limit-2962 -j TEE --gateway 10.0.0.2 --A limit-2962 -j ACCEPT --A limit-2963 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2963 -j TEE --gateway 10.0.0.1 --A limit-2963 -j TEE --gateway 10.0.0.2 --A limit-2964 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2964 -j ACCEPT --A limit-2966 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2966 -m limit --limit 12/minute -j ULOG --A limit-2966 -j ACCEPT --A limit-2967 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2967 -m limit --limit 12/minute -j ULOG --A limit-2968 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2968 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2969 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2969 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-297 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-297 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2970 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2970 -m limit --limit 1/second -j LOG --A limit-2970 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2971 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2971 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2972 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2972 -j TEE --gateway 10.0.0.1 --A limit-2972 -j TEE --gateway 10.0.0.2 --A limit-2972 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2973 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2973 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-2973 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-2974 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2974 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2975 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2975 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2976 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2976 -m limit --limit 12/minute -j ULOG --A limit-2976 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2977 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2977 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2978 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2978 -j ACCEPT -A limit-298 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-298 -m limit --limit 12/minute -j ULOG -A limit-298 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2980 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2980 -m limit --limit 1/second -j LOG --A limit-2980 -j ACCEPT --A limit-2981 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2981 -m limit --limit 1/second -j LOG --A limit-2982 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2982 -j TEE --gateway 10.0.0.1 --A limit-2982 -j TEE --gateway 10.0.0.2 --A limit-2982 -j ACCEPT --A limit-2983 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2983 -j TEE --gateway 10.0.0.1 --A limit-2983 -j TEE --gateway 10.0.0.2 --A limit-2984 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2984 -j ACCEPT --A limit-2986 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2986 -m limit --limit 12/minute -j ULOG --A limit-2986 -j ACCEPT --A limit-2987 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2987 -m limit --limit 12/minute -j ULOG --A limit-2988 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2988 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2989 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2989 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-299 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-299 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2990 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2990 -m limit --limit 1/second -j LOG --A limit-2990 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2991 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2991 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2992 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2992 -j TEE --gateway 10.0.0.1 --A limit-2992 -j TEE --gateway 10.0.0.2 --A limit-2992 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2993 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2993 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-2993 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-2994 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2994 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2995 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2995 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2996 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2996 -m limit --limit 12/minute -j ULOG --A limit-2996 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2997 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2997 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2998 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2998 -j ACCEPT -A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-3 -A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-30 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-30 -j ACCEPT -A limit-300 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-300 -j ACCEPT --A limit-3000 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3000 -m limit --limit 1/second -j LOG --A limit-3000 -j ACCEPT --A limit-3001 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3001 -m limit --limit 1/second -j LOG --A limit-3002 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3002 -j TEE --gateway 10.0.0.1 --A limit-3002 -j TEE --gateway 10.0.0.2 --A limit-3002 -j ACCEPT --A limit-3003 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3003 -j TEE --gateway 10.0.0.1 --A limit-3003 -j TEE --gateway 10.0.0.2 --A limit-3004 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3004 -j ACCEPT --A limit-3006 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3006 -m limit --limit 12/minute -j ULOG --A limit-3006 -j ACCEPT --A limit-3007 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3007 -m limit --limit 12/minute -j ULOG --A limit-3008 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3008 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3009 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3009 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-301 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3010 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3010 -m limit --limit 1/second -j LOG --A limit-3010 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3011 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3011 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3012 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3012 -j TEE --gateway 10.0.0.1 --A limit-3012 -j TEE --gateway 10.0.0.2 --A limit-3012 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3013 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3013 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3013 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3014 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3014 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3015 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3015 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-3016 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3016 -m limit --limit 12/minute -j ULOG --A limit-3016 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3017 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3017 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3018 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3018 -j ACCEPT -A limit-302 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-302 -m limit --limit 1/second -j LOG -A limit-302 -j ACCEPT --A limit-3020 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3020 -m limit --limit 1/second -j LOG --A limit-3020 -j ACCEPT --A limit-3021 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3021 -m limit --limit 1/second -j LOG --A limit-3022 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3022 -j TEE --gateway 10.0.0.1 --A limit-3022 -j TEE --gateway 10.0.0.2 --A limit-3022 -j ACCEPT --A limit-3023 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3023 -j TEE --gateway 10.0.0.1 --A limit-3023 -j TEE --gateway 10.0.0.2 --A limit-3024 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3024 -j ACCEPT --A limit-3026 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3026 -m limit --limit 12/minute -j ULOG --A limit-3026 -j ACCEPT --A limit-3027 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3027 -m limit --limit 12/minute -j ULOG --A limit-3028 -m recent --name limit-3028 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1660 --A limit-3028 -m recent --name limit-3028 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3029 -m recent --name limit-3029 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1661 --A limit-3029 -m recent --name limit-3029 --rsource --mask 255.255.255.255 --set -A limit-303 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-303 -m limit --limit 1/second -j LOG --A limit-3030 -m recent --name limit-3030 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1662 --A limit-3030 -m limit --limit 1/second -j LOG --A limit-3030 -m recent --name limit-3030 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3031 -m recent --name limit-3031 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1663 --A limit-3031 -m recent --name limit-3031 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3032 -m recent --name limit-3032 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1664 --A limit-3032 -j TEE --gateway 10.0.0.1 --A limit-3032 -j TEE --gateway 10.0.0.2 --A limit-3032 -m recent --name limit-3032 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3033 -m recent --name limit-3033 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1665 --A limit-3033 -m recent --name limit-3033 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3033 -m recent --name limit-3033 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3034 -m recent --name limit-3034 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1666 --A limit-3034 -m recent --name limit-3034 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3035 -m recent --name limit-3035 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1667 --A limit-3035 -m recent --name limit-3035 --rsource --mask 255.255.255.255 --set --A limit-3036 -m recent --name limit-3036 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1668 --A limit-3036 -m limit --limit 12/minute -j ULOG --A limit-3036 -m recent --name limit-3036 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3037 -m recent --name limit-3037 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1669 --A limit-3037 -m recent --name limit-3037 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3038 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1670 --A limit-3038 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3039 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1671 --A limit-3039 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-304 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-304 -j TEE --gateway 10.0.0.1 -A limit-304 -j TEE --gateway 10.0.0.2 -A limit-304 -j ACCEPT --A limit-3040 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1672 --A limit-3040 -m limit --limit 1/second -j LOG --A limit-3040 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3041 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1673 --A limit-3041 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3042 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1674 --A limit-3042 -j TEE --gateway 10.0.0.1 --A limit-3042 -j TEE --gateway 10.0.0.2 --A limit-3042 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3043 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1675 --A limit-3043 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3043 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3044 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1676 --A limit-3044 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3045 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1677 --A limit-3045 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-3046 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1678 --A limit-3046 -m limit --limit 12/minute -j ULOG --A limit-3046 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3047 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1679 --A limit-3047 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3048 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1680 --A limit-3048 -j ACCEPT -A limit-305 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-305 -j TEE --gateway 10.0.0.1 -A limit-305 -j TEE --gateway 10.0.0.2 --A limit-3050 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1682 --A limit-3050 -m limit --limit 1/second -j LOG --A limit-3050 -j ACCEPT --A limit-3051 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1683 --A limit-3051 -m limit --limit 1/second -j LOG --A limit-3052 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1684 --A limit-3052 -j TEE --gateway 10.0.0.1 --A limit-3052 -j TEE --gateway 10.0.0.2 --A limit-3052 -j ACCEPT --A limit-3053 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1685 --A limit-3053 -j TEE --gateway 10.0.0.1 --A limit-3053 -j TEE --gateway 10.0.0.2 --A limit-3054 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1686 --A limit-3054 -j ACCEPT --A limit-3056 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1688 --A limit-3056 -m limit --limit 12/minute -j ULOG --A limit-3056 -j ACCEPT --A limit-3057 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1689 --A limit-3057 -m limit --limit 12/minute -j ULOG --A limit-3058 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1690 --A limit-3058 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3059 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1691 --A limit-3059 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-306 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-306 -j ACCEPT --A limit-3060 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1692 --A limit-3060 -m limit --limit 1/second -j LOG --A limit-3060 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3061 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1693 --A limit-3061 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3062 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1694 --A limit-3062 -j TEE --gateway 10.0.0.1 --A limit-3062 -j TEE --gateway 10.0.0.2 --A limit-3062 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3063 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1695 --A limit-3063 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3063 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3064 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1696 --A limit-3064 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3065 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1697 --A limit-3065 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3066 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1698 --A limit-3066 -m limit --limit 12/minute -j ULOG --A limit-3066 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3067 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1699 --A limit-3067 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3068 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1700 --A limit-3068 -j ACCEPT -A limit-307 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3070 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1702 --A limit-3070 -m limit --limit 1/second -j LOG --A limit-3070 -j ACCEPT --A limit-3071 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1703 --A limit-3071 -m limit --limit 1/second -j LOG --A limit-3072 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1704 --A limit-3072 -j TEE --gateway 10.0.0.1 --A limit-3072 -j TEE --gateway 10.0.0.2 --A limit-3072 -j ACCEPT --A limit-3073 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1705 --A limit-3073 -j TEE --gateway 10.0.0.1 --A limit-3073 -j TEE --gateway 10.0.0.2 --A limit-3074 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1706 --A limit-3074 -j ACCEPT --A limit-3076 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1708 --A limit-3076 -m limit --limit 12/minute -j ULOG --A limit-3076 -j ACCEPT --A limit-3077 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1709 --A limit-3077 -m limit --limit 12/minute -j ULOG --A limit-3078 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1710 --A limit-3078 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3079 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1711 --A limit-3079 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-308 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-308 -m limit --limit 12/minute -j ULOG -A limit-308 -j ACCEPT --A limit-3080 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1712 --A limit-3080 -m limit --limit 1/second -j LOG --A limit-3080 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3081 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1713 --A limit-3081 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3082 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1714 --A limit-3082 -j TEE --gateway 10.0.0.1 --A limit-3082 -j TEE --gateway 10.0.0.2 --A limit-3082 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3083 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1715 --A limit-3083 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3083 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3084 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1716 --A limit-3084 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3085 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1717 --A limit-3085 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-3086 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1718 --A limit-3086 -m limit --limit 12/minute -j ULOG --A limit-3086 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3087 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1719 --A limit-3087 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3088 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1720 --A limit-3088 -j ACCEPT -A limit-309 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-309 -m limit --limit 12/minute -j ULOG --A limit-3090 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1722 --A limit-3090 -m limit --limit 1/second -j LOG --A limit-3090 -j ACCEPT --A limit-3091 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1723 --A limit-3091 -m limit --limit 1/second -j LOG --A limit-3092 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1724 --A limit-3092 -j TEE --gateway 10.0.0.1 --A limit-3092 -j TEE --gateway 10.0.0.2 --A limit-3092 -j ACCEPT --A limit-3093 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1725 --A limit-3093 -j TEE --gateway 10.0.0.1 --A limit-3093 -j TEE --gateway 10.0.0.2 --A limit-3094 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1726 --A limit-3094 -j ACCEPT --A limit-3096 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1728 --A limit-3096 -m limit --limit 12/minute -j ULOG --A limit-3096 -j ACCEPT --A limit-3097 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1729 --A limit-3097 -m limit --limit 12/minute -j ULOG --A limit-3098 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1730 --A limit-3098 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3099 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1731 --A limit-3099 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-31 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-310 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-310 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3100 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1732 --A limit-3100 -m limit --limit 1/second -j LOG --A limit-3100 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3101 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1733 --A limit-3101 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3102 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1734 --A limit-3102 -j TEE --gateway 10.0.0.1 --A limit-3102 -j TEE --gateway 10.0.0.2 --A limit-3102 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3103 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1735 --A limit-3103 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3103 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3104 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1736 --A limit-3104 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3105 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1737 --A limit-3105 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-3106 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1738 --A limit-3106 -m limit --limit 12/minute -j ULOG --A limit-3106 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3107 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1739 --A limit-3107 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3108 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1740 --A limit-3108 -j ACCEPT -A limit-311 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-311 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3110 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1742 --A limit-3110 -m limit --limit 1/second -j LOG --A limit-3110 -j ACCEPT --A limit-3111 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1743 --A limit-3111 -m limit --limit 1/second -j LOG --A limit-3112 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1744 --A limit-3112 -j TEE --gateway 10.0.0.1 --A limit-3112 -j TEE --gateway 10.0.0.2 --A limit-3112 -j ACCEPT --A limit-3113 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1745 --A limit-3113 -j TEE --gateway 10.0.0.1 --A limit-3113 -j TEE --gateway 10.0.0.2 --A limit-3114 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1746 --A limit-3114 -j ACCEPT --A limit-3116 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1748 --A limit-3116 -m limit --limit 12/minute -j ULOG --A limit-3116 -j ACCEPT --A limit-3117 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1749 --A limit-3117 -m limit --limit 12/minute -j ULOG --A limit-3118 -m recent --name limit-3118 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1750 --A limit-3118 -m recent --name limit-3118 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3119 -m recent --name limit-3119 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1751 --A limit-3119 -m recent --name limit-3119 --rsource --mask 255.255.255.255 --set -A limit-312 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-312 -m limit --limit 1/second -j LOG -A limit-312 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3120 -m recent --name limit-3120 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1752 --A limit-3120 -m limit --limit 1/second -j LOG --A limit-3120 -m recent --name limit-3120 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3121 -m recent --name limit-3121 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1753 --A limit-3121 -m recent --name limit-3121 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3122 -m recent --name limit-3122 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1754 --A limit-3122 -j TEE --gateway 10.0.0.1 --A limit-3122 -j TEE --gateway 10.0.0.2 --A limit-3122 -m recent --name limit-3122 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3123 -m recent --name limit-3123 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1755 --A limit-3123 -m recent --name limit-3123 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3123 -m recent --name limit-3123 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3124 -m recent --name limit-3124 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1756 --A limit-3124 -m recent --name limit-3124 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3125 -m recent --name limit-3125 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1757 --A limit-3125 -m recent --name limit-3125 --rsource --mask 255.255.255.255 --set --A limit-3126 -m recent --name limit-3126 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1758 --A limit-3126 -m limit --limit 12/minute -j ULOG --A limit-3126 -m recent --name limit-3126 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3127 -m recent --name limit-3127 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1759 --A limit-3127 -m recent --name limit-3127 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3128 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1760 --A limit-3128 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3129 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1761 --A limit-3129 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-313 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-313 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3130 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1762 --A limit-3130 -m limit --limit 1/second -j LOG --A limit-3130 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3131 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1763 --A limit-3131 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3132 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1764 --A limit-3132 -j TEE --gateway 10.0.0.1 --A limit-3132 -j TEE --gateway 10.0.0.2 --A limit-3132 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3133 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1765 --A limit-3133 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3133 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3134 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1766 --A limit-3134 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3135 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1767 --A limit-3135 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-3136 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1768 --A limit-3136 -m limit --limit 12/minute -j ULOG --A limit-3136 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3137 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1769 --A limit-3137 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3138 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1770 --A limit-3138 -j ACCEPT -A limit-314 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-314 -j TEE --gateway 10.0.0.1 -A limit-314 -j TEE --gateway 10.0.0.2 -A limit-314 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3140 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1772 --A limit-3140 -m limit --limit 1/second -j LOG --A limit-3140 -j ACCEPT --A limit-3141 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1773 --A limit-3141 -m limit --limit 1/second -j LOG --A limit-3142 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1774 --A limit-3142 -j TEE --gateway 10.0.0.1 --A limit-3142 -j TEE --gateway 10.0.0.2 --A limit-3142 -j ACCEPT --A limit-3143 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1775 --A limit-3143 -j TEE --gateway 10.0.0.1 --A limit-3143 -j TEE --gateway 10.0.0.2 --A limit-3144 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1776 --A limit-3144 -j ACCEPT --A limit-3146 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1778 --A limit-3146 -m limit --limit 12/minute -j ULOG --A limit-3146 -j ACCEPT --A limit-3147 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1779 --A limit-3147 -m limit --limit 12/minute -j ULOG --A limit-3148 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1780 --A limit-3148 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3149 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1781 --A limit-3149 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-315 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-315 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-315 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3150 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1782 --A limit-3150 -m limit --limit 1/second -j LOG --A limit-3150 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3151 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1783 --A limit-3151 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3152 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1784 --A limit-3152 -j TEE --gateway 10.0.0.1 --A limit-3152 -j TEE --gateway 10.0.0.2 --A limit-3152 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3153 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1785 --A limit-3153 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3153 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3154 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1786 --A limit-3154 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3155 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1787 --A limit-3155 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3156 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1788 --A limit-3156 -m limit --limit 12/minute -j ULOG --A limit-3156 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3157 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1789 --A limit-3157 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3158 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1790 --A limit-3158 -j ACCEPT -A limit-316 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-316 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3160 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1792 --A limit-3160 -m limit --limit 1/second -j LOG --A limit-3160 -j ACCEPT --A limit-3161 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1793 --A limit-3161 -m limit --limit 1/second -j LOG --A limit-3162 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1794 --A limit-3162 -j TEE --gateway 10.0.0.1 --A limit-3162 -j TEE --gateway 10.0.0.2 --A limit-3162 -j ACCEPT --A limit-3163 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1795 --A limit-3163 -j TEE --gateway 10.0.0.1 --A limit-3163 -j TEE --gateway 10.0.0.2 --A limit-3164 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1796 --A limit-3164 -j ACCEPT --A limit-3166 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1798 --A limit-3166 -m limit --limit 12/minute -j ULOG --A limit-3166 -j ACCEPT --A limit-3167 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1799 --A limit-3167 -m limit --limit 12/minute -j ULOG --A limit-3168 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1800 --A limit-3168 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3169 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1801 --A limit-3169 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-317 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-317 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3170 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1802 --A limit-3170 -m limit --limit 1/second -j LOG --A limit-3170 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3171 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1803 --A limit-3171 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3172 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1804 --A limit-3172 -j TEE --gateway 10.0.0.1 --A limit-3172 -j TEE --gateway 10.0.0.2 --A limit-3172 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3173 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1805 --A limit-3173 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3173 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3174 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1806 --A limit-3174 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3175 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1807 --A limit-3175 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-3176 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1808 --A limit-3176 -m limit --limit 12/minute -j ULOG --A limit-3176 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3177 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1809 --A limit-3177 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3178 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1810 --A limit-3178 -j ACCEPT -A limit-318 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-318 -m limit --limit 12/minute -j ULOG -A limit-318 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3180 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1812 --A limit-3180 -m limit --limit 1/second -j LOG --A limit-3180 -j ACCEPT --A limit-3181 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1813 --A limit-3181 -m limit --limit 1/second -j LOG --A limit-3182 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1814 --A limit-3182 -j TEE --gateway 10.0.0.1 --A limit-3182 -j TEE --gateway 10.0.0.2 --A limit-3182 -j ACCEPT --A limit-3183 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1815 --A limit-3183 -j TEE --gateway 10.0.0.1 --A limit-3183 -j TEE --gateway 10.0.0.2 --A limit-3184 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1816 --A limit-3184 -j ACCEPT --A limit-3186 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1818 --A limit-3186 -m limit --limit 12/minute -j ULOG --A limit-3186 -j ACCEPT --A limit-3187 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1819 --A limit-3187 -m limit --limit 12/minute -j ULOG --A limit-3188 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1820 --A limit-3188 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3189 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1821 --A limit-3189 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-319 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-319 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3190 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1822 --A limit-3190 -m limit --limit 1/second -j LOG --A limit-3190 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3191 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1823 --A limit-3191 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3192 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1824 --A limit-3192 -j TEE --gateway 10.0.0.1 --A limit-3192 -j TEE --gateway 10.0.0.2 --A limit-3192 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3193 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1825 --A limit-3193 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3193 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3194 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1826 --A limit-3194 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3195 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1827 --A limit-3195 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-3196 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1828 --A limit-3196 -m limit --limit 12/minute -j ULOG --A limit-3196 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3197 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1829 --A limit-3197 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3198 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1830 --A limit-3198 -j ACCEPT -A limit-32 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-32 -m limit --limit 1/second -j LOG -A limit-32 -j ACCEPT -A limit-320 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-320 -j ACCEPT --A limit-3200 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1832 --A limit-3200 -m limit --limit 1/second -j LOG --A limit-3200 -j ACCEPT --A limit-3201 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1833 --A limit-3201 -m limit --limit 1/second -j LOG --A limit-3202 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1834 --A limit-3202 -j TEE --gateway 10.0.0.1 --A limit-3202 -j TEE --gateway 10.0.0.2 --A limit-3202 -j ACCEPT --A limit-3203 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1835 --A limit-3203 -j TEE --gateway 10.0.0.1 --A limit-3203 -j TEE --gateway 10.0.0.2 --A limit-3204 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1836 --A limit-3204 -j ACCEPT --A limit-3206 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1838 --A limit-3206 -m limit --limit 12/minute -j ULOG --A limit-3206 -j ACCEPT --A limit-3207 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1839 --A limit-3207 -m limit --limit 12/minute -j ULOG --A limit-3208 -m recent --name limit-3208 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3208 -m recent --name limit-3208 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3209 -m recent --name limit-3209 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3209 -m recent --name limit-3209 --rsource --mask 255.255.255.255 --set -A limit-321 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3210 -m recent --name limit-3210 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3210 -m limit --limit 1/second -j LOG --A limit-3210 -m recent --name limit-3210 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3211 -m recent --name limit-3211 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3211 -m recent --name limit-3211 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3212 -m recent --name limit-3212 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3212 -j TEE --gateway 10.0.0.1 --A limit-3212 -j TEE --gateway 10.0.0.2 --A limit-3212 -m recent --name limit-3212 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3213 -m recent --name limit-3213 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3213 -m recent --name limit-3213 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3213 -m recent --name limit-3213 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3214 -m recent --name limit-3214 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3214 -m recent --name limit-3214 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3215 -m recent --name limit-3215 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3215 -m recent --name limit-3215 --rsource --mask 255.255.255.255 --set --A limit-3216 -m recent --name limit-3216 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3216 -m limit --limit 12/minute -j ULOG --A limit-3216 -m recent --name limit-3216 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3217 -m recent --name limit-3217 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3217 -m recent --name limit-3217 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3218 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3218 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3219 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3219 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-322 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-322 -m limit --limit 1/second -j LOG -A limit-322 -j ACCEPT --A limit-3220 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3220 -m limit --limit 1/second -j LOG --A limit-3220 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3221 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3221 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3222 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3222 -j TEE --gateway 10.0.0.1 --A limit-3222 -j TEE --gateway 10.0.0.2 --A limit-3222 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3223 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3223 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3223 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3224 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3224 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3225 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3225 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-3226 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3226 -m limit --limit 12/minute -j ULOG --A limit-3226 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3227 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3227 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3228 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3228 -j ACCEPT -A limit-323 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-323 -m limit --limit 1/second -j LOG --A limit-3230 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3230 -m limit --limit 1/second -j LOG --A limit-3230 -j ACCEPT --A limit-3231 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3231 -m limit --limit 1/second -j LOG --A limit-3232 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3232 -j TEE --gateway 10.0.0.1 --A limit-3232 -j TEE --gateway 10.0.0.2 --A limit-3232 -j ACCEPT --A limit-3233 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3233 -j TEE --gateway 10.0.0.1 --A limit-3233 -j TEE --gateway 10.0.0.2 --A limit-3234 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3234 -j ACCEPT --A limit-3236 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3236 -m limit --limit 12/minute -j ULOG --A limit-3236 -j ACCEPT --A limit-3237 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3237 -m limit --limit 12/minute -j ULOG --A limit-3238 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3238 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3239 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3239 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-324 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-324 -j TEE --gateway 10.0.0.1 -A limit-324 -j TEE --gateway 10.0.0.2 -A limit-324 -j ACCEPT --A limit-3240 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3240 -m limit --limit 1/second -j LOG --A limit-3240 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3241 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3241 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3242 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3242 -j TEE --gateway 10.0.0.1 --A limit-3242 -j TEE --gateway 10.0.0.2 --A limit-3242 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3243 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3243 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3243 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3244 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3244 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3245 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3245 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3246 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3246 -m limit --limit 12/minute -j ULOG --A limit-3246 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3247 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-3247 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3248 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3248 -j ACCEPT -A limit-325 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-325 -j TEE --gateway 10.0.0.1 -A limit-325 -j TEE --gateway 10.0.0.2 --A limit-3250 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3250 -m limit --limit 1/second -j LOG --A limit-3250 -j ACCEPT --A limit-3251 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3251 -m limit --limit 1/second -j LOG --A limit-3252 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3252 -j TEE --gateway 10.0.0.1 --A limit-3252 -j TEE --gateway 10.0.0.2 --A limit-3252 -j ACCEPT --A limit-3253 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3253 -j TEE --gateway 10.0.0.1 --A limit-3253 -j TEE --gateway 10.0.0.2 --A limit-3254 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3254 -j ACCEPT --A limit-3256 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3256 -m limit --limit 12/minute -j ULOG --A limit-3256 -j ACCEPT --A limit-3257 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3257 -m limit --limit 12/minute -j ULOG --A limit-3258 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3258 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3259 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3259 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-326 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-326 -j ACCEPT --A limit-3260 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3260 -m limit --limit 1/second -j LOG --A limit-3260 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3261 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3261 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3262 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3262 -j TEE --gateway 10.0.0.1 --A limit-3262 -j TEE --gateway 10.0.0.2 --A limit-3262 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3263 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3263 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3263 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3264 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3264 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3265 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3265 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-3266 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3266 -m limit --limit 12/minute -j ULOG --A limit-3266 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3267 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3267 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3268 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3268 -j ACCEPT -A limit-327 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3270 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3270 -m limit --limit 1/second -j LOG --A limit-3270 -j ACCEPT --A limit-3271 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3271 -m limit --limit 1/second -j LOG --A limit-3272 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3272 -j TEE --gateway 10.0.0.1 --A limit-3272 -j TEE --gateway 10.0.0.2 --A limit-3272 -j ACCEPT --A limit-3273 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3273 -j TEE --gateway 10.0.0.1 --A limit-3273 -j TEE --gateway 10.0.0.2 --A limit-3274 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3274 -j ACCEPT --A limit-3276 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3276 -m limit --limit 12/minute -j ULOG --A limit-3276 -j ACCEPT --A limit-3277 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3277 -m limit --limit 12/minute -j ULOG --A limit-3278 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3278 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3279 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3279 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-328 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-328 -m limit --limit 12/minute -j ULOG -A limit-328 -j ACCEPT --A limit-3280 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3280 -m limit --limit 1/second -j LOG --A limit-3280 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3281 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3281 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3282 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3282 -j TEE --gateway 10.0.0.1 --A limit-3282 -j TEE --gateway 10.0.0.2 --A limit-3282 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3283 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3283 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3283 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3284 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3284 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3285 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3285 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-3286 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3286 -m limit --limit 12/minute -j ULOG --A limit-3286 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3287 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-3287 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3288 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3288 -j ACCEPT -A limit-329 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-329 -m limit --limit 12/minute -j ULOG --A limit-3290 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3290 -m limit --limit 1/second -j LOG --A limit-3290 -j ACCEPT --A limit-3291 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3291 -m limit --limit 1/second -j LOG --A limit-3292 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3292 -j TEE --gateway 10.0.0.1 --A limit-3292 -j TEE --gateway 10.0.0.2 --A limit-3292 -j ACCEPT --A limit-3293 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3293 -j TEE --gateway 10.0.0.1 --A limit-3293 -j TEE --gateway 10.0.0.2 --A limit-3294 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3294 -j ACCEPT --A limit-3296 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3296 -m limit --limit 12/minute -j ULOG --A limit-3296 -j ACCEPT --A limit-3297 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3297 -m limit --limit 12/minute -j ULOG --A limit-3298 -m recent --name limit-3298 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1840 --A limit-3298 -m recent --name limit-3298 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3299 -m recent --name limit-3299 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1841 --A limit-3299 -m recent --name limit-3299 --rsource --mask 255.255.255.255 --set -A limit-33 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-33 -m limit --limit 1/second -j LOG -A limit-330 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-330 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3300 -m recent --name limit-3300 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1842 --A limit-3300 -m limit --limit 1/second -j LOG --A limit-3300 -m recent --name limit-3300 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3301 -m recent --name limit-3301 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1843 --A limit-3301 -m recent --name limit-3301 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3302 -m recent --name limit-3302 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1844 --A limit-3302 -j TEE --gateway 10.0.0.1 --A limit-3302 -j TEE --gateway 10.0.0.2 --A limit-3302 -m recent --name limit-3302 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3303 -m recent --name limit-3303 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1845 --A limit-3303 -m recent --name limit-3303 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3303 -m recent --name limit-3303 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3304 -m recent --name limit-3304 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1846 --A limit-3304 -m recent --name limit-3304 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3305 -m recent --name limit-3305 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1847 --A limit-3305 -m recent --name limit-3305 --rsource --mask 255.255.255.255 --set --A limit-3306 -m recent --name limit-3306 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1848 --A limit-3306 -m limit --limit 12/minute -j ULOG --A limit-3306 -m recent --name limit-3306 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3307 -m recent --name limit-3307 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1849 --A limit-3307 -m recent --name limit-3307 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3308 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1850 --A limit-3308 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3309 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1851 --A limit-3309 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-331 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-331 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-3310 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1852 --A limit-3310 -m limit --limit 1/second -j LOG --A limit-3310 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3311 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1853 --A limit-3311 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3312 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1854 --A limit-3312 -j TEE --gateway 10.0.0.1 --A limit-3312 -j TEE --gateway 10.0.0.2 --A limit-3312 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3313 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1855 --A limit-3313 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3313 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3314 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1856 --A limit-3314 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3315 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1857 --A limit-3315 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-3316 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1858 --A limit-3316 -m limit --limit 12/minute -j ULOG --A limit-3316 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3317 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1859 --A limit-3317 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3318 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1860 --A limit-3318 -j ACCEPT -A limit-332 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-332 -m limit --limit 1/second -j LOG -A limit-332 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3320 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1862 --A limit-3320 -m limit --limit 1/second -j LOG --A limit-3320 -j ACCEPT --A limit-3321 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1863 --A limit-3321 -m limit --limit 1/second -j LOG --A limit-3322 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1864 --A limit-3322 -j TEE --gateway 10.0.0.1 --A limit-3322 -j TEE --gateway 10.0.0.2 --A limit-3322 -j ACCEPT --A limit-3323 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1865 --A limit-3323 -j TEE --gateway 10.0.0.1 --A limit-3323 -j TEE --gateway 10.0.0.2 --A limit-3324 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1866 --A limit-3324 -j ACCEPT --A limit-3326 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1868 --A limit-3326 -m limit --limit 12/minute -j ULOG --A limit-3326 -j ACCEPT --A limit-3327 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1869 --A limit-3327 -m limit --limit 12/minute -j ULOG --A limit-3328 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1870 --A limit-3328 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3329 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1871 --A limit-3329 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-333 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-333 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3330 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1872 --A limit-3330 -m limit --limit 1/second -j LOG --A limit-3330 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3331 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1873 --A limit-3331 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3332 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1874 --A limit-3332 -j TEE --gateway 10.0.0.1 --A limit-3332 -j TEE --gateway 10.0.0.2 --A limit-3332 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3333 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1875 --A limit-3333 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3333 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3334 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1876 --A limit-3334 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3335 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1877 --A limit-3335 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3336 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1878 --A limit-3336 -m limit --limit 12/minute -j ULOG --A limit-3336 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3337 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1879 --A limit-3337 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3338 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1880 --A limit-3338 -j ACCEPT -A limit-334 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-334 -j TEE --gateway 10.0.0.1 -A limit-334 -j TEE --gateway 10.0.0.2 -A limit-334 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3340 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1882 --A limit-3340 -m limit --limit 1/second -j LOG --A limit-3340 -j ACCEPT --A limit-3341 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1883 --A limit-3341 -m limit --limit 1/second -j LOG --A limit-3342 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1884 --A limit-3342 -j TEE --gateway 10.0.0.1 --A limit-3342 -j TEE --gateway 10.0.0.2 --A limit-3342 -j ACCEPT --A limit-3343 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1885 --A limit-3343 -j TEE --gateway 10.0.0.1 --A limit-3343 -j TEE --gateway 10.0.0.2 --A limit-3344 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1886 --A limit-3344 -j ACCEPT --A limit-3346 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1888 --A limit-3346 -m limit --limit 12/minute -j ULOG --A limit-3346 -j ACCEPT --A limit-3347 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1889 --A limit-3347 -m limit --limit 12/minute -j ULOG --A limit-3348 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1890 --A limit-3348 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3349 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1891 --A limit-3349 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-335 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-335 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-335 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3350 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1892 --A limit-3350 -m limit --limit 1/second -j LOG --A limit-3350 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3351 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1893 --A limit-3351 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3352 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1894 --A limit-3352 -j TEE --gateway 10.0.0.1 --A limit-3352 -j TEE --gateway 10.0.0.2 --A limit-3352 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3353 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1895 --A limit-3353 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3353 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3354 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1896 --A limit-3354 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3355 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1897 --A limit-3355 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-3356 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1898 --A limit-3356 -m limit --limit 12/minute -j ULOG --A limit-3356 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3357 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1899 --A limit-3357 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3358 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1900 --A limit-3358 -j ACCEPT -A limit-336 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-336 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3360 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1902 --A limit-3360 -m limit --limit 1/second -j LOG --A limit-3360 -j ACCEPT --A limit-3361 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1903 --A limit-3361 -m limit --limit 1/second -j LOG --A limit-3362 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1904 --A limit-3362 -j TEE --gateway 10.0.0.1 --A limit-3362 -j TEE --gateway 10.0.0.2 --A limit-3362 -j ACCEPT --A limit-3363 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1905 --A limit-3363 -j TEE --gateway 10.0.0.1 --A limit-3363 -j TEE --gateway 10.0.0.2 --A limit-3364 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1906 --A limit-3364 -j ACCEPT --A limit-3366 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1908 --A limit-3366 -m limit --limit 12/minute -j ULOG --A limit-3366 -j ACCEPT --A limit-3367 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1909 --A limit-3367 -m limit --limit 12/minute -j ULOG --A limit-3368 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1910 --A limit-3368 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3369 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1911 --A limit-3369 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-337 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-337 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-3370 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1912 --A limit-3370 -m limit --limit 1/second -j LOG --A limit-3370 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3371 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1913 --A limit-3371 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3372 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1914 --A limit-3372 -j TEE --gateway 10.0.0.1 --A limit-3372 -j TEE --gateway 10.0.0.2 --A limit-3372 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3373 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1915 --A limit-3373 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3373 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3374 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1916 --A limit-3374 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3375 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1917 --A limit-3375 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-3376 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1918 --A limit-3376 -m limit --limit 12/minute -j ULOG --A limit-3376 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3377 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1919 --A limit-3377 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3378 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1920 --A limit-3378 -j ACCEPT -A limit-338 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-338 -m limit --limit 12/minute -j ULOG -A limit-338 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3380 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1922 --A limit-3380 -m limit --limit 1/second -j LOG --A limit-3380 -j ACCEPT --A limit-3381 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1923 --A limit-3381 -m limit --limit 1/second -j LOG --A limit-3382 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1924 --A limit-3382 -j TEE --gateway 10.0.0.1 --A limit-3382 -j TEE --gateway 10.0.0.2 --A limit-3382 -j ACCEPT --A limit-3383 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1925 --A limit-3383 -j TEE --gateway 10.0.0.1 --A limit-3383 -j TEE --gateway 10.0.0.2 --A limit-3384 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1926 --A limit-3384 -j ACCEPT --A limit-3386 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1928 --A limit-3386 -m limit --limit 12/minute -j ULOG --A limit-3386 -j ACCEPT --A limit-3387 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1929 --A limit-3387 -m limit --limit 12/minute -j ULOG --A limit-3388 -m recent --name limit-3388 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3388 -m recent --name limit-3388 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3389 -m recent --name limit-3389 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3389 -m recent --name limit-3389 --rsource --mask 255.255.255.255 --set -A limit-339 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-339 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3390 -m recent --name limit-3390 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3390 -m limit --limit 1/second -j LOG --A limit-3390 -m recent --name limit-3390 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3391 -m recent --name limit-3391 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3391 -m recent --name limit-3391 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3392 -m recent --name limit-3392 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3392 -j TEE --gateway 10.0.0.1 --A limit-3392 -j TEE --gateway 10.0.0.2 --A limit-3392 -m recent --name limit-3392 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3393 -m recent --name limit-3393 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3393 -m recent --name limit-3393 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3393 -m recent --name limit-3393 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3394 -m recent --name limit-3394 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3394 -m recent --name limit-3394 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3395 -m recent --name limit-3395 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3395 -m recent --name limit-3395 --rsource --mask 255.255.255.255 --set --A limit-3396 -m recent --name limit-3396 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3396 -m limit --limit 12/minute -j ULOG --A limit-3396 -m recent --name limit-3396 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3397 -m recent --name limit-3397 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3397 -m recent --name limit-3397 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3398 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3398 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3399 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3399 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-34 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-34 -j TEE --gateway 10.0.0.1 -A limit-34 -j TEE --gateway 10.0.0.2 -A limit-34 -j ACCEPT -A limit-340 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-340 -j ACCEPT --A limit-3400 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3400 -m limit --limit 1/second -j LOG --A limit-3400 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3401 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3401 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3402 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3402 -j TEE --gateway 10.0.0.1 --A limit-3402 -j TEE --gateway 10.0.0.2 --A limit-3402 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3403 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3403 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3403 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3404 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3404 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3405 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3405 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-3406 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3406 -m limit --limit 12/minute -j ULOG --A limit-3406 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3407 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3407 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3408 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3408 -j ACCEPT -A limit-341 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3410 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3410 -m limit --limit 1/second -j LOG --A limit-3410 -j ACCEPT --A limit-3411 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3411 -m limit --limit 1/second -j LOG --A limit-3412 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3412 -j TEE --gateway 10.0.0.1 --A limit-3412 -j TEE --gateway 10.0.0.2 --A limit-3412 -j ACCEPT --A limit-3413 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3413 -j TEE --gateway 10.0.0.1 --A limit-3413 -j TEE --gateway 10.0.0.2 --A limit-3414 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3414 -j ACCEPT --A limit-3416 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3416 -m limit --limit 12/minute -j ULOG --A limit-3416 -j ACCEPT --A limit-3417 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3417 -m limit --limit 12/minute -j ULOG --A limit-3418 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3418 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3419 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3419 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-342 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-342 -m limit --limit 1/second -j LOG -A limit-342 -j ACCEPT --A limit-3420 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3420 -m limit --limit 1/second -j LOG --A limit-3420 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3421 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3421 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3422 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3422 -j TEE --gateway 10.0.0.1 --A limit-3422 -j TEE --gateway 10.0.0.2 --A limit-3422 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3423 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3423 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3423 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3424 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3424 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3425 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3425 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3426 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3426 -m limit --limit 12/minute -j ULOG --A limit-3426 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3427 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3427 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3428 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3428 -j ACCEPT -A limit-343 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-343 -m limit --limit 1/second -j LOG --A limit-3430 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3430 -m limit --limit 1/second -j LOG --A limit-3430 -j ACCEPT --A limit-3431 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3431 -m limit --limit 1/second -j LOG --A limit-3432 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3432 -j TEE --gateway 10.0.0.1 --A limit-3432 -j TEE --gateway 10.0.0.2 --A limit-3432 -j ACCEPT --A limit-3433 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3433 -j TEE --gateway 10.0.0.1 --A limit-3433 -j TEE --gateway 10.0.0.2 --A limit-3434 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3434 -j ACCEPT --A limit-3436 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3436 -m limit --limit 12/minute -j ULOG --A limit-3436 -j ACCEPT --A limit-3437 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3437 -m limit --limit 12/minute -j ULOG --A limit-3438 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3438 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3439 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3439 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-344 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-344 -j TEE --gateway 10.0.0.1 -A limit-344 -j TEE --gateway 10.0.0.2 -A limit-344 -j ACCEPT --A limit-3440 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3440 -m limit --limit 1/second -j LOG --A limit-3440 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3441 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3441 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3442 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3442 -j TEE --gateway 10.0.0.1 --A limit-3442 -j TEE --gateway 10.0.0.2 --A limit-3442 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3443 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3443 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3443 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3444 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3444 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3445 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3445 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-3446 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3446 -m limit --limit 12/minute -j ULOG --A limit-3446 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3447 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3447 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3448 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3448 -j ACCEPT -A limit-345 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-345 -j TEE --gateway 10.0.0.1 -A limit-345 -j TEE --gateway 10.0.0.2 --A limit-3450 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3450 -m limit --limit 1/second -j LOG --A limit-3450 -j ACCEPT --A limit-3451 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3451 -m limit --limit 1/second -j LOG --A limit-3452 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3452 -j TEE --gateway 10.0.0.1 --A limit-3452 -j TEE --gateway 10.0.0.2 --A limit-3452 -j ACCEPT --A limit-3453 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3453 -j TEE --gateway 10.0.0.1 --A limit-3453 -j TEE --gateway 10.0.0.2 --A limit-3454 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3454 -j ACCEPT --A limit-3456 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3456 -m limit --limit 12/minute -j ULOG --A limit-3456 -j ACCEPT --A limit-3457 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3457 -m limit --limit 12/minute -j ULOG --A limit-3458 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3458 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3459 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3459 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-346 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-346 -j ACCEPT --A limit-3460 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3460 -m limit --limit 1/second -j LOG --A limit-3460 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3461 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3461 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3462 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3462 -j TEE --gateway 10.0.0.1 --A limit-3462 -j TEE --gateway 10.0.0.2 --A limit-3462 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3463 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3464 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3464 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3465 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3465 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-3466 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3466 -m limit --limit 12/minute -j ULOG --A limit-3466 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3467 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3467 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3468 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3468 -j ACCEPT -A limit-347 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3470 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3470 -m limit --limit 1/second -j LOG --A limit-3470 -j ACCEPT --A limit-3471 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3471 -m limit --limit 1/second -j LOG --A limit-3472 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3472 -j TEE --gateway 10.0.0.1 --A limit-3472 -j TEE --gateway 10.0.0.2 --A limit-3472 -j ACCEPT --A limit-3473 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3473 -j TEE --gateway 10.0.0.1 --A limit-3473 -j TEE --gateway 10.0.0.2 --A limit-3474 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3474 -j ACCEPT --A limit-3476 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3476 -m limit --limit 12/minute -j ULOG --A limit-3476 -j ACCEPT --A limit-3477 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3477 -m limit --limit 12/minute -j ULOG --A limit-3478 -m recent --name limit-3478 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1930 --A limit-3478 -m recent --name limit-3478 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3479 -m recent --name limit-3479 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1931 --A limit-3479 -m recent --name limit-3479 --rsource --mask 255.255.255.255 --set -A limit-348 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-348 -m limit --limit 12/minute -j ULOG -A limit-348 -j ACCEPT --A limit-3480 -m recent --name limit-3480 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1932 --A limit-3480 -m limit --limit 1/second -j LOG --A limit-3480 -m recent --name limit-3480 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3481 -m recent --name limit-3481 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1933 --A limit-3481 -m recent --name limit-3481 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3482 -m recent --name limit-3482 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1934 --A limit-3482 -j TEE --gateway 10.0.0.1 --A limit-3482 -j TEE --gateway 10.0.0.2 --A limit-3482 -m recent --name limit-3482 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3483 -m recent --name limit-3483 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1935 --A limit-3483 -m recent --name limit-3483 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3483 -m recent --name limit-3483 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3484 -m recent --name limit-3484 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1936 --A limit-3484 -m recent --name limit-3484 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3485 -m recent --name limit-3485 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1937 --A limit-3485 -m recent --name limit-3485 --rsource --mask 255.255.255.255 --set --A limit-3486 -m recent --name limit-3486 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1938 --A limit-3486 -m limit --limit 12/minute -j ULOG --A limit-3486 -m recent --name limit-3486 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3487 -m recent --name limit-3487 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1939 --A limit-3487 -m recent --name limit-3487 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3488 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1940 --A limit-3488 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3489 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1941 --A limit-3489 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-349 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-349 -m limit --limit 12/minute -j ULOG --A limit-3490 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1942 --A limit-3490 -m limit --limit 1/second -j LOG --A limit-3490 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3491 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1943 --A limit-3491 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3492 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1944 --A limit-3492 -j TEE --gateway 10.0.0.1 --A limit-3492 -j TEE --gateway 10.0.0.2 --A limit-3492 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3493 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1945 --A limit-3493 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3493 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3494 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1946 --A limit-3494 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3495 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1947 --A limit-3495 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-3496 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1948 --A limit-3496 -m limit --limit 12/minute -j ULOG --A limit-3496 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3497 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1949 --A limit-3497 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3498 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1950 --A limit-3498 -j ACCEPT -A limit-35 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-35 -j TEE --gateway 10.0.0.1 -A limit-35 -j TEE --gateway 10.0.0.2 -A limit-350 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-350 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3500 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1952 --A limit-3500 -m limit --limit 1/second -j LOG --A limit-3500 -j ACCEPT --A limit-3501 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1953 --A limit-3501 -m limit --limit 1/second -j LOG --A limit-3502 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1954 --A limit-3502 -j TEE --gateway 10.0.0.1 --A limit-3502 -j TEE --gateway 10.0.0.2 --A limit-3502 -j ACCEPT --A limit-3503 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1955 --A limit-3503 -j TEE --gateway 10.0.0.1 --A limit-3503 -j TEE --gateway 10.0.0.2 --A limit-3504 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1956 --A limit-3504 -j ACCEPT --A limit-3506 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1958 --A limit-3506 -m limit --limit 12/minute -j ULOG --A limit-3506 -j ACCEPT --A limit-3507 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1959 --A limit-3507 -m limit --limit 12/minute -j ULOG --A limit-3508 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1960 --A limit-3508 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3509 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1961 --A limit-3509 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-351 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-351 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-3510 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1962 --A limit-3510 -m limit --limit 1/second -j LOG --A limit-3510 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3511 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1963 --A limit-3511 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3512 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1964 --A limit-3512 -j TEE --gateway 10.0.0.1 --A limit-3512 -j TEE --gateway 10.0.0.2 --A limit-3512 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3513 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1965 --A limit-3513 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3513 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3514 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1966 --A limit-3514 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3515 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1967 --A limit-3515 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3516 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1968 --A limit-3516 -m limit --limit 12/minute -j ULOG --A limit-3516 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3517 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1969 --A limit-3517 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3518 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1970 --A limit-3518 -j ACCEPT -A limit-352 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-352 -m limit --limit 1/second -j LOG -A limit-352 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3520 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1972 --A limit-3520 -m limit --limit 1/second -j LOG --A limit-3520 -j ACCEPT --A limit-3521 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1973 --A limit-3521 -m limit --limit 1/second -j LOG --A limit-3522 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1974 --A limit-3522 -j TEE --gateway 10.0.0.1 --A limit-3522 -j TEE --gateway 10.0.0.2 --A limit-3522 -j ACCEPT --A limit-3523 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1975 --A limit-3523 -j TEE --gateway 10.0.0.1 --A limit-3523 -j TEE --gateway 10.0.0.2 --A limit-3524 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1976 --A limit-3524 -j ACCEPT --A limit-3526 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1978 --A limit-3526 -m limit --limit 12/minute -j ULOG --A limit-3526 -j ACCEPT --A limit-3527 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1979 --A limit-3527 -m limit --limit 12/minute -j ULOG --A limit-3528 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1980 --A limit-3528 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3529 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1981 --A limit-3529 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-353 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-353 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3530 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1982 --A limit-3530 -m limit --limit 1/second -j LOG --A limit-3530 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3531 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1983 --A limit-3531 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3532 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1984 --A limit-3532 -j TEE --gateway 10.0.0.1 --A limit-3532 -j TEE --gateway 10.0.0.2 --A limit-3532 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3533 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1985 --A limit-3533 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3533 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3534 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1986 --A limit-3534 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3535 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1987 --A limit-3535 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-3536 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1988 --A limit-3536 -m limit --limit 12/minute -j ULOG --A limit-3536 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3537 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1989 --A limit-3537 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3538 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1990 --A limit-3538 -j ACCEPT -A limit-354 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-354 -j TEE --gateway 10.0.0.1 -A limit-354 -j TEE --gateway 10.0.0.2 -A limit-354 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3540 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1992 --A limit-3540 -m limit --limit 1/second -j LOG --A limit-3540 -j ACCEPT --A limit-3541 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1993 --A limit-3541 -m limit --limit 1/second -j LOG --A limit-3542 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1994 --A limit-3542 -j TEE --gateway 10.0.0.1 --A limit-3542 -j TEE --gateway 10.0.0.2 --A limit-3542 -j ACCEPT --A limit-3543 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1995 --A limit-3543 -j TEE --gateway 10.0.0.1 --A limit-3543 -j TEE --gateway 10.0.0.2 --A limit-3544 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1996 --A limit-3544 -j ACCEPT --A limit-3546 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1998 --A limit-3546 -m limit --limit 12/minute -j ULOG --A limit-3546 -j ACCEPT --A limit-3547 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1999 --A limit-3547 -m limit --limit 12/minute -j ULOG --A limit-3548 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2000 --A limit-3548 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3549 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2001 --A limit-3549 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3550 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2002 --A limit-3550 -m limit --limit 1/second -j LOG --A limit-3550 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3551 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2003 --A limit-3551 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3552 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2004 --A limit-3552 -j TEE --gateway 10.0.0.1 --A limit-3552 -j TEE --gateway 10.0.0.2 --A limit-3552 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3553 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2005 --A limit-3553 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3553 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3554 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2006 --A limit-3554 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3555 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2007 --A limit-3555 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-3556 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2008 --A limit-3556 -m limit --limit 12/minute -j ULOG --A limit-3556 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3557 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2009 --A limit-3557 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3558 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2010 --A limit-3558 -j ACCEPT -A limit-356 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-356 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3560 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2012 --A limit-3560 -m limit --limit 1/second -j LOG --A limit-3560 -j ACCEPT --A limit-3561 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2013 --A limit-3561 -m limit --limit 1/second -j LOG --A limit-3562 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2014 --A limit-3562 -j TEE --gateway 10.0.0.1 --A limit-3562 -j TEE --gateway 10.0.0.2 --A limit-3562 -j ACCEPT --A limit-3563 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2015 --A limit-3563 -j TEE --gateway 10.0.0.1 --A limit-3563 -j TEE --gateway 10.0.0.2 --A limit-3564 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2016 --A limit-3564 -j ACCEPT --A limit-3566 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2018 --A limit-3566 -m limit --limit 12/minute -j ULOG --A limit-3566 -j ACCEPT --A limit-3567 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2019 --A limit-3567 -m limit --limit 12/minute -j ULOG --A limit-3568 -m recent --name limit-3568 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2020 --A limit-3568 -m recent --name limit-3568 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3569 -m recent --name limit-3569 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2021 --A limit-3569 -m recent --name limit-3569 --rsource --mask 255.255.255.255 --set -A limit-357 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-357 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-3570 -m recent --name limit-3570 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2022 --A limit-3570 -m limit --limit 1/second -j LOG --A limit-3570 -m recent --name limit-3570 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3571 -m recent --name limit-3571 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2023 --A limit-3571 -m recent --name limit-3571 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3572 -m recent --name limit-3572 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2024 --A limit-3572 -j TEE --gateway 10.0.0.1 --A limit-3572 -j TEE --gateway 10.0.0.2 --A limit-3572 -m recent --name limit-3572 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3573 -m recent --name limit-3573 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2025 --A limit-3573 -m recent --name limit-3573 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3573 -m recent --name limit-3573 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3574 -m recent --name limit-3574 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2026 --A limit-3574 -m recent --name limit-3574 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3575 -m recent --name limit-3575 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2027 --A limit-3575 -m recent --name limit-3575 --rsource --mask 255.255.255.255 --set --A limit-3576 -m recent --name limit-3576 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2028 --A limit-3576 -m limit --limit 12/minute -j ULOG --A limit-3576 -m recent --name limit-3576 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3577 -m recent --name limit-3577 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2029 --A limit-3577 -m recent --name limit-3577 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3578 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2030 --A limit-3578 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3579 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2031 --A limit-3579 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-358 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-358 -m limit --limit 12/minute -j ULOG -A limit-358 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3580 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2032 --A limit-3580 -m limit --limit 1/second -j LOG --A limit-3580 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3581 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2033 --A limit-3581 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3582 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2034 --A limit-3582 -j TEE --gateway 10.0.0.1 --A limit-3582 -j TEE --gateway 10.0.0.2 --A limit-3582 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3583 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2035 --A limit-3583 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3583 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3584 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2036 --A limit-3584 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3585 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2037 --A limit-3585 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-3586 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2038 --A limit-3586 -m limit --limit 12/minute -j ULOG --A limit-3586 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3587 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2039 --A limit-3587 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3588 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2040 --A limit-3588 -j ACCEPT -A limit-359 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-359 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3590 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2042 --A limit-3590 -m limit --limit 1/second -j LOG --A limit-3590 -j ACCEPT --A limit-3591 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2043 --A limit-3591 -m limit --limit 1/second -j LOG --A limit-3592 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2044 --A limit-3592 -j TEE --gateway 10.0.0.1 --A limit-3592 -j TEE --gateway 10.0.0.2 --A limit-3592 -j ACCEPT --A limit-3593 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2045 --A limit-3593 -j TEE --gateway 10.0.0.1 --A limit-3593 -j TEE --gateway 10.0.0.2 --A limit-3594 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2046 --A limit-3594 -j ACCEPT --A limit-3596 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2048 --A limit-3596 -m limit --limit 12/minute -j ULOG --A limit-3596 -j ACCEPT --A limit-3597 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2049 --A limit-3597 -m limit --limit 12/minute -j ULOG --A limit-3598 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2050 --A limit-3598 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3599 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2051 --A limit-3599 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-36 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-36 -j ACCEPT -A limit-360 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-360 -j ACCEPT --A limit-3600 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2052 --A limit-3600 -m limit --limit 1/second -j LOG --A limit-3600 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3601 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2053 --A limit-3601 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3602 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2054 --A limit-3602 -j TEE --gateway 10.0.0.1 --A limit-3602 -j TEE --gateway 10.0.0.2 --A limit-3602 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3603 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2055 --A limit-3603 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3603 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3604 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2056 --A limit-3604 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3605 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2057 --A limit-3605 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3606 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2058 --A limit-3606 -m limit --limit 12/minute -j ULOG --A limit-3606 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3607 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2059 --A limit-3607 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3608 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2060 --A limit-3608 -j ACCEPT -A limit-361 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3610 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2062 --A limit-3610 -m limit --limit 1/second -j LOG --A limit-3610 -j ACCEPT --A limit-3611 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2063 --A limit-3611 -m limit --limit 1/second -j LOG --A limit-3612 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2064 --A limit-3612 -j TEE --gateway 10.0.0.1 --A limit-3612 -j TEE --gateway 10.0.0.2 --A limit-3612 -j ACCEPT --A limit-3613 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2065 --A limit-3613 -j TEE --gateway 10.0.0.1 --A limit-3613 -j TEE --gateway 10.0.0.2 --A limit-3614 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2066 --A limit-3614 -j ACCEPT --A limit-3616 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2068 --A limit-3616 -m limit --limit 12/minute -j ULOG --A limit-3616 -j ACCEPT --A limit-3617 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2069 --A limit-3617 -m limit --limit 12/minute -j ULOG --A limit-3618 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2070 --A limit-3618 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3619 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2071 --A limit-3619 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-362 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-362 -m limit --limit 1/second -j LOG -A limit-362 -j ACCEPT --A limit-3620 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2072 --A limit-3620 -m limit --limit 1/second -j LOG --A limit-3620 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3621 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2073 --A limit-3621 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3622 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2074 --A limit-3622 -j TEE --gateway 10.0.0.1 --A limit-3622 -j TEE --gateway 10.0.0.2 --A limit-3622 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3623 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2075 --A limit-3623 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3623 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3624 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2076 --A limit-3624 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3625 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2077 --A limit-3625 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-3626 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2078 --A limit-3626 -m limit --limit 12/minute -j ULOG --A limit-3626 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3627 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2079 --A limit-3627 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3628 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2080 --A limit-3628 -j ACCEPT -A limit-363 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-363 -m limit --limit 1/second -j LOG --A limit-3630 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2082 --A limit-3630 -m limit --limit 1/second -j LOG --A limit-3630 -j ACCEPT --A limit-3631 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2083 --A limit-3631 -m limit --limit 1/second -j LOG --A limit-3632 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2084 --A limit-3632 -j TEE --gateway 10.0.0.1 --A limit-3632 -j TEE --gateway 10.0.0.2 --A limit-3632 -j ACCEPT --A limit-3633 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2085 --A limit-3633 -j TEE --gateway 10.0.0.1 --A limit-3633 -j TEE --gateway 10.0.0.2 --A limit-3634 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2086 --A limit-3634 -j ACCEPT --A limit-3636 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2088 --A limit-3636 -m limit --limit 12/minute -j ULOG --A limit-3636 -j ACCEPT --A limit-3637 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2089 --A limit-3637 -m limit --limit 12/minute -j ULOG --A limit-3638 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2090 --A limit-3638 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3639 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2091 --A limit-3639 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-364 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-364 -j TEE --gateway 10.0.0.1 -A limit-364 -j TEE --gateway 10.0.0.2 -A limit-364 -j ACCEPT --A limit-3640 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2092 --A limit-3640 -m limit --limit 1/second -j LOG --A limit-3640 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3641 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2093 --A limit-3641 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3642 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2094 --A limit-3642 -j TEE --gateway 10.0.0.1 --A limit-3642 -j TEE --gateway 10.0.0.2 --A limit-3642 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3643 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2095 --A limit-3643 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3643 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3644 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2096 --A limit-3644 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3645 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2097 --A limit-3645 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-3646 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2098 --A limit-3646 -m limit --limit 12/minute -j ULOG --A limit-3646 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3647 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2099 --A limit-3647 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3648 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2100 --A limit-3648 -j ACCEPT -A limit-365 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-365 -j TEE --gateway 10.0.0.1 -A limit-365 -j TEE --gateway 10.0.0.2 --A limit-3650 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2102 --A limit-3650 -m limit --limit 1/second -j LOG --A limit-3650 -j ACCEPT --A limit-3651 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2103 --A limit-3651 -m limit --limit 1/second -j LOG --A limit-3652 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2104 --A limit-3652 -j TEE --gateway 10.0.0.1 --A limit-3652 -j TEE --gateway 10.0.0.2 --A limit-3652 -j ACCEPT --A limit-3653 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2105 --A limit-3653 -j TEE --gateway 10.0.0.1 --A limit-3653 -j TEE --gateway 10.0.0.2 --A limit-3654 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2106 --A limit-3654 -j ACCEPT --A limit-3656 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2108 --A limit-3656 -m limit --limit 12/minute -j ULOG --A limit-3656 -j ACCEPT --A limit-3657 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2109 --A limit-3657 -m limit --limit 12/minute -j ULOG --A limit-3658 -m recent --name limit-3658 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3658 -m recent --name limit-3658 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3659 -m recent --name limit-3659 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3659 -m recent --name limit-3659 --rsource --mask 255.255.255.255 --set -A limit-366 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-366 -j ACCEPT --A limit-3660 -m recent --name limit-3660 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3660 -m limit --limit 1/second -j LOG --A limit-3660 -m recent --name limit-3660 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3661 -m recent --name limit-3661 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3661 -m recent --name limit-3661 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3662 -m recent --name limit-3662 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3662 -j TEE --gateway 10.0.0.1 --A limit-3662 -j TEE --gateway 10.0.0.2 --A limit-3662 -m recent --name limit-3662 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3663 -m recent --name limit-3663 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3663 -m recent --name limit-3663 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3663 -m recent --name limit-3663 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3664 -m recent --name limit-3664 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3664 -m recent --name limit-3664 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3665 -m recent --name limit-3665 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3665 -m recent --name limit-3665 --rsource --mask 255.255.255.255 --set --A limit-3666 -m recent --name limit-3666 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3666 -m limit --limit 12/minute -j ULOG --A limit-3666 -m recent --name limit-3666 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3667 -m recent --name limit-3667 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3667 -m recent --name limit-3667 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3668 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3668 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3669 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3669 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-367 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3670 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3670 -m limit --limit 1/second -j LOG --A limit-3670 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3671 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3671 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3672 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3672 -j TEE --gateway 10.0.0.1 --A limit-3672 -j TEE --gateway 10.0.0.2 --A limit-3672 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3673 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3673 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3673 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3674 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3674 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3675 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3675 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-3676 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3676 -m limit --limit 12/minute -j ULOG --A limit-3676 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3677 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3677 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3678 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3678 -j ACCEPT -A limit-368 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-368 -m limit --limit 12/minute -j ULOG -A limit-368 -j ACCEPT --A limit-3680 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3680 -m limit --limit 1/second -j LOG --A limit-3680 -j ACCEPT --A limit-3681 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3681 -m limit --limit 1/second -j LOG --A limit-3682 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3682 -j TEE --gateway 10.0.0.1 --A limit-3682 -j TEE --gateway 10.0.0.2 --A limit-3682 -j ACCEPT --A limit-3683 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3683 -j TEE --gateway 10.0.0.1 --A limit-3683 -j TEE --gateway 10.0.0.2 --A limit-3684 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3684 -j ACCEPT --A limit-3686 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3686 -m limit --limit 12/minute -j ULOG --A limit-3686 -j ACCEPT --A limit-3687 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3687 -m limit --limit 12/minute -j ULOG --A limit-3688 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3688 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3689 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3689 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-369 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-369 -m limit --limit 12/minute -j ULOG --A limit-3690 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3690 -m limit --limit 1/second -j LOG --A limit-3690 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3691 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3691 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3692 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3692 -j TEE --gateway 10.0.0.1 --A limit-3692 -j TEE --gateway 10.0.0.2 --A limit-3692 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3693 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3693 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3693 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3694 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3694 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3695 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3695 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3696 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3696 -m limit --limit 12/minute -j ULOG --A limit-3696 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3697 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-3697 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3698 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3698 -j ACCEPT -A limit-37 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-370 -m recent --name limit-370 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-190 -A limit-370 -m recent --name limit-370 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3700 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3700 -m limit --limit 1/second -j LOG --A limit-3700 -j ACCEPT --A limit-3701 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3701 -m limit --limit 1/second -j LOG --A limit-3702 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3702 -j TEE --gateway 10.0.0.1 --A limit-3702 -j TEE --gateway 10.0.0.2 --A limit-3702 -j ACCEPT --A limit-3703 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3703 -j TEE --gateway 10.0.0.1 --A limit-3703 -j TEE --gateway 10.0.0.2 --A limit-3704 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3704 -j ACCEPT --A limit-3706 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3706 -m limit --limit 12/minute -j ULOG --A limit-3706 -j ACCEPT --A limit-3707 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3707 -m limit --limit 12/minute -j ULOG --A limit-3708 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3708 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3709 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3709 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-191 -A limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --set --A limit-3710 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3710 -m limit --limit 1/second -j LOG --A limit-3710 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3711 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3711 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3712 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3712 -j TEE --gateway 10.0.0.1 --A limit-3712 -j TEE --gateway 10.0.0.2 --A limit-3712 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3713 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3713 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3713 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3714 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3714 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3715 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3715 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-3716 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3716 -m limit --limit 12/minute -j ULOG --A limit-3716 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3717 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3717 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3718 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3718 -j ACCEPT -A limit-372 -m recent --name limit-372 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-192 -A limit-372 -m limit --limit 1/second -j LOG -A limit-372 -m recent --name limit-372 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3720 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3720 -m limit --limit 1/second -j LOG --A limit-3720 -j ACCEPT --A limit-3721 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3721 -m limit --limit 1/second -j LOG --A limit-3722 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3722 -j TEE --gateway 10.0.0.1 --A limit-3722 -j TEE --gateway 10.0.0.2 --A limit-3722 -j ACCEPT --A limit-3723 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3723 -j TEE --gateway 10.0.0.1 --A limit-3723 -j TEE --gateway 10.0.0.2 --A limit-3724 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3724 -j ACCEPT --A limit-3726 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3726 -m limit --limit 12/minute -j ULOG --A limit-3726 -j ACCEPT --A limit-3727 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3727 -m limit --limit 12/minute -j ULOG --A limit-3728 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3728 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3729 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3729 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-193 -A limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3730 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3730 -m limit --limit 1/second -j LOG --A limit-3730 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3731 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3731 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3732 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3732 -j TEE --gateway 10.0.0.1 --A limit-3732 -j TEE --gateway 10.0.0.2 --A limit-3732 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3733 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3733 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3733 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3734 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3734 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3735 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3735 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-3736 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3736 -m limit --limit 12/minute -j ULOG --A limit-3736 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3737 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-3737 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3738 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3738 -j ACCEPT -A limit-374 -m recent --name limit-374 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-194 -A limit-374 -j TEE --gateway 10.0.0.1 -A limit-374 -j TEE --gateway 10.0.0.2 -A limit-374 -m recent --name limit-374 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3740 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3740 -m limit --limit 1/second -j LOG --A limit-3740 -j ACCEPT --A limit-3741 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3741 -m limit --limit 1/second -j LOG --A limit-3742 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3742 -j TEE --gateway 10.0.0.1 --A limit-3742 -j TEE --gateway 10.0.0.2 --A limit-3742 -j ACCEPT --A limit-3743 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3743 -j TEE --gateway 10.0.0.1 --A limit-3743 -j TEE --gateway 10.0.0.2 --A limit-3744 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3744 -j ACCEPT --A limit-3746 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3746 -m limit --limit 12/minute -j ULOG --A limit-3746 -j ACCEPT --A limit-3747 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3747 -m limit --limit 12/minute -j ULOG --A limit-3748 -m recent --name limit-3748 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2110 --A limit-3748 -m recent --name limit-3748 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3749 -m recent --name limit-3749 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2111 --A limit-3749 -m recent --name limit-3749 --rsource --mask 255.255.255.255 --set -A limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-195 -A limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3750 -m recent --name limit-3750 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2112 --A limit-3750 -m limit --limit 1/second -j LOG --A limit-3750 -m recent --name limit-3750 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3751 -m recent --name limit-3751 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2113 --A limit-3751 -m recent --name limit-3751 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3752 -m recent --name limit-3752 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2114 --A limit-3752 -j TEE --gateway 10.0.0.1 --A limit-3752 -j TEE --gateway 10.0.0.2 --A limit-3752 -m recent --name limit-3752 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3753 -m recent --name limit-3753 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2115 --A limit-3753 -m recent --name limit-3753 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3753 -m recent --name limit-3753 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3754 -m recent --name limit-3754 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2116 --A limit-3754 -m recent --name limit-3754 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3755 -m recent --name limit-3755 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2117 --A limit-3755 -m recent --name limit-3755 --rsource --mask 255.255.255.255 --set --A limit-3756 -m recent --name limit-3756 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2118 --A limit-3756 -m limit --limit 12/minute -j ULOG --A limit-3756 -m recent --name limit-3756 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3757 -m recent --name limit-3757 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2119 --A limit-3757 -m recent --name limit-3757 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3758 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2120 --A limit-3758 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3759 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2121 --A limit-3759 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-376 -m recent --name limit-376 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-196 -A limit-376 -m recent --name limit-376 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3760 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2122 --A limit-3760 -m limit --limit 1/second -j LOG --A limit-3760 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3761 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2123 --A limit-3761 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3762 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2124 --A limit-3762 -j TEE --gateway 10.0.0.1 --A limit-3762 -j TEE --gateway 10.0.0.2 --A limit-3762 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3763 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2125 --A limit-3763 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3763 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3764 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2126 --A limit-3764 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3765 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2127 --A limit-3765 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-3766 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2128 --A limit-3766 -m limit --limit 12/minute -j ULOG --A limit-3766 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3767 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2129 --A limit-3767 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3768 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2130 --A limit-3768 -j ACCEPT -A limit-377 -m recent --name limit-377 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-197 -A limit-377 -m recent --name limit-377 --rsource --mask 255.255.255.255 --set --A limit-3770 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2132 --A limit-3770 -m limit --limit 1/second -j LOG --A limit-3770 -j ACCEPT --A limit-3771 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2133 --A limit-3771 -m limit --limit 1/second -j LOG --A limit-3772 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2134 --A limit-3772 -j TEE --gateway 10.0.0.1 --A limit-3772 -j TEE --gateway 10.0.0.2 --A limit-3772 -j ACCEPT --A limit-3773 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2135 --A limit-3773 -j TEE --gateway 10.0.0.1 --A limit-3773 -j TEE --gateway 10.0.0.2 --A limit-3774 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2136 --A limit-3774 -j ACCEPT --A limit-3776 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2138 --A limit-3776 -m limit --limit 12/minute -j ULOG --A limit-3776 -j ACCEPT --A limit-3777 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2139 --A limit-3777 -m limit --limit 12/minute -j ULOG --A limit-3778 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2140 --A limit-3778 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3779 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2141 --A limit-3779 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-378 -m recent --name limit-378 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-198 -A limit-378 -m limit --limit 12/minute -j ULOG -A limit-378 -m recent --name limit-378 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3780 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2142 --A limit-3780 -m limit --limit 1/second -j LOG --A limit-3780 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3781 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2143 --A limit-3781 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3782 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2144 --A limit-3782 -j TEE --gateway 10.0.0.1 --A limit-3782 -j TEE --gateway 10.0.0.2 --A limit-3782 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3783 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2145 --A limit-3783 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 --A limit-3783 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3784 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2146 --A limit-3784 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3785 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2147 --A limit-3785 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3786 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2148 --A limit-3786 -m limit --limit 12/minute -j ULOG --A limit-3786 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-3787 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2149 --A limit-3787 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3788 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2150 --A limit-3788 -j ACCEPT -A limit-379 -m recent --name limit-379 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-199 -A limit-379 -m recent --name limit-379 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3790 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2152 --A limit-3790 -m limit --limit 1/second -j LOG --A limit-3790 -j ACCEPT --A limit-3791 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2153 --A limit-3791 -m limit --limit 1/second -j LOG --A limit-3792 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2154 --A limit-3792 -j TEE --gateway 10.0.0.1 --A limit-3792 -j TEE --gateway 10.0.0.2 --A limit-3792 -j ACCEPT --A limit-3793 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2155 --A limit-3793 -j TEE --gateway 10.0.0.1 --A limit-3793 -j TEE --gateway 10.0.0.2 --A limit-3794 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2156 --A limit-3794 -j ACCEPT --A limit-3796 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2158 --A limit-3796 -m limit --limit 12/minute -j ULOG --A limit-3796 -j ACCEPT --A limit-3797 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2159 --A limit-3797 -m limit --limit 12/minute -j ULOG --A limit-3798 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2160 --A limit-3798 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3799 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2161 --A limit-3799 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-38 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-38 -m limit --limit 12/minute -j ULOG -A limit-38 -j ACCEPT -A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-200 -A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3800 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2162 --A limit-3800 -m limit --limit 1/second -j LOG --A limit-3800 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3801 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2163 --A limit-3801 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3802 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2164 --A limit-3802 -j TEE --gateway 10.0.0.1 --A limit-3802 -j TEE --gateway 10.0.0.2 --A limit-3802 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3803 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2165 --A limit-3803 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3803 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3804 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2166 --A limit-3804 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3805 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2167 --A limit-3805 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-3806 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2168 --A limit-3806 -m limit --limit 12/minute -j ULOG --A limit-3806 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-3807 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2169 --A limit-3807 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3808 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2170 --A limit-3808 -j ACCEPT -A limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-201 -A limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-3810 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2172 --A limit-3810 -m limit --limit 1/second -j LOG --A limit-3810 -j ACCEPT --A limit-3811 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2173 --A limit-3811 -m limit --limit 1/second -j LOG --A limit-3812 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2174 --A limit-3812 -j TEE --gateway 10.0.0.1 --A limit-3812 -j TEE --gateway 10.0.0.2 --A limit-3812 -j ACCEPT --A limit-3813 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2175 --A limit-3813 -j TEE --gateway 10.0.0.1 --A limit-3813 -j TEE --gateway 10.0.0.2 --A limit-3814 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2176 --A limit-3814 -j ACCEPT --A limit-3816 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2178 --A limit-3816 -m limit --limit 12/minute -j ULOG --A limit-3816 -j ACCEPT --A limit-3817 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2179 --A limit-3817 -m limit --limit 12/minute -j ULOG --A limit-3818 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2180 --A limit-3818 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3819 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2181 --A limit-3819 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-382 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-202 -A limit-382 -m limit --limit 1/second -j LOG -A limit-382 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3820 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2182 --A limit-3820 -m limit --limit 1/second -j LOG --A limit-3820 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3821 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2183 --A limit-3821 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-3822 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2184 --A limit-3822 -j TEE --gateway 10.0.0.1 --A limit-3822 -j TEE --gateway 10.0.0.2 --A limit-3822 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3823 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2185 --A limit-3823 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 --A limit-3823 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 --A limit-3824 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2186 --A limit-3824 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3825 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2187 --A limit-3825 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-3826 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2188 --A limit-3826 -m limit --limit 12/minute -j ULOG --A limit-3826 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-3827 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2189 --A limit-3827 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-3828 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2190 --A limit-3828 -j ACCEPT -A limit-383 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-203 -A limit-383 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-3830 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2192 --A limit-3830 -m limit --limit 1/second -j LOG --A limit-3830 -j ACCEPT --A limit-3831 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2193 --A limit-3831 -m limit --limit 1/second -j LOG --A limit-3832 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2194 --A limit-3832 -j TEE --gateway 10.0.0.1 --A limit-3832 -j TEE --gateway 10.0.0.2 --A limit-3832 -j ACCEPT --A limit-3833 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2195 --A limit-3833 -j TEE --gateway 10.0.0.1 --A limit-3833 -j TEE --gateway 10.0.0.2 --A limit-3834 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2196 --A limit-3834 -j ACCEPT --A limit-3836 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2198 --A limit-3836 -m limit --limit 12/minute -j ULOG --A limit-3836 -j ACCEPT --A limit-3837 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2199 --A limit-3837 -m limit --limit 12/minute -j ULOG --A limit-3838 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3838 -j ACCEPT --A limit-3838 -m limit --limit 1/second -j LOG --A limit-3838 -j DROP --A limit-3839 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3839 -j RETURN --A limit-3839 -m limit --limit 1/second -j LOG --A limit-3839 -j DROP -A limit-384 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-204 -A limit-384 -j TEE --gateway 10.0.0.1 -A limit-384 -j TEE --gateway 10.0.0.2 -A limit-384 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3840 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3840 -j logaccept-66 --A limit-3840 -m limit --limit 1/second -j LOG --A limit-3840 -j DROP --A limit-3841 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3841 -j logaccept-67 --A limit-3841 -m limit --limit 1/second -j LOG --A limit-3841 -j DROP --A limit-3842 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3842 -j ACCEPT --A limit-3842 -m limit --limit 1/second -j LOG --A limit-3842 -j DROP --A limit-3843 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3843 -j logaccept-68 --A limit-3843 -m limit --limit 1/second -j LOG --A limit-3843 -j DROP --A limit-3844 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3844 -j ACCEPT --A limit-3844 -j DROP --A limit-3845 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3845 -j RETURN --A limit-3845 -j DROP --A limit-3846 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3846 -j logaccept-69 --A limit-3846 -j DROP --A limit-3847 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3847 -j logaccept-70 --A limit-3847 -j DROP --A limit-3848 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3848 -j ACCEPT --A limit-3848 -j DROP --A limit-3849 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3849 -j logaccept-71 --A limit-3849 -j DROP -A limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-205 -A limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 --A limit-3850 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3850 -j ACCEPT --A limit-3850 -m limit --limit 1/second -j LOG --A limit-3850 -j DROP --A limit-3851 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3851 -j RETURN --A limit-3851 -m limit --limit 1/second -j LOG --A limit-3851 -j DROP --A limit-3852 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3852 -j logaccept-72 --A limit-3852 -m limit --limit 1/second -j LOG --A limit-3852 -j DROP --A limit-3853 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3853 -j logaccept-73 --A limit-3853 -m limit --limit 1/second -j LOG --A limit-3853 -j DROP --A limit-3854 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3854 -j ACCEPT --A limit-3854 -m limit --limit 1/second -j LOG --A limit-3854 -j DROP --A limit-3855 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3855 -j logaccept-74 --A limit-3855 -m limit --limit 1/second -j LOG --A limit-3855 -j DROP --A limit-3856 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3856 -j ACCEPT --A limit-3856 -j TEE --gateway 10.0.0.1 --A limit-3856 -j TEE --gateway 10.0.0.2 --A limit-3856 -j DROP --A limit-3857 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3857 -j RETURN --A limit-3857 -j TEE --gateway 10.0.0.1 --A limit-3857 -j TEE --gateway 10.0.0.2 --A limit-3857 -j DROP --A limit-3858 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3858 -j logaccept-75 --A limit-3858 -j TEE --gateway 10.0.0.1 --A limit-3858 -j TEE --gateway 10.0.0.2 --A limit-3858 -j DROP --A limit-3859 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3859 -j logaccept-76 --A limit-3859 -j TEE --gateway 10.0.0.1 --A limit-3859 -j TEE --gateway 10.0.0.2 --A limit-3859 -j DROP -A limit-386 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-206 -A limit-386 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3860 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3860 -j ACCEPT --A limit-3860 -j TEE --gateway 10.0.0.1 --A limit-3860 -j TEE --gateway 10.0.0.2 --A limit-3860 -j DROP --A limit-3861 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3861 -j logaccept-77 --A limit-3861 -j TEE --gateway 10.0.0.1 --A limit-3861 -j TEE --gateway 10.0.0.2 --A limit-3861 -j DROP --A limit-3862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3862 -j ACCEPT --A limit-3862 -j DROP --A limit-3863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3863 -j RETURN --A limit-3863 -j DROP --A limit-3864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3864 -j logaccept-78 --A limit-3864 -j DROP --A limit-3865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3865 -j logaccept-79 --A limit-3865 -j DROP --A limit-3866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3866 -j ACCEPT --A limit-3866 -j DROP --A limit-3867 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3867 -j logaccept-80 --A limit-3867 -j DROP --A limit-3868 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3868 -j ACCEPT --A limit-3868 -m limit --limit 12/minute -j ULOG --A limit-3868 -j DROP --A limit-3869 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3869 -j RETURN --A limit-3869 -m limit --limit 12/minute -j ULOG --A limit-3869 -j DROP -A limit-387 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-207 -A limit-387 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-3870 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3870 -j logaccept-81 --A limit-3870 -m limit --limit 12/minute -j ULOG --A limit-3870 -j DROP --A limit-3871 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3871 -j logaccept-82 --A limit-3871 -m limit --limit 12/minute -j ULOG --A limit-3871 -j DROP --A limit-3872 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3872 -j ACCEPT --A limit-3872 -m limit --limit 12/minute -j ULOG --A limit-3872 -j DROP --A limit-3873 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3873 -j logaccept-83 --A limit-3873 -m limit --limit 12/minute -j ULOG --A limit-3873 -j DROP --A limit-3874 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3874 -j ACCEPT --A limit-3874 -j DROP --A limit-3875 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3875 -j RETURN --A limit-3875 -j DROP --A limit-3876 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3876 -j logaccept-84 --A limit-3876 -j DROP --A limit-3877 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3877 -j logaccept-85 --A limit-3877 -j DROP --A limit-3878 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3878 -j ACCEPT --A limit-3878 -j DROP --A limit-3879 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3879 -j logaccept-86 --A limit-3879 -j DROP -A limit-388 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-208 -A limit-388 -m limit --limit 12/minute -j ULOG -A limit-388 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-3880 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3880 -j ACCEPT --A limit-3880 -m limit --limit 1/second -j LOG --A limit-3880 -j DROP --A limit-3881 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3881 -j RETURN --A limit-3881 -m limit --limit 1/second -j LOG --A limit-3881 -j DROP --A limit-3882 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3882 -j logaccept-87 --A limit-3882 -m limit --limit 1/second -j LOG --A limit-3882 -j DROP --A limit-3883 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3883 -j logaccept-88 --A limit-3883 -m limit --limit 1/second -j LOG --A limit-3883 -j DROP --A limit-3884 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3884 -j ACCEPT --A limit-3884 -m limit --limit 1/second -j LOG --A limit-3884 -j DROP --A limit-3885 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3885 -j logaccept-89 --A limit-3885 -m limit --limit 1/second -j LOG --A limit-3885 -j DROP --A limit-3886 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3886 -j ACCEPT --A limit-3886 -j TEE --gateway 10.0.0.1 --A limit-3886 -j TEE --gateway 10.0.0.2 --A limit-3886 -j DROP --A limit-3887 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3887 -j RETURN --A limit-3887 -j TEE --gateway 10.0.0.1 --A limit-3887 -j TEE --gateway 10.0.0.2 --A limit-3887 -j DROP --A limit-3888 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3888 -j logaccept-90 --A limit-3888 -j TEE --gateway 10.0.0.1 --A limit-3888 -j TEE --gateway 10.0.0.2 --A limit-3888 -j DROP --A limit-3889 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3889 -j logaccept-91 --A limit-3889 -j TEE --gateway 10.0.0.1 --A limit-3889 -j TEE --gateway 10.0.0.2 --A limit-3889 -j DROP -A limit-389 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-209 -A limit-389 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-3890 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3890 -j ACCEPT --A limit-3890 -j TEE --gateway 10.0.0.1 --A limit-3890 -j TEE --gateway 10.0.0.2 --A limit-3890 -j DROP --A limit-3891 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3891 -j logaccept-92 --A limit-3891 -j TEE --gateway 10.0.0.1 --A limit-3891 -j TEE --gateway 10.0.0.2 --A limit-3891 -j DROP --A limit-3892 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3892 -j ACCEPT --A limit-3892 -j DROP --A limit-3893 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3893 -j RETURN --A limit-3893 -j DROP --A limit-3894 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3894 -j logaccept-93 --A limit-3894 -j DROP --A limit-3895 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3895 -j logaccept-94 --A limit-3895 -j DROP --A limit-3896 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3896 -j ACCEPT --A limit-3896 -j DROP --A limit-3897 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3897 -j logaccept-95 --A limit-3897 -j DROP --A limit-3898 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3898 -j ACCEPT --A limit-3898 -m limit --limit 12/minute -j ULOG --A limit-3898 -j DROP --A limit-3899 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3899 -j RETURN --A limit-3899 -m limit --limit 12/minute -j ULOG --A limit-3899 -j DROP -A limit-39 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-39 -m limit --limit 12/minute -j ULOG -A limit-390 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-210 -A limit-390 -j ACCEPT --A limit-3900 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3900 -j logaccept-96 --A limit-3900 -m limit --limit 12/minute -j ULOG --A limit-3900 -j DROP --A limit-3901 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3901 -j logaccept-97 --A limit-3901 -m limit --limit 12/minute -j ULOG --A limit-3901 -j DROP --A limit-3902 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3902 -j ACCEPT --A limit-3902 -m limit --limit 12/minute -j ULOG --A limit-3902 -j DROP --A limit-3903 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3903 -j logaccept-98 --A limit-3903 -m limit --limit 12/minute -j ULOG --A limit-3903 -j DROP -A limit-391 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-211 -A limit-392 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-212 -A limit-392 -m limit --limit 1/second -j LOG @@ -24194,6 +21893,2307 @@ -A limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-0 -m recent --name limit-ntp-0 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-0 +-A limit-ntp-0 -m recent --name limit-ntp-0 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-1 -m recent --name limit-ntp-1 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-1 +-A limit-ntp-1 -m recent --name limit-ntp-1 --rsource --mask 255.255.255.255 --set +-A limit-ntp-10 -m recent --name limit-ntp-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-10 -m recent --name limit-ntp-10 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-100 -m recent --name limit-ntp-100 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-10 +-A limit-ntp-100 -m recent --name limit-ntp-100 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-101 -m recent --name limit-ntp-101 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-11 +-A limit-ntp-101 -m recent --name limit-ntp-101 --rsource --mask 255.255.255.255 --set +-A limit-ntp-102 -m recent --name limit-ntp-102 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-12 +-A limit-ntp-102 -m limit --limit 1/second -j LOG +-A limit-ntp-102 -m recent --name limit-ntp-102 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-103 -m recent --name limit-ntp-103 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-13 +-A limit-ntp-103 -m recent --name limit-ntp-103 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-104 -m recent --name limit-ntp-104 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-14 +-A limit-ntp-104 -j TEE --gateway 10.0.0.1 +-A limit-ntp-104 -j TEE --gateway 10.0.0.2 +-A limit-ntp-104 -m recent --name limit-ntp-104 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-15 +-A limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-106 -m recent --name limit-ntp-106 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-16 +-A limit-ntp-106 -m recent --name limit-ntp-106 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-107 -m recent --name limit-ntp-107 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-17 +-A limit-ntp-107 -m recent --name limit-ntp-107 --rsource --mask 255.255.255.255 --set +-A limit-ntp-108 -m recent --name limit-ntp-108 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-18 +-A limit-ntp-108 -m limit --limit 12/minute -j ULOG +-A limit-ntp-108 -m recent --name limit-ntp-108 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-109 -m recent --name limit-ntp-109 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-19 +-A limit-ntp-109 -m recent --name limit-ntp-109 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-11 -m recent --name limit-ntp-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-11 -m recent --name limit-ntp-11 --rsource --mask 255.255.255.255 --set +-A limit-ntp-110 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-20 +-A limit-ntp-110 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-111 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-21 +-A limit-ntp-111 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-112 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-22 +-A limit-ntp-112 -m limit --limit 1/second -j LOG +-A limit-ntp-112 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-113 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-23 +-A limit-ntp-113 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-114 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-24 +-A limit-ntp-114 -j TEE --gateway 10.0.0.1 +-A limit-ntp-114 -j TEE --gateway 10.0.0.2 +-A limit-ntp-114 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-115 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-25 +-A limit-ntp-115 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-115 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-116 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-26 +-A limit-ntp-116 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-117 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-27 +-A limit-ntp-117 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-118 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-28 +-A limit-ntp-118 -m limit --limit 12/minute -j ULOG +-A limit-ntp-118 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-119 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-29 +-A limit-ntp-119 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-12 -m recent --name limit-ntp-12 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-12 -m limit --limit 1/second -j LOG +-A limit-ntp-12 -m recent --name limit-ntp-12 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-120 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-30 +-A limit-ntp-120 -j ACCEPT +-A limit-ntp-122 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-32 +-A limit-ntp-122 -m limit --limit 1/second -j LOG +-A limit-ntp-122 -j ACCEPT +-A limit-ntp-123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-33 +-A limit-ntp-123 -m limit --limit 1/second -j LOG +-A limit-ntp-124 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-34 +-A limit-ntp-124 -j TEE --gateway 10.0.0.1 +-A limit-ntp-124 -j TEE --gateway 10.0.0.2 +-A limit-ntp-124 -j ACCEPT +-A limit-ntp-125 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-35 +-A limit-ntp-125 -j TEE --gateway 10.0.0.1 +-A limit-ntp-125 -j TEE --gateway 10.0.0.2 +-A limit-ntp-126 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-36 +-A limit-ntp-126 -j ACCEPT +-A limit-ntp-128 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-38 +-A limit-ntp-128 -m limit --limit 12/minute -j ULOG +-A limit-ntp-128 -j ACCEPT +-A limit-ntp-129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-39 +-A limit-ntp-129 -m limit --limit 12/minute -j ULOG +-A limit-ntp-13 -m recent --name limit-ntp-13 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-13 -m recent --name limit-ntp-13 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-130 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-40 +-A limit-ntp-130 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-131 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-41 +-A limit-ntp-131 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-132 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-42 +-A limit-ntp-132 -m limit --limit 1/second -j LOG +-A limit-ntp-132 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-133 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-43 +-A limit-ntp-133 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-134 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-44 +-A limit-ntp-134 -j TEE --gateway 10.0.0.1 +-A limit-ntp-134 -j TEE --gateway 10.0.0.2 +-A limit-ntp-134 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-135 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-45 +-A limit-ntp-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-136 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-46 +-A limit-ntp-136 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-137 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-47 +-A limit-ntp-137 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-138 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-48 +-A limit-ntp-138 -m limit --limit 12/minute -j ULOG +-A limit-ntp-138 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-139 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-49 +-A limit-ntp-139 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-14 -m recent --name limit-ntp-14 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-14 -j TEE --gateway 10.0.0.1 +-A limit-ntp-14 -j TEE --gateway 10.0.0.2 +-A limit-ntp-14 -m recent --name limit-ntp-14 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-140 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-50 +-A limit-ntp-140 -j ACCEPT +-A limit-ntp-142 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-52 +-A limit-ntp-142 -m limit --limit 1/second -j LOG +-A limit-ntp-142 -j ACCEPT +-A limit-ntp-143 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-53 +-A limit-ntp-143 -m limit --limit 1/second -j LOG +-A limit-ntp-144 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-54 +-A limit-ntp-144 -j TEE --gateway 10.0.0.1 +-A limit-ntp-144 -j TEE --gateway 10.0.0.2 +-A limit-ntp-144 -j ACCEPT +-A limit-ntp-145 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-55 +-A limit-ntp-145 -j TEE --gateway 10.0.0.1 +-A limit-ntp-145 -j TEE --gateway 10.0.0.2 +-A limit-ntp-146 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-56 +-A limit-ntp-146 -j ACCEPT +-A limit-ntp-148 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-58 +-A limit-ntp-148 -m limit --limit 12/minute -j ULOG +-A limit-ntp-148 -j ACCEPT +-A limit-ntp-149 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-59 +-A limit-ntp-149 -m limit --limit 12/minute -j ULOG +-A limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-150 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-60 +-A limit-ntp-150 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-151 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-61 +-A limit-ntp-151 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-152 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-62 +-A limit-ntp-152 -m limit --limit 1/second -j LOG +-A limit-ntp-152 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-153 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-63 +-A limit-ntp-153 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-154 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-64 +-A limit-ntp-154 -j TEE --gateway 10.0.0.1 +-A limit-ntp-154 -j TEE --gateway 10.0.0.2 +-A limit-ntp-154 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-155 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-65 +-A limit-ntp-155 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-155 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-156 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-66 +-A limit-ntp-156 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-157 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-67 +-A limit-ntp-157 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-158 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-68 +-A limit-ntp-158 -m limit --limit 12/minute -j ULOG +-A limit-ntp-158 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-159 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-69 +-A limit-ntp-159 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-16 -m recent --name limit-ntp-16 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-16 -m recent --name limit-ntp-16 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-160 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-70 +-A limit-ntp-160 -j ACCEPT +-A limit-ntp-162 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-72 +-A limit-ntp-162 -m limit --limit 1/second -j LOG +-A limit-ntp-162 -j ACCEPT +-A limit-ntp-163 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-73 +-A limit-ntp-163 -m limit --limit 1/second -j LOG +-A limit-ntp-164 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-74 +-A limit-ntp-164 -j TEE --gateway 10.0.0.1 +-A limit-ntp-164 -j TEE --gateway 10.0.0.2 +-A limit-ntp-164 -j ACCEPT +-A limit-ntp-165 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-75 +-A limit-ntp-165 -j TEE --gateway 10.0.0.1 +-A limit-ntp-165 -j TEE --gateway 10.0.0.2 +-A limit-ntp-166 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-76 +-A limit-ntp-166 -j ACCEPT +-A limit-ntp-168 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-78 +-A limit-ntp-168 -m limit --limit 12/minute -j ULOG +-A limit-ntp-168 -j ACCEPT +-A limit-ntp-169 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-79 +-A limit-ntp-169 -m limit --limit 12/minute -j ULOG +-A limit-ntp-17 -m recent --name limit-ntp-17 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-17 -m recent --name limit-ntp-17 --rsource --mask 255.255.255.255 --set +-A limit-ntp-170 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-80 +-A limit-ntp-170 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-171 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-81 +-A limit-ntp-171 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-172 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-82 +-A limit-ntp-172 -m limit --limit 1/second -j LOG +-A limit-ntp-172 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-173 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-83 +-A limit-ntp-173 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-174 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-84 +-A limit-ntp-174 -j TEE --gateway 10.0.0.1 +-A limit-ntp-174 -j TEE --gateway 10.0.0.2 +-A limit-ntp-174 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-175 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-85 +-A limit-ntp-175 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-175 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-176 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-86 +-A limit-ntp-176 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-177 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-87 +-A limit-ntp-177 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-178 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-88 +-A limit-ntp-178 -m limit --limit 12/minute -j ULOG +-A limit-ntp-178 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-179 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-89 +-A limit-ntp-179 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-18 -m recent --name limit-ntp-18 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-18 -m limit --limit 12/minute -j ULOG +-A limit-ntp-18 -m recent --name limit-ntp-18 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-180 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-90 +-A limit-ntp-180 -j ACCEPT +-A limit-ntp-182 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-92 +-A limit-ntp-182 -m limit --limit 1/second -j LOG +-A limit-ntp-182 -j ACCEPT +-A limit-ntp-183 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-93 +-A limit-ntp-183 -m limit --limit 1/second -j LOG +-A limit-ntp-184 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-94 +-A limit-ntp-184 -j TEE --gateway 10.0.0.1 +-A limit-ntp-184 -j TEE --gateway 10.0.0.2 +-A limit-ntp-184 -j ACCEPT +-A limit-ntp-185 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-95 +-A limit-ntp-185 -j TEE --gateway 10.0.0.1 +-A limit-ntp-185 -j TEE --gateway 10.0.0.2 +-A limit-ntp-186 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-96 +-A limit-ntp-186 -j ACCEPT +-A limit-ntp-188 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-98 +-A limit-ntp-188 -m limit --limit 12/minute -j ULOG +-A limit-ntp-188 -j ACCEPT +-A limit-ntp-189 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-99 +-A limit-ntp-189 -m limit --limit 12/minute -j ULOG +-A limit-ntp-19 -m recent --name limit-ntp-19 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-19 -m recent --name limit-ntp-19 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-190 -m recent --name limit-ntp-190 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-100 +-A limit-ntp-190 -m recent --name limit-ntp-190 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-191 -m recent --name limit-ntp-191 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-101 +-A limit-ntp-191 -m recent --name limit-ntp-191 --rsource --mask 255.255.255.255 --set +-A limit-ntp-192 -m recent --name limit-ntp-192 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-102 +-A limit-ntp-192 -m limit --limit 1/second -j LOG +-A limit-ntp-192 -m recent --name limit-ntp-192 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-193 -m recent --name limit-ntp-193 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-103 +-A limit-ntp-193 -m recent --name limit-ntp-193 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-194 -m recent --name limit-ntp-194 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-104 +-A limit-ntp-194 -j TEE --gateway 10.0.0.1 +-A limit-ntp-194 -j TEE --gateway 10.0.0.2 +-A limit-ntp-194 -m recent --name limit-ntp-194 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-105 +-A limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-196 -m recent --name limit-ntp-196 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-106 +-A limit-ntp-196 -m recent --name limit-ntp-196 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-197 -m recent --name limit-ntp-197 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-107 +-A limit-ntp-197 -m recent --name limit-ntp-197 --rsource --mask 255.255.255.255 --set +-A limit-ntp-198 -m recent --name limit-ntp-198 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-108 +-A limit-ntp-198 -m limit --limit 12/minute -j ULOG +-A limit-ntp-198 -m recent --name limit-ntp-198 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-199 -m recent --name limit-ntp-199 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-109 +-A limit-ntp-199 -m recent --name limit-ntp-199 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-2 -m recent --name limit-ntp-2 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-2 +-A limit-ntp-2 -m limit --limit 1/second -j LOG +-A limit-ntp-2 -m recent --name limit-ntp-2 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-20 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-20 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-200 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-110 +-A limit-ntp-200 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-201 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-111 +-A limit-ntp-201 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-202 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-112 +-A limit-ntp-202 -m limit --limit 1/second -j LOG +-A limit-ntp-202 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-203 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-113 +-A limit-ntp-203 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-204 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-114 +-A limit-ntp-204 -j TEE --gateway 10.0.0.1 +-A limit-ntp-204 -j TEE --gateway 10.0.0.2 +-A limit-ntp-204 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-205 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-115 +-A limit-ntp-205 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-205 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-206 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-116 +-A limit-ntp-206 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-207 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-117 +-A limit-ntp-207 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-208 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-118 +-A limit-ntp-208 -m limit --limit 12/minute -j ULOG +-A limit-ntp-208 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-209 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-119 +-A limit-ntp-209 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-21 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-21 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-210 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-120 +-A limit-ntp-210 -j ACCEPT +-A limit-ntp-212 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-122 +-A limit-ntp-212 -m limit --limit 1/second -j LOG +-A limit-ntp-212 -j ACCEPT +-A limit-ntp-213 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-123 +-A limit-ntp-213 -m limit --limit 1/second -j LOG +-A limit-ntp-214 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-124 +-A limit-ntp-214 -j TEE --gateway 10.0.0.1 +-A limit-ntp-214 -j TEE --gateway 10.0.0.2 +-A limit-ntp-214 -j ACCEPT +-A limit-ntp-215 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-125 +-A limit-ntp-215 -j TEE --gateway 10.0.0.1 +-A limit-ntp-215 -j TEE --gateway 10.0.0.2 +-A limit-ntp-216 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-126 +-A limit-ntp-216 -j ACCEPT +-A limit-ntp-218 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-128 +-A limit-ntp-218 -m limit --limit 12/minute -j ULOG +-A limit-ntp-218 -j ACCEPT +-A limit-ntp-219 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-129 +-A limit-ntp-219 -m limit --limit 12/minute -j ULOG +-A limit-ntp-22 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-22 -m limit --limit 1/second -j LOG +-A limit-ntp-22 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-220 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-130 +-A limit-ntp-220 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-221 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-131 +-A limit-ntp-221 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-222 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-132 +-A limit-ntp-222 -m limit --limit 1/second -j LOG +-A limit-ntp-222 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-223 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-133 +-A limit-ntp-223 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-224 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-134 +-A limit-ntp-224 -j TEE --gateway 10.0.0.1 +-A limit-ntp-224 -j TEE --gateway 10.0.0.2 +-A limit-ntp-224 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-225 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-135 +-A limit-ntp-225 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-225 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-226 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-136 +-A limit-ntp-226 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-227 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-137 +-A limit-ntp-227 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-228 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-138 +-A limit-ntp-228 -m limit --limit 12/minute -j ULOG +-A limit-ntp-228 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-229 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-139 +-A limit-ntp-229 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-23 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-23 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-230 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-140 +-A limit-ntp-230 -j ACCEPT +-A limit-ntp-232 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-142 +-A limit-ntp-232 -m limit --limit 1/second -j LOG +-A limit-ntp-232 -j ACCEPT +-A limit-ntp-233 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-143 +-A limit-ntp-233 -m limit --limit 1/second -j LOG +-A limit-ntp-234 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-144 +-A limit-ntp-234 -j TEE --gateway 10.0.0.1 +-A limit-ntp-234 -j TEE --gateway 10.0.0.2 +-A limit-ntp-234 -j ACCEPT +-A limit-ntp-235 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-145 +-A limit-ntp-235 -j TEE --gateway 10.0.0.1 +-A limit-ntp-235 -j TEE --gateway 10.0.0.2 +-A limit-ntp-236 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-146 +-A limit-ntp-236 -j ACCEPT +-A limit-ntp-238 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-148 +-A limit-ntp-238 -m limit --limit 12/minute -j ULOG +-A limit-ntp-238 -j ACCEPT +-A limit-ntp-239 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-149 +-A limit-ntp-239 -m limit --limit 12/minute -j ULOG +-A limit-ntp-24 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-24 -j TEE --gateway 10.0.0.1 +-A limit-ntp-24 -j TEE --gateway 10.0.0.2 +-A limit-ntp-24 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-240 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-150 +-A limit-ntp-240 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-241 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-151 +-A limit-ntp-241 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-242 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-152 +-A limit-ntp-242 -m limit --limit 1/second -j LOG +-A limit-ntp-242 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-243 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-153 +-A limit-ntp-243 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-244 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-154 +-A limit-ntp-244 -j TEE --gateway 10.0.0.1 +-A limit-ntp-244 -j TEE --gateway 10.0.0.2 +-A limit-ntp-244 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-245 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-155 +-A limit-ntp-245 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-245 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-246 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-156 +-A limit-ntp-246 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-247 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-157 +-A limit-ntp-247 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-248 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-158 +-A limit-ntp-248 -m limit --limit 12/minute -j ULOG +-A limit-ntp-248 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-249 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-159 +-A limit-ntp-249 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-25 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-25 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-25 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-250 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-160 +-A limit-ntp-250 -j ACCEPT +-A limit-ntp-252 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-162 +-A limit-ntp-252 -m limit --limit 1/second -j LOG +-A limit-ntp-252 -j ACCEPT +-A limit-ntp-253 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-163 +-A limit-ntp-253 -m limit --limit 1/second -j LOG +-A limit-ntp-254 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-164 +-A limit-ntp-254 -j TEE --gateway 10.0.0.1 +-A limit-ntp-254 -j TEE --gateway 10.0.0.2 +-A limit-ntp-254 -j ACCEPT +-A limit-ntp-255 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-165 +-A limit-ntp-255 -j TEE --gateway 10.0.0.1 +-A limit-ntp-255 -j TEE --gateway 10.0.0.2 +-A limit-ntp-256 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-166 +-A limit-ntp-256 -j ACCEPT +-A limit-ntp-258 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-168 +-A limit-ntp-258 -m limit --limit 12/minute -j ULOG +-A limit-ntp-258 -j ACCEPT +-A limit-ntp-259 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-169 +-A limit-ntp-259 -m limit --limit 12/minute -j ULOG +-A limit-ntp-26 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-26 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-260 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-170 +-A limit-ntp-260 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-261 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-171 +-A limit-ntp-261 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-262 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-172 +-A limit-ntp-262 -m limit --limit 1/second -j LOG +-A limit-ntp-262 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-263 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-173 +-A limit-ntp-263 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-264 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-174 +-A limit-ntp-264 -j TEE --gateway 10.0.0.1 +-A limit-ntp-264 -j TEE --gateway 10.0.0.2 +-A limit-ntp-264 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-265 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-175 +-A limit-ntp-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-266 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-176 +-A limit-ntp-266 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-267 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-177 +-A limit-ntp-267 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-268 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-178 +-A limit-ntp-268 -m limit --limit 12/minute -j ULOG +-A limit-ntp-268 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-269 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-179 +-A limit-ntp-269 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-27 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-27 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-270 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-180 +-A limit-ntp-270 -j ACCEPT +-A limit-ntp-272 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-182 +-A limit-ntp-272 -m limit --limit 1/second -j LOG +-A limit-ntp-272 -j ACCEPT +-A limit-ntp-273 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-183 +-A limit-ntp-273 -m limit --limit 1/second -j LOG +-A limit-ntp-274 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-184 +-A limit-ntp-274 -j TEE --gateway 10.0.0.1 +-A limit-ntp-274 -j TEE --gateway 10.0.0.2 +-A limit-ntp-274 -j ACCEPT +-A limit-ntp-275 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-185 +-A limit-ntp-275 -j TEE --gateway 10.0.0.1 +-A limit-ntp-275 -j TEE --gateway 10.0.0.2 +-A limit-ntp-276 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-186 +-A limit-ntp-276 -j ACCEPT +-A limit-ntp-278 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-188 +-A limit-ntp-278 -m limit --limit 12/minute -j ULOG +-A limit-ntp-278 -j ACCEPT +-A limit-ntp-279 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-189 +-A limit-ntp-279 -m limit --limit 12/minute -j ULOG +-A limit-ntp-28 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-28 -m limit --limit 12/minute -j ULOG +-A limit-ntp-28 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-280 -m recent --name limit-ntp-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-280 -m recent --name limit-ntp-280 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-281 -m recent --name limit-ntp-281 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-281 -m recent --name limit-ntp-281 --rsource --mask 255.255.255.255 --set +-A limit-ntp-282 -m recent --name limit-ntp-282 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-282 -m limit --limit 1/second -j LOG +-A limit-ntp-282 -m recent --name limit-ntp-282 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-283 -m recent --name limit-ntp-283 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-283 -m recent --name limit-ntp-283 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-284 -m recent --name limit-ntp-284 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-284 -j TEE --gateway 10.0.0.1 +-A limit-ntp-284 -j TEE --gateway 10.0.0.2 +-A limit-ntp-284 -m recent --name limit-ntp-284 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-286 -m recent --name limit-ntp-286 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-286 -m recent --name limit-ntp-286 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-287 -m recent --name limit-ntp-287 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-287 -m recent --name limit-ntp-287 --rsource --mask 255.255.255.255 --set +-A limit-ntp-288 -m recent --name limit-ntp-288 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-288 -m limit --limit 12/minute -j ULOG +-A limit-ntp-288 -m recent --name limit-ntp-288 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-289 -m recent --name limit-ntp-289 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-289 -m recent --name limit-ntp-289 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-29 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-29 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-290 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-290 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-291 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-291 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-292 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-292 -m limit --limit 1/second -j LOG +-A limit-ntp-292 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-293 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-293 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-294 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-294 -j TEE --gateway 10.0.0.1 +-A limit-ntp-294 -j TEE --gateway 10.0.0.2 +-A limit-ntp-294 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-295 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-295 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-295 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-296 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-296 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-297 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-297 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-298 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-298 -m limit --limit 12/minute -j ULOG +-A limit-ntp-298 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-299 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-299 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-3 -m recent --name limit-ntp-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-3 +-A limit-ntp-3 -m recent --name limit-ntp-3 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-30 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-30 -j ACCEPT +-A limit-ntp-300 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-300 -j ACCEPT +-A limit-ntp-302 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-302 -m limit --limit 1/second -j LOG +-A limit-ntp-302 -j ACCEPT +-A limit-ntp-303 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-303 -m limit --limit 1/second -j LOG +-A limit-ntp-304 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-304 -j TEE --gateway 10.0.0.1 +-A limit-ntp-304 -j TEE --gateway 10.0.0.2 +-A limit-ntp-304 -j ACCEPT +-A limit-ntp-305 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-305 -j TEE --gateway 10.0.0.1 +-A limit-ntp-305 -j TEE --gateway 10.0.0.2 +-A limit-ntp-306 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-306 -j ACCEPT +-A limit-ntp-308 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-308 -m limit --limit 12/minute -j ULOG +-A limit-ntp-308 -j ACCEPT +-A limit-ntp-309 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-309 -m limit --limit 12/minute -j ULOG +-A limit-ntp-310 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-310 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-311 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-311 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-312 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-312 -m limit --limit 1/second -j LOG +-A limit-ntp-312 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-313 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-313 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-314 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-314 -j TEE --gateway 10.0.0.1 +-A limit-ntp-314 -j TEE --gateway 10.0.0.2 +-A limit-ntp-314 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-315 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-315 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-315 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-316 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-316 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-317 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-317 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-318 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-318 -m limit --limit 12/minute -j ULOG +-A limit-ntp-318 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-319 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-319 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-32 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-32 -m limit --limit 1/second -j LOG +-A limit-ntp-32 -j ACCEPT +-A limit-ntp-320 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-320 -j ACCEPT +-A limit-ntp-322 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-322 -m limit --limit 1/second -j LOG +-A limit-ntp-322 -j ACCEPT +-A limit-ntp-323 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-323 -m limit --limit 1/second -j LOG +-A limit-ntp-324 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-324 -j TEE --gateway 10.0.0.1 +-A limit-ntp-324 -j TEE --gateway 10.0.0.2 +-A limit-ntp-324 -j ACCEPT +-A limit-ntp-325 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-325 -j TEE --gateway 10.0.0.1 +-A limit-ntp-325 -j TEE --gateway 10.0.0.2 +-A limit-ntp-326 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-326 -j ACCEPT +-A limit-ntp-328 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-328 -m limit --limit 12/minute -j ULOG +-A limit-ntp-328 -j ACCEPT +-A limit-ntp-329 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-329 -m limit --limit 12/minute -j ULOG +-A limit-ntp-33 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-33 -m limit --limit 1/second -j LOG +-A limit-ntp-330 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-330 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-331 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-331 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-332 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-332 -m limit --limit 1/second -j LOG +-A limit-ntp-332 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-333 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-333 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-334 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-334 -j TEE --gateway 10.0.0.1 +-A limit-ntp-334 -j TEE --gateway 10.0.0.2 +-A limit-ntp-334 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-335 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-335 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-335 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-336 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-336 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-337 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-337 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-338 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-338 -m limit --limit 12/minute -j ULOG +-A limit-ntp-338 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-339 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-339 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-34 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-34 -j TEE --gateway 10.0.0.1 +-A limit-ntp-34 -j TEE --gateway 10.0.0.2 +-A limit-ntp-34 -j ACCEPT +-A limit-ntp-340 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-340 -j ACCEPT +-A limit-ntp-342 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-342 -m limit --limit 1/second -j LOG +-A limit-ntp-342 -j ACCEPT +-A limit-ntp-343 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-343 -m limit --limit 1/second -j LOG +-A limit-ntp-344 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-344 -j TEE --gateway 10.0.0.1 +-A limit-ntp-344 -j TEE --gateway 10.0.0.2 +-A limit-ntp-344 -j ACCEPT +-A limit-ntp-345 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-345 -j TEE --gateway 10.0.0.1 +-A limit-ntp-345 -j TEE --gateway 10.0.0.2 +-A limit-ntp-346 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-346 -j ACCEPT +-A limit-ntp-348 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-348 -m limit --limit 12/minute -j ULOG +-A limit-ntp-348 -j ACCEPT +-A limit-ntp-349 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-349 -m limit --limit 12/minute -j ULOG +-A limit-ntp-35 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-35 -j TEE --gateway 10.0.0.1 +-A limit-ntp-35 -j TEE --gateway 10.0.0.2 +-A limit-ntp-350 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-350 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-351 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-351 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-352 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-352 -m limit --limit 1/second -j LOG +-A limit-ntp-352 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-353 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-353 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-354 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-354 -j TEE --gateway 10.0.0.1 +-A limit-ntp-354 -j TEE --gateway 10.0.0.2 +-A limit-ntp-354 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-355 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-356 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-356 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-357 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-357 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-358 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-358 -m limit --limit 12/minute -j ULOG +-A limit-ntp-358 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-359 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-359 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-36 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-36 -j ACCEPT +-A limit-ntp-360 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-360 -j ACCEPT +-A limit-ntp-362 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-362 -m limit --limit 1/second -j LOG +-A limit-ntp-362 -j ACCEPT +-A limit-ntp-363 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-363 -m limit --limit 1/second -j LOG +-A limit-ntp-364 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-364 -j TEE --gateway 10.0.0.1 +-A limit-ntp-364 -j TEE --gateway 10.0.0.2 +-A limit-ntp-364 -j ACCEPT +-A limit-ntp-365 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-365 -j TEE --gateway 10.0.0.1 +-A limit-ntp-365 -j TEE --gateway 10.0.0.2 +-A limit-ntp-366 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-366 -j ACCEPT +-A limit-ntp-368 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-368 -m limit --limit 12/minute -j ULOG +-A limit-ntp-368 -j ACCEPT +-A limit-ntp-369 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-369 -m limit --limit 12/minute -j ULOG +-A limit-ntp-370 -m recent --name limit-ntp-370 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-190 +-A limit-ntp-370 -m recent --name limit-ntp-370 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-371 -m recent --name limit-ntp-371 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-191 +-A limit-ntp-371 -m recent --name limit-ntp-371 --rsource --mask 255.255.255.255 --set +-A limit-ntp-372 -m recent --name limit-ntp-372 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-192 +-A limit-ntp-372 -m limit --limit 1/second -j LOG +-A limit-ntp-372 -m recent --name limit-ntp-372 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-373 -m recent --name limit-ntp-373 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-193 +-A limit-ntp-373 -m recent --name limit-ntp-373 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-374 -m recent --name limit-ntp-374 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-194 +-A limit-ntp-374 -j TEE --gateway 10.0.0.1 +-A limit-ntp-374 -j TEE --gateway 10.0.0.2 +-A limit-ntp-374 -m recent --name limit-ntp-374 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-195 +-A limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-376 -m recent --name limit-ntp-376 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-196 +-A limit-ntp-376 -m recent --name limit-ntp-376 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-377 -m recent --name limit-ntp-377 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-197 +-A limit-ntp-377 -m recent --name limit-ntp-377 --rsource --mask 255.255.255.255 --set +-A limit-ntp-378 -m recent --name limit-ntp-378 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-198 +-A limit-ntp-378 -m limit --limit 12/minute -j ULOG +-A limit-ntp-378 -m recent --name limit-ntp-378 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-379 -m recent --name limit-ntp-379 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-199 +-A limit-ntp-379 -m recent --name limit-ntp-379 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-38 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-38 -m limit --limit 12/minute -j ULOG +-A limit-ntp-38 -j ACCEPT +-A limit-ntp-380 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-200 +-A limit-ntp-380 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-381 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-201 +-A limit-ntp-381 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-382 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-202 +-A limit-ntp-382 -m limit --limit 1/second -j LOG +-A limit-ntp-382 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-383 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-203 +-A limit-ntp-383 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-384 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-204 +-A limit-ntp-384 -j TEE --gateway 10.0.0.1 +-A limit-ntp-384 -j TEE --gateway 10.0.0.2 +-A limit-ntp-384 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-385 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-205 +-A limit-ntp-385 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-385 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-386 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-206 +-A limit-ntp-386 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-387 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-207 +-A limit-ntp-387 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-388 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-208 +-A limit-ntp-388 -m limit --limit 12/minute -j ULOG +-A limit-ntp-388 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-389 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-209 +-A limit-ntp-389 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-39 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-39 -m limit --limit 12/minute -j ULOG +-A limit-ntp-390 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-210 +-A limit-ntp-390 -j ACCEPT +-A limit-ntp-392 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-212 +-A limit-ntp-392 -m limit --limit 1/second -j LOG +-A limit-ntp-392 -j ACCEPT +-A limit-ntp-393 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-213 +-A limit-ntp-393 -m limit --limit 1/second -j LOG +-A limit-ntp-394 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-214 +-A limit-ntp-394 -j TEE --gateway 10.0.0.1 +-A limit-ntp-394 -j TEE --gateway 10.0.0.2 +-A limit-ntp-394 -j ACCEPT +-A limit-ntp-395 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-215 +-A limit-ntp-395 -j TEE --gateway 10.0.0.1 +-A limit-ntp-395 -j TEE --gateway 10.0.0.2 +-A limit-ntp-396 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-216 +-A limit-ntp-396 -j ACCEPT +-A limit-ntp-398 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-218 +-A limit-ntp-398 -m limit --limit 12/minute -j ULOG +-A limit-ntp-398 -j ACCEPT +-A limit-ntp-399 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-219 +-A limit-ntp-399 -m limit --limit 12/minute -j ULOG +-A limit-ntp-4 -m recent --name limit-ntp-4 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-4 +-A limit-ntp-4 -j TEE --gateway 10.0.0.1 +-A limit-ntp-4 -j TEE --gateway 10.0.0.2 +-A limit-ntp-4 -m recent --name limit-ntp-4 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-40 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-40 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-400 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-220 +-A limit-ntp-400 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-401 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-221 +-A limit-ntp-401 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-402 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-222 +-A limit-ntp-402 -m limit --limit 1/second -j LOG +-A limit-ntp-402 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-403 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-223 +-A limit-ntp-403 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-404 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-224 +-A limit-ntp-404 -j TEE --gateway 10.0.0.1 +-A limit-ntp-404 -j TEE --gateway 10.0.0.2 +-A limit-ntp-404 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-405 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-225 +-A limit-ntp-405 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-405 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-406 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-226 +-A limit-ntp-406 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-407 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-227 +-A limit-ntp-407 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-408 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-228 +-A limit-ntp-408 -m limit --limit 12/minute -j ULOG +-A limit-ntp-408 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-409 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-229 +-A limit-ntp-409 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-41 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-41 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-410 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-230 +-A limit-ntp-410 -j ACCEPT +-A limit-ntp-412 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-232 +-A limit-ntp-412 -m limit --limit 1/second -j LOG +-A limit-ntp-412 -j ACCEPT +-A limit-ntp-413 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-233 +-A limit-ntp-413 -m limit --limit 1/second -j LOG +-A limit-ntp-414 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-234 +-A limit-ntp-414 -j TEE --gateway 10.0.0.1 +-A limit-ntp-414 -j TEE --gateway 10.0.0.2 +-A limit-ntp-414 -j ACCEPT +-A limit-ntp-415 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-235 +-A limit-ntp-415 -j TEE --gateway 10.0.0.1 +-A limit-ntp-415 -j TEE --gateway 10.0.0.2 +-A limit-ntp-416 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-236 +-A limit-ntp-416 -j ACCEPT +-A limit-ntp-418 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-238 +-A limit-ntp-418 -m limit --limit 12/minute -j ULOG +-A limit-ntp-418 -j ACCEPT +-A limit-ntp-419 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-239 +-A limit-ntp-419 -m limit --limit 12/minute -j ULOG +-A limit-ntp-42 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-42 -m limit --limit 1/second -j LOG +-A limit-ntp-42 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-420 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-240 +-A limit-ntp-420 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-421 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-241 +-A limit-ntp-421 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-422 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-242 +-A limit-ntp-422 -m limit --limit 1/second -j LOG +-A limit-ntp-422 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-423 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-243 +-A limit-ntp-423 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-424 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-244 +-A limit-ntp-424 -j TEE --gateway 10.0.0.1 +-A limit-ntp-424 -j TEE --gateway 10.0.0.2 +-A limit-ntp-424 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-425 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-245 +-A limit-ntp-425 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-425 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-426 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-246 +-A limit-ntp-426 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-427 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-247 +-A limit-ntp-427 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-428 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-248 +-A limit-ntp-428 -m limit --limit 12/minute -j ULOG +-A limit-ntp-428 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-429 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-249 +-A limit-ntp-429 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-43 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-43 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-430 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-250 +-A limit-ntp-430 -j ACCEPT +-A limit-ntp-432 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-252 +-A limit-ntp-432 -m limit --limit 1/second -j LOG +-A limit-ntp-432 -j ACCEPT +-A limit-ntp-433 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-253 +-A limit-ntp-433 -m limit --limit 1/second -j LOG +-A limit-ntp-434 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-254 +-A limit-ntp-434 -j TEE --gateway 10.0.0.1 +-A limit-ntp-434 -j TEE --gateway 10.0.0.2 +-A limit-ntp-434 -j ACCEPT +-A limit-ntp-435 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-255 +-A limit-ntp-435 -j TEE --gateway 10.0.0.1 +-A limit-ntp-435 -j TEE --gateway 10.0.0.2 +-A limit-ntp-436 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-256 +-A limit-ntp-436 -j ACCEPT +-A limit-ntp-438 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-258 +-A limit-ntp-438 -m limit --limit 12/minute -j ULOG +-A limit-ntp-438 -j ACCEPT +-A limit-ntp-439 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-259 +-A limit-ntp-439 -m limit --limit 12/minute -j ULOG +-A limit-ntp-44 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-44 -j TEE --gateway 10.0.0.1 +-A limit-ntp-44 -j TEE --gateway 10.0.0.2 +-A limit-ntp-44 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-440 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-260 +-A limit-ntp-440 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-441 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-261 +-A limit-ntp-441 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-442 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-262 +-A limit-ntp-442 -m limit --limit 1/second -j LOG +-A limit-ntp-442 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-443 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-263 +-A limit-ntp-443 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-444 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-264 +-A limit-ntp-444 -j TEE --gateway 10.0.0.1 +-A limit-ntp-444 -j TEE --gateway 10.0.0.2 +-A limit-ntp-444 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-445 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-265 +-A limit-ntp-445 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-445 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-446 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-266 +-A limit-ntp-446 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-447 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-267 +-A limit-ntp-447 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-448 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-268 +-A limit-ntp-448 -m limit --limit 12/minute -j ULOG +-A limit-ntp-448 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-449 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-269 +-A limit-ntp-449 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-45 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-45 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-45 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-450 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-270 +-A limit-ntp-450 -j ACCEPT +-A limit-ntp-452 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-272 +-A limit-ntp-452 -m limit --limit 1/second -j LOG +-A limit-ntp-452 -j ACCEPT +-A limit-ntp-453 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-273 +-A limit-ntp-453 -m limit --limit 1/second -j LOG +-A limit-ntp-454 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-274 +-A limit-ntp-454 -j TEE --gateway 10.0.0.1 +-A limit-ntp-454 -j TEE --gateway 10.0.0.2 +-A limit-ntp-454 -j ACCEPT +-A limit-ntp-455 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-275 +-A limit-ntp-455 -j TEE --gateway 10.0.0.1 +-A limit-ntp-455 -j TEE --gateway 10.0.0.2 +-A limit-ntp-456 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-276 +-A limit-ntp-456 -j ACCEPT +-A limit-ntp-458 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-278 +-A limit-ntp-458 -m limit --limit 12/minute -j ULOG +-A limit-ntp-458 -j ACCEPT +-A limit-ntp-459 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-279 +-A limit-ntp-459 -m limit --limit 12/minute -j ULOG +-A limit-ntp-46 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-46 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-460 -m recent --name limit-ntp-460 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-460 -m recent --name limit-ntp-460 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-461 -m recent --name limit-ntp-461 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-461 -m recent --name limit-ntp-461 --rsource --mask 255.255.255.255 --set +-A limit-ntp-462 -m recent --name limit-ntp-462 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-462 -m limit --limit 1/second -j LOG +-A limit-ntp-462 -m recent --name limit-ntp-462 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-463 -m recent --name limit-ntp-463 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-463 -m recent --name limit-ntp-463 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-464 -m recent --name limit-ntp-464 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-464 -j TEE --gateway 10.0.0.1 +-A limit-ntp-464 -j TEE --gateway 10.0.0.2 +-A limit-ntp-464 -m recent --name limit-ntp-464 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-466 -m recent --name limit-ntp-466 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-466 -m recent --name limit-ntp-466 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-467 -m recent --name limit-ntp-467 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-467 -m recent --name limit-ntp-467 --rsource --mask 255.255.255.255 --set +-A limit-ntp-468 -m recent --name limit-ntp-468 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-468 -m limit --limit 12/minute -j ULOG +-A limit-ntp-468 -m recent --name limit-ntp-468 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-469 -m recent --name limit-ntp-469 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-469 -m recent --name limit-ntp-469 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-47 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-47 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-470 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-470 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-471 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-471 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-472 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-472 -m limit --limit 1/second -j LOG +-A limit-ntp-472 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-473 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-473 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-474 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-474 -j TEE --gateway 10.0.0.1 +-A limit-ntp-474 -j TEE --gateway 10.0.0.2 +-A limit-ntp-474 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-475 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-475 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-475 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-476 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-476 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-477 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-477 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-478 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-478 -m limit --limit 12/minute -j ULOG +-A limit-ntp-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-479 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-48 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-48 -m limit --limit 12/minute -j ULOG +-A limit-ntp-48 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-480 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-480 -j ACCEPT +-A limit-ntp-482 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-482 -m limit --limit 1/second -j LOG +-A limit-ntp-482 -j ACCEPT +-A limit-ntp-483 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-483 -m limit --limit 1/second -j LOG +-A limit-ntp-484 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-484 -j TEE --gateway 10.0.0.1 +-A limit-ntp-484 -j TEE --gateway 10.0.0.2 +-A limit-ntp-484 -j ACCEPT +-A limit-ntp-485 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-485 -j TEE --gateway 10.0.0.1 +-A limit-ntp-485 -j TEE --gateway 10.0.0.2 +-A limit-ntp-486 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-486 -j ACCEPT +-A limit-ntp-488 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-488 -m limit --limit 12/minute -j ULOG +-A limit-ntp-488 -j ACCEPT +-A limit-ntp-489 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-489 -m limit --limit 12/minute -j ULOG +-A limit-ntp-49 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-49 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-490 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-491 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-491 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-492 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-492 -m limit --limit 1/second -j LOG +-A limit-ntp-492 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-493 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-493 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-494 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-494 -j TEE --gateway 10.0.0.1 +-A limit-ntp-494 -j TEE --gateway 10.0.0.2 +-A limit-ntp-494 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-495 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-496 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-496 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-497 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-497 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-498 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-498 -m limit --limit 12/minute -j ULOG +-A limit-ntp-498 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-499 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-499 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-5 +-A limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-50 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-50 -j ACCEPT +-A limit-ntp-500 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-500 -j ACCEPT +-A limit-ntp-502 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-502 -m limit --limit 1/second -j LOG +-A limit-ntp-502 -j ACCEPT +-A limit-ntp-503 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-503 -m limit --limit 1/second -j LOG +-A limit-ntp-504 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-504 -j TEE --gateway 10.0.0.1 +-A limit-ntp-504 -j TEE --gateway 10.0.0.2 +-A limit-ntp-504 -j ACCEPT +-A limit-ntp-505 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-505 -j TEE --gateway 10.0.0.1 +-A limit-ntp-505 -j TEE --gateway 10.0.0.2 +-A limit-ntp-506 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-506 -j ACCEPT +-A limit-ntp-508 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-508 -m limit --limit 12/minute -j ULOG +-A limit-ntp-508 -j ACCEPT +-A limit-ntp-509 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-509 -m limit --limit 12/minute -j ULOG +-A limit-ntp-510 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-510 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-511 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-511 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-512 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-512 -m limit --limit 1/second -j LOG +-A limit-ntp-512 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-513 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-513 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-514 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-514 -j TEE --gateway 10.0.0.1 +-A limit-ntp-514 -j TEE --gateway 10.0.0.2 +-A limit-ntp-514 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-515 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-515 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-515 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-516 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-516 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-517 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-517 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-518 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-518 -m limit --limit 12/minute -j ULOG +-A limit-ntp-518 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-519 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-519 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-52 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-52 -m limit --limit 1/second -j LOG +-A limit-ntp-52 -j ACCEPT +-A limit-ntp-520 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-520 -j ACCEPT +-A limit-ntp-522 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-522 -m limit --limit 1/second -j LOG +-A limit-ntp-522 -j ACCEPT +-A limit-ntp-523 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-523 -m limit --limit 1/second -j LOG +-A limit-ntp-524 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-524 -j TEE --gateway 10.0.0.1 +-A limit-ntp-524 -j TEE --gateway 10.0.0.2 +-A limit-ntp-524 -j ACCEPT +-A limit-ntp-525 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-525 -j TEE --gateway 10.0.0.1 +-A limit-ntp-525 -j TEE --gateway 10.0.0.2 +-A limit-ntp-526 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-526 -j ACCEPT +-A limit-ntp-528 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-528 -m limit --limit 12/minute -j ULOG +-A limit-ntp-528 -j ACCEPT +-A limit-ntp-529 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-529 -m limit --limit 12/minute -j ULOG +-A limit-ntp-53 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-53 -m limit --limit 1/second -j LOG +-A limit-ntp-530 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-530 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-531 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-531 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-532 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-532 -m limit --limit 1/second -j LOG +-A limit-ntp-532 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-533 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-533 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-534 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-534 -j TEE --gateway 10.0.0.1 +-A limit-ntp-534 -j TEE --gateway 10.0.0.2 +-A limit-ntp-534 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-535 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-535 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-535 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-536 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-536 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-537 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-537 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-538 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-538 -m limit --limit 12/minute -j ULOG +-A limit-ntp-538 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-539 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-539 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-54 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-54 -j TEE --gateway 10.0.0.1 +-A limit-ntp-54 -j TEE --gateway 10.0.0.2 +-A limit-ntp-54 -j ACCEPT +-A limit-ntp-540 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-540 -j ACCEPT +-A limit-ntp-542 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-542 -m limit --limit 1/second -j LOG +-A limit-ntp-542 -j ACCEPT +-A limit-ntp-543 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-543 -m limit --limit 1/second -j LOG +-A limit-ntp-544 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-544 -j TEE --gateway 10.0.0.1 +-A limit-ntp-544 -j TEE --gateway 10.0.0.2 +-A limit-ntp-544 -j ACCEPT +-A limit-ntp-545 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-545 -j TEE --gateway 10.0.0.1 +-A limit-ntp-545 -j TEE --gateway 10.0.0.2 +-A limit-ntp-546 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-546 -j ACCEPT +-A limit-ntp-548 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-548 -m limit --limit 12/minute -j ULOG +-A limit-ntp-548 -j ACCEPT +-A limit-ntp-549 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-549 -m limit --limit 12/minute -j ULOG +-A limit-ntp-55 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-55 -j TEE --gateway 10.0.0.1 +-A limit-ntp-55 -j TEE --gateway 10.0.0.2 +-A limit-ntp-550 -m recent --name limit-ntp-550 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-280 +-A limit-ntp-550 -m recent --name limit-ntp-550 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-551 -m recent --name limit-ntp-551 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-281 +-A limit-ntp-551 -m recent --name limit-ntp-551 --rsource --mask 255.255.255.255 --set +-A limit-ntp-552 -m recent --name limit-ntp-552 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-282 +-A limit-ntp-552 -m limit --limit 1/second -j LOG +-A limit-ntp-552 -m recent --name limit-ntp-552 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-553 -m recent --name limit-ntp-553 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-283 +-A limit-ntp-553 -m recent --name limit-ntp-553 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-554 -m recent --name limit-ntp-554 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-284 +-A limit-ntp-554 -j TEE --gateway 10.0.0.1 +-A limit-ntp-554 -j TEE --gateway 10.0.0.2 +-A limit-ntp-554 -m recent --name limit-ntp-554 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-285 +-A limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-556 -m recent --name limit-ntp-556 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-286 +-A limit-ntp-556 -m recent --name limit-ntp-556 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-557 -m recent --name limit-ntp-557 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-287 +-A limit-ntp-557 -m recent --name limit-ntp-557 --rsource --mask 255.255.255.255 --set +-A limit-ntp-558 -m recent --name limit-ntp-558 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-288 +-A limit-ntp-558 -m limit --limit 12/minute -j ULOG +-A limit-ntp-558 -m recent --name limit-ntp-558 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-559 -m recent --name limit-ntp-559 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-289 +-A limit-ntp-559 -m recent --name limit-ntp-559 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-56 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-56 -j ACCEPT +-A limit-ntp-560 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-290 +-A limit-ntp-560 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-561 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-291 +-A limit-ntp-561 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-562 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-292 +-A limit-ntp-562 -m limit --limit 1/second -j LOG +-A limit-ntp-562 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-563 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-293 +-A limit-ntp-563 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-564 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-294 +-A limit-ntp-564 -j TEE --gateway 10.0.0.1 +-A limit-ntp-564 -j TEE --gateway 10.0.0.2 +-A limit-ntp-564 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-565 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-295 +-A limit-ntp-565 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-565 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-566 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-296 +-A limit-ntp-566 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-567 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-297 +-A limit-ntp-567 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-568 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-298 +-A limit-ntp-568 -m limit --limit 12/minute -j ULOG +-A limit-ntp-568 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-569 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-299 +-A limit-ntp-569 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-570 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-300 +-A limit-ntp-570 -j ACCEPT +-A limit-ntp-572 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-302 +-A limit-ntp-572 -m limit --limit 1/second -j LOG +-A limit-ntp-572 -j ACCEPT +-A limit-ntp-573 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-303 +-A limit-ntp-573 -m limit --limit 1/second -j LOG +-A limit-ntp-574 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-304 +-A limit-ntp-574 -j TEE --gateway 10.0.0.1 +-A limit-ntp-574 -j TEE --gateway 10.0.0.2 +-A limit-ntp-574 -j ACCEPT +-A limit-ntp-575 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-305 +-A limit-ntp-575 -j TEE --gateway 10.0.0.1 +-A limit-ntp-575 -j TEE --gateway 10.0.0.2 +-A limit-ntp-576 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-306 +-A limit-ntp-576 -j ACCEPT +-A limit-ntp-578 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-308 +-A limit-ntp-578 -m limit --limit 12/minute -j ULOG +-A limit-ntp-578 -j ACCEPT +-A limit-ntp-579 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-309 +-A limit-ntp-579 -m limit --limit 12/minute -j ULOG +-A limit-ntp-58 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-58 -m limit --limit 12/minute -j ULOG +-A limit-ntp-58 -j ACCEPT +-A limit-ntp-580 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-310 +-A limit-ntp-580 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-581 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-311 +-A limit-ntp-581 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-582 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-312 +-A limit-ntp-582 -m limit --limit 1/second -j LOG +-A limit-ntp-582 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-583 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-313 +-A limit-ntp-583 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-584 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-314 +-A limit-ntp-584 -j TEE --gateway 10.0.0.1 +-A limit-ntp-584 -j TEE --gateway 10.0.0.2 +-A limit-ntp-584 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-585 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-315 +-A limit-ntp-585 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-585 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-586 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-316 +-A limit-ntp-586 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-587 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-317 +-A limit-ntp-587 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-588 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-318 +-A limit-ntp-588 -m limit --limit 12/minute -j ULOG +-A limit-ntp-588 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-589 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-319 +-A limit-ntp-589 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-59 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-59 -m limit --limit 12/minute -j ULOG +-A limit-ntp-590 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-320 +-A limit-ntp-590 -j ACCEPT +-A limit-ntp-592 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-322 +-A limit-ntp-592 -m limit --limit 1/second -j LOG +-A limit-ntp-592 -j ACCEPT +-A limit-ntp-593 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-323 +-A limit-ntp-593 -m limit --limit 1/second -j LOG +-A limit-ntp-594 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-324 +-A limit-ntp-594 -j TEE --gateway 10.0.0.1 +-A limit-ntp-594 -j TEE --gateway 10.0.0.2 +-A limit-ntp-594 -j ACCEPT +-A limit-ntp-595 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-325 +-A limit-ntp-595 -j TEE --gateway 10.0.0.1 +-A limit-ntp-595 -j TEE --gateway 10.0.0.2 +-A limit-ntp-596 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-326 +-A limit-ntp-596 -j ACCEPT +-A limit-ntp-598 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-328 +-A limit-ntp-598 -m limit --limit 12/minute -j ULOG +-A limit-ntp-598 -j ACCEPT +-A limit-ntp-599 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-329 +-A limit-ntp-599 -m limit --limit 12/minute -j ULOG +-A limit-ntp-6 -m recent --name limit-ntp-6 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-6 +-A limit-ntp-6 -m recent --name limit-ntp-6 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-60 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-60 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-600 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-330 +-A limit-ntp-600 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-601 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-331 +-A limit-ntp-601 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-602 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-332 +-A limit-ntp-602 -m limit --limit 1/second -j LOG +-A limit-ntp-602 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-603 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-333 +-A limit-ntp-603 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-604 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-334 +-A limit-ntp-604 -j TEE --gateway 10.0.0.1 +-A limit-ntp-604 -j TEE --gateway 10.0.0.2 +-A limit-ntp-604 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-605 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-335 +-A limit-ntp-605 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-605 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-606 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-336 +-A limit-ntp-606 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-607 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-337 +-A limit-ntp-607 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-608 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-338 +-A limit-ntp-608 -m limit --limit 12/minute -j ULOG +-A limit-ntp-608 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-609 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-339 +-A limit-ntp-609 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-61 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-61 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-610 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-340 +-A limit-ntp-610 -j ACCEPT +-A limit-ntp-612 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-342 +-A limit-ntp-612 -m limit --limit 1/second -j LOG +-A limit-ntp-612 -j ACCEPT +-A limit-ntp-613 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-343 +-A limit-ntp-613 -m limit --limit 1/second -j LOG +-A limit-ntp-614 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-344 +-A limit-ntp-614 -j TEE --gateway 10.0.0.1 +-A limit-ntp-614 -j TEE --gateway 10.0.0.2 +-A limit-ntp-614 -j ACCEPT +-A limit-ntp-615 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-345 +-A limit-ntp-615 -j TEE --gateway 10.0.0.1 +-A limit-ntp-615 -j TEE --gateway 10.0.0.2 +-A limit-ntp-616 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-346 +-A limit-ntp-616 -j ACCEPT +-A limit-ntp-618 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-348 +-A limit-ntp-618 -m limit --limit 12/minute -j ULOG +-A limit-ntp-618 -j ACCEPT +-A limit-ntp-619 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-349 +-A limit-ntp-619 -m limit --limit 12/minute -j ULOG +-A limit-ntp-62 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-62 -m limit --limit 1/second -j LOG +-A limit-ntp-62 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-620 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-350 +-A limit-ntp-620 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-621 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-351 +-A limit-ntp-621 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-622 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-352 +-A limit-ntp-622 -m limit --limit 1/second -j LOG +-A limit-ntp-622 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-623 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-353 +-A limit-ntp-623 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-624 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-354 +-A limit-ntp-624 -j TEE --gateway 10.0.0.1 +-A limit-ntp-624 -j TEE --gateway 10.0.0.2 +-A limit-ntp-624 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-625 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-355 +-A limit-ntp-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-626 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-356 +-A limit-ntp-626 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-627 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-357 +-A limit-ntp-627 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-628 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-358 +-A limit-ntp-628 -m limit --limit 12/minute -j ULOG +-A limit-ntp-628 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-629 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-359 +-A limit-ntp-629 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-63 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-63 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-630 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-360 +-A limit-ntp-630 -j ACCEPT +-A limit-ntp-632 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-362 +-A limit-ntp-632 -m limit --limit 1/second -j LOG +-A limit-ntp-632 -j ACCEPT +-A limit-ntp-633 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-363 +-A limit-ntp-633 -m limit --limit 1/second -j LOG +-A limit-ntp-634 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-364 +-A limit-ntp-634 -j TEE --gateway 10.0.0.1 +-A limit-ntp-634 -j TEE --gateway 10.0.0.2 +-A limit-ntp-634 -j ACCEPT +-A limit-ntp-635 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-365 +-A limit-ntp-635 -j TEE --gateway 10.0.0.1 +-A limit-ntp-635 -j TEE --gateway 10.0.0.2 +-A limit-ntp-636 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-366 +-A limit-ntp-636 -j ACCEPT +-A limit-ntp-638 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-368 +-A limit-ntp-638 -m limit --limit 12/minute -j ULOG +-A limit-ntp-638 -j ACCEPT +-A limit-ntp-639 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-369 +-A limit-ntp-639 -m limit --limit 12/minute -j ULOG +-A limit-ntp-64 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-64 -j TEE --gateway 10.0.0.1 +-A limit-ntp-64 -j TEE --gateway 10.0.0.2 +-A limit-ntp-64 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-640 -m recent --name limit-ntp-640 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-370 +-A limit-ntp-640 -m recent --name limit-ntp-640 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-641 -m recent --name limit-ntp-641 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-371 +-A limit-ntp-641 -m recent --name limit-ntp-641 --rsource --mask 255.255.255.255 --set +-A limit-ntp-642 -m recent --name limit-ntp-642 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-372 +-A limit-ntp-642 -m limit --limit 1/second -j LOG +-A limit-ntp-642 -m recent --name limit-ntp-642 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-643 -m recent --name limit-ntp-643 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-373 +-A limit-ntp-643 -m recent --name limit-ntp-643 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-644 -m recent --name limit-ntp-644 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-374 +-A limit-ntp-644 -j TEE --gateway 10.0.0.1 +-A limit-ntp-644 -j TEE --gateway 10.0.0.2 +-A limit-ntp-644 -m recent --name limit-ntp-644 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-375 +-A limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-646 -m recent --name limit-ntp-646 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-376 +-A limit-ntp-646 -m recent --name limit-ntp-646 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-647 -m recent --name limit-ntp-647 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-377 +-A limit-ntp-647 -m recent --name limit-ntp-647 --rsource --mask 255.255.255.255 --set +-A limit-ntp-648 -m recent --name limit-ntp-648 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-378 +-A limit-ntp-648 -m limit --limit 12/minute -j ULOG +-A limit-ntp-648 -m recent --name limit-ntp-648 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-649 -m recent --name limit-ntp-649 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-379 +-A limit-ntp-649 -m recent --name limit-ntp-649 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-65 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-65 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-65 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-650 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-380 +-A limit-ntp-650 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-651 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-381 +-A limit-ntp-651 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-652 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-382 +-A limit-ntp-652 -m limit --limit 1/second -j LOG +-A limit-ntp-652 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-653 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-383 +-A limit-ntp-653 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-654 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-384 +-A limit-ntp-654 -j TEE --gateway 10.0.0.1 +-A limit-ntp-654 -j TEE --gateway 10.0.0.2 +-A limit-ntp-654 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-655 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-385 +-A limit-ntp-655 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-655 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-656 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-386 +-A limit-ntp-656 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-657 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-387 +-A limit-ntp-657 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-658 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-388 +-A limit-ntp-658 -m limit --limit 12/minute -j ULOG +-A limit-ntp-658 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-659 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-389 +-A limit-ntp-659 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-66 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-66 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-660 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-390 +-A limit-ntp-660 -j ACCEPT +-A limit-ntp-662 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-392 +-A limit-ntp-662 -m limit --limit 1/second -j LOG +-A limit-ntp-662 -j ACCEPT +-A limit-ntp-663 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-393 +-A limit-ntp-663 -m limit --limit 1/second -j LOG +-A limit-ntp-664 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-394 +-A limit-ntp-664 -j TEE --gateway 10.0.0.1 +-A limit-ntp-664 -j TEE --gateway 10.0.0.2 +-A limit-ntp-664 -j ACCEPT +-A limit-ntp-665 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-395 +-A limit-ntp-665 -j TEE --gateway 10.0.0.1 +-A limit-ntp-665 -j TEE --gateway 10.0.0.2 +-A limit-ntp-666 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-396 +-A limit-ntp-666 -j ACCEPT +-A limit-ntp-668 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-398 +-A limit-ntp-668 -m limit --limit 12/minute -j ULOG +-A limit-ntp-668 -j ACCEPT +-A limit-ntp-669 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-399 +-A limit-ntp-669 -m limit --limit 12/minute -j ULOG +-A limit-ntp-67 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-67 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-670 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-400 +-A limit-ntp-670 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-671 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-401 +-A limit-ntp-671 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-672 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-402 +-A limit-ntp-672 -m limit --limit 1/second -j LOG +-A limit-ntp-672 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-673 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-403 +-A limit-ntp-673 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-674 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-404 +-A limit-ntp-674 -j TEE --gateway 10.0.0.1 +-A limit-ntp-674 -j TEE --gateway 10.0.0.2 +-A limit-ntp-674 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-675 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-405 +-A limit-ntp-675 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-675 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-676 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-406 +-A limit-ntp-676 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-677 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-407 +-A limit-ntp-677 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-678 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-408 +-A limit-ntp-678 -m limit --limit 12/minute -j ULOG +-A limit-ntp-678 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-679 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-409 +-A limit-ntp-679 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-68 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-68 -m limit --limit 12/minute -j ULOG +-A limit-ntp-68 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-680 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-410 +-A limit-ntp-680 -j ACCEPT +-A limit-ntp-682 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-412 +-A limit-ntp-682 -m limit --limit 1/second -j LOG +-A limit-ntp-682 -j ACCEPT +-A limit-ntp-683 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-413 +-A limit-ntp-683 -m limit --limit 1/second -j LOG +-A limit-ntp-684 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-414 +-A limit-ntp-684 -j TEE --gateway 10.0.0.1 +-A limit-ntp-684 -j TEE --gateway 10.0.0.2 +-A limit-ntp-684 -j ACCEPT +-A limit-ntp-685 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-415 +-A limit-ntp-685 -j TEE --gateway 10.0.0.1 +-A limit-ntp-685 -j TEE --gateway 10.0.0.2 +-A limit-ntp-686 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-416 +-A limit-ntp-686 -j ACCEPT +-A limit-ntp-688 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-418 +-A limit-ntp-688 -m limit --limit 12/minute -j ULOG +-A limit-ntp-688 -j ACCEPT +-A limit-ntp-689 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-419 +-A limit-ntp-689 -m limit --limit 12/minute -j ULOG +-A limit-ntp-69 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-69 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-690 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-420 +-A limit-ntp-690 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-691 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-421 +-A limit-ntp-691 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-692 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-422 +-A limit-ntp-692 -m limit --limit 1/second -j LOG +-A limit-ntp-692 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-693 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-423 +-A limit-ntp-693 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-694 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-424 +-A limit-ntp-694 -j TEE --gateway 10.0.0.1 +-A limit-ntp-694 -j TEE --gateway 10.0.0.2 +-A limit-ntp-694 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-695 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-425 +-A limit-ntp-695 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-695 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-696 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-426 +-A limit-ntp-696 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-697 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-427 +-A limit-ntp-697 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-698 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-428 +-A limit-ntp-698 -m limit --limit 12/minute -j ULOG +-A limit-ntp-698 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-699 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-429 +-A limit-ntp-699 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-7 -m recent --name limit-ntp-7 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-7 +-A limit-ntp-7 -m recent --name limit-ntp-7 --rsource --mask 255.255.255.255 --set +-A limit-ntp-70 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-70 -j ACCEPT +-A limit-ntp-700 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-430 +-A limit-ntp-700 -j ACCEPT +-A limit-ntp-702 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-432 +-A limit-ntp-702 -m limit --limit 1/second -j LOG +-A limit-ntp-702 -j ACCEPT +-A limit-ntp-703 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-433 +-A limit-ntp-703 -m limit --limit 1/second -j LOG +-A limit-ntp-704 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-434 +-A limit-ntp-704 -j TEE --gateway 10.0.0.1 +-A limit-ntp-704 -j TEE --gateway 10.0.0.2 +-A limit-ntp-704 -j ACCEPT +-A limit-ntp-705 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-435 +-A limit-ntp-705 -j TEE --gateway 10.0.0.1 +-A limit-ntp-705 -j TEE --gateway 10.0.0.2 +-A limit-ntp-706 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-436 +-A limit-ntp-706 -j ACCEPT +-A limit-ntp-708 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-438 +-A limit-ntp-708 -m limit --limit 12/minute -j ULOG +-A limit-ntp-708 -j ACCEPT +-A limit-ntp-709 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-439 +-A limit-ntp-709 -m limit --limit 12/minute -j ULOG +-A limit-ntp-710 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-440 +-A limit-ntp-710 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-711 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-441 +-A limit-ntp-711 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-712 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-442 +-A limit-ntp-712 -m limit --limit 1/second -j LOG +-A limit-ntp-712 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-713 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-443 +-A limit-ntp-713 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-714 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-444 +-A limit-ntp-714 -j TEE --gateway 10.0.0.1 +-A limit-ntp-714 -j TEE --gateway 10.0.0.2 +-A limit-ntp-714 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-715 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-445 +-A limit-ntp-715 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-715 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-716 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-446 +-A limit-ntp-716 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-717 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-447 +-A limit-ntp-717 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-718 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-448 +-A limit-ntp-718 -m limit --limit 12/minute -j ULOG +-A limit-ntp-718 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-719 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-449 +-A limit-ntp-719 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-72 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-72 -m limit --limit 1/second -j LOG +-A limit-ntp-72 -j ACCEPT +-A limit-ntp-720 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-450 +-A limit-ntp-720 -j ACCEPT +-A limit-ntp-722 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-452 +-A limit-ntp-722 -m limit --limit 1/second -j LOG +-A limit-ntp-722 -j ACCEPT +-A limit-ntp-723 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-453 +-A limit-ntp-723 -m limit --limit 1/second -j LOG +-A limit-ntp-724 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-454 +-A limit-ntp-724 -j TEE --gateway 10.0.0.1 +-A limit-ntp-724 -j TEE --gateway 10.0.0.2 +-A limit-ntp-724 -j ACCEPT +-A limit-ntp-725 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-455 +-A limit-ntp-725 -j TEE --gateway 10.0.0.1 +-A limit-ntp-725 -j TEE --gateway 10.0.0.2 +-A limit-ntp-726 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-456 +-A limit-ntp-726 -j ACCEPT +-A limit-ntp-728 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-458 +-A limit-ntp-728 -m limit --limit 12/minute -j ULOG +-A limit-ntp-728 -j ACCEPT +-A limit-ntp-729 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-459 +-A limit-ntp-729 -m limit --limit 12/minute -j ULOG +-A limit-ntp-73 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-73 -m limit --limit 1/second -j LOG +-A limit-ntp-730 -m recent --name limit-ntp-730 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-730 -m recent --name limit-ntp-730 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-731 -m recent --name limit-ntp-731 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-731 -m recent --name limit-ntp-731 --rsource --mask 255.255.255.255 --set +-A limit-ntp-732 -m recent --name limit-ntp-732 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-732 -m limit --limit 1/second -j LOG +-A limit-ntp-732 -m recent --name limit-ntp-732 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-733 -m recent --name limit-ntp-733 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-733 -m recent --name limit-ntp-733 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-734 -m recent --name limit-ntp-734 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-734 -j TEE --gateway 10.0.0.1 +-A limit-ntp-734 -j TEE --gateway 10.0.0.2 +-A limit-ntp-734 -m recent --name limit-ntp-734 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-736 -m recent --name limit-ntp-736 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-736 -m recent --name limit-ntp-736 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-737 -m recent --name limit-ntp-737 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-737 -m recent --name limit-ntp-737 --rsource --mask 255.255.255.255 --set +-A limit-ntp-738 -m recent --name limit-ntp-738 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-738 -m limit --limit 12/minute -j ULOG +-A limit-ntp-738 -m recent --name limit-ntp-738 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-739 -m recent --name limit-ntp-739 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-739 -m recent --name limit-ntp-739 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-74 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-74 -j TEE --gateway 10.0.0.1 +-A limit-ntp-74 -j TEE --gateway 10.0.0.2 +-A limit-ntp-74 -j ACCEPT +-A limit-ntp-740 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-740 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-741 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-741 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-742 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-742 -m limit --limit 1/second -j LOG +-A limit-ntp-742 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-743 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-743 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-744 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-744 -j TEE --gateway 10.0.0.1 +-A limit-ntp-744 -j TEE --gateway 10.0.0.2 +-A limit-ntp-744 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-745 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-745 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-745 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-746 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-746 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-747 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-747 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-748 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-748 -m limit --limit 12/minute -j ULOG +-A limit-ntp-748 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-749 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-749 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-75 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-75 -j TEE --gateway 10.0.0.1 +-A limit-ntp-75 -j TEE --gateway 10.0.0.2 +-A limit-ntp-750 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-750 -j ACCEPT +-A limit-ntp-752 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-752 -m limit --limit 1/second -j LOG +-A limit-ntp-752 -j ACCEPT +-A limit-ntp-753 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-753 -m limit --limit 1/second -j LOG +-A limit-ntp-754 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-754 -j TEE --gateway 10.0.0.1 +-A limit-ntp-754 -j TEE --gateway 10.0.0.2 +-A limit-ntp-754 -j ACCEPT +-A limit-ntp-755 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-755 -j TEE --gateway 10.0.0.1 +-A limit-ntp-755 -j TEE --gateway 10.0.0.2 +-A limit-ntp-756 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-756 -j ACCEPT +-A limit-ntp-758 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-758 -m limit --limit 12/minute -j ULOG +-A limit-ntp-758 -j ACCEPT +-A limit-ntp-759 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-759 -m limit --limit 12/minute -j ULOG +-A limit-ntp-76 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-76 -j ACCEPT +-A limit-ntp-760 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-760 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-761 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-761 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-762 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-762 -m limit --limit 1/second -j LOG +-A limit-ntp-762 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-763 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-763 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-764 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-764 -j TEE --gateway 10.0.0.1 +-A limit-ntp-764 -j TEE --gateway 10.0.0.2 +-A limit-ntp-764 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-765 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-765 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-765 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-766 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-766 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-767 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-767 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-768 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-768 -m limit --limit 12/minute -j ULOG +-A limit-ntp-768 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-769 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-769 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-770 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-770 -j ACCEPT +-A limit-ntp-772 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-772 -m limit --limit 1/second -j LOG +-A limit-ntp-772 -j ACCEPT +-A limit-ntp-773 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-773 -m limit --limit 1/second -j LOG +-A limit-ntp-774 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-774 -j TEE --gateway 10.0.0.1 +-A limit-ntp-774 -j TEE --gateway 10.0.0.2 +-A limit-ntp-774 -j ACCEPT +-A limit-ntp-775 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-775 -j TEE --gateway 10.0.0.1 +-A limit-ntp-775 -j TEE --gateway 10.0.0.2 +-A limit-ntp-776 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-776 -j ACCEPT +-A limit-ntp-778 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-778 -m limit --limit 12/minute -j ULOG +-A limit-ntp-778 -j ACCEPT +-A limit-ntp-779 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-779 -m limit --limit 12/minute -j ULOG +-A limit-ntp-78 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-78 -m limit --limit 12/minute -j ULOG +-A limit-ntp-78 -j ACCEPT +-A limit-ntp-780 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-780 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-781 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-781 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-782 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-782 -m limit --limit 1/second -j LOG +-A limit-ntp-782 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-783 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-783 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-784 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-784 -j TEE --gateway 10.0.0.1 +-A limit-ntp-784 -j TEE --gateway 10.0.0.2 +-A limit-ntp-784 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-785 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-785 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-785 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-786 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-786 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-787 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-787 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-788 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-788 -m limit --limit 12/minute -j ULOG +-A limit-ntp-788 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-789 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-789 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-79 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-79 -m limit --limit 12/minute -j ULOG +-A limit-ntp-790 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-790 -j ACCEPT +-A limit-ntp-792 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-792 -m limit --limit 1/second -j LOG +-A limit-ntp-792 -j ACCEPT +-A limit-ntp-793 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-793 -m limit --limit 1/second -j LOG +-A limit-ntp-794 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-794 -j TEE --gateway 10.0.0.1 +-A limit-ntp-794 -j TEE --gateway 10.0.0.2 +-A limit-ntp-794 -j ACCEPT +-A limit-ntp-795 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-795 -j TEE --gateway 10.0.0.1 +-A limit-ntp-795 -j TEE --gateway 10.0.0.2 +-A limit-ntp-796 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-796 -j ACCEPT +-A limit-ntp-798 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-798 -m limit --limit 12/minute -j ULOG +-A limit-ntp-798 -j ACCEPT +-A limit-ntp-799 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-799 -m limit --limit 12/minute -j ULOG +-A limit-ntp-8 -m recent --name limit-ntp-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-8 +-A limit-ntp-8 -m limit --limit 12/minute -j ULOG +-A limit-ntp-8 -m recent --name limit-ntp-8 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-80 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-80 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-800 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-800 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-801 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-801 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-802 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-802 -m limit --limit 1/second -j LOG +-A limit-ntp-802 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-803 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-803 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-804 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-804 -j TEE --gateway 10.0.0.1 +-A limit-ntp-804 -j TEE --gateway 10.0.0.2 +-A limit-ntp-804 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-805 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-805 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-805 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-806 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-806 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-807 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-807 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-808 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-808 -m limit --limit 12/minute -j ULOG +-A limit-ntp-808 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-809 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-809 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-81 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-81 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-810 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-810 -j ACCEPT +-A limit-ntp-812 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-812 -m limit --limit 1/second -j LOG +-A limit-ntp-812 -j ACCEPT +-A limit-ntp-813 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-813 -m limit --limit 1/second -j LOG +-A limit-ntp-814 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-814 -j TEE --gateway 10.0.0.1 +-A limit-ntp-814 -j TEE --gateway 10.0.0.2 +-A limit-ntp-814 -j ACCEPT +-A limit-ntp-815 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-815 -j TEE --gateway 10.0.0.1 +-A limit-ntp-815 -j TEE --gateway 10.0.0.2 +-A limit-ntp-816 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-816 -j ACCEPT +-A limit-ntp-818 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-818 -m limit --limit 12/minute -j ULOG +-A limit-ntp-818 -j ACCEPT +-A limit-ntp-819 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-819 -m limit --limit 12/minute -j ULOG +-A limit-ntp-82 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-82 -m limit --limit 1/second -j LOG +-A limit-ntp-82 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-820 -m recent --name limit-ntp-820 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-460 +-A limit-ntp-820 -m recent --name limit-ntp-820 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-821 -m recent --name limit-ntp-821 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-461 +-A limit-ntp-821 -m recent --name limit-ntp-821 --rsource --mask 255.255.255.255 --set +-A limit-ntp-822 -m recent --name limit-ntp-822 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-462 +-A limit-ntp-822 -m limit --limit 1/second -j LOG +-A limit-ntp-822 -m recent --name limit-ntp-822 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-823 -m recent --name limit-ntp-823 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-463 +-A limit-ntp-823 -m recent --name limit-ntp-823 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-824 -m recent --name limit-ntp-824 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-464 +-A limit-ntp-824 -j TEE --gateway 10.0.0.1 +-A limit-ntp-824 -j TEE --gateway 10.0.0.2 +-A limit-ntp-824 -m recent --name limit-ntp-824 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-465 +-A limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-826 -m recent --name limit-ntp-826 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-466 +-A limit-ntp-826 -m recent --name limit-ntp-826 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-827 -m recent --name limit-ntp-827 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-467 +-A limit-ntp-827 -m recent --name limit-ntp-827 --rsource --mask 255.255.255.255 --set +-A limit-ntp-828 -m recent --name limit-ntp-828 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-468 +-A limit-ntp-828 -m limit --limit 12/minute -j ULOG +-A limit-ntp-828 -m recent --name limit-ntp-828 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-829 -m recent --name limit-ntp-829 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-469 +-A limit-ntp-829 -m recent --name limit-ntp-829 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-83 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-83 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-830 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-470 +-A limit-ntp-830 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-831 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-471 +-A limit-ntp-831 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-832 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-472 +-A limit-ntp-832 -m limit --limit 1/second -j LOG +-A limit-ntp-832 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-833 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-473 +-A limit-ntp-833 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-834 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-474 +-A limit-ntp-834 -j TEE --gateway 10.0.0.1 +-A limit-ntp-834 -j TEE --gateway 10.0.0.2 +-A limit-ntp-834 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-835 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-475 +-A limit-ntp-835 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-835 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-836 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-476 +-A limit-ntp-836 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-837 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-477 +-A limit-ntp-837 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-ntp-838 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-478 +-A limit-ntp-838 -m limit --limit 12/minute -j ULOG +-A limit-ntp-838 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-839 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-479 +-A limit-ntp-839 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-84 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-84 -j TEE --gateway 10.0.0.1 +-A limit-ntp-84 -j TEE --gateway 10.0.0.2 +-A limit-ntp-84 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-840 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-480 +-A limit-ntp-840 -j ACCEPT +-A limit-ntp-842 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-482 +-A limit-ntp-842 -m limit --limit 1/second -j LOG +-A limit-ntp-842 -j ACCEPT +-A limit-ntp-843 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-483 +-A limit-ntp-843 -m limit --limit 1/second -j LOG +-A limit-ntp-844 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-484 +-A limit-ntp-844 -j TEE --gateway 10.0.0.1 +-A limit-ntp-844 -j TEE --gateway 10.0.0.2 +-A limit-ntp-844 -j ACCEPT +-A limit-ntp-845 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-485 +-A limit-ntp-845 -j TEE --gateway 10.0.0.1 +-A limit-ntp-845 -j TEE --gateway 10.0.0.2 +-A limit-ntp-846 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-486 +-A limit-ntp-846 -j ACCEPT +-A limit-ntp-848 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-488 +-A limit-ntp-848 -m limit --limit 12/minute -j ULOG +-A limit-ntp-848 -j ACCEPT +-A limit-ntp-849 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-489 +-A limit-ntp-849 -m limit --limit 12/minute -j ULOG +-A limit-ntp-85 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-85 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-85 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-850 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-490 +-A limit-ntp-850 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-851 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-491 +-A limit-ntp-851 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-852 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-492 +-A limit-ntp-852 -m limit --limit 1/second -j LOG +-A limit-ntp-852 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-853 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-493 +-A limit-ntp-853 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-ntp-854 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-494 +-A limit-ntp-854 -j TEE --gateway 10.0.0.1 +-A limit-ntp-854 -j TEE --gateway 10.0.0.2 +-A limit-ntp-854 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-855 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-495 +-A limit-ntp-855 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-855 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-856 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-496 +-A limit-ntp-856 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-857 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-497 +-A limit-ntp-857 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-ntp-858 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-498 +-A limit-ntp-858 -m limit --limit 12/minute -j ULOG +-A limit-ntp-858 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-ntp-859 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-499 +-A limit-ntp-859 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-86 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-86 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-860 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-500 +-A limit-ntp-860 -j ACCEPT +-A limit-ntp-862 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-502 +-A limit-ntp-862 -m limit --limit 1/second -j LOG +-A limit-ntp-862 -j ACCEPT +-A limit-ntp-863 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-503 +-A limit-ntp-863 -m limit --limit 1/second -j LOG +-A limit-ntp-864 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-504 +-A limit-ntp-864 -j TEE --gateway 10.0.0.1 +-A limit-ntp-864 -j TEE --gateway 10.0.0.2 +-A limit-ntp-864 -j ACCEPT +-A limit-ntp-865 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-505 +-A limit-ntp-865 -j TEE --gateway 10.0.0.1 +-A limit-ntp-865 -j TEE --gateway 10.0.0.2 +-A limit-ntp-866 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-506 +-A limit-ntp-866 -j ACCEPT +-A limit-ntp-868 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-508 +-A limit-ntp-868 -m limit --limit 12/minute -j ULOG +-A limit-ntp-868 -j ACCEPT +-A limit-ntp-869 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-509 +-A limit-ntp-869 -m limit --limit 12/minute -j ULOG +-A limit-ntp-87 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-87 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-870 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-510 +-A limit-ntp-870 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-871 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-511 +-A limit-ntp-871 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-872 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-512 +-A limit-ntp-872 -m limit --limit 1/second -j LOG +-A limit-ntp-872 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-873 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-513 +-A limit-ntp-873 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-874 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-514 +-A limit-ntp-874 -j TEE --gateway 10.0.0.1 +-A limit-ntp-874 -j TEE --gateway 10.0.0.2 +-A limit-ntp-874 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-875 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-515 +-A limit-ntp-875 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-875 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-876 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-516 +-A limit-ntp-876 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-877 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-517 +-A limit-ntp-877 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-ntp-878 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-518 +-A limit-ntp-878 -m limit --limit 12/minute -j ULOG +-A limit-ntp-878 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-879 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-519 +-A limit-ntp-879 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-88 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-88 -m limit --limit 12/minute -j ULOG +-A limit-ntp-88 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-880 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-520 +-A limit-ntp-880 -j ACCEPT +-A limit-ntp-882 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-522 +-A limit-ntp-882 -m limit --limit 1/second -j LOG +-A limit-ntp-882 -j ACCEPT +-A limit-ntp-883 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-523 +-A limit-ntp-883 -m limit --limit 1/second -j LOG +-A limit-ntp-884 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-524 +-A limit-ntp-884 -j TEE --gateway 10.0.0.1 +-A limit-ntp-884 -j TEE --gateway 10.0.0.2 +-A limit-ntp-884 -j ACCEPT +-A limit-ntp-885 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-525 +-A limit-ntp-885 -j TEE --gateway 10.0.0.1 +-A limit-ntp-885 -j TEE --gateway 10.0.0.2 +-A limit-ntp-886 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-526 +-A limit-ntp-886 -j ACCEPT +-A limit-ntp-888 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-528 +-A limit-ntp-888 -m limit --limit 12/minute -j ULOG +-A limit-ntp-888 -j ACCEPT +-A limit-ntp-889 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-529 +-A limit-ntp-889 -m limit --limit 12/minute -j ULOG +-A limit-ntp-89 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-89 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-890 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-530 +-A limit-ntp-890 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-891 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-531 +-A limit-ntp-891 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-892 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-532 +-A limit-ntp-892 -m limit --limit 1/second -j LOG +-A limit-ntp-892 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-893 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-533 +-A limit-ntp-893 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-ntp-894 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-534 +-A limit-ntp-894 -j TEE --gateway 10.0.0.1 +-A limit-ntp-894 -j TEE --gateway 10.0.0.2 +-A limit-ntp-894 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-895 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-535 +-A limit-ntp-895 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-ntp-895 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-ntp-896 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-536 +-A limit-ntp-896 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-897 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-537 +-A limit-ntp-897 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-ntp-898 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-538 +-A limit-ntp-898 -m limit --limit 12/minute -j ULOG +-A limit-ntp-898 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-ntp-899 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-539 +-A limit-ntp-899 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-9 -m recent --name limit-ntp-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-9 +-A limit-ntp-9 -m recent --name limit-ntp-9 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-ntp-90 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-90 -j ACCEPT +-A limit-ntp-900 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-540 +-A limit-ntp-900 -j ACCEPT +-A limit-ntp-902 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-542 +-A limit-ntp-902 -m limit --limit 1/second -j LOG +-A limit-ntp-902 -j ACCEPT +-A limit-ntp-903 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-543 +-A limit-ntp-903 -m limit --limit 1/second -j LOG +-A limit-ntp-904 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-544 +-A limit-ntp-904 -j TEE --gateway 10.0.0.1 +-A limit-ntp-904 -j TEE --gateway 10.0.0.2 +-A limit-ntp-904 -j ACCEPT +-A limit-ntp-905 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-545 +-A limit-ntp-905 -j TEE --gateway 10.0.0.1 +-A limit-ntp-905 -j TEE --gateway 10.0.0.2 +-A limit-ntp-906 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-546 +-A limit-ntp-906 -j ACCEPT +-A limit-ntp-908 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-548 +-A limit-ntp-908 -m limit --limit 12/minute -j ULOG +-A limit-ntp-908 -j ACCEPT +-A limit-ntp-909 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-549 +-A limit-ntp-909 -m limit --limit 12/minute -j ULOG +-A limit-ntp-910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-910 -j ACCEPT +-A limit-ntp-910 -m limit --limit 1/second -j LOG +-A limit-ntp-910 -j DROP +-A limit-ntp-911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-911 -j RETURN +-A limit-ntp-911 -m limit --limit 1/second -j LOG +-A limit-ntp-911 -j DROP +-A limit-ntp-912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-912 -j logaccept-ntp-0 +-A limit-ntp-912 -m limit --limit 1/second -j LOG +-A limit-ntp-912 -j DROP +-A limit-ntp-913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-913 -j logaccept-ntp-1 +-A limit-ntp-913 -m limit --limit 1/second -j LOG +-A limit-ntp-913 -j DROP +-A limit-ntp-914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-914 -j ACCEPT +-A limit-ntp-914 -m limit --limit 1/second -j LOG +-A limit-ntp-914 -j DROP +-A limit-ntp-915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-915 -j logaccept-ntp-2 +-A limit-ntp-915 -m limit --limit 1/second -j LOG +-A limit-ntp-915 -j DROP +-A limit-ntp-916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-916 -j ACCEPT +-A limit-ntp-916 -j DROP +-A limit-ntp-917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-917 -j RETURN +-A limit-ntp-917 -j DROP +-A limit-ntp-918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-918 -j logaccept-ntp-3 +-A limit-ntp-918 -j DROP +-A limit-ntp-919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-919 -j logaccept-ntp-4 +-A limit-ntp-919 -j DROP +-A limit-ntp-92 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-92 -m limit --limit 1/second -j LOG +-A limit-ntp-92 -j ACCEPT +-A limit-ntp-920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-920 -j ACCEPT +-A limit-ntp-920 -j DROP +-A limit-ntp-921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-921 -j logaccept-ntp-5 +-A limit-ntp-921 -j DROP +-A limit-ntp-922 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-922 -j ACCEPT +-A limit-ntp-922 -m limit --limit 1/second -j LOG +-A limit-ntp-922 -j DROP +-A limit-ntp-923 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-923 -j RETURN +-A limit-ntp-923 -m limit --limit 1/second -j LOG +-A limit-ntp-923 -j DROP +-A limit-ntp-924 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-924 -j logaccept-ntp-6 +-A limit-ntp-924 -m limit --limit 1/second -j LOG +-A limit-ntp-924 -j DROP +-A limit-ntp-925 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-925 -j logaccept-ntp-7 +-A limit-ntp-925 -m limit --limit 1/second -j LOG +-A limit-ntp-925 -j DROP +-A limit-ntp-926 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-926 -j ACCEPT +-A limit-ntp-926 -m limit --limit 1/second -j LOG +-A limit-ntp-926 -j DROP +-A limit-ntp-927 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-927 -j logaccept-ntp-8 +-A limit-ntp-927 -m limit --limit 1/second -j LOG +-A limit-ntp-927 -j DROP +-A limit-ntp-928 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-928 -j ACCEPT +-A limit-ntp-928 -j TEE --gateway 10.0.0.1 +-A limit-ntp-928 -j TEE --gateway 10.0.0.2 +-A limit-ntp-928 -j DROP +-A limit-ntp-929 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-929 -j RETURN +-A limit-ntp-929 -j TEE --gateway 10.0.0.1 +-A limit-ntp-929 -j TEE --gateway 10.0.0.2 +-A limit-ntp-929 -j DROP +-A limit-ntp-93 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-93 -m limit --limit 1/second -j LOG +-A limit-ntp-930 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-930 -j logaccept-ntp-9 +-A limit-ntp-930 -j TEE --gateway 10.0.0.1 +-A limit-ntp-930 -j TEE --gateway 10.0.0.2 +-A limit-ntp-930 -j DROP +-A limit-ntp-931 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-931 -j logaccept-ntp-10 +-A limit-ntp-931 -j TEE --gateway 10.0.0.1 +-A limit-ntp-931 -j TEE --gateway 10.0.0.2 +-A limit-ntp-931 -j DROP +-A limit-ntp-932 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-932 -j ACCEPT +-A limit-ntp-932 -j TEE --gateway 10.0.0.1 +-A limit-ntp-932 -j TEE --gateway 10.0.0.2 +-A limit-ntp-932 -j DROP +-A limit-ntp-933 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-933 -j logaccept-ntp-11 +-A limit-ntp-933 -j TEE --gateway 10.0.0.1 +-A limit-ntp-933 -j TEE --gateway 10.0.0.2 +-A limit-ntp-933 -j DROP +-A limit-ntp-934 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-934 -j ACCEPT +-A limit-ntp-934 -j DROP +-A limit-ntp-935 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-935 -j RETURN +-A limit-ntp-935 -j DROP +-A limit-ntp-936 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-936 -j logaccept-ntp-12 +-A limit-ntp-936 -j DROP +-A limit-ntp-937 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-937 -j logaccept-ntp-13 +-A limit-ntp-937 -j DROP +-A limit-ntp-938 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-938 -j ACCEPT +-A limit-ntp-938 -j DROP +-A limit-ntp-939 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-939 -j logaccept-ntp-14 +-A limit-ntp-939 -j DROP +-A limit-ntp-94 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-94 -j TEE --gateway 10.0.0.1 +-A limit-ntp-94 -j TEE --gateway 10.0.0.2 +-A limit-ntp-94 -j ACCEPT +-A limit-ntp-940 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-940 -j ACCEPT +-A limit-ntp-940 -m limit --limit 12/minute -j ULOG +-A limit-ntp-940 -j DROP +-A limit-ntp-941 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-941 -j RETURN +-A limit-ntp-941 -m limit --limit 12/minute -j ULOG +-A limit-ntp-941 -j DROP +-A limit-ntp-942 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-942 -j logaccept-ntp-15 +-A limit-ntp-942 -m limit --limit 12/minute -j ULOG +-A limit-ntp-942 -j DROP +-A limit-ntp-943 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-943 -j logaccept-ntp-16 +-A limit-ntp-943 -m limit --limit 12/minute -j ULOG +-A limit-ntp-943 -j DROP +-A limit-ntp-944 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-944 -j ACCEPT +-A limit-ntp-944 -m limit --limit 12/minute -j ULOG +-A limit-ntp-944 -j DROP +-A limit-ntp-945 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-945 -j logaccept-ntp-17 +-A limit-ntp-945 -m limit --limit 12/minute -j ULOG +-A limit-ntp-945 -j DROP +-A limit-ntp-946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-946 -j ACCEPT +-A limit-ntp-946 -j DROP +-A limit-ntp-947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-947 -j RETURN +-A limit-ntp-947 -j DROP +-A limit-ntp-948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-948 -j logaccept-ntp-18 +-A limit-ntp-948 -j DROP +-A limit-ntp-949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-949 -j logaccept-ntp-19 +-A limit-ntp-949 -j DROP +-A limit-ntp-95 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-95 -j TEE --gateway 10.0.0.1 +-A limit-ntp-95 -j TEE --gateway 10.0.0.2 +-A limit-ntp-950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-950 -j ACCEPT +-A limit-ntp-950 -j DROP +-A limit-ntp-951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-951 -j logaccept-ntp-20 +-A limit-ntp-951 -j DROP +-A limit-ntp-952 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-952 -j ACCEPT +-A limit-ntp-952 -m limit --limit 1/second -j LOG +-A limit-ntp-952 -j DROP +-A limit-ntp-953 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-953 -j RETURN +-A limit-ntp-953 -m limit --limit 1/second -j LOG +-A limit-ntp-953 -j DROP +-A limit-ntp-954 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-954 -j logaccept-ntp-21 +-A limit-ntp-954 -m limit --limit 1/second -j LOG +-A limit-ntp-954 -j DROP +-A limit-ntp-955 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-955 -j logaccept-ntp-22 +-A limit-ntp-955 -m limit --limit 1/second -j LOG +-A limit-ntp-955 -j DROP +-A limit-ntp-956 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-956 -j ACCEPT +-A limit-ntp-956 -m limit --limit 1/second -j LOG +-A limit-ntp-956 -j DROP +-A limit-ntp-957 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-957 -j logaccept-ntp-23 +-A limit-ntp-957 -m limit --limit 1/second -j LOG +-A limit-ntp-957 -j DROP +-A limit-ntp-958 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-958 -j ACCEPT +-A limit-ntp-958 -j TEE --gateway 10.0.0.1 +-A limit-ntp-958 -j TEE --gateway 10.0.0.2 +-A limit-ntp-958 -j DROP +-A limit-ntp-959 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-959 -j RETURN +-A limit-ntp-959 -j TEE --gateway 10.0.0.1 +-A limit-ntp-959 -j TEE --gateway 10.0.0.2 +-A limit-ntp-959 -j DROP +-A limit-ntp-96 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-96 -j ACCEPT +-A limit-ntp-960 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-960 -j logaccept-ntp-24 +-A limit-ntp-960 -j TEE --gateway 10.0.0.1 +-A limit-ntp-960 -j TEE --gateway 10.0.0.2 +-A limit-ntp-960 -j DROP +-A limit-ntp-961 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-961 -j logaccept-ntp-25 +-A limit-ntp-961 -j TEE --gateway 10.0.0.1 +-A limit-ntp-961 -j TEE --gateway 10.0.0.2 +-A limit-ntp-961 -j DROP +-A limit-ntp-962 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-962 -j ACCEPT +-A limit-ntp-962 -j TEE --gateway 10.0.0.1 +-A limit-ntp-962 -j TEE --gateway 10.0.0.2 +-A limit-ntp-962 -j DROP +-A limit-ntp-963 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-963 -j logaccept-ntp-26 +-A limit-ntp-963 -j TEE --gateway 10.0.0.1 +-A limit-ntp-963 -j TEE --gateway 10.0.0.2 +-A limit-ntp-963 -j DROP +-A limit-ntp-964 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-964 -j ACCEPT +-A limit-ntp-964 -j DROP +-A limit-ntp-965 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-965 -j RETURN +-A limit-ntp-965 -j DROP +-A limit-ntp-966 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-966 -j logaccept-ntp-27 +-A limit-ntp-966 -j DROP +-A limit-ntp-967 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-967 -j logaccept-ntp-28 +-A limit-ntp-967 -j DROP +-A limit-ntp-968 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-968 -j ACCEPT +-A limit-ntp-968 -j DROP +-A limit-ntp-969 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-969 -j logaccept-ntp-29 +-A limit-ntp-969 -j DROP +-A limit-ntp-970 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-970 -j ACCEPT +-A limit-ntp-970 -m limit --limit 12/minute -j ULOG +-A limit-ntp-970 -j DROP +-A limit-ntp-971 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-971 -j RETURN +-A limit-ntp-971 -m limit --limit 12/minute -j ULOG +-A limit-ntp-971 -j DROP +-A limit-ntp-972 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-972 -j logaccept-ntp-30 +-A limit-ntp-972 -m limit --limit 12/minute -j ULOG +-A limit-ntp-972 -j DROP +-A limit-ntp-973 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-973 -j logaccept-ntp-31 +-A limit-ntp-973 -m limit --limit 12/minute -j ULOG +-A limit-ntp-973 -j DROP +-A limit-ntp-974 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-974 -j ACCEPT +-A limit-ntp-974 -m limit --limit 12/minute -j ULOG +-A limit-ntp-974 -j DROP +-A limit-ntp-975 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-975 -j logaccept-ntp-32 +-A limit-ntp-975 -m limit --limit 12/minute -j ULOG +-A limit-ntp-975 -j DROP +-A limit-ntp-98 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-98 -m limit --limit 12/minute -j ULOG +-A limit-ntp-98 -j ACCEPT +-A limit-ntp-99 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-99 -m limit --limit 12/minute -j ULOG -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT -A logaccept-1 -j TEE --gateway 10.0.0.1 @@ -24202,13 +24202,6 @@ -A logaccept-10 -j TEE --gateway 10.0.0.1 -A logaccept-10 -j TEE --gateway 10.0.0.2 -A logaccept-10 -j ACCEPT --A logaccept-100 -j LOG --A logaccept-100 -j ACCEPT --A logaccept-101 -j TEE --gateway 10.0.0.1 --A logaccept-101 -j TEE --gateway 10.0.0.2 --A logaccept-101 -j ACCEPT --A logaccept-102 -m limit --limit 12/minute -j ULOG --A logaccept-102 -j ACCEPT -A logaccept-11 -m limit --limit 12/minute -j ULOG -A logaccept-11 -j ACCEPT -A logaccept-12 -m limit --limit 1/second -j LOG @@ -24350,90 +24343,20 @@ -A logaccept-65 -j ACCEPT -A logaccept-66 -m limit --limit 1/second -j LOG -A logaccept-66 -j ACCEPT --A logaccept-67 -j TEE --gateway 10.0.0.1 --A logaccept-67 -j TEE --gateway 10.0.0.2 +-A logaccept-67 -j LOG -A logaccept-67 -j ACCEPT --A logaccept-68 -m limit --limit 12/minute -j ULOG +-A logaccept-68 -j TEE --gateway 10.0.0.1 +-A logaccept-68 -j TEE --gateway 10.0.0.2 -A logaccept-68 -j ACCEPT --A logaccept-69 -m limit --limit 1/second -j LOG +-A logaccept-69 -m limit --limit 12/minute -j ULOG -A logaccept-69 -j ACCEPT -A logaccept-7 -j TEE --gateway 10.0.0.1 -A logaccept-7 -j TEE --gateway 10.0.0.2 -A logaccept-7 -j ACCEPT --A logaccept-70 -j TEE --gateway 10.0.0.1 --A logaccept-70 -j TEE --gateway 10.0.0.2 --A logaccept-70 -j ACCEPT --A logaccept-71 -m limit --limit 12/minute -j ULOG --A logaccept-71 -j ACCEPT --A logaccept-72 -m limit --limit 1/second -j LOG --A logaccept-72 -j ACCEPT --A logaccept-73 -j TEE --gateway 10.0.0.1 --A logaccept-73 -j TEE --gateway 10.0.0.2 --A logaccept-73 -j ACCEPT --A logaccept-74 -m limit --limit 12/minute -j ULOG --A logaccept-74 -j ACCEPT --A logaccept-75 -m limit --limit 1/second -j LOG --A logaccept-75 -j ACCEPT --A logaccept-76 -j TEE --gateway 10.0.0.1 --A logaccept-76 -j TEE --gateway 10.0.0.2 --A logaccept-76 -j ACCEPT --A logaccept-77 -m limit --limit 12/minute -j ULOG --A logaccept-77 -j ACCEPT --A logaccept-78 -m limit --limit 1/second -j LOG --A logaccept-78 -j ACCEPT --A logaccept-79 -j TEE --gateway 10.0.0.1 --A logaccept-79 -j TEE --gateway 10.0.0.2 --A logaccept-79 -j ACCEPT -A logaccept-8 -m limit --limit 12/minute -j ULOG -A logaccept-8 -j ACCEPT --A logaccept-80 -m limit --limit 12/minute -j ULOG --A logaccept-80 -j ACCEPT --A logaccept-81 -m limit --limit 1/second -j LOG --A logaccept-81 -j ACCEPT --A logaccept-82 -j TEE --gateway 10.0.0.1 --A logaccept-82 -j TEE --gateway 10.0.0.2 --A logaccept-82 -j ACCEPT --A logaccept-83 -m limit --limit 12/minute -j ULOG --A logaccept-83 -j ACCEPT --A logaccept-84 -m limit --limit 1/second -j LOG --A logaccept-84 -j ACCEPT --A logaccept-85 -j TEE --gateway 10.0.0.1 --A logaccept-85 -j TEE --gateway 10.0.0.2 --A logaccept-85 -j ACCEPT --A logaccept-86 -m limit --limit 12/minute -j ULOG --A logaccept-86 -j ACCEPT --A logaccept-87 -m limit --limit 1/second -j LOG --A logaccept-87 -j ACCEPT --A logaccept-88 -j TEE --gateway 10.0.0.1 --A logaccept-88 -j TEE --gateway 10.0.0.2 --A logaccept-88 -j ACCEPT --A logaccept-89 -m limit --limit 12/minute -j ULOG --A logaccept-89 -j ACCEPT -A logaccept-9 -m limit --limit 1/second -j LOG -A logaccept-9 -j ACCEPT --A logaccept-90 -m limit --limit 1/second -j LOG --A logaccept-90 -j ACCEPT --A logaccept-91 -j TEE --gateway 10.0.0.1 --A logaccept-91 -j TEE --gateway 10.0.0.2 --A logaccept-91 -j ACCEPT --A logaccept-92 -m limit --limit 12/minute -j ULOG --A logaccept-92 -j ACCEPT --A logaccept-93 -m limit --limit 1/second -j LOG --A logaccept-93 -j ACCEPT --A logaccept-94 -j TEE --gateway 10.0.0.1 --A logaccept-94 -j TEE --gateway 10.0.0.2 --A logaccept-94 -j ACCEPT --A logaccept-95 -m limit --limit 12/minute -j ULOG --A logaccept-95 -j ACCEPT --A logaccept-96 -m limit --limit 1/second -j LOG --A logaccept-96 -j ACCEPT --A logaccept-97 -j TEE --gateway 10.0.0.1 --A logaccept-97 -j TEE --gateway 10.0.0.2 --A logaccept-97 -j ACCEPT --A logaccept-98 -m limit --limit 12/minute -j ULOG --A logaccept-98 -j ACCEPT --A logaccept-99 -m limit --limit 1/second -j LOG --A logaccept-99 -j ACCEPT -A logaccept-final-0 -m limit --limit 1/second -j LOG -A logaccept-final-0 -j ACCEPT -A logaccept-final-1 -j TEE --gateway 10.0.0.1 @@ -25148,6 +25071,83 @@ -A logaccept-final-98 -j ACCEPT -A logaccept-final-99 -m limit --limit 1/second -j LOG -A logaccept-final-99 -j ACCEPT +-A logaccept-ntp-0 -m limit --limit 1/second -j LOG +-A logaccept-ntp-0 -j ACCEPT +-A logaccept-ntp-1 -j TEE --gateway 10.0.0.1 +-A logaccept-ntp-1 -j TEE --gateway 10.0.0.2 +-A logaccept-ntp-1 -j ACCEPT +-A logaccept-ntp-10 -j TEE --gateway 10.0.0.1 +-A logaccept-ntp-10 -j TEE --gateway 10.0.0.2 +-A logaccept-ntp-10 -j ACCEPT +-A logaccept-ntp-11 -m limit --limit 12/minute -j ULOG +-A logaccept-ntp-11 -j ACCEPT +-A logaccept-ntp-12 -m limit --limit 1/second -j LOG +-A logaccept-ntp-12 -j ACCEPT +-A logaccept-ntp-13 -j TEE --gateway 10.0.0.1 +-A logaccept-ntp-13 -j TEE --gateway 10.0.0.2 +-A logaccept-ntp-13 -j ACCEPT +-A logaccept-ntp-14 -m limit --limit 12/minute -j ULOG +-A logaccept-ntp-14 -j ACCEPT +-A logaccept-ntp-15 -m limit --limit 1/second -j LOG +-A logaccept-ntp-15 -j ACCEPT +-A logaccept-ntp-16 -j TEE --gateway 10.0.0.1 +-A logaccept-ntp-16 -j TEE --gateway 10.0.0.2 +-A logaccept-ntp-16 -j ACCEPT +-A logaccept-ntp-17 -m limit --limit 12/minute -j ULOG +-A logaccept-ntp-17 -j ACCEPT +-A logaccept-ntp-18 -m limit --limit 1/second -j LOG +-A logaccept-ntp-18 -j ACCEPT +-A logaccept-ntp-19 -j TEE --gateway 10.0.0.1 +-A logaccept-ntp-19 -j TEE --gateway 10.0.0.2 +-A logaccept-ntp-19 -j ACCEPT +-A logaccept-ntp-2 -m limit --limit 12/minute -j ULOG +-A logaccept-ntp-2 -j ACCEPT +-A logaccept-ntp-20 -m limit --limit 12/minute -j ULOG +-A logaccept-ntp-20 -j ACCEPT +-A logaccept-ntp-21 -m limit --limit 1/second -j LOG +-A logaccept-ntp-21 -j ACCEPT +-A logaccept-ntp-22 -j TEE --gateway 10.0.0.1 +-A logaccept-ntp-22 -j TEE --gateway 10.0.0.2 +-A logaccept-ntp-22 -j ACCEPT +-A logaccept-ntp-23 -m limit --limit 12/minute -j ULOG +-A logaccept-ntp-23 -j ACCEPT +-A logaccept-ntp-24 -m limit --limit 1/second -j LOG +-A logaccept-ntp-24 -j ACCEPT +-A logaccept-ntp-25 -j TEE --gateway 10.0.0.1 +-A logaccept-ntp-25 -j TEE --gateway 10.0.0.2 +-A logaccept-ntp-25 -j ACCEPT +-A logaccept-ntp-26 -m limit --limit 12/minute -j ULOG +-A logaccept-ntp-26 -j ACCEPT +-A logaccept-ntp-27 -m limit --limit 1/second -j LOG +-A logaccept-ntp-27 -j ACCEPT +-A logaccept-ntp-28 -j TEE --gateway 10.0.0.1 +-A logaccept-ntp-28 -j TEE --gateway 10.0.0.2 +-A logaccept-ntp-28 -j ACCEPT +-A logaccept-ntp-29 -m limit --limit 12/minute -j ULOG +-A logaccept-ntp-29 -j ACCEPT +-A logaccept-ntp-3 -m limit --limit 1/second -j LOG +-A logaccept-ntp-3 -j ACCEPT +-A logaccept-ntp-30 -m limit --limit 1/second -j LOG +-A logaccept-ntp-30 -j ACCEPT +-A logaccept-ntp-31 -j TEE --gateway 10.0.0.1 +-A logaccept-ntp-31 -j TEE --gateway 10.0.0.2 +-A logaccept-ntp-31 -j ACCEPT +-A logaccept-ntp-32 -m limit --limit 12/minute -j ULOG +-A logaccept-ntp-32 -j ACCEPT +-A logaccept-ntp-4 -j TEE --gateway 10.0.0.1 +-A logaccept-ntp-4 -j TEE --gateway 10.0.0.2 +-A logaccept-ntp-4 -j ACCEPT +-A logaccept-ntp-5 -m limit --limit 12/minute -j ULOG +-A logaccept-ntp-5 -j ACCEPT +-A logaccept-ntp-6 -m limit --limit 1/second -j LOG +-A logaccept-ntp-6 -j ACCEPT +-A logaccept-ntp-7 -j TEE --gateway 10.0.0.1 +-A logaccept-ntp-7 -j TEE --gateway 10.0.0.2 +-A logaccept-ntp-7 -j ACCEPT +-A logaccept-ntp-8 -m limit --limit 12/minute -j ULOG +-A logaccept-ntp-8 -j ACCEPT +-A logaccept-ntp-9 -m limit --limit 1/second -j LOG +-A logaccept-ntp-9 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG @@ -26858,1441 +26858,161 @@ -A logdrop-1650 -j DROP -A logdrop-1651 -m limit --limit 1/second -j LOG -A logdrop-1651 -j DROP --A logdrop-1652 -m limit --limit 1/second -j LOG +-A logdrop-1652 -j LOG -A logdrop-1652 -j DROP --A logdrop-1653 -m limit --limit 1/second -j LOG +-A logdrop-1653 -j TEE --gateway 10.0.0.1 +-A logdrop-1653 -j TEE --gateway 10.0.0.2 -A logdrop-1653 -j DROP --A logdrop-1654 -m limit --limit 1/second -j LOG +-A logdrop-1654 -m limit --limit 12/minute -j ULOG -A logdrop-1654 -j DROP --A logdrop-1655 -m limit --limit 1/second -j LOG --A logdrop-1655 -j DROP --A logdrop-1656 -m limit --limit 1/second -j LOG --A logdrop-1656 -j DROP --A logdrop-1657 -m limit --limit 1/second -j LOG --A logdrop-1657 -j DROP --A logdrop-1658 -m limit --limit 1/second -j LOG --A logdrop-1658 -j DROP --A logdrop-1659 -m limit --limit 1/second -j LOG --A logdrop-1659 -j DROP -A logdrop-166 -j TEE --gateway 10.0.0.1 -A logdrop-166 -j TEE --gateway 10.0.0.2 -A logdrop-166 -j DROP --A logdrop-1660 -m limit --limit 1/second -j LOG --A logdrop-1660 -j DROP --A logdrop-1661 -m limit --limit 1/second -j LOG --A logdrop-1661 -j DROP --A logdrop-1662 -m limit --limit 1/second -j LOG --A logdrop-1662 -j DROP --A logdrop-1663 -m limit --limit 1/second -j LOG --A logdrop-1663 -j DROP --A logdrop-1664 -m limit --limit 1/second -j LOG --A logdrop-1664 -j DROP --A logdrop-1665 -m limit --limit 1/second -j LOG --A logdrop-1665 -j DROP --A logdrop-1666 -m limit --limit 1/second -j LOG --A logdrop-1666 -j DROP --A logdrop-1667 -m limit --limit 1/second -j LOG --A logdrop-1667 -j DROP --A logdrop-1668 -m limit --limit 1/second -j LOG --A logdrop-1668 -j DROP --A logdrop-1669 -m limit --limit 1/second -j LOG --A logdrop-1669 -j DROP -A logdrop-167 -j TEE --gateway 10.0.0.1 -A logdrop-167 -j TEE --gateway 10.0.0.2 -A logdrop-167 -j DROP --A logdrop-1670 -m limit --limit 1/second -j LOG --A logdrop-1670 -j DROP --A logdrop-1671 -m limit --limit 1/second -j LOG --A logdrop-1671 -j DROP --A logdrop-1672 -m limit --limit 1/second -j LOG --A logdrop-1672 -j DROP --A logdrop-1673 -m limit --limit 1/second -j LOG --A logdrop-1673 -j DROP --A logdrop-1674 -m limit --limit 1/second -j LOG --A logdrop-1674 -j DROP --A logdrop-1675 -m limit --limit 1/second -j LOG --A logdrop-1675 -j DROP --A logdrop-1676 -m limit --limit 1/second -j LOG --A logdrop-1676 -j DROP --A logdrop-1677 -m limit --limit 1/second -j LOG --A logdrop-1677 -j DROP --A logdrop-1678 -m limit --limit 1/second -j LOG --A logdrop-1678 -j DROP --A logdrop-1679 -m limit --limit 1/second -j LOG --A logdrop-1679 -j DROP -A logdrop-168 -j TEE --gateway 10.0.0.1 -A logdrop-168 -j TEE --gateway 10.0.0.2 -A logdrop-168 -j DROP --A logdrop-1680 -m limit --limit 1/second -j LOG --A logdrop-1680 -j DROP --A logdrop-1681 -m limit --limit 1/second -j LOG --A logdrop-1681 -j DROP --A logdrop-1682 -m limit --limit 1/second -j LOG --A logdrop-1682 -j DROP --A logdrop-1683 -m limit --limit 1/second -j LOG --A logdrop-1683 -j DROP --A logdrop-1684 -m limit --limit 1/second -j LOG --A logdrop-1684 -j DROP --A logdrop-1685 -m limit --limit 1/second -j LOG --A logdrop-1685 -j DROP --A logdrop-1686 -m limit --limit 1/second -j LOG --A logdrop-1686 -j DROP --A logdrop-1687 -m limit --limit 1/second -j LOG --A logdrop-1687 -j DROP --A logdrop-1688 -m limit --limit 1/second -j LOG --A logdrop-1688 -j DROP --A logdrop-1689 -m limit --limit 1/second -j LOG --A logdrop-1689 -j DROP -A logdrop-169 -j TEE --gateway 10.0.0.1 -A logdrop-169 -j TEE --gateway 10.0.0.2 -A logdrop-169 -j DROP --A logdrop-1690 -m limit --limit 1/second -j LOG --A logdrop-1690 -j DROP --A logdrop-1691 -m limit --limit 1/second -j LOG --A logdrop-1691 -j DROP --A logdrop-1692 -m limit --limit 1/second -j LOG --A logdrop-1692 -j DROP --A logdrop-1693 -m limit --limit 1/second -j LOG --A logdrop-1693 -j DROP --A logdrop-1694 -m limit --limit 1/second -j LOG --A logdrop-1694 -j DROP --A logdrop-1695 -m limit --limit 1/second -j LOG --A logdrop-1695 -j DROP --A logdrop-1696 -m limit --limit 1/second -j LOG --A logdrop-1696 -j DROP --A logdrop-1697 -m limit --limit 1/second -j LOG --A logdrop-1697 -j DROP --A logdrop-1698 -m limit --limit 1/second -j LOG --A logdrop-1698 -j DROP --A logdrop-1699 -m limit --limit 1/second -j LOG --A logdrop-1699 -j DROP -A logdrop-17 -m limit --limit 1/second -j LOG -A logdrop-17 -j DROP -A logdrop-170 -j TEE --gateway 10.0.0.1 -A logdrop-170 -j TEE --gateway 10.0.0.2 -A logdrop-170 -j DROP --A logdrop-1700 -m limit --limit 1/second -j LOG --A logdrop-1700 -j DROP --A logdrop-1701 -m limit --limit 1/second -j LOG --A logdrop-1701 -j DROP --A logdrop-1702 -m limit --limit 1/second -j LOG --A logdrop-1702 -j DROP --A logdrop-1703 -m limit --limit 1/second -j LOG --A logdrop-1703 -j DROP --A logdrop-1704 -m limit --limit 1/second -j LOG --A logdrop-1704 -j DROP --A logdrop-1705 -m limit --limit 1/second -j LOG --A logdrop-1705 -j DROP --A logdrop-1706 -m limit --limit 1/second -j LOG --A logdrop-1706 -j DROP --A logdrop-1707 -m limit --limit 1/second -j LOG --A logdrop-1707 -j DROP --A logdrop-1708 -m limit --limit 1/second -j LOG --A logdrop-1708 -j DROP --A logdrop-1709 -m limit --limit 1/second -j LOG --A logdrop-1709 -j DROP -A logdrop-171 -j TEE --gateway 10.0.0.1 -A logdrop-171 -j TEE --gateway 10.0.0.2 -A logdrop-171 -j DROP --A logdrop-1710 -m limit --limit 1/second -j LOG --A logdrop-1710 -j DROP --A logdrop-1711 -m limit --limit 1/second -j LOG --A logdrop-1711 -j DROP --A logdrop-1712 -m limit --limit 1/second -j LOG --A logdrop-1712 -j DROP --A logdrop-1713 -m limit --limit 1/second -j LOG --A logdrop-1713 -j DROP --A logdrop-1714 -m limit --limit 1/second -j LOG --A logdrop-1714 -j DROP --A logdrop-1715 -m limit --limit 1/second -j LOG --A logdrop-1715 -j DROP --A logdrop-1716 -m limit --limit 1/second -j LOG --A logdrop-1716 -j DROP --A logdrop-1717 -m limit --limit 1/second -j LOG --A logdrop-1717 -j DROP --A logdrop-1718 -m limit --limit 1/second -j LOG --A logdrop-1718 -j DROP --A logdrop-1719 -m limit --limit 1/second -j LOG --A logdrop-1719 -j DROP -A logdrop-172 -j TEE --gateway 10.0.0.1 -A logdrop-172 -j TEE --gateway 10.0.0.2 -A logdrop-172 -j DROP --A logdrop-1720 -m limit --limit 1/second -j LOG --A logdrop-1720 -j DROP --A logdrop-1721 -m limit --limit 1/second -j LOG --A logdrop-1721 -j DROP --A logdrop-1722 -m limit --limit 1/second -j LOG --A logdrop-1722 -j DROP --A logdrop-1723 -m limit --limit 1/second -j LOG --A logdrop-1723 -j DROP --A logdrop-1724 -m limit --limit 1/second -j LOG --A logdrop-1724 -j DROP --A logdrop-1725 -m limit --limit 1/second -j LOG --A logdrop-1725 -j DROP --A logdrop-1726 -m limit --limit 1/second -j LOG --A logdrop-1726 -j DROP --A logdrop-1727 -m limit --limit 1/second -j LOG --A logdrop-1727 -j DROP --A logdrop-1728 -m limit --limit 1/second -j LOG --A logdrop-1728 -j DROP --A logdrop-1729 -m limit --limit 1/second -j LOG --A logdrop-1729 -j DROP -A logdrop-173 -j TEE --gateway 10.0.0.1 -A logdrop-173 -j TEE --gateway 10.0.0.2 -A logdrop-173 -j DROP --A logdrop-1730 -m limit --limit 1/second -j LOG --A logdrop-1730 -j DROP --A logdrop-1731 -m limit --limit 1/second -j LOG --A logdrop-1731 -j DROP --A logdrop-1732 -m limit --limit 1/second -j LOG --A logdrop-1732 -j DROP --A logdrop-1733 -m limit --limit 1/second -j LOG --A logdrop-1733 -j DROP --A logdrop-1734 -m limit --limit 1/second -j LOG --A logdrop-1734 -j DROP --A logdrop-1735 -m limit --limit 1/second -j LOG --A logdrop-1735 -j DROP --A logdrop-1736 -m limit --limit 1/second -j LOG --A logdrop-1736 -j DROP --A logdrop-1737 -m limit --limit 1/second -j LOG --A logdrop-1737 -j DROP --A logdrop-1738 -m limit --limit 1/second -j LOG --A logdrop-1738 -j DROP --A logdrop-1739 -m limit --limit 1/second -j LOG --A logdrop-1739 -j DROP -A logdrop-174 -j TEE --gateway 10.0.0.1 -A logdrop-174 -j TEE --gateway 10.0.0.2 -A logdrop-174 -j DROP --A logdrop-1740 -m limit --limit 1/second -j LOG --A logdrop-1740 -j DROP --A logdrop-1741 -m limit --limit 1/second -j LOG --A logdrop-1741 -j DROP --A logdrop-1742 -m limit --limit 1/second -j LOG --A logdrop-1742 -j DROP --A logdrop-1743 -m limit --limit 1/second -j LOG --A logdrop-1743 -j DROP --A logdrop-1744 -m limit --limit 1/second -j LOG --A logdrop-1744 -j DROP --A logdrop-1745 -m limit --limit 1/second -j LOG --A logdrop-1745 -j DROP --A logdrop-1746 -m limit --limit 1/second -j LOG --A logdrop-1746 -j DROP --A logdrop-1747 -m limit --limit 1/second -j LOG --A logdrop-1747 -j DROP --A logdrop-1748 -m limit --limit 1/second -j LOG --A logdrop-1748 -j DROP --A logdrop-1749 -m limit --limit 1/second -j LOG --A logdrop-1749 -j DROP -A logdrop-175 -j TEE --gateway 10.0.0.1 -A logdrop-175 -j TEE --gateway 10.0.0.2 -A logdrop-175 -j DROP --A logdrop-1750 -j TEE --gateway 10.0.0.1 --A logdrop-1750 -j TEE --gateway 10.0.0.2 --A logdrop-1750 -j DROP --A logdrop-1751 -j TEE --gateway 10.0.0.1 --A logdrop-1751 -j TEE --gateway 10.0.0.2 --A logdrop-1751 -j DROP --A logdrop-1752 -j TEE --gateway 10.0.0.1 --A logdrop-1752 -j TEE --gateway 10.0.0.2 --A logdrop-1752 -j DROP --A logdrop-1753 -j TEE --gateway 10.0.0.1 --A logdrop-1753 -j TEE --gateway 10.0.0.2 --A logdrop-1753 -j DROP --A logdrop-1754 -j TEE --gateway 10.0.0.1 --A logdrop-1754 -j TEE --gateway 10.0.0.2 --A logdrop-1754 -j DROP --A logdrop-1755 -j TEE --gateway 10.0.0.1 --A logdrop-1755 -j TEE --gateway 10.0.0.2 --A logdrop-1755 -j DROP --A logdrop-1756 -j TEE --gateway 10.0.0.1 --A logdrop-1756 -j TEE --gateway 10.0.0.2 --A logdrop-1756 -j DROP --A logdrop-1757 -j TEE --gateway 10.0.0.1 --A logdrop-1757 -j TEE --gateway 10.0.0.2 --A logdrop-1757 -j DROP --A logdrop-1758 -j TEE --gateway 10.0.0.1 --A logdrop-1758 -j TEE --gateway 10.0.0.2 --A logdrop-1758 -j DROP --A logdrop-1759 -j TEE --gateway 10.0.0.1 --A logdrop-1759 -j TEE --gateway 10.0.0.2 --A logdrop-1759 -j DROP -A logdrop-176 -j TEE --gateway 10.0.0.1 -A logdrop-176 -j TEE --gateway 10.0.0.2 -A logdrop-176 -j DROP --A logdrop-1760 -j TEE --gateway 10.0.0.1 --A logdrop-1760 -j TEE --gateway 10.0.0.2 --A logdrop-1760 -j DROP --A logdrop-1761 -j TEE --gateway 10.0.0.1 --A logdrop-1761 -j TEE --gateway 10.0.0.2 --A logdrop-1761 -j DROP --A logdrop-1762 -j TEE --gateway 10.0.0.1 --A logdrop-1762 -j TEE --gateway 10.0.0.2 --A logdrop-1762 -j DROP --A logdrop-1763 -j TEE --gateway 10.0.0.1 --A logdrop-1763 -j TEE --gateway 10.0.0.2 --A logdrop-1763 -j DROP --A logdrop-1764 -j TEE --gateway 10.0.0.1 --A logdrop-1764 -j TEE --gateway 10.0.0.2 --A logdrop-1764 -j DROP --A logdrop-1765 -j TEE --gateway 10.0.0.1 --A logdrop-1765 -j TEE --gateway 10.0.0.2 --A logdrop-1765 -j DROP --A logdrop-1766 -j TEE --gateway 10.0.0.1 --A logdrop-1766 -j TEE --gateway 10.0.0.2 --A logdrop-1766 -j DROP --A logdrop-1767 -j TEE --gateway 10.0.0.1 --A logdrop-1767 -j TEE --gateway 10.0.0.2 --A logdrop-1767 -j DROP --A logdrop-1768 -j TEE --gateway 10.0.0.1 --A logdrop-1768 -j TEE --gateway 10.0.0.2 --A logdrop-1768 -j DROP --A logdrop-1769 -j TEE --gateway 10.0.0.1 --A logdrop-1769 -j TEE --gateway 10.0.0.2 --A logdrop-1769 -j DROP -A logdrop-177 -j TEE --gateway 10.0.0.1 -A logdrop-177 -j TEE --gateway 10.0.0.2 -A logdrop-177 -j DROP --A logdrop-1770 -j TEE --gateway 10.0.0.1 --A logdrop-1770 -j TEE --gateway 10.0.0.2 --A logdrop-1770 -j DROP --A logdrop-1771 -j TEE --gateway 10.0.0.1 --A logdrop-1771 -j TEE --gateway 10.0.0.2 --A logdrop-1771 -j DROP --A logdrop-1772 -j TEE --gateway 10.0.0.1 --A logdrop-1772 -j TEE --gateway 10.0.0.2 --A logdrop-1772 -j DROP --A logdrop-1773 -j TEE --gateway 10.0.0.1 --A logdrop-1773 -j TEE --gateway 10.0.0.2 --A logdrop-1773 -j DROP --A logdrop-1774 -j TEE --gateway 10.0.0.1 --A logdrop-1774 -j TEE --gateway 10.0.0.2 --A logdrop-1774 -j DROP --A logdrop-1775 -j TEE --gateway 10.0.0.1 --A logdrop-1775 -j TEE --gateway 10.0.0.2 --A logdrop-1775 -j DROP --A logdrop-1776 -j TEE --gateway 10.0.0.1 --A logdrop-1776 -j TEE --gateway 10.0.0.2 --A logdrop-1776 -j DROP --A logdrop-1777 -j TEE --gateway 10.0.0.1 --A logdrop-1777 -j TEE --gateway 10.0.0.2 --A logdrop-1777 -j DROP --A logdrop-1778 -j TEE --gateway 10.0.0.1 --A logdrop-1778 -j TEE --gateway 10.0.0.2 --A logdrop-1778 -j DROP --A logdrop-1779 -j TEE --gateway 10.0.0.1 --A logdrop-1779 -j TEE --gateway 10.0.0.2 --A logdrop-1779 -j DROP -A logdrop-178 -j TEE --gateway 10.0.0.1 -A logdrop-178 -j TEE --gateway 10.0.0.2 -A logdrop-178 -j DROP --A logdrop-1780 -j TEE --gateway 10.0.0.1 --A logdrop-1780 -j TEE --gateway 10.0.0.2 --A logdrop-1780 -j DROP --A logdrop-1781 -j TEE --gateway 10.0.0.1 --A logdrop-1781 -j TEE --gateway 10.0.0.2 --A logdrop-1781 -j DROP --A logdrop-1782 -j TEE --gateway 10.0.0.1 --A logdrop-1782 -j TEE --gateway 10.0.0.2 --A logdrop-1782 -j DROP --A logdrop-1783 -j TEE --gateway 10.0.0.1 --A logdrop-1783 -j TEE --gateway 10.0.0.2 --A logdrop-1783 -j DROP --A logdrop-1784 -j TEE --gateway 10.0.0.1 --A logdrop-1784 -j TEE --gateway 10.0.0.2 --A logdrop-1784 -j DROP --A logdrop-1785 -j TEE --gateway 10.0.0.1 --A logdrop-1785 -j TEE --gateway 10.0.0.2 --A logdrop-1785 -j DROP --A logdrop-1786 -j TEE --gateway 10.0.0.1 --A logdrop-1786 -j TEE --gateway 10.0.0.2 --A logdrop-1786 -j DROP --A logdrop-1787 -j TEE --gateway 10.0.0.1 --A logdrop-1787 -j TEE --gateway 10.0.0.2 --A logdrop-1787 -j DROP --A logdrop-1788 -j TEE --gateway 10.0.0.1 --A logdrop-1788 -j TEE --gateway 10.0.0.2 --A logdrop-1788 -j DROP --A logdrop-1789 -j TEE --gateway 10.0.0.1 --A logdrop-1789 -j TEE --gateway 10.0.0.2 --A logdrop-1789 -j DROP -A logdrop-179 -j TEE --gateway 10.0.0.1 -A logdrop-179 -j TEE --gateway 10.0.0.2 -A logdrop-179 -j DROP --A logdrop-1790 -j TEE --gateway 10.0.0.1 --A logdrop-1790 -j TEE --gateway 10.0.0.2 --A logdrop-1790 -j DROP --A logdrop-1791 -j TEE --gateway 10.0.0.1 --A logdrop-1791 -j TEE --gateway 10.0.0.2 --A logdrop-1791 -j DROP --A logdrop-1792 -j TEE --gateway 10.0.0.1 --A logdrop-1792 -j TEE --gateway 10.0.0.2 --A logdrop-1792 -j DROP --A logdrop-1793 -j TEE --gateway 10.0.0.1 --A logdrop-1793 -j TEE --gateway 10.0.0.2 --A logdrop-1793 -j DROP --A logdrop-1794 -j TEE --gateway 10.0.0.1 --A logdrop-1794 -j TEE --gateway 10.0.0.2 --A logdrop-1794 -j DROP --A logdrop-1795 -j TEE --gateway 10.0.0.1 --A logdrop-1795 -j TEE --gateway 10.0.0.2 --A logdrop-1795 -j DROP --A logdrop-1796 -j TEE --gateway 10.0.0.1 --A logdrop-1796 -j TEE --gateway 10.0.0.2 --A logdrop-1796 -j DROP --A logdrop-1797 -j TEE --gateway 10.0.0.1 --A logdrop-1797 -j TEE --gateway 10.0.0.2 --A logdrop-1797 -j DROP --A logdrop-1798 -j TEE --gateway 10.0.0.1 --A logdrop-1798 -j TEE --gateway 10.0.0.2 --A logdrop-1798 -j DROP --A logdrop-1799 -j TEE --gateway 10.0.0.1 --A logdrop-1799 -j TEE --gateway 10.0.0.2 --A logdrop-1799 -j DROP -A logdrop-18 -m limit --limit 1/second -j LOG -A logdrop-18 -j DROP -A logdrop-180 -j TEE --gateway 10.0.0.1 -A logdrop-180 -j TEE --gateway 10.0.0.2 -A logdrop-180 -j DROP --A logdrop-1800 -j TEE --gateway 10.0.0.1 --A logdrop-1800 -j TEE --gateway 10.0.0.2 --A logdrop-1800 -j DROP --A logdrop-1801 -j TEE --gateway 10.0.0.1 --A logdrop-1801 -j TEE --gateway 10.0.0.2 --A logdrop-1801 -j DROP --A logdrop-1802 -j TEE --gateway 10.0.0.1 --A logdrop-1802 -j TEE --gateway 10.0.0.2 --A logdrop-1802 -j DROP --A logdrop-1803 -j TEE --gateway 10.0.0.1 --A logdrop-1803 -j TEE --gateway 10.0.0.2 --A logdrop-1803 -j DROP --A logdrop-1804 -j TEE --gateway 10.0.0.1 --A logdrop-1804 -j TEE --gateway 10.0.0.2 --A logdrop-1804 -j DROP --A logdrop-1805 -j TEE --gateway 10.0.0.1 --A logdrop-1805 -j TEE --gateway 10.0.0.2 --A logdrop-1805 -j DROP --A logdrop-1806 -j TEE --gateway 10.0.0.1 --A logdrop-1806 -j TEE --gateway 10.0.0.2 --A logdrop-1806 -j DROP --A logdrop-1807 -j TEE --gateway 10.0.0.1 --A logdrop-1807 -j TEE --gateway 10.0.0.2 --A logdrop-1807 -j DROP --A logdrop-1808 -j TEE --gateway 10.0.0.1 --A logdrop-1808 -j TEE --gateway 10.0.0.2 --A logdrop-1808 -j DROP --A logdrop-1809 -j TEE --gateway 10.0.0.1 --A logdrop-1809 -j TEE --gateway 10.0.0.2 --A logdrop-1809 -j DROP -A logdrop-181 -j TEE --gateway 10.0.0.1 -A logdrop-181 -j TEE --gateway 10.0.0.2 -A logdrop-181 -j DROP --A logdrop-1810 -j TEE --gateway 10.0.0.1 --A logdrop-1810 -j TEE --gateway 10.0.0.2 --A logdrop-1810 -j DROP --A logdrop-1811 -j TEE --gateway 10.0.0.1 --A logdrop-1811 -j TEE --gateway 10.0.0.2 --A logdrop-1811 -j DROP --A logdrop-1812 -j TEE --gateway 10.0.0.1 --A logdrop-1812 -j TEE --gateway 10.0.0.2 --A logdrop-1812 -j DROP --A logdrop-1813 -j TEE --gateway 10.0.0.1 --A logdrop-1813 -j TEE --gateway 10.0.0.2 --A logdrop-1813 -j DROP --A logdrop-1814 -j TEE --gateway 10.0.0.1 --A logdrop-1814 -j TEE --gateway 10.0.0.2 --A logdrop-1814 -j DROP --A logdrop-1815 -j TEE --gateway 10.0.0.1 --A logdrop-1815 -j TEE --gateway 10.0.0.2 --A logdrop-1815 -j DROP --A logdrop-1816 -j TEE --gateway 10.0.0.1 --A logdrop-1816 -j TEE --gateway 10.0.0.2 --A logdrop-1816 -j DROP --A logdrop-1817 -j TEE --gateway 10.0.0.1 --A logdrop-1817 -j TEE --gateway 10.0.0.2 --A logdrop-1817 -j DROP --A logdrop-1818 -j TEE --gateway 10.0.0.1 --A logdrop-1818 -j TEE --gateway 10.0.0.2 --A logdrop-1818 -j DROP --A logdrop-1819 -j TEE --gateway 10.0.0.1 --A logdrop-1819 -j TEE --gateway 10.0.0.2 --A logdrop-1819 -j DROP -A logdrop-182 -j TEE --gateway 10.0.0.1 -A logdrop-182 -j TEE --gateway 10.0.0.2 -A logdrop-182 -j DROP --A logdrop-1820 -j TEE --gateway 10.0.0.1 --A logdrop-1820 -j TEE --gateway 10.0.0.2 --A logdrop-1820 -j DROP --A logdrop-1821 -j TEE --gateway 10.0.0.1 --A logdrop-1821 -j TEE --gateway 10.0.0.2 --A logdrop-1821 -j DROP --A logdrop-1822 -j TEE --gateway 10.0.0.1 --A logdrop-1822 -j TEE --gateway 10.0.0.2 --A logdrop-1822 -j DROP --A logdrop-1823 -j TEE --gateway 10.0.0.1 --A logdrop-1823 -j TEE --gateway 10.0.0.2 --A logdrop-1823 -j DROP --A logdrop-1824 -j TEE --gateway 10.0.0.1 --A logdrop-1824 -j TEE --gateway 10.0.0.2 --A logdrop-1824 -j DROP --A logdrop-1825 -j TEE --gateway 10.0.0.1 --A logdrop-1825 -j TEE --gateway 10.0.0.2 --A logdrop-1825 -j DROP --A logdrop-1826 -j TEE --gateway 10.0.0.1 --A logdrop-1826 -j TEE --gateway 10.0.0.2 --A logdrop-1826 -j DROP --A logdrop-1827 -j TEE --gateway 10.0.0.1 --A logdrop-1827 -j TEE --gateway 10.0.0.2 --A logdrop-1827 -j DROP --A logdrop-1828 -j TEE --gateway 10.0.0.1 --A logdrop-1828 -j TEE --gateway 10.0.0.2 --A logdrop-1828 -j DROP --A logdrop-1829 -j TEE --gateway 10.0.0.1 --A logdrop-1829 -j TEE --gateway 10.0.0.2 --A logdrop-1829 -j DROP -A logdrop-183 -j TEE --gateway 10.0.0.1 -A logdrop-183 -j TEE --gateway 10.0.0.2 -A logdrop-183 -j DROP --A logdrop-1830 -j TEE --gateway 10.0.0.1 --A logdrop-1830 -j TEE --gateway 10.0.0.2 --A logdrop-1830 -j DROP --A logdrop-1831 -j TEE --gateway 10.0.0.1 --A logdrop-1831 -j TEE --gateway 10.0.0.2 --A logdrop-1831 -j DROP --A logdrop-1832 -j TEE --gateway 10.0.0.1 --A logdrop-1832 -j TEE --gateway 10.0.0.2 --A logdrop-1832 -j DROP --A logdrop-1833 -j TEE --gateway 10.0.0.1 --A logdrop-1833 -j TEE --gateway 10.0.0.2 --A logdrop-1833 -j DROP --A logdrop-1834 -j TEE --gateway 10.0.0.1 --A logdrop-1834 -j TEE --gateway 10.0.0.2 --A logdrop-1834 -j DROP --A logdrop-1835 -j TEE --gateway 10.0.0.1 --A logdrop-1835 -j TEE --gateway 10.0.0.2 --A logdrop-1835 -j DROP --A logdrop-1836 -j TEE --gateway 10.0.0.1 --A logdrop-1836 -j TEE --gateway 10.0.0.2 --A logdrop-1836 -j DROP --A logdrop-1837 -j TEE --gateway 10.0.0.1 --A logdrop-1837 -j TEE --gateway 10.0.0.2 --A logdrop-1837 -j DROP --A logdrop-1838 -j TEE --gateway 10.0.0.1 --A logdrop-1838 -j TEE --gateway 10.0.0.2 --A logdrop-1838 -j DROP --A logdrop-1839 -j TEE --gateway 10.0.0.1 --A logdrop-1839 -j TEE --gateway 10.0.0.2 --A logdrop-1839 -j DROP -A logdrop-184 -j TEE --gateway 10.0.0.1 -A logdrop-184 -j TEE --gateway 10.0.0.2 -A logdrop-184 -j DROP --A logdrop-1840 -m limit --limit 12/minute -j ULOG --A logdrop-1840 -j DROP --A logdrop-1841 -m limit --limit 12/minute -j ULOG --A logdrop-1841 -j DROP --A logdrop-1842 -m limit --limit 12/minute -j ULOG --A logdrop-1842 -j DROP --A logdrop-1843 -m limit --limit 12/minute -j ULOG --A logdrop-1843 -j DROP --A logdrop-1844 -m limit --limit 12/minute -j ULOG --A logdrop-1844 -j DROP --A logdrop-1845 -m limit --limit 12/minute -j ULOG --A logdrop-1845 -j DROP --A logdrop-1846 -m limit --limit 12/minute -j ULOG --A logdrop-1846 -j DROP --A logdrop-1847 -m limit --limit 12/minute -j ULOG --A logdrop-1847 -j DROP --A logdrop-1848 -m limit --limit 12/minute -j ULOG --A logdrop-1848 -j DROP --A logdrop-1849 -m limit --limit 12/minute -j ULOG --A logdrop-1849 -j DROP -A logdrop-185 -j TEE --gateway 10.0.0.1 -A logdrop-185 -j TEE --gateway 10.0.0.2 -A logdrop-185 -j DROP --A logdrop-1850 -m limit --limit 12/minute -j ULOG --A logdrop-1850 -j DROP --A logdrop-1851 -m limit --limit 12/minute -j ULOG --A logdrop-1851 -j DROP --A logdrop-1852 -m limit --limit 12/minute -j ULOG --A logdrop-1852 -j DROP --A logdrop-1853 -m limit --limit 12/minute -j ULOG --A logdrop-1853 -j DROP --A logdrop-1854 -m limit --limit 12/minute -j ULOG --A logdrop-1854 -j DROP --A logdrop-1855 -m limit --limit 12/minute -j ULOG --A logdrop-1855 -j DROP --A logdrop-1856 -m limit --limit 12/minute -j ULOG --A logdrop-1856 -j DROP --A logdrop-1857 -m limit --limit 12/minute -j ULOG --A logdrop-1857 -j DROP --A logdrop-1858 -m limit --limit 12/minute -j ULOG --A logdrop-1858 -j DROP --A logdrop-1859 -m limit --limit 12/minute -j ULOG --A logdrop-1859 -j DROP -A logdrop-186 -j TEE --gateway 10.0.0.1 -A logdrop-186 -j TEE --gateway 10.0.0.2 -A logdrop-186 -j DROP --A logdrop-1860 -m limit --limit 12/minute -j ULOG --A logdrop-1860 -j DROP --A logdrop-1861 -m limit --limit 12/minute -j ULOG --A logdrop-1861 -j DROP --A logdrop-1862 -m limit --limit 12/minute -j ULOG --A logdrop-1862 -j DROP --A logdrop-1863 -m limit --limit 12/minute -j ULOG --A logdrop-1863 -j DROP --A logdrop-1864 -m limit --limit 12/minute -j ULOG --A logdrop-1864 -j DROP --A logdrop-1865 -m limit --limit 12/minute -j ULOG --A logdrop-1865 -j DROP --A logdrop-1866 -m limit --limit 12/minute -j ULOG --A logdrop-1866 -j DROP --A logdrop-1867 -m limit --limit 12/minute -j ULOG --A logdrop-1867 -j DROP --A logdrop-1868 -m limit --limit 12/minute -j ULOG --A logdrop-1868 -j DROP --A logdrop-1869 -m limit --limit 12/minute -j ULOG --A logdrop-1869 -j DROP -A logdrop-187 -j TEE --gateway 10.0.0.1 -A logdrop-187 -j TEE --gateway 10.0.0.2 -A logdrop-187 -j DROP --A logdrop-1870 -m limit --limit 12/minute -j ULOG --A logdrop-1870 -j DROP --A logdrop-1871 -m limit --limit 12/minute -j ULOG --A logdrop-1871 -j DROP --A logdrop-1872 -m limit --limit 12/minute -j ULOG --A logdrop-1872 -j DROP --A logdrop-1873 -m limit --limit 12/minute -j ULOG --A logdrop-1873 -j DROP --A logdrop-1874 -m limit --limit 12/minute -j ULOG --A logdrop-1874 -j DROP --A logdrop-1875 -m limit --limit 12/minute -j ULOG --A logdrop-1875 -j DROP --A logdrop-1876 -m limit --limit 12/minute -j ULOG --A logdrop-1876 -j DROP --A logdrop-1877 -m limit --limit 12/minute -j ULOG --A logdrop-1877 -j DROP --A logdrop-1878 -m limit --limit 12/minute -j ULOG --A logdrop-1878 -j DROP --A logdrop-1879 -m limit --limit 12/minute -j ULOG --A logdrop-1879 -j DROP -A logdrop-188 -j TEE --gateway 10.0.0.1 -A logdrop-188 -j TEE --gateway 10.0.0.2 -A logdrop-188 -j DROP --A logdrop-1880 -m limit --limit 12/minute -j ULOG --A logdrop-1880 -j DROP --A logdrop-1881 -m limit --limit 12/minute -j ULOG --A logdrop-1881 -j DROP --A logdrop-1882 -m limit --limit 12/minute -j ULOG --A logdrop-1882 -j DROP --A logdrop-1883 -m limit --limit 12/minute -j ULOG --A logdrop-1883 -j DROP --A logdrop-1884 -m limit --limit 12/minute -j ULOG --A logdrop-1884 -j DROP --A logdrop-1885 -m limit --limit 12/minute -j ULOG --A logdrop-1885 -j DROP --A logdrop-1886 -m limit --limit 12/minute -j ULOG --A logdrop-1886 -j DROP --A logdrop-1887 -m limit --limit 12/minute -j ULOG --A logdrop-1887 -j DROP --A logdrop-1888 -m limit --limit 12/minute -j ULOG --A logdrop-1888 -j DROP --A logdrop-1889 -m limit --limit 12/minute -j ULOG --A logdrop-1889 -j DROP -A logdrop-189 -j TEE --gateway 10.0.0.1 -A logdrop-189 -j TEE --gateway 10.0.0.2 -A logdrop-189 -j DROP --A logdrop-1890 -m limit --limit 12/minute -j ULOG --A logdrop-1890 -j DROP --A logdrop-1891 -m limit --limit 12/minute -j ULOG --A logdrop-1891 -j DROP --A logdrop-1892 -m limit --limit 12/minute -j ULOG --A logdrop-1892 -j DROP --A logdrop-1893 -m limit --limit 12/minute -j ULOG --A logdrop-1893 -j DROP --A logdrop-1894 -m limit --limit 12/minute -j ULOG --A logdrop-1894 -j DROP --A logdrop-1895 -m limit --limit 12/minute -j ULOG --A logdrop-1895 -j DROP --A logdrop-1896 -m limit --limit 12/minute -j ULOG --A logdrop-1896 -j DROP --A logdrop-1897 -m limit --limit 12/minute -j ULOG --A logdrop-1897 -j DROP --A logdrop-1898 -m limit --limit 12/minute -j ULOG --A logdrop-1898 -j DROP --A logdrop-1899 -m limit --limit 12/minute -j ULOG --A logdrop-1899 -j DROP -A logdrop-19 -m limit --limit 1/second -j LOG -A logdrop-19 -j DROP -A logdrop-190 -m limit --limit 12/minute -j ULOG -A logdrop-190 -j DROP --A logdrop-1900 -m limit --limit 12/minute -j ULOG --A logdrop-1900 -j DROP --A logdrop-1901 -m limit --limit 12/minute -j ULOG --A logdrop-1901 -j DROP --A logdrop-1902 -m limit --limit 12/minute -j ULOG --A logdrop-1902 -j DROP --A logdrop-1903 -m limit --limit 12/minute -j ULOG --A logdrop-1903 -j DROP --A logdrop-1904 -m limit --limit 12/minute -j ULOG --A logdrop-1904 -j DROP --A logdrop-1905 -m limit --limit 12/minute -j ULOG --A logdrop-1905 -j DROP --A logdrop-1906 -m limit --limit 12/minute -j ULOG --A logdrop-1906 -j DROP --A logdrop-1907 -m limit --limit 12/minute -j ULOG --A logdrop-1907 -j DROP --A logdrop-1908 -m limit --limit 12/minute -j ULOG --A logdrop-1908 -j DROP --A logdrop-1909 -m limit --limit 12/minute -j ULOG --A logdrop-1909 -j DROP -A logdrop-191 -m limit --limit 12/minute -j ULOG -A logdrop-191 -j DROP --A logdrop-1910 -m limit --limit 12/minute -j ULOG --A logdrop-1910 -j DROP --A logdrop-1911 -m limit --limit 12/minute -j ULOG --A logdrop-1911 -j DROP --A logdrop-1912 -m limit --limit 12/minute -j ULOG --A logdrop-1912 -j DROP --A logdrop-1913 -m limit --limit 12/minute -j ULOG --A logdrop-1913 -j DROP --A logdrop-1914 -m limit --limit 12/minute -j ULOG --A logdrop-1914 -j DROP --A logdrop-1915 -m limit --limit 12/minute -j ULOG --A logdrop-1915 -j DROP --A logdrop-1916 -m limit --limit 12/minute -j ULOG --A logdrop-1916 -j DROP --A logdrop-1917 -m limit --limit 12/minute -j ULOG --A logdrop-1917 -j DROP --A logdrop-1918 -m limit --limit 12/minute -j ULOG --A logdrop-1918 -j DROP --A logdrop-1919 -m limit --limit 12/minute -j ULOG --A logdrop-1919 -j DROP -A logdrop-192 -m limit --limit 12/minute -j ULOG -A logdrop-192 -j DROP --A logdrop-1920 -m limit --limit 12/minute -j ULOG --A logdrop-1920 -j DROP --A logdrop-1921 -m limit --limit 12/minute -j ULOG --A logdrop-1921 -j DROP --A logdrop-1922 -m limit --limit 12/minute -j ULOG --A logdrop-1922 -j DROP --A logdrop-1923 -m limit --limit 12/minute -j ULOG --A logdrop-1923 -j DROP --A logdrop-1924 -m limit --limit 12/minute -j ULOG --A logdrop-1924 -j DROP --A logdrop-1925 -m limit --limit 12/minute -j ULOG --A logdrop-1925 -j DROP --A logdrop-1926 -m limit --limit 12/minute -j ULOG --A logdrop-1926 -j DROP --A logdrop-1927 -m limit --limit 12/minute -j ULOG --A logdrop-1927 -j DROP --A logdrop-1928 -m limit --limit 12/minute -j ULOG --A logdrop-1928 -j DROP --A logdrop-1929 -m limit --limit 12/minute -j ULOG --A logdrop-1929 -j DROP -A logdrop-193 -m limit --limit 12/minute -j ULOG -A logdrop-193 -j DROP --A logdrop-1930 -m limit --limit 1/second -j LOG --A logdrop-1930 -j DROP --A logdrop-1931 -m limit --limit 1/second -j LOG --A logdrop-1931 -j DROP --A logdrop-1932 -m limit --limit 1/second -j LOG --A logdrop-1932 -j DROP --A logdrop-1933 -m limit --limit 1/second -j LOG --A logdrop-1933 -j DROP --A logdrop-1934 -m limit --limit 1/second -j LOG --A logdrop-1934 -j DROP --A logdrop-1935 -m limit --limit 1/second -j LOG --A logdrop-1935 -j DROP --A logdrop-1936 -m limit --limit 1/second -j LOG --A logdrop-1936 -j DROP --A logdrop-1937 -m limit --limit 1/second -j LOG --A logdrop-1937 -j DROP --A logdrop-1938 -m limit --limit 1/second -j LOG --A logdrop-1938 -j DROP --A logdrop-1939 -m limit --limit 1/second -j LOG --A logdrop-1939 -j DROP -A logdrop-194 -m limit --limit 12/minute -j ULOG -A logdrop-194 -j DROP --A logdrop-1940 -m limit --limit 1/second -j LOG --A logdrop-1940 -j DROP --A logdrop-1941 -m limit --limit 1/second -j LOG --A logdrop-1941 -j DROP --A logdrop-1942 -m limit --limit 1/second -j LOG --A logdrop-1942 -j DROP --A logdrop-1943 -m limit --limit 1/second -j LOG --A logdrop-1943 -j DROP --A logdrop-1944 -m limit --limit 1/second -j LOG --A logdrop-1944 -j DROP --A logdrop-1945 -m limit --limit 1/second -j LOG --A logdrop-1945 -j DROP --A logdrop-1946 -m limit --limit 1/second -j LOG --A logdrop-1946 -j DROP --A logdrop-1947 -m limit --limit 1/second -j LOG --A logdrop-1947 -j DROP --A logdrop-1948 -m limit --limit 1/second -j LOG --A logdrop-1948 -j DROP --A logdrop-1949 -m limit --limit 1/second -j LOG --A logdrop-1949 -j DROP -A logdrop-195 -m limit --limit 12/minute -j ULOG -A logdrop-195 -j DROP --A logdrop-1950 -m limit --limit 1/second -j LOG --A logdrop-1950 -j DROP --A logdrop-1951 -m limit --limit 1/second -j LOG --A logdrop-1951 -j DROP --A logdrop-1952 -m limit --limit 1/second -j LOG --A logdrop-1952 -j DROP --A logdrop-1953 -m limit --limit 1/second -j LOG --A logdrop-1953 -j DROP --A logdrop-1954 -m limit --limit 1/second -j LOG --A logdrop-1954 -j DROP --A logdrop-1955 -m limit --limit 1/second -j LOG --A logdrop-1955 -j DROP --A logdrop-1956 -m limit --limit 1/second -j LOG --A logdrop-1956 -j DROP --A logdrop-1957 -m limit --limit 1/second -j LOG --A logdrop-1957 -j DROP --A logdrop-1958 -m limit --limit 1/second -j LOG --A logdrop-1958 -j DROP --A logdrop-1959 -m limit --limit 1/second -j LOG --A logdrop-1959 -j DROP -A logdrop-196 -m limit --limit 12/minute -j ULOG -A logdrop-196 -j DROP --A logdrop-1960 -m limit --limit 1/second -j LOG --A logdrop-1960 -j DROP --A logdrop-1961 -m limit --limit 1/second -j LOG --A logdrop-1961 -j DROP --A logdrop-1962 -m limit --limit 1/second -j LOG --A logdrop-1962 -j DROP --A logdrop-1963 -m limit --limit 1/second -j LOG --A logdrop-1963 -j DROP --A logdrop-1964 -m limit --limit 1/second -j LOG --A logdrop-1964 -j DROP --A logdrop-1965 -m limit --limit 1/second -j LOG --A logdrop-1965 -j DROP --A logdrop-1966 -m limit --limit 1/second -j LOG --A logdrop-1966 -j DROP --A logdrop-1967 -m limit --limit 1/second -j LOG --A logdrop-1967 -j DROP --A logdrop-1968 -m limit --limit 1/second -j LOG --A logdrop-1968 -j DROP --A logdrop-1969 -m limit --limit 1/second -j LOG --A logdrop-1969 -j DROP -A logdrop-197 -m limit --limit 12/minute -j ULOG -A logdrop-197 -j DROP --A logdrop-1970 -m limit --limit 1/second -j LOG --A logdrop-1970 -j DROP --A logdrop-1971 -m limit --limit 1/second -j LOG --A logdrop-1971 -j DROP --A logdrop-1972 -m limit --limit 1/second -j LOG --A logdrop-1972 -j DROP --A logdrop-1973 -m limit --limit 1/second -j LOG --A logdrop-1973 -j DROP --A logdrop-1974 -m limit --limit 1/second -j LOG --A logdrop-1974 -j DROP --A logdrop-1975 -m limit --limit 1/second -j LOG --A logdrop-1975 -j DROP --A logdrop-1976 -m limit --limit 1/second -j LOG --A logdrop-1976 -j DROP --A logdrop-1977 -m limit --limit 1/second -j LOG --A logdrop-1977 -j DROP --A logdrop-1978 -m limit --limit 1/second -j LOG --A logdrop-1978 -j DROP --A logdrop-1979 -m limit --limit 1/second -j LOG --A logdrop-1979 -j DROP -A logdrop-198 -m limit --limit 12/minute -j ULOG -A logdrop-198 -j DROP --A logdrop-1980 -m limit --limit 1/second -j LOG --A logdrop-1980 -j DROP --A logdrop-1981 -m limit --limit 1/second -j LOG --A logdrop-1981 -j DROP --A logdrop-1982 -m limit --limit 1/second -j LOG --A logdrop-1982 -j DROP --A logdrop-1983 -m limit --limit 1/second -j LOG --A logdrop-1983 -j DROP --A logdrop-1984 -m limit --limit 1/second -j LOG --A logdrop-1984 -j DROP --A logdrop-1985 -m limit --limit 1/second -j LOG --A logdrop-1985 -j DROP --A logdrop-1986 -m limit --limit 1/second -j LOG --A logdrop-1986 -j DROP --A logdrop-1987 -m limit --limit 1/second -j LOG --A logdrop-1987 -j DROP --A logdrop-1988 -m limit --limit 1/second -j LOG --A logdrop-1988 -j DROP --A logdrop-1989 -m limit --limit 1/second -j LOG --A logdrop-1989 -j DROP -A logdrop-199 -m limit --limit 12/minute -j ULOG -A logdrop-199 -j DROP --A logdrop-1990 -m limit --limit 1/second -j LOG --A logdrop-1990 -j DROP --A logdrop-1991 -m limit --limit 1/second -j LOG --A logdrop-1991 -j DROP --A logdrop-1992 -m limit --limit 1/second -j LOG --A logdrop-1992 -j DROP --A logdrop-1993 -m limit --limit 1/second -j LOG --A logdrop-1993 -j DROP --A logdrop-1994 -m limit --limit 1/second -j LOG --A logdrop-1994 -j DROP --A logdrop-1995 -m limit --limit 1/second -j LOG --A logdrop-1995 -j DROP --A logdrop-1996 -m limit --limit 1/second -j LOG --A logdrop-1996 -j DROP --A logdrop-1997 -m limit --limit 1/second -j LOG --A logdrop-1997 -j DROP --A logdrop-1998 -m limit --limit 1/second -j LOG --A logdrop-1998 -j DROP --A logdrop-1999 -m limit --limit 1/second -j LOG --A logdrop-1999 -j DROP -A logdrop-2 -m limit --limit 1/second -j LOG -A logdrop-2 -j DROP -A logdrop-20 -m limit --limit 1/second -j LOG -A logdrop-20 -j DROP -A logdrop-200 -m limit --limit 12/minute -j ULOG -A logdrop-200 -j DROP --A logdrop-2000 -m limit --limit 1/second -j LOG --A logdrop-2000 -j DROP --A logdrop-2001 -m limit --limit 1/second -j LOG --A logdrop-2001 -j DROP --A logdrop-2002 -m limit --limit 1/second -j LOG --A logdrop-2002 -j DROP --A logdrop-2003 -m limit --limit 1/second -j LOG --A logdrop-2003 -j DROP --A logdrop-2004 -m limit --limit 1/second -j LOG --A logdrop-2004 -j DROP --A logdrop-2005 -m limit --limit 1/second -j LOG --A logdrop-2005 -j DROP --A logdrop-2006 -m limit --limit 1/second -j LOG --A logdrop-2006 -j DROP --A logdrop-2007 -m limit --limit 1/second -j LOG --A logdrop-2007 -j DROP --A logdrop-2008 -m limit --limit 1/second -j LOG --A logdrop-2008 -j DROP --A logdrop-2009 -m limit --limit 1/second -j LOG --A logdrop-2009 -j DROP -A logdrop-201 -m limit --limit 12/minute -j ULOG -A logdrop-201 -j DROP --A logdrop-2010 -m limit --limit 1/second -j LOG --A logdrop-2010 -j DROP --A logdrop-2011 -m limit --limit 1/second -j LOG --A logdrop-2011 -j DROP --A logdrop-2012 -m limit --limit 1/second -j LOG --A logdrop-2012 -j DROP --A logdrop-2013 -m limit --limit 1/second -j LOG --A logdrop-2013 -j DROP --A logdrop-2014 -m limit --limit 1/second -j LOG --A logdrop-2014 -j DROP --A logdrop-2015 -m limit --limit 1/second -j LOG --A logdrop-2015 -j DROP --A logdrop-2016 -m limit --limit 1/second -j LOG --A logdrop-2016 -j DROP --A logdrop-2017 -m limit --limit 1/second -j LOG --A logdrop-2017 -j DROP --A logdrop-2018 -m limit --limit 1/second -j LOG --A logdrop-2018 -j DROP --A logdrop-2019 -m limit --limit 1/second -j LOG --A logdrop-2019 -j DROP -A logdrop-202 -m limit --limit 12/minute -j ULOG -A logdrop-202 -j DROP --A logdrop-2020 -j TEE --gateway 10.0.0.1 --A logdrop-2020 -j TEE --gateway 10.0.0.2 --A logdrop-2020 -j DROP --A logdrop-2021 -j TEE --gateway 10.0.0.1 --A logdrop-2021 -j TEE --gateway 10.0.0.2 --A logdrop-2021 -j DROP --A logdrop-2022 -j TEE --gateway 10.0.0.1 --A logdrop-2022 -j TEE --gateway 10.0.0.2 --A logdrop-2022 -j DROP --A logdrop-2023 -j TEE --gateway 10.0.0.1 --A logdrop-2023 -j TEE --gateway 10.0.0.2 --A logdrop-2023 -j DROP --A logdrop-2024 -j TEE --gateway 10.0.0.1 --A logdrop-2024 -j TEE --gateway 10.0.0.2 --A logdrop-2024 -j DROP --A logdrop-2025 -j TEE --gateway 10.0.0.1 --A logdrop-2025 -j TEE --gateway 10.0.0.2 --A logdrop-2025 -j DROP --A logdrop-2026 -j TEE --gateway 10.0.0.1 --A logdrop-2026 -j TEE --gateway 10.0.0.2 --A logdrop-2026 -j DROP --A logdrop-2027 -j TEE --gateway 10.0.0.1 --A logdrop-2027 -j TEE --gateway 10.0.0.2 --A logdrop-2027 -j DROP --A logdrop-2028 -j TEE --gateway 10.0.0.1 --A logdrop-2028 -j TEE --gateway 10.0.0.2 --A logdrop-2028 -j DROP --A logdrop-2029 -j TEE --gateway 10.0.0.1 --A logdrop-2029 -j TEE --gateway 10.0.0.2 --A logdrop-2029 -j DROP -A logdrop-203 -m limit --limit 12/minute -j ULOG -A logdrop-203 -j DROP --A logdrop-2030 -j TEE --gateway 10.0.0.1 --A logdrop-2030 -j TEE --gateway 10.0.0.2 --A logdrop-2030 -j DROP --A logdrop-2031 -j TEE --gateway 10.0.0.1 --A logdrop-2031 -j TEE --gateway 10.0.0.2 --A logdrop-2031 -j DROP --A logdrop-2032 -j TEE --gateway 10.0.0.1 --A logdrop-2032 -j TEE --gateway 10.0.0.2 --A logdrop-2032 -j DROP --A logdrop-2033 -j TEE --gateway 10.0.0.1 --A logdrop-2033 -j TEE --gateway 10.0.0.2 --A logdrop-2033 -j DROP --A logdrop-2034 -j TEE --gateway 10.0.0.1 --A logdrop-2034 -j TEE --gateway 10.0.0.2 --A logdrop-2034 -j DROP --A logdrop-2035 -j TEE --gateway 10.0.0.1 --A logdrop-2035 -j TEE --gateway 10.0.0.2 --A logdrop-2035 -j DROP --A logdrop-2036 -j TEE --gateway 10.0.0.1 --A logdrop-2036 -j TEE --gateway 10.0.0.2 --A logdrop-2036 -j DROP --A logdrop-2037 -j TEE --gateway 10.0.0.1 --A logdrop-2037 -j TEE --gateway 10.0.0.2 --A logdrop-2037 -j DROP --A logdrop-2038 -j TEE --gateway 10.0.0.1 --A logdrop-2038 -j TEE --gateway 10.0.0.2 --A logdrop-2038 -j DROP --A logdrop-2039 -j TEE --gateway 10.0.0.1 --A logdrop-2039 -j TEE --gateway 10.0.0.2 --A logdrop-2039 -j DROP -A logdrop-204 -m limit --limit 12/minute -j ULOG -A logdrop-204 -j DROP --A logdrop-2040 -j TEE --gateway 10.0.0.1 --A logdrop-2040 -j TEE --gateway 10.0.0.2 --A logdrop-2040 -j DROP --A logdrop-2041 -j TEE --gateway 10.0.0.1 --A logdrop-2041 -j TEE --gateway 10.0.0.2 --A logdrop-2041 -j DROP --A logdrop-2042 -j TEE --gateway 10.0.0.1 --A logdrop-2042 -j TEE --gateway 10.0.0.2 --A logdrop-2042 -j DROP --A logdrop-2043 -j TEE --gateway 10.0.0.1 --A logdrop-2043 -j TEE --gateway 10.0.0.2 --A logdrop-2043 -j DROP --A logdrop-2044 -j TEE --gateway 10.0.0.1 --A logdrop-2044 -j TEE --gateway 10.0.0.2 --A logdrop-2044 -j DROP --A logdrop-2045 -j TEE --gateway 10.0.0.1 --A logdrop-2045 -j TEE --gateway 10.0.0.2 --A logdrop-2045 -j DROP --A logdrop-2046 -j TEE --gateway 10.0.0.1 --A logdrop-2046 -j TEE --gateway 10.0.0.2 --A logdrop-2046 -j DROP --A logdrop-2047 -j TEE --gateway 10.0.0.1 --A logdrop-2047 -j TEE --gateway 10.0.0.2 --A logdrop-2047 -j DROP --A logdrop-2048 -j TEE --gateway 10.0.0.1 --A logdrop-2048 -j TEE --gateway 10.0.0.2 --A logdrop-2048 -j DROP --A logdrop-2049 -j TEE --gateway 10.0.0.1 --A logdrop-2049 -j TEE --gateway 10.0.0.2 --A logdrop-2049 -j DROP -A logdrop-205 -m limit --limit 12/minute -j ULOG -A logdrop-205 -j DROP --A logdrop-2050 -j TEE --gateway 10.0.0.1 --A logdrop-2050 -j TEE --gateway 10.0.0.2 --A logdrop-2050 -j DROP --A logdrop-2051 -j TEE --gateway 10.0.0.1 --A logdrop-2051 -j TEE --gateway 10.0.0.2 --A logdrop-2051 -j DROP --A logdrop-2052 -j TEE --gateway 10.0.0.1 --A logdrop-2052 -j TEE --gateway 10.0.0.2 --A logdrop-2052 -j DROP --A logdrop-2053 -j TEE --gateway 10.0.0.1 --A logdrop-2053 -j TEE --gateway 10.0.0.2 --A logdrop-2053 -j DROP --A logdrop-2054 -j TEE --gateway 10.0.0.1 --A logdrop-2054 -j TEE --gateway 10.0.0.2 --A logdrop-2054 -j DROP --A logdrop-2055 -j TEE --gateway 10.0.0.1 --A logdrop-2055 -j TEE --gateway 10.0.0.2 --A logdrop-2055 -j DROP --A logdrop-2056 -j TEE --gateway 10.0.0.1 --A logdrop-2056 -j TEE --gateway 10.0.0.2 --A logdrop-2056 -j DROP --A logdrop-2057 -j TEE --gateway 10.0.0.1 --A logdrop-2057 -j TEE --gateway 10.0.0.2 --A logdrop-2057 -j DROP --A logdrop-2058 -j TEE --gateway 10.0.0.1 --A logdrop-2058 -j TEE --gateway 10.0.0.2 --A logdrop-2058 -j DROP --A logdrop-2059 -j TEE --gateway 10.0.0.1 --A logdrop-2059 -j TEE --gateway 10.0.0.2 --A logdrop-2059 -j DROP -A logdrop-206 -m limit --limit 12/minute -j ULOG -A logdrop-206 -j DROP --A logdrop-2060 -j TEE --gateway 10.0.0.1 --A logdrop-2060 -j TEE --gateway 10.0.0.2 --A logdrop-2060 -j DROP --A logdrop-2061 -j TEE --gateway 10.0.0.1 --A logdrop-2061 -j TEE --gateway 10.0.0.2 --A logdrop-2061 -j DROP --A logdrop-2062 -j TEE --gateway 10.0.0.1 --A logdrop-2062 -j TEE --gateway 10.0.0.2 --A logdrop-2062 -j DROP --A logdrop-2063 -j TEE --gateway 10.0.0.1 --A logdrop-2063 -j TEE --gateway 10.0.0.2 --A logdrop-2063 -j DROP --A logdrop-2064 -j TEE --gateway 10.0.0.1 --A logdrop-2064 -j TEE --gateway 10.0.0.2 --A logdrop-2064 -j DROP --A logdrop-2065 -j TEE --gateway 10.0.0.1 --A logdrop-2065 -j TEE --gateway 10.0.0.2 --A logdrop-2065 -j DROP --A logdrop-2066 -j TEE --gateway 10.0.0.1 --A logdrop-2066 -j TEE --gateway 10.0.0.2 --A logdrop-2066 -j DROP --A logdrop-2067 -j TEE --gateway 10.0.0.1 --A logdrop-2067 -j TEE --gateway 10.0.0.2 --A logdrop-2067 -j DROP --A logdrop-2068 -j TEE --gateway 10.0.0.1 --A logdrop-2068 -j TEE --gateway 10.0.0.2 --A logdrop-2068 -j DROP --A logdrop-2069 -j TEE --gateway 10.0.0.1 --A logdrop-2069 -j TEE --gateway 10.0.0.2 --A logdrop-2069 -j DROP -A logdrop-207 -m limit --limit 12/minute -j ULOG -A logdrop-207 -j DROP --A logdrop-2070 -j TEE --gateway 10.0.0.1 --A logdrop-2070 -j TEE --gateway 10.0.0.2 --A logdrop-2070 -j DROP --A logdrop-2071 -j TEE --gateway 10.0.0.1 --A logdrop-2071 -j TEE --gateway 10.0.0.2 --A logdrop-2071 -j DROP --A logdrop-2072 -j TEE --gateway 10.0.0.1 --A logdrop-2072 -j TEE --gateway 10.0.0.2 --A logdrop-2072 -j DROP --A logdrop-2073 -j TEE --gateway 10.0.0.1 --A logdrop-2073 -j TEE --gateway 10.0.0.2 --A logdrop-2073 -j DROP --A logdrop-2074 -j TEE --gateway 10.0.0.1 --A logdrop-2074 -j TEE --gateway 10.0.0.2 --A logdrop-2074 -j DROP --A logdrop-2075 -j TEE --gateway 10.0.0.1 --A logdrop-2075 -j TEE --gateway 10.0.0.2 --A logdrop-2075 -j DROP --A logdrop-2076 -j TEE --gateway 10.0.0.1 --A logdrop-2076 -j TEE --gateway 10.0.0.2 --A logdrop-2076 -j DROP --A logdrop-2077 -j TEE --gateway 10.0.0.1 --A logdrop-2077 -j TEE --gateway 10.0.0.2 --A logdrop-2077 -j DROP --A logdrop-2078 -j TEE --gateway 10.0.0.1 --A logdrop-2078 -j TEE --gateway 10.0.0.2 --A logdrop-2078 -j DROP --A logdrop-2079 -j TEE --gateway 10.0.0.1 --A logdrop-2079 -j TEE --gateway 10.0.0.2 --A logdrop-2079 -j DROP -A logdrop-208 -m limit --limit 12/minute -j ULOG -A logdrop-208 -j DROP --A logdrop-2080 -j TEE --gateway 10.0.0.1 --A logdrop-2080 -j TEE --gateway 10.0.0.2 --A logdrop-2080 -j DROP --A logdrop-2081 -j TEE --gateway 10.0.0.1 --A logdrop-2081 -j TEE --gateway 10.0.0.2 --A logdrop-2081 -j DROP --A logdrop-2082 -j TEE --gateway 10.0.0.1 --A logdrop-2082 -j TEE --gateway 10.0.0.2 --A logdrop-2082 -j DROP --A logdrop-2083 -j TEE --gateway 10.0.0.1 --A logdrop-2083 -j TEE --gateway 10.0.0.2 --A logdrop-2083 -j DROP --A logdrop-2084 -j TEE --gateway 10.0.0.1 --A logdrop-2084 -j TEE --gateway 10.0.0.2 --A logdrop-2084 -j DROP --A logdrop-2085 -j TEE --gateway 10.0.0.1 --A logdrop-2085 -j TEE --gateway 10.0.0.2 --A logdrop-2085 -j DROP --A logdrop-2086 -j TEE --gateway 10.0.0.1 --A logdrop-2086 -j TEE --gateway 10.0.0.2 --A logdrop-2086 -j DROP --A logdrop-2087 -j TEE --gateway 10.0.0.1 --A logdrop-2087 -j TEE --gateway 10.0.0.2 --A logdrop-2087 -j DROP --A logdrop-2088 -j TEE --gateway 10.0.0.1 --A logdrop-2088 -j TEE --gateway 10.0.0.2 --A logdrop-2088 -j DROP --A logdrop-2089 -j TEE --gateway 10.0.0.1 --A logdrop-2089 -j TEE --gateway 10.0.0.2 --A logdrop-2089 -j DROP -A logdrop-209 -m limit --limit 12/minute -j ULOG -A logdrop-209 -j DROP --A logdrop-2090 -j TEE --gateway 10.0.0.1 --A logdrop-2090 -j TEE --gateway 10.0.0.2 --A logdrop-2090 -j DROP --A logdrop-2091 -j TEE --gateway 10.0.0.1 --A logdrop-2091 -j TEE --gateway 10.0.0.2 --A logdrop-2091 -j DROP --A logdrop-2092 -j TEE --gateway 10.0.0.1 --A logdrop-2092 -j TEE --gateway 10.0.0.2 --A logdrop-2092 -j DROP --A logdrop-2093 -j TEE --gateway 10.0.0.1 --A logdrop-2093 -j TEE --gateway 10.0.0.2 --A logdrop-2093 -j DROP --A logdrop-2094 -j TEE --gateway 10.0.0.1 --A logdrop-2094 -j TEE --gateway 10.0.0.2 --A logdrop-2094 -j DROP --A logdrop-2095 -j TEE --gateway 10.0.0.1 --A logdrop-2095 -j TEE --gateway 10.0.0.2 --A logdrop-2095 -j DROP --A logdrop-2096 -j TEE --gateway 10.0.0.1 --A logdrop-2096 -j TEE --gateway 10.0.0.2 --A logdrop-2096 -j DROP --A logdrop-2097 -j TEE --gateway 10.0.0.1 --A logdrop-2097 -j TEE --gateway 10.0.0.2 --A logdrop-2097 -j DROP --A logdrop-2098 -j TEE --gateway 10.0.0.1 --A logdrop-2098 -j TEE --gateway 10.0.0.2 --A logdrop-2098 -j DROP --A logdrop-2099 -j TEE --gateway 10.0.0.1 --A logdrop-2099 -j TEE --gateway 10.0.0.2 --A logdrop-2099 -j DROP -A logdrop-21 -m limit --limit 1/second -j LOG -A logdrop-21 -j DROP -A logdrop-210 -m limit --limit 12/minute -j ULOG -A logdrop-210 -j DROP --A logdrop-2100 -j TEE --gateway 10.0.0.1 --A logdrop-2100 -j TEE --gateway 10.0.0.2 --A logdrop-2100 -j DROP --A logdrop-2101 -j TEE --gateway 10.0.0.1 --A logdrop-2101 -j TEE --gateway 10.0.0.2 --A logdrop-2101 -j DROP --A logdrop-2102 -j TEE --gateway 10.0.0.1 --A logdrop-2102 -j TEE --gateway 10.0.0.2 --A logdrop-2102 -j DROP --A logdrop-2103 -j TEE --gateway 10.0.0.1 --A logdrop-2103 -j TEE --gateway 10.0.0.2 --A logdrop-2103 -j DROP --A logdrop-2104 -j TEE --gateway 10.0.0.1 --A logdrop-2104 -j TEE --gateway 10.0.0.2 --A logdrop-2104 -j DROP --A logdrop-2105 -j TEE --gateway 10.0.0.1 --A logdrop-2105 -j TEE --gateway 10.0.0.2 --A logdrop-2105 -j DROP --A logdrop-2106 -j TEE --gateway 10.0.0.1 --A logdrop-2106 -j TEE --gateway 10.0.0.2 --A logdrop-2106 -j DROP --A logdrop-2107 -j TEE --gateway 10.0.0.1 --A logdrop-2107 -j TEE --gateway 10.0.0.2 --A logdrop-2107 -j DROP --A logdrop-2108 -j TEE --gateway 10.0.0.1 --A logdrop-2108 -j TEE --gateway 10.0.0.2 --A logdrop-2108 -j DROP --A logdrop-2109 -j TEE --gateway 10.0.0.1 --A logdrop-2109 -j TEE --gateway 10.0.0.2 --A logdrop-2109 -j DROP -A logdrop-211 -m limit --limit 12/minute -j ULOG -A logdrop-211 -j DROP --A logdrop-2110 -m limit --limit 12/minute -j ULOG --A logdrop-2110 -j DROP --A logdrop-2111 -m limit --limit 12/minute -j ULOG --A logdrop-2111 -j DROP --A logdrop-2112 -m limit --limit 12/minute -j ULOG --A logdrop-2112 -j DROP --A logdrop-2113 -m limit --limit 12/minute -j ULOG --A logdrop-2113 -j DROP --A logdrop-2114 -m limit --limit 12/minute -j ULOG --A logdrop-2114 -j DROP --A logdrop-2115 -m limit --limit 12/minute -j ULOG --A logdrop-2115 -j DROP --A logdrop-2116 -m limit --limit 12/minute -j ULOG --A logdrop-2116 -j DROP --A logdrop-2117 -m limit --limit 12/minute -j ULOG --A logdrop-2117 -j DROP --A logdrop-2118 -m limit --limit 12/minute -j ULOG --A logdrop-2118 -j DROP --A logdrop-2119 -m limit --limit 12/minute -j ULOG --A logdrop-2119 -j DROP -A logdrop-212 -m limit --limit 12/minute -j ULOG -A logdrop-212 -j DROP --A logdrop-2120 -m limit --limit 12/minute -j ULOG --A logdrop-2120 -j DROP --A logdrop-2121 -m limit --limit 12/minute -j ULOG --A logdrop-2121 -j DROP --A logdrop-2122 -m limit --limit 12/minute -j ULOG --A logdrop-2122 -j DROP --A logdrop-2123 -m limit --limit 12/minute -j ULOG --A logdrop-2123 -j DROP --A logdrop-2124 -m limit --limit 12/minute -j ULOG --A logdrop-2124 -j DROP --A logdrop-2125 -m limit --limit 12/minute -j ULOG --A logdrop-2125 -j DROP --A logdrop-2126 -m limit --limit 12/minute -j ULOG --A logdrop-2126 -j DROP --A logdrop-2127 -m limit --limit 12/minute -j ULOG --A logdrop-2127 -j DROP --A logdrop-2128 -m limit --limit 12/minute -j ULOG --A logdrop-2128 -j DROP --A logdrop-2129 -m limit --limit 12/minute -j ULOG --A logdrop-2129 -j DROP -A logdrop-213 -m limit --limit 12/minute -j ULOG -A logdrop-213 -j DROP --A logdrop-2130 -m limit --limit 12/minute -j ULOG --A logdrop-2130 -j DROP --A logdrop-2131 -m limit --limit 12/minute -j ULOG --A logdrop-2131 -j DROP --A logdrop-2132 -m limit --limit 12/minute -j ULOG --A logdrop-2132 -j DROP --A logdrop-2133 -m limit --limit 12/minute -j ULOG --A logdrop-2133 -j DROP --A logdrop-2134 -m limit --limit 12/minute -j ULOG --A logdrop-2134 -j DROP --A logdrop-2135 -m limit --limit 12/minute -j ULOG --A logdrop-2135 -j DROP --A logdrop-2136 -m limit --limit 12/minute -j ULOG --A logdrop-2136 -j DROP --A logdrop-2137 -m limit --limit 12/minute -j ULOG --A logdrop-2137 -j DROP --A logdrop-2138 -m limit --limit 12/minute -j ULOG --A logdrop-2138 -j DROP --A logdrop-2139 -m limit --limit 12/minute -j ULOG --A logdrop-2139 -j DROP -A logdrop-214 -m limit --limit 12/minute -j ULOG -A logdrop-214 -j DROP --A logdrop-2140 -m limit --limit 12/minute -j ULOG --A logdrop-2140 -j DROP --A logdrop-2141 -m limit --limit 12/minute -j ULOG --A logdrop-2141 -j DROP --A logdrop-2142 -m limit --limit 12/minute -j ULOG --A logdrop-2142 -j DROP --A logdrop-2143 -m limit --limit 12/minute -j ULOG --A logdrop-2143 -j DROP --A logdrop-2144 -m limit --limit 12/minute -j ULOG --A logdrop-2144 -j DROP --A logdrop-2145 -m limit --limit 12/minute -j ULOG --A logdrop-2145 -j DROP --A logdrop-2146 -m limit --limit 12/minute -j ULOG --A logdrop-2146 -j DROP --A logdrop-2147 -m limit --limit 12/minute -j ULOG --A logdrop-2147 -j DROP --A logdrop-2148 -m limit --limit 12/minute -j ULOG --A logdrop-2148 -j DROP --A logdrop-2149 -m limit --limit 12/minute -j ULOG --A logdrop-2149 -j DROP -A logdrop-215 -m limit --limit 12/minute -j ULOG -A logdrop-215 -j DROP --A logdrop-2150 -m limit --limit 12/minute -j ULOG --A logdrop-2150 -j DROP --A logdrop-2151 -m limit --limit 12/minute -j ULOG --A logdrop-2151 -j DROP --A logdrop-2152 -m limit --limit 12/minute -j ULOG --A logdrop-2152 -j DROP --A logdrop-2153 -m limit --limit 12/minute -j ULOG --A logdrop-2153 -j DROP --A logdrop-2154 -m limit --limit 12/minute -j ULOG --A logdrop-2154 -j DROP --A logdrop-2155 -m limit --limit 12/minute -j ULOG --A logdrop-2155 -j DROP --A logdrop-2156 -m limit --limit 12/minute -j ULOG --A logdrop-2156 -j DROP --A logdrop-2157 -m limit --limit 12/minute -j ULOG --A logdrop-2157 -j DROP --A logdrop-2158 -m limit --limit 12/minute -j ULOG --A logdrop-2158 -j DROP --A logdrop-2159 -m limit --limit 12/minute -j ULOG --A logdrop-2159 -j DROP -A logdrop-216 -m limit --limit 12/minute -j ULOG -A logdrop-216 -j DROP --A logdrop-2160 -m limit --limit 12/minute -j ULOG --A logdrop-2160 -j DROP --A logdrop-2161 -m limit --limit 12/minute -j ULOG --A logdrop-2161 -j DROP --A logdrop-2162 -m limit --limit 12/minute -j ULOG --A logdrop-2162 -j DROP --A logdrop-2163 -m limit --limit 12/minute -j ULOG --A logdrop-2163 -j DROP --A logdrop-2164 -m limit --limit 12/minute -j ULOG --A logdrop-2164 -j DROP --A logdrop-2165 -m limit --limit 12/minute -j ULOG --A logdrop-2165 -j DROP --A logdrop-2166 -m limit --limit 12/minute -j ULOG --A logdrop-2166 -j DROP --A logdrop-2167 -m limit --limit 12/minute -j ULOG --A logdrop-2167 -j DROP --A logdrop-2168 -m limit --limit 12/minute -j ULOG --A logdrop-2168 -j DROP --A logdrop-2169 -m limit --limit 12/minute -j ULOG --A logdrop-2169 -j DROP -A logdrop-217 -m limit --limit 12/minute -j ULOG -A logdrop-217 -j DROP --A logdrop-2170 -m limit --limit 12/minute -j ULOG --A logdrop-2170 -j DROP --A logdrop-2171 -m limit --limit 12/minute -j ULOG --A logdrop-2171 -j DROP --A logdrop-2172 -m limit --limit 12/minute -j ULOG --A logdrop-2172 -j DROP --A logdrop-2173 -m limit --limit 12/minute -j ULOG --A logdrop-2173 -j DROP --A logdrop-2174 -m limit --limit 12/minute -j ULOG --A logdrop-2174 -j DROP --A logdrop-2175 -m limit --limit 12/minute -j ULOG --A logdrop-2175 -j DROP --A logdrop-2176 -m limit --limit 12/minute -j ULOG --A logdrop-2176 -j DROP --A logdrop-2177 -m limit --limit 12/minute -j ULOG --A logdrop-2177 -j DROP --A logdrop-2178 -m limit --limit 12/minute -j ULOG --A logdrop-2178 -j DROP --A logdrop-2179 -m limit --limit 12/minute -j ULOG --A logdrop-2179 -j DROP -A logdrop-218 -m limit --limit 12/minute -j ULOG -A logdrop-218 -j DROP --A logdrop-2180 -m limit --limit 12/minute -j ULOG --A logdrop-2180 -j DROP --A logdrop-2181 -m limit --limit 12/minute -j ULOG --A logdrop-2181 -j DROP --A logdrop-2182 -m limit --limit 12/minute -j ULOG --A logdrop-2182 -j DROP --A logdrop-2183 -m limit --limit 12/minute -j ULOG --A logdrop-2183 -j DROP --A logdrop-2184 -m limit --limit 12/minute -j ULOG --A logdrop-2184 -j DROP --A logdrop-2185 -m limit --limit 12/minute -j ULOG --A logdrop-2185 -j DROP --A logdrop-2186 -m limit --limit 12/minute -j ULOG --A logdrop-2186 -j DROP --A logdrop-2187 -m limit --limit 12/minute -j ULOG --A logdrop-2187 -j DROP --A logdrop-2188 -m limit --limit 12/minute -j ULOG --A logdrop-2188 -j DROP --A logdrop-2189 -m limit --limit 12/minute -j ULOG --A logdrop-2189 -j DROP -A logdrop-219 -m limit --limit 12/minute -j ULOG -A logdrop-219 -j DROP --A logdrop-2190 -m limit --limit 12/minute -j ULOG --A logdrop-2190 -j DROP --A logdrop-2191 -m limit --limit 12/minute -j ULOG --A logdrop-2191 -j DROP --A logdrop-2192 -m limit --limit 12/minute -j ULOG --A logdrop-2192 -j DROP --A logdrop-2193 -m limit --limit 12/minute -j ULOG --A logdrop-2193 -j DROP --A logdrop-2194 -m limit --limit 12/minute -j ULOG --A logdrop-2194 -j DROP --A logdrop-2195 -m limit --limit 12/minute -j ULOG --A logdrop-2195 -j DROP --A logdrop-2196 -m limit --limit 12/minute -j ULOG --A logdrop-2196 -j DROP --A logdrop-2197 -m limit --limit 12/minute -j ULOG --A logdrop-2197 -j DROP --A logdrop-2198 -m limit --limit 12/minute -j ULOG --A logdrop-2198 -j DROP --A logdrop-2199 -m limit --limit 12/minute -j ULOG --A logdrop-2199 -j DROP -A logdrop-22 -m limit --limit 1/second -j LOG -A logdrop-22 -j DROP -A logdrop-220 -m limit --limit 12/minute -j ULOG -A logdrop-220 -j DROP --A logdrop-2200 -m limit --limit 1/second -j LOG --A logdrop-2200 -j DROP --A logdrop-2201 -m limit --limit 1/second -j LOG --A logdrop-2201 -j DROP --A logdrop-2202 -j LOG --A logdrop-2202 -j DROP --A logdrop-2203 -j TEE --gateway 10.0.0.1 --A logdrop-2203 -j TEE --gateway 10.0.0.2 --A logdrop-2203 -j DROP --A logdrop-2204 -m limit --limit 12/minute -j ULOG --A logdrop-2204 -j DROP -A logdrop-221 -m limit --limit 12/minute -j ULOG -A logdrop-221 -j DROP -A logdrop-222 -m limit --limit 12/minute -j ULOG @@ -30279,6 +28999,1286 @@ -A logdrop-999 -j TEE --gateway 10.0.0.1 -A logdrop-999 -j TEE --gateway 10.0.0.2 -A logdrop-999 -j DROP +-A logdrop-ntp-0 -m limit --limit 1/second -j LOG +-A logdrop-ntp-0 -j DROP +-A logdrop-ntp-1 -m limit --limit 1/second -j LOG +-A logdrop-ntp-1 -j DROP +-A logdrop-ntp-10 -m limit --limit 1/second -j LOG +-A logdrop-ntp-10 -j DROP +-A logdrop-ntp-100 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-100 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-100 -j DROP +-A logdrop-ntp-101 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-101 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-101 -j DROP +-A logdrop-ntp-102 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-102 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-102 -j DROP +-A logdrop-ntp-103 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-103 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-103 -j DROP +-A logdrop-ntp-104 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-104 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-104 -j DROP +-A logdrop-ntp-105 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-105 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-105 -j DROP +-A logdrop-ntp-106 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-106 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-106 -j DROP +-A logdrop-ntp-107 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-107 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-107 -j DROP +-A logdrop-ntp-108 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-108 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-108 -j DROP +-A logdrop-ntp-109 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-109 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-109 -j DROP +-A logdrop-ntp-11 -m limit --limit 1/second -j LOG +-A logdrop-ntp-11 -j DROP +-A logdrop-ntp-110 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-110 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-110 -j DROP +-A logdrop-ntp-111 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-111 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-111 -j DROP +-A logdrop-ntp-112 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-112 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-112 -j DROP +-A logdrop-ntp-113 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-113 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-113 -j DROP +-A logdrop-ntp-114 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-114 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-114 -j DROP +-A logdrop-ntp-115 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-115 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-115 -j DROP +-A logdrop-ntp-116 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-116 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-116 -j DROP +-A logdrop-ntp-117 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-117 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-117 -j DROP +-A logdrop-ntp-118 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-118 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-118 -j DROP +-A logdrop-ntp-119 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-119 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-119 -j DROP +-A logdrop-ntp-12 -m limit --limit 1/second -j LOG +-A logdrop-ntp-12 -j DROP +-A logdrop-ntp-120 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-120 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-120 -j DROP +-A logdrop-ntp-121 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-121 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-121 -j DROP +-A logdrop-ntp-122 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-122 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-122 -j DROP +-A logdrop-ntp-123 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-123 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-123 -j DROP +-A logdrop-ntp-124 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-124 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-124 -j DROP +-A logdrop-ntp-125 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-125 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-125 -j DROP +-A logdrop-ntp-126 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-126 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-126 -j DROP +-A logdrop-ntp-127 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-127 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-127 -j DROP +-A logdrop-ntp-128 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-128 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-128 -j DROP +-A logdrop-ntp-129 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-129 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-129 -j DROP +-A logdrop-ntp-13 -m limit --limit 1/second -j LOG +-A logdrop-ntp-13 -j DROP +-A logdrop-ntp-130 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-130 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-130 -j DROP +-A logdrop-ntp-131 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-131 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-131 -j DROP +-A logdrop-ntp-132 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-132 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-132 -j DROP +-A logdrop-ntp-133 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-133 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-133 -j DROP +-A logdrop-ntp-134 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-134 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-134 -j DROP +-A logdrop-ntp-135 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-135 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-135 -j DROP +-A logdrop-ntp-136 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-136 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-136 -j DROP +-A logdrop-ntp-137 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-137 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-137 -j DROP +-A logdrop-ntp-138 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-138 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-138 -j DROP +-A logdrop-ntp-139 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-139 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-139 -j DROP +-A logdrop-ntp-14 -m limit --limit 1/second -j LOG +-A logdrop-ntp-14 -j DROP +-A logdrop-ntp-140 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-140 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-140 -j DROP +-A logdrop-ntp-141 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-141 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-141 -j DROP +-A logdrop-ntp-142 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-142 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-142 -j DROP +-A logdrop-ntp-143 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-143 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-143 -j DROP +-A logdrop-ntp-144 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-144 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-144 -j DROP +-A logdrop-ntp-145 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-145 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-145 -j DROP +-A logdrop-ntp-146 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-146 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-146 -j DROP +-A logdrop-ntp-147 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-147 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-147 -j DROP +-A logdrop-ntp-148 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-148 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-148 -j DROP +-A logdrop-ntp-149 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-149 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-149 -j DROP +-A logdrop-ntp-15 -m limit --limit 1/second -j LOG +-A logdrop-ntp-15 -j DROP +-A logdrop-ntp-150 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-150 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-150 -j DROP +-A logdrop-ntp-151 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-151 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-151 -j DROP +-A logdrop-ntp-152 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-152 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-152 -j DROP +-A logdrop-ntp-153 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-153 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-153 -j DROP +-A logdrop-ntp-154 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-154 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-154 -j DROP +-A logdrop-ntp-155 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-155 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-155 -j DROP +-A logdrop-ntp-156 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-156 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-156 -j DROP +-A logdrop-ntp-157 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-157 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-157 -j DROP +-A logdrop-ntp-158 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-158 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-158 -j DROP +-A logdrop-ntp-159 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-159 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-159 -j DROP +-A logdrop-ntp-16 -m limit --limit 1/second -j LOG +-A logdrop-ntp-16 -j DROP +-A logdrop-ntp-160 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-160 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-160 -j DROP +-A logdrop-ntp-161 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-161 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-161 -j DROP +-A logdrop-ntp-162 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-162 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-162 -j DROP +-A logdrop-ntp-163 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-163 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-163 -j DROP +-A logdrop-ntp-164 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-164 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-164 -j DROP +-A logdrop-ntp-165 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-165 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-165 -j DROP +-A logdrop-ntp-166 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-166 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-166 -j DROP +-A logdrop-ntp-167 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-167 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-167 -j DROP +-A logdrop-ntp-168 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-168 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-168 -j DROP +-A logdrop-ntp-169 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-169 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-169 -j DROP +-A logdrop-ntp-17 -m limit --limit 1/second -j LOG +-A logdrop-ntp-17 -j DROP +-A logdrop-ntp-170 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-170 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-170 -j DROP +-A logdrop-ntp-171 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-171 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-171 -j DROP +-A logdrop-ntp-172 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-172 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-172 -j DROP +-A logdrop-ntp-173 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-173 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-173 -j DROP +-A logdrop-ntp-174 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-174 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-174 -j DROP +-A logdrop-ntp-175 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-175 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-175 -j DROP +-A logdrop-ntp-176 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-176 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-176 -j DROP +-A logdrop-ntp-177 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-177 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-177 -j DROP +-A logdrop-ntp-178 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-178 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-178 -j DROP +-A logdrop-ntp-179 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-179 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-179 -j DROP +-A logdrop-ntp-18 -m limit --limit 1/second -j LOG +-A logdrop-ntp-18 -j DROP +-A logdrop-ntp-180 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-180 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-180 -j DROP +-A logdrop-ntp-181 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-181 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-181 -j DROP +-A logdrop-ntp-182 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-182 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-182 -j DROP +-A logdrop-ntp-183 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-183 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-183 -j DROP +-A logdrop-ntp-184 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-184 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-184 -j DROP +-A logdrop-ntp-185 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-185 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-185 -j DROP +-A logdrop-ntp-186 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-186 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-186 -j DROP +-A logdrop-ntp-187 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-187 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-187 -j DROP +-A logdrop-ntp-188 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-188 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-188 -j DROP +-A logdrop-ntp-189 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-189 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-189 -j DROP +-A logdrop-ntp-19 -m limit --limit 1/second -j LOG +-A logdrop-ntp-19 -j DROP +-A logdrop-ntp-190 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-190 -j DROP +-A logdrop-ntp-191 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-191 -j DROP +-A logdrop-ntp-192 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-192 -j DROP +-A logdrop-ntp-193 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-193 -j DROP +-A logdrop-ntp-194 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-194 -j DROP +-A logdrop-ntp-195 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-195 -j DROP +-A logdrop-ntp-196 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-196 -j DROP +-A logdrop-ntp-197 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-197 -j DROP +-A logdrop-ntp-198 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-198 -j DROP +-A logdrop-ntp-199 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-199 -j DROP +-A logdrop-ntp-2 -m limit --limit 1/second -j LOG +-A logdrop-ntp-2 -j DROP +-A logdrop-ntp-20 -m limit --limit 1/second -j LOG +-A logdrop-ntp-20 -j DROP +-A logdrop-ntp-200 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-200 -j DROP +-A logdrop-ntp-201 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-201 -j DROP +-A logdrop-ntp-202 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-202 -j DROP +-A logdrop-ntp-203 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-203 -j DROP +-A logdrop-ntp-204 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-204 -j DROP +-A logdrop-ntp-205 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-205 -j DROP +-A logdrop-ntp-206 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-206 -j DROP +-A logdrop-ntp-207 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-207 -j DROP +-A logdrop-ntp-208 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-208 -j DROP +-A logdrop-ntp-209 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-209 -j DROP +-A logdrop-ntp-21 -m limit --limit 1/second -j LOG +-A logdrop-ntp-21 -j DROP +-A logdrop-ntp-210 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-210 -j DROP +-A logdrop-ntp-211 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-211 -j DROP +-A logdrop-ntp-212 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-212 -j DROP +-A logdrop-ntp-213 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-213 -j DROP +-A logdrop-ntp-214 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-214 -j DROP +-A logdrop-ntp-215 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-215 -j DROP +-A logdrop-ntp-216 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-216 -j DROP +-A logdrop-ntp-217 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-217 -j DROP +-A logdrop-ntp-218 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-218 -j DROP +-A logdrop-ntp-219 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-219 -j DROP +-A logdrop-ntp-22 -m limit --limit 1/second -j LOG +-A logdrop-ntp-22 -j DROP +-A logdrop-ntp-220 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-220 -j DROP +-A logdrop-ntp-221 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-221 -j DROP +-A logdrop-ntp-222 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-222 -j DROP +-A logdrop-ntp-223 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-223 -j DROP +-A logdrop-ntp-224 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-224 -j DROP +-A logdrop-ntp-225 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-225 -j DROP +-A logdrop-ntp-226 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-226 -j DROP +-A logdrop-ntp-227 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-227 -j DROP +-A logdrop-ntp-228 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-228 -j DROP +-A logdrop-ntp-229 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-229 -j DROP +-A logdrop-ntp-23 -m limit --limit 1/second -j LOG +-A logdrop-ntp-23 -j DROP +-A logdrop-ntp-230 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-230 -j DROP +-A logdrop-ntp-231 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-231 -j DROP +-A logdrop-ntp-232 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-232 -j DROP +-A logdrop-ntp-233 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-233 -j DROP +-A logdrop-ntp-234 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-234 -j DROP +-A logdrop-ntp-235 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-235 -j DROP +-A logdrop-ntp-236 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-236 -j DROP +-A logdrop-ntp-237 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-237 -j DROP +-A logdrop-ntp-238 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-238 -j DROP +-A logdrop-ntp-239 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-239 -j DROP +-A logdrop-ntp-24 -m limit --limit 1/second -j LOG +-A logdrop-ntp-24 -j DROP +-A logdrop-ntp-240 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-240 -j DROP +-A logdrop-ntp-241 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-241 -j DROP +-A logdrop-ntp-242 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-242 -j DROP +-A logdrop-ntp-243 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-243 -j DROP +-A logdrop-ntp-244 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-244 -j DROP +-A logdrop-ntp-245 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-245 -j DROP +-A logdrop-ntp-246 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-246 -j DROP +-A logdrop-ntp-247 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-247 -j DROP +-A logdrop-ntp-248 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-248 -j DROP +-A logdrop-ntp-249 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-249 -j DROP +-A logdrop-ntp-25 -m limit --limit 1/second -j LOG +-A logdrop-ntp-25 -j DROP +-A logdrop-ntp-250 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-250 -j DROP +-A logdrop-ntp-251 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-251 -j DROP +-A logdrop-ntp-252 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-252 -j DROP +-A logdrop-ntp-253 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-253 -j DROP +-A logdrop-ntp-254 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-254 -j DROP +-A logdrop-ntp-255 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-255 -j DROP +-A logdrop-ntp-256 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-256 -j DROP +-A logdrop-ntp-257 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-257 -j DROP +-A logdrop-ntp-258 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-258 -j DROP +-A logdrop-ntp-259 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-259 -j DROP +-A logdrop-ntp-26 -m limit --limit 1/second -j LOG +-A logdrop-ntp-26 -j DROP +-A logdrop-ntp-260 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-260 -j DROP +-A logdrop-ntp-261 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-261 -j DROP +-A logdrop-ntp-262 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-262 -j DROP +-A logdrop-ntp-263 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-263 -j DROP +-A logdrop-ntp-264 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-264 -j DROP +-A logdrop-ntp-265 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-265 -j DROP +-A logdrop-ntp-266 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-266 -j DROP +-A logdrop-ntp-267 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-267 -j DROP +-A logdrop-ntp-268 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-268 -j DROP +-A logdrop-ntp-269 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-269 -j DROP +-A logdrop-ntp-27 -m limit --limit 1/second -j LOG +-A logdrop-ntp-27 -j DROP +-A logdrop-ntp-270 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-270 -j DROP +-A logdrop-ntp-271 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-271 -j DROP +-A logdrop-ntp-272 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-272 -j DROP +-A logdrop-ntp-273 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-273 -j DROP +-A logdrop-ntp-274 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-274 -j DROP +-A logdrop-ntp-275 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-275 -j DROP +-A logdrop-ntp-276 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-276 -j DROP +-A logdrop-ntp-277 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-277 -j DROP +-A logdrop-ntp-278 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-278 -j DROP +-A logdrop-ntp-279 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-279 -j DROP +-A logdrop-ntp-28 -m limit --limit 1/second -j LOG +-A logdrop-ntp-28 -j DROP +-A logdrop-ntp-280 -m limit --limit 1/second -j LOG +-A logdrop-ntp-280 -j DROP +-A logdrop-ntp-281 -m limit --limit 1/second -j LOG +-A logdrop-ntp-281 -j DROP +-A logdrop-ntp-282 -m limit --limit 1/second -j LOG +-A logdrop-ntp-282 -j DROP +-A logdrop-ntp-283 -m limit --limit 1/second -j LOG +-A logdrop-ntp-283 -j DROP +-A logdrop-ntp-284 -m limit --limit 1/second -j LOG +-A logdrop-ntp-284 -j DROP +-A logdrop-ntp-285 -m limit --limit 1/second -j LOG +-A logdrop-ntp-285 -j DROP +-A logdrop-ntp-286 -m limit --limit 1/second -j LOG +-A logdrop-ntp-286 -j DROP +-A logdrop-ntp-287 -m limit --limit 1/second -j LOG +-A logdrop-ntp-287 -j DROP +-A logdrop-ntp-288 -m limit --limit 1/second -j LOG +-A logdrop-ntp-288 -j DROP +-A logdrop-ntp-289 -m limit --limit 1/second -j LOG +-A logdrop-ntp-289 -j DROP +-A logdrop-ntp-29 -m limit --limit 1/second -j LOG +-A logdrop-ntp-29 -j DROP +-A logdrop-ntp-290 -m limit --limit 1/second -j LOG +-A logdrop-ntp-290 -j DROP +-A logdrop-ntp-291 -m limit --limit 1/second -j LOG +-A logdrop-ntp-291 -j DROP +-A logdrop-ntp-292 -m limit --limit 1/second -j LOG +-A logdrop-ntp-292 -j DROP +-A logdrop-ntp-293 -m limit --limit 1/second -j LOG +-A logdrop-ntp-293 -j DROP +-A logdrop-ntp-294 -m limit --limit 1/second -j LOG +-A logdrop-ntp-294 -j DROP +-A logdrop-ntp-295 -m limit --limit 1/second -j LOG +-A logdrop-ntp-295 -j DROP +-A logdrop-ntp-296 -m limit --limit 1/second -j LOG +-A logdrop-ntp-296 -j DROP +-A logdrop-ntp-297 -m limit --limit 1/second -j LOG +-A logdrop-ntp-297 -j DROP +-A logdrop-ntp-298 -m limit --limit 1/second -j LOG +-A logdrop-ntp-298 -j DROP +-A logdrop-ntp-299 -m limit --limit 1/second -j LOG +-A logdrop-ntp-299 -j DROP +-A logdrop-ntp-3 -m limit --limit 1/second -j LOG +-A logdrop-ntp-3 -j DROP +-A logdrop-ntp-30 -m limit --limit 1/second -j LOG +-A logdrop-ntp-30 -j DROP +-A logdrop-ntp-300 -m limit --limit 1/second -j LOG +-A logdrop-ntp-300 -j DROP +-A logdrop-ntp-301 -m limit --limit 1/second -j LOG +-A logdrop-ntp-301 -j DROP +-A logdrop-ntp-302 -m limit --limit 1/second -j LOG +-A logdrop-ntp-302 -j DROP +-A logdrop-ntp-303 -m limit --limit 1/second -j LOG +-A logdrop-ntp-303 -j DROP +-A logdrop-ntp-304 -m limit --limit 1/second -j LOG +-A logdrop-ntp-304 -j DROP +-A logdrop-ntp-305 -m limit --limit 1/second -j LOG +-A logdrop-ntp-305 -j DROP +-A logdrop-ntp-306 -m limit --limit 1/second -j LOG +-A logdrop-ntp-306 -j DROP +-A logdrop-ntp-307 -m limit --limit 1/second -j LOG +-A logdrop-ntp-307 -j DROP +-A logdrop-ntp-308 -m limit --limit 1/second -j LOG +-A logdrop-ntp-308 -j DROP +-A logdrop-ntp-309 -m limit --limit 1/second -j LOG +-A logdrop-ntp-309 -j DROP +-A logdrop-ntp-31 -m limit --limit 1/second -j LOG +-A logdrop-ntp-31 -j DROP +-A logdrop-ntp-310 -m limit --limit 1/second -j LOG +-A logdrop-ntp-310 -j DROP +-A logdrop-ntp-311 -m limit --limit 1/second -j LOG +-A logdrop-ntp-311 -j DROP +-A logdrop-ntp-312 -m limit --limit 1/second -j LOG +-A logdrop-ntp-312 -j DROP +-A logdrop-ntp-313 -m limit --limit 1/second -j LOG +-A logdrop-ntp-313 -j DROP +-A logdrop-ntp-314 -m limit --limit 1/second -j LOG +-A logdrop-ntp-314 -j DROP +-A logdrop-ntp-315 -m limit --limit 1/second -j LOG +-A logdrop-ntp-315 -j DROP +-A logdrop-ntp-316 -m limit --limit 1/second -j LOG +-A logdrop-ntp-316 -j DROP +-A logdrop-ntp-317 -m limit --limit 1/second -j LOG +-A logdrop-ntp-317 -j DROP +-A logdrop-ntp-318 -m limit --limit 1/second -j LOG +-A logdrop-ntp-318 -j DROP +-A logdrop-ntp-319 -m limit --limit 1/second -j LOG +-A logdrop-ntp-319 -j DROP +-A logdrop-ntp-32 -m limit --limit 1/second -j LOG +-A logdrop-ntp-32 -j DROP +-A logdrop-ntp-320 -m limit --limit 1/second -j LOG +-A logdrop-ntp-320 -j DROP +-A logdrop-ntp-321 -m limit --limit 1/second -j LOG +-A logdrop-ntp-321 -j DROP +-A logdrop-ntp-322 -m limit --limit 1/second -j LOG +-A logdrop-ntp-322 -j DROP +-A logdrop-ntp-323 -m limit --limit 1/second -j LOG +-A logdrop-ntp-323 -j DROP +-A logdrop-ntp-324 -m limit --limit 1/second -j LOG +-A logdrop-ntp-324 -j DROP +-A logdrop-ntp-325 -m limit --limit 1/second -j LOG +-A logdrop-ntp-325 -j DROP +-A logdrop-ntp-326 -m limit --limit 1/second -j LOG +-A logdrop-ntp-326 -j DROP +-A logdrop-ntp-327 -m limit --limit 1/second -j LOG +-A logdrop-ntp-327 -j DROP +-A logdrop-ntp-328 -m limit --limit 1/second -j LOG +-A logdrop-ntp-328 -j DROP +-A logdrop-ntp-329 -m limit --limit 1/second -j LOG +-A logdrop-ntp-329 -j DROP +-A logdrop-ntp-33 -m limit --limit 1/second -j LOG +-A logdrop-ntp-33 -j DROP +-A logdrop-ntp-330 -m limit --limit 1/second -j LOG +-A logdrop-ntp-330 -j DROP +-A logdrop-ntp-331 -m limit --limit 1/second -j LOG +-A logdrop-ntp-331 -j DROP +-A logdrop-ntp-332 -m limit --limit 1/second -j LOG +-A logdrop-ntp-332 -j DROP +-A logdrop-ntp-333 -m limit --limit 1/second -j LOG +-A logdrop-ntp-333 -j DROP +-A logdrop-ntp-334 -m limit --limit 1/second -j LOG +-A logdrop-ntp-334 -j DROP +-A logdrop-ntp-335 -m limit --limit 1/second -j LOG +-A logdrop-ntp-335 -j DROP +-A logdrop-ntp-336 -m limit --limit 1/second -j LOG +-A logdrop-ntp-336 -j DROP +-A logdrop-ntp-337 -m limit --limit 1/second -j LOG +-A logdrop-ntp-337 -j DROP +-A logdrop-ntp-338 -m limit --limit 1/second -j LOG +-A logdrop-ntp-338 -j DROP +-A logdrop-ntp-339 -m limit --limit 1/second -j LOG +-A logdrop-ntp-339 -j DROP +-A logdrop-ntp-34 -m limit --limit 1/second -j LOG +-A logdrop-ntp-34 -j DROP +-A logdrop-ntp-340 -m limit --limit 1/second -j LOG +-A logdrop-ntp-340 -j DROP +-A logdrop-ntp-341 -m limit --limit 1/second -j LOG +-A logdrop-ntp-341 -j DROP +-A logdrop-ntp-342 -m limit --limit 1/second -j LOG +-A logdrop-ntp-342 -j DROP +-A logdrop-ntp-343 -m limit --limit 1/second -j LOG +-A logdrop-ntp-343 -j DROP +-A logdrop-ntp-344 -m limit --limit 1/second -j LOG +-A logdrop-ntp-344 -j DROP +-A logdrop-ntp-345 -m limit --limit 1/second -j LOG +-A logdrop-ntp-345 -j DROP +-A logdrop-ntp-346 -m limit --limit 1/second -j LOG +-A logdrop-ntp-346 -j DROP +-A logdrop-ntp-347 -m limit --limit 1/second -j LOG +-A logdrop-ntp-347 -j DROP +-A logdrop-ntp-348 -m limit --limit 1/second -j LOG +-A logdrop-ntp-348 -j DROP +-A logdrop-ntp-349 -m limit --limit 1/second -j LOG +-A logdrop-ntp-349 -j DROP +-A logdrop-ntp-35 -m limit --limit 1/second -j LOG +-A logdrop-ntp-35 -j DROP +-A logdrop-ntp-350 -m limit --limit 1/second -j LOG +-A logdrop-ntp-350 -j DROP +-A logdrop-ntp-351 -m limit --limit 1/second -j LOG +-A logdrop-ntp-351 -j DROP +-A logdrop-ntp-352 -m limit --limit 1/second -j LOG +-A logdrop-ntp-352 -j DROP +-A logdrop-ntp-353 -m limit --limit 1/second -j LOG +-A logdrop-ntp-353 -j DROP +-A logdrop-ntp-354 -m limit --limit 1/second -j LOG +-A logdrop-ntp-354 -j DROP +-A logdrop-ntp-355 -m limit --limit 1/second -j LOG +-A logdrop-ntp-355 -j DROP +-A logdrop-ntp-356 -m limit --limit 1/second -j LOG +-A logdrop-ntp-356 -j DROP +-A logdrop-ntp-357 -m limit --limit 1/second -j LOG +-A logdrop-ntp-357 -j DROP +-A logdrop-ntp-358 -m limit --limit 1/second -j LOG +-A logdrop-ntp-358 -j DROP +-A logdrop-ntp-359 -m limit --limit 1/second -j LOG +-A logdrop-ntp-359 -j DROP +-A logdrop-ntp-36 -m limit --limit 1/second -j LOG +-A logdrop-ntp-36 -j DROP +-A logdrop-ntp-360 -m limit --limit 1/second -j LOG +-A logdrop-ntp-360 -j DROP +-A logdrop-ntp-361 -m limit --limit 1/second -j LOG +-A logdrop-ntp-361 -j DROP +-A logdrop-ntp-362 -m limit --limit 1/second -j LOG +-A logdrop-ntp-362 -j DROP +-A logdrop-ntp-363 -m limit --limit 1/second -j LOG +-A logdrop-ntp-363 -j DROP +-A logdrop-ntp-364 -m limit --limit 1/second -j LOG +-A logdrop-ntp-364 -j DROP +-A logdrop-ntp-365 -m limit --limit 1/second -j LOG +-A logdrop-ntp-365 -j DROP +-A logdrop-ntp-366 -m limit --limit 1/second -j LOG +-A logdrop-ntp-366 -j DROP +-A logdrop-ntp-367 -m limit --limit 1/second -j LOG +-A logdrop-ntp-367 -j DROP +-A logdrop-ntp-368 -m limit --limit 1/second -j LOG +-A logdrop-ntp-368 -j DROP +-A logdrop-ntp-369 -m limit --limit 1/second -j LOG +-A logdrop-ntp-369 -j DROP +-A logdrop-ntp-37 -m limit --limit 1/second -j LOG +-A logdrop-ntp-37 -j DROP +-A logdrop-ntp-370 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-370 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-370 -j DROP +-A logdrop-ntp-371 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-371 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-371 -j DROP +-A logdrop-ntp-372 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-372 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-372 -j DROP +-A logdrop-ntp-373 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-373 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-373 -j DROP +-A logdrop-ntp-374 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-374 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-374 -j DROP +-A logdrop-ntp-375 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-375 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-375 -j DROP +-A logdrop-ntp-376 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-376 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-376 -j DROP +-A logdrop-ntp-377 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-377 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-377 -j DROP +-A logdrop-ntp-378 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-378 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-378 -j DROP +-A logdrop-ntp-379 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-379 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-379 -j DROP +-A logdrop-ntp-38 -m limit --limit 1/second -j LOG +-A logdrop-ntp-38 -j DROP +-A logdrop-ntp-380 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-380 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-380 -j DROP +-A logdrop-ntp-381 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-381 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-381 -j DROP +-A logdrop-ntp-382 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-382 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-382 -j DROP +-A logdrop-ntp-383 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-383 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-383 -j DROP +-A logdrop-ntp-384 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-384 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-384 -j DROP +-A logdrop-ntp-385 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-385 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-385 -j DROP +-A logdrop-ntp-386 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-386 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-386 -j DROP +-A logdrop-ntp-387 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-387 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-387 -j DROP +-A logdrop-ntp-388 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-388 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-388 -j DROP +-A logdrop-ntp-389 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-389 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-389 -j DROP +-A logdrop-ntp-39 -m limit --limit 1/second -j LOG +-A logdrop-ntp-39 -j DROP +-A logdrop-ntp-390 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-390 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-390 -j DROP +-A logdrop-ntp-391 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-391 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-391 -j DROP +-A logdrop-ntp-392 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-392 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-392 -j DROP +-A logdrop-ntp-393 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-393 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-393 -j DROP +-A logdrop-ntp-394 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-394 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-394 -j DROP +-A logdrop-ntp-395 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-395 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-395 -j DROP +-A logdrop-ntp-396 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-396 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-396 -j DROP +-A logdrop-ntp-397 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-397 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-397 -j DROP +-A logdrop-ntp-398 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-398 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-398 -j DROP +-A logdrop-ntp-399 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-399 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-399 -j DROP +-A logdrop-ntp-4 -m limit --limit 1/second -j LOG +-A logdrop-ntp-4 -j DROP +-A logdrop-ntp-40 -m limit --limit 1/second -j LOG +-A logdrop-ntp-40 -j DROP +-A logdrop-ntp-400 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-400 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-400 -j DROP +-A logdrop-ntp-401 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-401 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-401 -j DROP +-A logdrop-ntp-402 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-402 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-402 -j DROP +-A logdrop-ntp-403 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-403 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-403 -j DROP +-A logdrop-ntp-404 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-404 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-404 -j DROP +-A logdrop-ntp-405 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-405 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-405 -j DROP +-A logdrop-ntp-406 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-406 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-406 -j DROP +-A logdrop-ntp-407 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-407 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-407 -j DROP +-A logdrop-ntp-408 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-408 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-408 -j DROP +-A logdrop-ntp-409 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-409 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-409 -j DROP +-A logdrop-ntp-41 -m limit --limit 1/second -j LOG +-A logdrop-ntp-41 -j DROP +-A logdrop-ntp-410 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-410 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-410 -j DROP +-A logdrop-ntp-411 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-411 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-411 -j DROP +-A logdrop-ntp-412 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-412 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-412 -j DROP +-A logdrop-ntp-413 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-413 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-413 -j DROP +-A logdrop-ntp-414 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-414 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-414 -j DROP +-A logdrop-ntp-415 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-415 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-415 -j DROP +-A logdrop-ntp-416 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-416 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-416 -j DROP +-A logdrop-ntp-417 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-417 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-417 -j DROP +-A logdrop-ntp-418 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-418 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-418 -j DROP +-A logdrop-ntp-419 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-419 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-419 -j DROP +-A logdrop-ntp-42 -m limit --limit 1/second -j LOG +-A logdrop-ntp-42 -j DROP +-A logdrop-ntp-420 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-420 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-420 -j DROP +-A logdrop-ntp-421 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-421 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-421 -j DROP +-A logdrop-ntp-422 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-422 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-422 -j DROP +-A logdrop-ntp-423 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-423 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-423 -j DROP +-A logdrop-ntp-424 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-424 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-424 -j DROP +-A logdrop-ntp-425 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-425 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-425 -j DROP +-A logdrop-ntp-426 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-426 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-426 -j DROP +-A logdrop-ntp-427 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-427 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-427 -j DROP +-A logdrop-ntp-428 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-428 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-428 -j DROP +-A logdrop-ntp-429 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-429 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-429 -j DROP +-A logdrop-ntp-43 -m limit --limit 1/second -j LOG +-A logdrop-ntp-43 -j DROP +-A logdrop-ntp-430 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-430 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-430 -j DROP +-A logdrop-ntp-431 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-431 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-431 -j DROP +-A logdrop-ntp-432 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-432 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-432 -j DROP +-A logdrop-ntp-433 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-433 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-433 -j DROP +-A logdrop-ntp-434 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-434 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-434 -j DROP +-A logdrop-ntp-435 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-435 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-435 -j DROP +-A logdrop-ntp-436 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-436 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-436 -j DROP +-A logdrop-ntp-437 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-437 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-437 -j DROP +-A logdrop-ntp-438 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-438 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-438 -j DROP +-A logdrop-ntp-439 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-439 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-439 -j DROP +-A logdrop-ntp-44 -m limit --limit 1/second -j LOG +-A logdrop-ntp-44 -j DROP +-A logdrop-ntp-440 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-440 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-440 -j DROP +-A logdrop-ntp-441 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-441 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-441 -j DROP +-A logdrop-ntp-442 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-442 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-442 -j DROP +-A logdrop-ntp-443 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-443 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-443 -j DROP +-A logdrop-ntp-444 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-444 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-444 -j DROP +-A logdrop-ntp-445 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-445 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-445 -j DROP +-A logdrop-ntp-446 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-446 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-446 -j DROP +-A logdrop-ntp-447 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-447 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-447 -j DROP +-A logdrop-ntp-448 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-448 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-448 -j DROP +-A logdrop-ntp-449 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-449 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-449 -j DROP +-A logdrop-ntp-45 -m limit --limit 1/second -j LOG +-A logdrop-ntp-45 -j DROP +-A logdrop-ntp-450 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-450 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-450 -j DROP +-A logdrop-ntp-451 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-451 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-451 -j DROP +-A logdrop-ntp-452 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-452 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-452 -j DROP +-A logdrop-ntp-453 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-453 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-453 -j DROP +-A logdrop-ntp-454 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-454 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-454 -j DROP +-A logdrop-ntp-455 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-455 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-455 -j DROP +-A logdrop-ntp-456 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-456 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-456 -j DROP +-A logdrop-ntp-457 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-457 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-457 -j DROP +-A logdrop-ntp-458 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-458 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-458 -j DROP +-A logdrop-ntp-459 -j TEE --gateway 10.0.0.1 +-A logdrop-ntp-459 -j TEE --gateway 10.0.0.2 +-A logdrop-ntp-459 -j DROP +-A logdrop-ntp-46 -m limit --limit 1/second -j LOG +-A logdrop-ntp-46 -j DROP +-A logdrop-ntp-460 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-460 -j DROP +-A logdrop-ntp-461 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-461 -j DROP +-A logdrop-ntp-462 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-462 -j DROP +-A logdrop-ntp-463 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-463 -j DROP +-A logdrop-ntp-464 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-464 -j DROP +-A logdrop-ntp-465 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-465 -j DROP +-A logdrop-ntp-466 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-466 -j DROP +-A logdrop-ntp-467 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-467 -j DROP +-A logdrop-ntp-468 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-468 -j DROP +-A logdrop-ntp-469 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-469 -j DROP +-A logdrop-ntp-47 -m limit --limit 1/second -j LOG +-A logdrop-ntp-47 -j DROP +-A logdrop-ntp-470 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-470 -j DROP +-A logdrop-ntp-471 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-471 -j DROP +-A logdrop-ntp-472 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-472 -j DROP +-A logdrop-ntp-473 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-473 -j DROP +-A logdrop-ntp-474 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-474 -j DROP +-A logdrop-ntp-475 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-475 -j DROP +-A logdrop-ntp-476 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-476 -j DROP +-A logdrop-ntp-477 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-477 -j DROP +-A logdrop-ntp-478 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-478 -j DROP +-A logdrop-ntp-479 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-479 -j DROP +-A logdrop-ntp-48 -m limit --limit 1/second -j LOG +-A logdrop-ntp-48 -j DROP +-A logdrop-ntp-480 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-480 -j DROP +-A logdrop-ntp-481 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-481 -j DROP +-A logdrop-ntp-482 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-482 -j DROP +-A logdrop-ntp-483 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-483 -j DROP +-A logdrop-ntp-484 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-484 -j DROP +-A logdrop-ntp-485 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-485 -j DROP +-A logdrop-ntp-486 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-486 -j DROP +-A logdrop-ntp-487 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-487 -j DROP +-A logdrop-ntp-488 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-488 -j DROP +-A logdrop-ntp-489 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-489 -j DROP +-A logdrop-ntp-49 -m limit --limit 1/second -j LOG +-A logdrop-ntp-49 -j DROP +-A logdrop-ntp-490 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-490 -j DROP +-A logdrop-ntp-491 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-491 -j DROP +-A logdrop-ntp-492 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-492 -j DROP +-A logdrop-ntp-493 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-493 -j DROP +-A logdrop-ntp-494 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-494 -j DROP +-A logdrop-ntp-495 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-495 -j DROP +-A logdrop-ntp-496 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-496 -j DROP +-A logdrop-ntp-497 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-497 -j DROP +-A logdrop-ntp-498 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-498 -j DROP +-A logdrop-ntp-499 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-499 -j DROP +-A logdrop-ntp-5 -m limit --limit 1/second -j LOG +-A logdrop-ntp-5 -j DROP +-A logdrop-ntp-50 -m limit --limit 1/second -j LOG +-A logdrop-ntp-50 -j DROP +-A logdrop-ntp-500 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-500 -j DROP +-A logdrop-ntp-501 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-501 -j DROP +-A logdrop-ntp-502 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-502 -j DROP +-A logdrop-ntp-503 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-503 -j DROP +-A logdrop-ntp-504 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-504 -j DROP +-A logdrop-ntp-505 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-505 -j DROP +-A logdrop-ntp-506 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-506 -j DROP +-A logdrop-ntp-507 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-507 -j DROP +-A logdrop-ntp-508 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-508 -j DROP +-A logdrop-ntp-509 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-509 -j DROP +-A logdrop-ntp-51 -m limit --limit 1/second -j LOG +-A logdrop-ntp-51 -j DROP +-A logdrop-ntp-510 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-510 -j DROP +-A logdrop-ntp-511 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-511 -j DROP +-A logdrop-ntp-512 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-512 -j DROP +-A logdrop-ntp-513 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-513 -j DROP +-A logdrop-ntp-514 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-514 -j DROP +-A logdrop-ntp-515 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-515 -j DROP +-A logdrop-ntp-516 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-516 -j DROP +-A logdrop-ntp-517 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-517 -j DROP +-A logdrop-ntp-518 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-518 -j DROP +-A logdrop-ntp-519 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-519 -j DROP +-A logdrop-ntp-52 -m limit --limit 1/second -j LOG +-A logdrop-ntp-52 -j DROP +-A logdrop-ntp-520 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-520 -j DROP +-A logdrop-ntp-521 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-521 -j DROP +-A logdrop-ntp-522 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-522 -j DROP +-A logdrop-ntp-523 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-523 -j DROP +-A logdrop-ntp-524 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-524 -j DROP +-A logdrop-ntp-525 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-525 -j DROP +-A logdrop-ntp-526 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-526 -j DROP +-A logdrop-ntp-527 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-527 -j DROP +-A logdrop-ntp-528 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-528 -j DROP +-A logdrop-ntp-529 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-529 -j DROP +-A logdrop-ntp-53 -m limit --limit 1/second -j LOG +-A logdrop-ntp-53 -j DROP +-A logdrop-ntp-530 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-530 -j DROP +-A logdrop-ntp-531 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-531 -j DROP +-A logdrop-ntp-532 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-532 -j DROP +-A logdrop-ntp-533 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-533 -j DROP +-A logdrop-ntp-534 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-534 -j DROP +-A logdrop-ntp-535 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-535 -j DROP +-A logdrop-ntp-536 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-536 -j DROP +-A logdrop-ntp-537 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-537 -j DROP +-A logdrop-ntp-538 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-538 -j DROP +-A logdrop-ntp-539 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-539 -j DROP +-A logdrop-ntp-54 -m limit --limit 1/second -j LOG +-A logdrop-ntp-54 -j DROP +-A logdrop-ntp-540 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-540 -j DROP +-A logdrop-ntp-541 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-541 -j DROP +-A logdrop-ntp-542 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-542 -j DROP +-A logdrop-ntp-543 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-543 -j DROP +-A logdrop-ntp-544 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-544 -j DROP +-A logdrop-ntp-545 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-545 -j DROP +-A logdrop-ntp-546 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-546 -j DROP +-A logdrop-ntp-547 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-547 -j DROP +-A logdrop-ntp-548 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-548 -j DROP +-A logdrop-ntp-549 -m limit --limit 12/minute -j ULOG +-A logdrop-ntp-549 -j DROP +-A logdrop-ntp-55 -m limit --limit 1/second -j LOG +-A logdrop-ntp-55 -j DROP +-A logdrop-ntp-56 -m limit --limit 1/second -j LOG +-A logdrop-ntp-56 -j DROP +-A logdrop-ntp-57 -m limit --limit 1/second -j LOG +-A logdrop-ntp-57 -j DROP +-A logdrop-ntp-58 -m limit --limit 1/second -j LOG +-A logdrop-ntp-58 -j DROP +-A logdrop-ntp-59 -m limit --limit 1/second -j LOG +-A logdrop-ntp-59 -j DROP +-A logdrop-ntp-6 -m limit --limit 1/second -j LOG +-A logdrop-ntp-6 -j DROP +-A logdrop-ntp-60 -m limit --limit 1/second -j LOG +-A logdrop-ntp-60 -j DROP +-A logdrop-ntp-61 -m limit --limit 1/second -j LOG +-A logdrop-ntp-61 -j DROP +-A logdrop-ntp-62 -m limit --limit 1/second -j LOG +-A logdrop-ntp-62 -j DROP +-A logdrop-ntp-63 -m limit --limit 1/second -j LOG +-A logdrop-ntp-63 -j DROP +-A logdrop-ntp-64 -m limit --limit 1/second -j LOG +-A logdrop-ntp-64 -j DROP +-A logdrop-ntp-65 -m limit --limit 1/second -j LOG +-A logdrop-ntp-65 -j DROP +-A logdrop-ntp-66 -m limit --limit 1/second -j LOG +-A logdrop-ntp-66 -j DROP +-A logdrop-ntp-67 -m limit --limit 1/second -j LOG +-A logdrop-ntp-67 -j DROP +-A logdrop-ntp-68 -m limit --limit 1/second -j LOG +-A logdrop-ntp-68 -j DROP +-A logdrop-ntp-69 -m limit --limit 1/second -j LOG +-A logdrop-ntp-69 -j DROP +-A logdrop-ntp-7 -m limit --limit 1/second -j LOG +-A logdrop-ntp-7 -j DROP +-A logdrop-ntp-70 -m limit --limit 1/second -j LOG +-A logdrop-ntp-70 -j DROP +-A logdrop-ntp-71 -m limit --limit 1/second -j LOG +-A logdrop-ntp-71 -j DROP +-A logdrop-ntp-72 -m limit --limit 1/second -j LOG +-A logdrop-ntp-72 -j DROP +-A logdrop-ntp-73 -m limit --limit 1/second -j LOG +-A logdrop-ntp-73 -j DROP +-A logdrop-ntp-74 -m limit --limit 1/second -j LOG +-A logdrop-ntp-74 -j DROP +-A logdrop-ntp-75 -m limit --limit 1/second -j LOG +-A logdrop-ntp-75 -j DROP +-A logdrop-ntp-76 -m limit --limit 1/second -j LOG +-A logdrop-ntp-76 -j DROP +-A logdrop-ntp-77 -m limit --limit 1/second -j LOG +-A logdrop-ntp-77 -j DROP +-A logdrop-ntp-78 -m limit --limit 1/second -j LOG +-A logdrop-ntp-78 -j DROP +-A logdrop-ntp-79 -m limit --limit 1/second -j LOG +-A logdrop-ntp-79 -j DROP +-A logdrop-ntp-8 -m limit --limit 1/second -j LOG +-A logdrop-ntp-8 -j DROP +-A logdrop-ntp-80 -m limit --limit 1/second -j LOG +-A logdrop-ntp-80 -j DROP +-A logdrop-ntp-81 -m limit --limit 1/second -j LOG +-A logdrop-ntp-81 -j DROP +-A logdrop-ntp-82 -m limit --limit 1/second -j LOG +-A logdrop-ntp-82 -j DROP +-A logdrop-ntp-83 -m limit --limit 1/second -j LOG +-A logdrop-ntp-83 -j DROP +-A logdrop-ntp-84 -m limit --limit 1/second -j LOG +-A logdrop-ntp-84 -j DROP +-A logdrop-ntp-85 -m limit --limit 1/second -j LOG +-A logdrop-ntp-85 -j DROP +-A logdrop-ntp-86 -m limit --limit 1/second -j LOG +-A logdrop-ntp-86 -j DROP +-A logdrop-ntp-87 -m limit --limit 1/second -j LOG +-A logdrop-ntp-87 -j DROP +-A logdrop-ntp-88 -m limit --limit 1/second -j LOG +-A logdrop-ntp-88 -j DROP +-A logdrop-ntp-89 -m limit --limit 1/second -j LOG +-A logdrop-ntp-89 -j DROP +-A logdrop-ntp-9 -m limit --limit 1/second -j LOG +-A logdrop-ntp-9 -j DROP +-A logdrop-ntp-90 -m limit --limit 1/second -j LOG +-A logdrop-ntp-90 -j DROP +-A logdrop-ntp-91 -m limit --limit 1/second -j LOG +-A logdrop-ntp-91 -j DROP +-A logdrop-ntp-92 -m limit --limit 1/second -j LOG +-A logdrop-ntp-92 -j DROP +-A logdrop-ntp-93 -m limit --limit 1/second -j LOG +-A logdrop-ntp-93 -j DROP +-A logdrop-ntp-94 -m limit --limit 1/second -j LOG +-A logdrop-ntp-94 -j DROP +-A logdrop-ntp-95 -m limit --limit 1/second -j LOG +-A logdrop-ntp-95 -j DROP +-A logdrop-ntp-96 -m limit --limit 1/second -j LOG +-A logdrop-ntp-96 -j DROP +-A logdrop-ntp-97 -m limit --limit 1/second -j LOG +-A logdrop-ntp-97 -j DROP +-A logdrop-ntp-98 -m limit --limit 1/second -j LOG +-A logdrop-ntp-98 -j DROP +-A logdrop-ntp-99 -m limit --limit 1/second -j LOG +-A logdrop-ntp-99 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG -A logpass-1 -j LOG -A logpass-2 -j TEE --gateway 10.0.0.1 @@ -30315,1493 +30315,1493 @@ COMMIT *raw :OUTPUT ACCEPT [0:0] :PREROUTING ACCEPT [0:0] --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -i eth0 -j CT --notrack -A PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack diff --git a/test/output/filter-limit/rules6-save b/test/output/filter-limit/rules6-save index 2eef3cb..ff7a50e 100644 --- a/test/output/filter-limit/rules6-save +++ b/test/output/filter-limit/rules6-save @@ -2068,1011 +2068,115 @@ :limit-2925 - [0:0] :limit-2926 - [0:0] :limit-2927 - [0:0] -:limit-2928 - [0:0] -:limit-2929 - [0:0] :limit-293 - [0:0] -:limit-2930 - [0:0] -:limit-2931 - [0:0] -:limit-2932 - [0:0] -:limit-2933 - [0:0] -:limit-2934 - [0:0] -:limit-2935 - [0:0] -:limit-2936 - [0:0] -:limit-2937 - [0:0] -:limit-2938 - [0:0] -:limit-2939 - [0:0] :limit-294 - [0:0] -:limit-2940 - [0:0] -:limit-2941 - [0:0] -:limit-2942 - [0:0] -:limit-2943 - [0:0] -:limit-2944 - [0:0] -:limit-2945 - [0:0] -:limit-2946 - [0:0] -:limit-2947 - [0:0] -:limit-2948 - [0:0] -:limit-2949 - [0:0] :limit-295 - [0:0] -:limit-2950 - [0:0] -:limit-2951 - [0:0] -:limit-2952 - [0:0] -:limit-2953 - [0:0] -:limit-2954 - [0:0] -:limit-2955 - [0:0] -:limit-2956 - [0:0] -:limit-2957 - [0:0] -:limit-2958 - [0:0] :limit-296 - [0:0] -:limit-2960 - [0:0] -:limit-2961 - [0:0] -:limit-2962 - [0:0] -:limit-2963 - [0:0] -:limit-2964 - [0:0] -:limit-2966 - [0:0] -:limit-2967 - [0:0] -:limit-2968 - [0:0] -:limit-2969 - [0:0] :limit-297 - [0:0] -:limit-2970 - [0:0] -:limit-2971 - [0:0] -:limit-2972 - [0:0] -:limit-2973 - [0:0] -:limit-2974 - [0:0] -:limit-2975 - [0:0] -:limit-2976 - [0:0] -:limit-2977 - [0:0] -:limit-2978 - [0:0] :limit-298 - [0:0] -:limit-2980 - [0:0] -:limit-2981 - [0:0] -:limit-2982 - [0:0] -:limit-2983 - [0:0] -:limit-2984 - [0:0] -:limit-2986 - [0:0] -:limit-2987 - [0:0] -:limit-2988 - [0:0] -:limit-2989 - [0:0] :limit-299 - [0:0] -:limit-2990 - [0:0] -:limit-2991 - [0:0] -:limit-2992 - [0:0] -:limit-2993 - [0:0] -:limit-2994 - [0:0] -:limit-2995 - [0:0] -:limit-2996 - [0:0] -:limit-2997 - [0:0] -:limit-2998 - [0:0] :limit-3 - [0:0] :limit-30 - [0:0] :limit-300 - [0:0] -:limit-3000 - [0:0] -:limit-3001 - [0:0] -:limit-3002 - [0:0] -:limit-3003 - [0:0] -:limit-3004 - [0:0] -:limit-3006 - [0:0] -:limit-3007 - [0:0] -:limit-3008 - [0:0] -:limit-3009 - [0:0] :limit-301 - [0:0] -:limit-3010 - [0:0] -:limit-3011 - [0:0] -:limit-3012 - [0:0] -:limit-3013 - [0:0] -:limit-3014 - [0:0] -:limit-3015 - [0:0] -:limit-3016 - [0:0] -:limit-3017 - [0:0] -:limit-3018 - [0:0] :limit-302 - [0:0] -:limit-3020 - [0:0] -:limit-3021 - [0:0] -:limit-3022 - [0:0] -:limit-3023 - [0:0] -:limit-3024 - [0:0] -:limit-3026 - [0:0] -:limit-3027 - [0:0] -:limit-3028 - [0:0] -:limit-3029 - [0:0] :limit-303 - [0:0] -:limit-3030 - [0:0] -:limit-3031 - [0:0] -:limit-3032 - [0:0] -:limit-3033 - [0:0] -:limit-3034 - [0:0] -:limit-3035 - [0:0] -:limit-3036 - [0:0] -:limit-3037 - [0:0] -:limit-3038 - [0:0] -:limit-3039 - [0:0] :limit-304 - [0:0] -:limit-3040 - [0:0] -:limit-3041 - [0:0] -:limit-3042 - [0:0] -:limit-3043 - [0:0] -:limit-3044 - [0:0] -:limit-3045 - [0:0] -:limit-3046 - [0:0] -:limit-3047 - [0:0] -:limit-3048 - [0:0] :limit-305 - [0:0] -:limit-3050 - [0:0] -:limit-3051 - [0:0] -:limit-3052 - [0:0] -:limit-3053 - [0:0] -:limit-3054 - [0:0] -:limit-3056 - [0:0] -:limit-3057 - [0:0] -:limit-3058 - [0:0] -:limit-3059 - [0:0] :limit-306 - [0:0] -:limit-3060 - [0:0] -:limit-3061 - [0:0] -:limit-3062 - [0:0] -:limit-3063 - [0:0] -:limit-3064 - [0:0] -:limit-3065 - [0:0] -:limit-3066 - [0:0] -:limit-3067 - [0:0] -:limit-3068 - [0:0] :limit-307 - [0:0] -:limit-3070 - [0:0] -:limit-3071 - [0:0] -:limit-3072 - [0:0] -:limit-3073 - [0:0] -:limit-3074 - [0:0] -:limit-3076 - [0:0] -:limit-3077 - [0:0] -:limit-3078 - [0:0] -:limit-3079 - [0:0] :limit-308 - [0:0] -:limit-3080 - [0:0] -:limit-3081 - [0:0] -:limit-3082 - [0:0] -:limit-3083 - [0:0] -:limit-3084 - [0:0] -:limit-3085 - [0:0] -:limit-3086 - [0:0] -:limit-3087 - [0:0] -:limit-3088 - [0:0] :limit-309 - [0:0] -:limit-3090 - [0:0] -:limit-3091 - [0:0] -:limit-3092 - [0:0] -:limit-3093 - [0:0] -:limit-3094 - [0:0] -:limit-3096 - [0:0] -:limit-3097 - [0:0] -:limit-3098 - [0:0] -:limit-3099 - [0:0] :limit-31 - [0:0] :limit-310 - [0:0] -:limit-3100 - [0:0] -:limit-3101 - [0:0] -:limit-3102 - [0:0] -:limit-3103 - [0:0] -:limit-3104 - [0:0] -:limit-3105 - [0:0] -:limit-3106 - [0:0] -:limit-3107 - [0:0] -:limit-3108 - [0:0] :limit-311 - [0:0] -:limit-3110 - [0:0] -:limit-3111 - [0:0] -:limit-3112 - [0:0] -:limit-3113 - [0:0] -:limit-3114 - [0:0] -:limit-3116 - [0:0] -:limit-3117 - [0:0] -:limit-3118 - [0:0] -:limit-3119 - [0:0] :limit-312 - [0:0] -:limit-3120 - [0:0] -:limit-3121 - [0:0] -:limit-3122 - [0:0] -:limit-3123 - [0:0] -:limit-3124 - [0:0] -:limit-3125 - [0:0] -:limit-3126 - [0:0] -:limit-3127 - [0:0] -:limit-3128 - [0:0] -:limit-3129 - [0:0] :limit-313 - [0:0] -:limit-3130 - [0:0] -:limit-3131 - [0:0] -:limit-3132 - [0:0] -:limit-3133 - [0:0] -:limit-3134 - [0:0] -:limit-3135 - [0:0] -:limit-3136 - [0:0] -:limit-3137 - [0:0] -:limit-3138 - [0:0] :limit-314 - [0:0] -:limit-3140 - [0:0] -:limit-3141 - [0:0] -:limit-3142 - [0:0] -:limit-3143 - [0:0] -:limit-3144 - [0:0] -:limit-3146 - [0:0] -:limit-3147 - [0:0] -:limit-3148 - [0:0] -:limit-3149 - [0:0] :limit-315 - [0:0] -:limit-3150 - [0:0] -:limit-3151 - [0:0] -:limit-3152 - [0:0] -:limit-3153 - [0:0] -:limit-3154 - [0:0] -:limit-3155 - [0:0] -:limit-3156 - [0:0] -:limit-3157 - [0:0] -:limit-3158 - [0:0] :limit-316 - [0:0] -:limit-3160 - [0:0] -:limit-3161 - [0:0] -:limit-3162 - [0:0] -:limit-3163 - [0:0] -:limit-3164 - [0:0] -:limit-3166 - [0:0] -:limit-3167 - [0:0] -:limit-3168 - [0:0] -:limit-3169 - [0:0] :limit-317 - [0:0] -:limit-3170 - [0:0] -:limit-3171 - [0:0] -:limit-3172 - [0:0] -:limit-3173 - [0:0] -:limit-3174 - [0:0] -:limit-3175 - [0:0] -:limit-3176 - [0:0] -:limit-3177 - [0:0] -:limit-3178 - [0:0] :limit-318 - [0:0] -:limit-3180 - [0:0] -:limit-3181 - [0:0] -:limit-3182 - [0:0] -:limit-3183 - [0:0] -:limit-3184 - [0:0] -:limit-3186 - [0:0] -:limit-3187 - [0:0] -:limit-3188 - [0:0] -:limit-3189 - [0:0] :limit-319 - [0:0] -:limit-3190 - [0:0] -:limit-3191 - [0:0] -:limit-3192 - [0:0] -:limit-3193 - [0:0] -:limit-3194 - [0:0] -:limit-3195 - [0:0] -:limit-3196 - [0:0] -:limit-3197 - [0:0] -:limit-3198 - [0:0] :limit-32 - [0:0] :limit-320 - [0:0] -:limit-3200 - [0:0] -:limit-3201 - [0:0] -:limit-3202 - [0:0] -:limit-3203 - [0:0] -:limit-3204 - [0:0] -:limit-3206 - [0:0] -:limit-3207 - [0:0] -:limit-3208 - [0:0] -:limit-3209 - [0:0] :limit-321 - [0:0] -:limit-3210 - [0:0] -:limit-3211 - [0:0] -:limit-3212 - [0:0] -:limit-3213 - [0:0] -:limit-3214 - [0:0] -:limit-3215 - [0:0] -:limit-3216 - [0:0] -:limit-3217 - [0:0] -:limit-3218 - [0:0] -:limit-3219 - [0:0] :limit-322 - [0:0] -:limit-3220 - [0:0] -:limit-3221 - [0:0] -:limit-3222 - [0:0] -:limit-3223 - [0:0] -:limit-3224 - [0:0] -:limit-3225 - [0:0] -:limit-3226 - [0:0] -:limit-3227 - [0:0] -:limit-3228 - [0:0] :limit-323 - [0:0] -:limit-3230 - [0:0] -:limit-3231 - [0:0] -:limit-3232 - [0:0] -:limit-3233 - [0:0] -:limit-3234 - [0:0] -:limit-3236 - [0:0] -:limit-3237 - [0:0] -:limit-3238 - [0:0] -:limit-3239 - [0:0] :limit-324 - [0:0] -:limit-3240 - [0:0] -:limit-3241 - [0:0] -:limit-3242 - [0:0] -:limit-3243 - [0:0] -:limit-3244 - [0:0] -:limit-3245 - [0:0] -:limit-3246 - [0:0] -:limit-3247 - [0:0] -:limit-3248 - [0:0] :limit-325 - [0:0] -:limit-3250 - [0:0] -:limit-3251 - [0:0] -:limit-3252 - [0:0] -:limit-3253 - [0:0] -:limit-3254 - [0:0] -:limit-3256 - [0:0] -:limit-3257 - [0:0] -:limit-3258 - [0:0] -:limit-3259 - [0:0] :limit-326 - [0:0] -:limit-3260 - [0:0] -:limit-3261 - [0:0] -:limit-3262 - [0:0] -:limit-3263 - [0:0] -:limit-3264 - [0:0] -:limit-3265 - [0:0] -:limit-3266 - [0:0] -:limit-3267 - [0:0] -:limit-3268 - [0:0] :limit-327 - [0:0] -:limit-3270 - [0:0] -:limit-3271 - [0:0] -:limit-3272 - [0:0] -:limit-3273 - [0:0] -:limit-3274 - [0:0] -:limit-3276 - [0:0] -:limit-3277 - [0:0] -:limit-3278 - [0:0] -:limit-3279 - [0:0] :limit-328 - [0:0] -:limit-3280 - [0:0] -:limit-3281 - [0:0] -:limit-3282 - [0:0] -:limit-3283 - [0:0] -:limit-3284 - [0:0] -:limit-3285 - [0:0] -:limit-3286 - [0:0] -:limit-3287 - [0:0] -:limit-3288 - [0:0] :limit-329 - [0:0] -:limit-3290 - [0:0] -:limit-3291 - [0:0] -:limit-3292 - [0:0] -:limit-3293 - [0:0] -:limit-3294 - [0:0] -:limit-3296 - [0:0] -:limit-3297 - [0:0] -:limit-3298 - [0:0] -:limit-3299 - [0:0] :limit-33 - [0:0] :limit-330 - [0:0] -:limit-3300 - [0:0] -:limit-3301 - [0:0] -:limit-3302 - [0:0] -:limit-3303 - [0:0] -:limit-3304 - [0:0] -:limit-3305 - [0:0] -:limit-3306 - [0:0] -:limit-3307 - [0:0] -:limit-3308 - [0:0] -:limit-3309 - [0:0] :limit-331 - [0:0] -:limit-3310 - [0:0] -:limit-3311 - [0:0] -:limit-3312 - [0:0] -:limit-3313 - [0:0] -:limit-3314 - [0:0] -:limit-3315 - [0:0] -:limit-3316 - [0:0] -:limit-3317 - [0:0] -:limit-3318 - [0:0] :limit-332 - [0:0] -:limit-3320 - [0:0] -:limit-3321 - [0:0] -:limit-3322 - [0:0] -:limit-3323 - [0:0] -:limit-3324 - [0:0] -:limit-3326 - [0:0] -:limit-3327 - [0:0] -:limit-3328 - [0:0] -:limit-3329 - [0:0] :limit-333 - [0:0] -:limit-3330 - [0:0] -:limit-3331 - [0:0] -:limit-3332 - [0:0] -:limit-3333 - [0:0] -:limit-3334 - [0:0] -:limit-3335 - [0:0] -:limit-3336 - [0:0] -:limit-3337 - [0:0] -:limit-3338 - [0:0] :limit-334 - [0:0] -:limit-3340 - [0:0] -:limit-3341 - [0:0] -:limit-3342 - [0:0] -:limit-3343 - [0:0] -:limit-3344 - [0:0] -:limit-3346 - [0:0] -:limit-3347 - [0:0] -:limit-3348 - [0:0] -:limit-3349 - [0:0] :limit-335 - [0:0] -:limit-3350 - [0:0] -:limit-3351 - [0:0] -:limit-3352 - [0:0] -:limit-3353 - [0:0] -:limit-3354 - [0:0] -:limit-3355 - [0:0] -:limit-3356 - [0:0] -:limit-3357 - [0:0] -:limit-3358 - [0:0] :limit-336 - [0:0] -:limit-3360 - [0:0] -:limit-3361 - [0:0] -:limit-3362 - [0:0] -:limit-3363 - [0:0] -:limit-3364 - [0:0] -:limit-3366 - [0:0] -:limit-3367 - [0:0] -:limit-3368 - [0:0] -:limit-3369 - [0:0] :limit-337 - [0:0] -:limit-3370 - [0:0] -:limit-3371 - [0:0] -:limit-3372 - [0:0] -:limit-3373 - [0:0] -:limit-3374 - [0:0] -:limit-3375 - [0:0] -:limit-3376 - [0:0] -:limit-3377 - [0:0] -:limit-3378 - [0:0] :limit-338 - [0:0] -:limit-3380 - [0:0] -:limit-3381 - [0:0] -:limit-3382 - [0:0] -:limit-3383 - [0:0] -:limit-3384 - [0:0] -:limit-3386 - [0:0] -:limit-3387 - [0:0] -:limit-3388 - [0:0] -:limit-3389 - [0:0] :limit-339 - [0:0] -:limit-3390 - [0:0] -:limit-3391 - [0:0] -:limit-3392 - [0:0] -:limit-3393 - [0:0] -:limit-3394 - [0:0] -:limit-3395 - [0:0] -:limit-3396 - [0:0] -:limit-3397 - [0:0] -:limit-3398 - [0:0] -:limit-3399 - [0:0] :limit-34 - [0:0] :limit-340 - [0:0] -:limit-3400 - [0:0] -:limit-3401 - [0:0] -:limit-3402 - [0:0] -:limit-3403 - [0:0] -:limit-3404 - [0:0] -:limit-3405 - [0:0] -:limit-3406 - [0:0] -:limit-3407 - [0:0] -:limit-3408 - [0:0] :limit-341 - [0:0] -:limit-3410 - [0:0] -:limit-3411 - [0:0] -:limit-3412 - [0:0] -:limit-3413 - [0:0] -:limit-3414 - [0:0] -:limit-3416 - [0:0] -:limit-3417 - [0:0] -:limit-3418 - [0:0] -:limit-3419 - [0:0] :limit-342 - [0:0] -:limit-3420 - [0:0] -:limit-3421 - [0:0] -:limit-3422 - [0:0] -:limit-3423 - [0:0] -:limit-3424 - [0:0] -:limit-3425 - [0:0] -:limit-3426 - [0:0] -:limit-3427 - [0:0] -:limit-3428 - [0:0] :limit-343 - [0:0] -:limit-3430 - [0:0] -:limit-3431 - [0:0] -:limit-3432 - [0:0] -:limit-3433 - [0:0] -:limit-3434 - [0:0] -:limit-3436 - [0:0] -:limit-3437 - [0:0] -:limit-3438 - [0:0] -:limit-3439 - [0:0] :limit-344 - [0:0] -:limit-3440 - [0:0] -:limit-3441 - [0:0] -:limit-3442 - [0:0] -:limit-3443 - [0:0] -:limit-3444 - [0:0] -:limit-3445 - [0:0] -:limit-3446 - [0:0] -:limit-3447 - [0:0] -:limit-3448 - [0:0] :limit-345 - [0:0] -:limit-3450 - [0:0] -:limit-3451 - [0:0] -:limit-3452 - [0:0] -:limit-3453 - [0:0] -:limit-3454 - [0:0] -:limit-3456 - [0:0] -:limit-3457 - [0:0] -:limit-3458 - [0:0] -:limit-3459 - [0:0] :limit-346 - [0:0] -:limit-3460 - [0:0] -:limit-3461 - [0:0] -:limit-3462 - [0:0] -:limit-3463 - [0:0] -:limit-3464 - [0:0] -:limit-3465 - [0:0] -:limit-3466 - [0:0] -:limit-3467 - [0:0] -:limit-3468 - [0:0] :limit-347 - [0:0] -:limit-3470 - [0:0] -:limit-3471 - [0:0] -:limit-3472 - [0:0] -:limit-3473 - [0:0] -:limit-3474 - [0:0] -:limit-3476 - [0:0] -:limit-3477 - [0:0] -:limit-3478 - [0:0] -:limit-3479 - [0:0] :limit-348 - [0:0] -:limit-3480 - [0:0] -:limit-3481 - [0:0] -:limit-3482 - [0:0] -:limit-3483 - [0:0] -:limit-3484 - [0:0] -:limit-3485 - [0:0] -:limit-3486 - [0:0] -:limit-3487 - [0:0] -:limit-3488 - [0:0] -:limit-3489 - [0:0] :limit-349 - [0:0] -:limit-3490 - [0:0] -:limit-3491 - [0:0] -:limit-3492 - [0:0] -:limit-3493 - [0:0] -:limit-3494 - [0:0] -:limit-3495 - [0:0] -:limit-3496 - [0:0] -:limit-3497 - [0:0] -:limit-3498 - [0:0] :limit-35 - [0:0] :limit-350 - [0:0] -:limit-3500 - [0:0] -:limit-3501 - [0:0] -:limit-3502 - [0:0] -:limit-3503 - [0:0] -:limit-3504 - [0:0] -:limit-3506 - [0:0] -:limit-3507 - [0:0] -:limit-3508 - [0:0] -:limit-3509 - [0:0] :limit-351 - [0:0] -:limit-3510 - [0:0] -:limit-3511 - [0:0] -:limit-3512 - [0:0] -:limit-3513 - [0:0] -:limit-3514 - [0:0] -:limit-3515 - [0:0] -:limit-3516 - [0:0] -:limit-3517 - [0:0] -:limit-3518 - [0:0] :limit-352 - [0:0] -:limit-3520 - [0:0] -:limit-3521 - [0:0] -:limit-3522 - [0:0] -:limit-3523 - [0:0] -:limit-3524 - [0:0] -:limit-3526 - [0:0] -:limit-3527 - [0:0] -:limit-3528 - [0:0] -:limit-3529 - [0:0] :limit-353 - [0:0] -:limit-3530 - [0:0] -:limit-3531 - [0:0] -:limit-3532 - [0:0] -:limit-3533 - [0:0] -:limit-3534 - [0:0] -:limit-3535 - [0:0] -:limit-3536 - [0:0] -:limit-3537 - [0:0] -:limit-3538 - [0:0] :limit-354 - [0:0] -:limit-3540 - [0:0] -:limit-3541 - [0:0] -:limit-3542 - [0:0] -:limit-3543 - [0:0] -:limit-3544 - [0:0] -:limit-3546 - [0:0] -:limit-3547 - [0:0] -:limit-3548 - [0:0] -:limit-3549 - [0:0] :limit-355 - [0:0] -:limit-3550 - [0:0] -:limit-3551 - [0:0] -:limit-3552 - [0:0] -:limit-3553 - [0:0] -:limit-3554 - [0:0] -:limit-3555 - [0:0] -:limit-3556 - [0:0] -:limit-3557 - [0:0] -:limit-3558 - [0:0] :limit-356 - [0:0] -:limit-3560 - [0:0] -:limit-3561 - [0:0] -:limit-3562 - [0:0] -:limit-3563 - [0:0] -:limit-3564 - [0:0] -:limit-3566 - [0:0] -:limit-3567 - [0:0] -:limit-3568 - [0:0] -:limit-3569 - [0:0] :limit-357 - [0:0] -:limit-3570 - [0:0] -:limit-3571 - [0:0] -:limit-3572 - [0:0] -:limit-3573 - [0:0] -:limit-3574 - [0:0] -:limit-3575 - [0:0] -:limit-3576 - [0:0] -:limit-3577 - [0:0] -:limit-3578 - [0:0] -:limit-3579 - [0:0] :limit-358 - [0:0] -:limit-3580 - [0:0] -:limit-3581 - [0:0] -:limit-3582 - [0:0] -:limit-3583 - [0:0] -:limit-3584 - [0:0] -:limit-3585 - [0:0] -:limit-3586 - [0:0] -:limit-3587 - [0:0] -:limit-3588 - [0:0] :limit-359 - [0:0] -:limit-3590 - [0:0] -:limit-3591 - [0:0] -:limit-3592 - [0:0] -:limit-3593 - [0:0] -:limit-3594 - [0:0] -:limit-3596 - [0:0] -:limit-3597 - [0:0] -:limit-3598 - [0:0] -:limit-3599 - [0:0] :limit-36 - [0:0] :limit-360 - [0:0] -:limit-3600 - [0:0] -:limit-3601 - [0:0] -:limit-3602 - [0:0] -:limit-3603 - [0:0] -:limit-3604 - [0:0] -:limit-3605 - [0:0] -:limit-3606 - [0:0] -:limit-3607 - [0:0] -:limit-3608 - [0:0] :limit-361 - [0:0] -:limit-3610 - [0:0] -:limit-3611 - [0:0] -:limit-3612 - [0:0] -:limit-3613 - [0:0] -:limit-3614 - [0:0] -:limit-3616 - [0:0] -:limit-3617 - [0:0] -:limit-3618 - [0:0] -:limit-3619 - [0:0] :limit-362 - [0:0] -:limit-3620 - [0:0] -:limit-3621 - [0:0] -:limit-3622 - [0:0] -:limit-3623 - [0:0] -:limit-3624 - [0:0] -:limit-3625 - [0:0] -:limit-3626 - [0:0] -:limit-3627 - [0:0] -:limit-3628 - [0:0] :limit-363 - [0:0] -:limit-3630 - [0:0] -:limit-3631 - [0:0] -:limit-3632 - [0:0] -:limit-3633 - [0:0] -:limit-3634 - [0:0] -:limit-3636 - [0:0] -:limit-3637 - [0:0] -:limit-3638 - [0:0] -:limit-3639 - [0:0] :limit-364 - [0:0] -:limit-3640 - [0:0] -:limit-3641 - [0:0] -:limit-3642 - [0:0] -:limit-3643 - [0:0] -:limit-3644 - [0:0] -:limit-3645 - [0:0] -:limit-3646 - [0:0] -:limit-3647 - [0:0] -:limit-3648 - [0:0] :limit-365 - [0:0] -:limit-3650 - [0:0] -:limit-3651 - [0:0] -:limit-3652 - [0:0] -:limit-3653 - [0:0] -:limit-3654 - [0:0] -:limit-3656 - [0:0] -:limit-3657 - [0:0] -:limit-3658 - [0:0] -:limit-3659 - [0:0] :limit-366 - [0:0] -:limit-3660 - [0:0] -:limit-3661 - [0:0] -:limit-3662 - [0:0] -:limit-3663 - [0:0] -:limit-3664 - [0:0] -:limit-3665 - [0:0] -:limit-3666 - [0:0] -:limit-3667 - [0:0] -:limit-3668 - [0:0] -:limit-3669 - [0:0] :limit-367 - [0:0] -:limit-3670 - [0:0] -:limit-3671 - [0:0] -:limit-3672 - [0:0] -:limit-3673 - [0:0] -:limit-3674 - [0:0] -:limit-3675 - [0:0] -:limit-3676 - [0:0] -:limit-3677 - [0:0] -:limit-3678 - [0:0] :limit-368 - [0:0] -:limit-3680 - [0:0] -:limit-3681 - [0:0] -:limit-3682 - [0:0] -:limit-3683 - [0:0] -:limit-3684 - [0:0] -:limit-3686 - [0:0] -:limit-3687 - [0:0] -:limit-3688 - [0:0] -:limit-3689 - [0:0] :limit-369 - [0:0] -:limit-3690 - [0:0] -:limit-3691 - [0:0] -:limit-3692 - [0:0] -:limit-3693 - [0:0] -:limit-3694 - [0:0] -:limit-3695 - [0:0] -:limit-3696 - [0:0] -:limit-3697 - [0:0] -:limit-3698 - [0:0] :limit-37 - [0:0] :limit-370 - [0:0] -:limit-3700 - [0:0] -:limit-3701 - [0:0] -:limit-3702 - [0:0] -:limit-3703 - [0:0] -:limit-3704 - [0:0] -:limit-3706 - [0:0] -:limit-3707 - [0:0] -:limit-3708 - [0:0] -:limit-3709 - [0:0] :limit-371 - [0:0] -:limit-3710 - [0:0] -:limit-3711 - [0:0] -:limit-3712 - [0:0] -:limit-3713 - [0:0] -:limit-3714 - [0:0] -:limit-3715 - [0:0] -:limit-3716 - [0:0] -:limit-3717 - [0:0] -:limit-3718 - [0:0] :limit-372 - [0:0] -:limit-3720 - [0:0] -:limit-3721 - [0:0] -:limit-3722 - [0:0] -:limit-3723 - [0:0] -:limit-3724 - [0:0] -:limit-3726 - [0:0] -:limit-3727 - [0:0] -:limit-3728 - [0:0] -:limit-3729 - [0:0] :limit-373 - [0:0] -:limit-3730 - [0:0] -:limit-3731 - [0:0] -:limit-3732 - [0:0] -:limit-3733 - [0:0] -:limit-3734 - [0:0] -:limit-3735 - [0:0] -:limit-3736 - [0:0] -:limit-3737 - [0:0] -:limit-3738 - [0:0] :limit-374 - [0:0] -:limit-3740 - [0:0] -:limit-3741 - [0:0] -:limit-3742 - [0:0] -:limit-3743 - [0:0] -:limit-3744 - [0:0] -:limit-3746 - [0:0] -:limit-3747 - [0:0] -:limit-3748 - [0:0] -:limit-3749 - [0:0] :limit-375 - [0:0] -:limit-3750 - [0:0] -:limit-3751 - [0:0] -:limit-3752 - [0:0] -:limit-3753 - [0:0] -:limit-3754 - [0:0] -:limit-3755 - [0:0] -:limit-3756 - [0:0] -:limit-3757 - [0:0] -:limit-3758 - [0:0] -:limit-3759 - [0:0] :limit-376 - [0:0] -:limit-3760 - [0:0] -:limit-3761 - [0:0] -:limit-3762 - [0:0] -:limit-3763 - [0:0] -:limit-3764 - [0:0] -:limit-3765 - [0:0] -:limit-3766 - [0:0] -:limit-3767 - [0:0] -:limit-3768 - [0:0] :limit-377 - [0:0] -:limit-3770 - [0:0] -:limit-3771 - [0:0] -:limit-3772 - [0:0] -:limit-3773 - [0:0] -:limit-3774 - [0:0] -:limit-3776 - [0:0] -:limit-3777 - [0:0] -:limit-3778 - [0:0] -:limit-3779 - [0:0] :limit-378 - [0:0] -:limit-3780 - [0:0] -:limit-3781 - [0:0] -:limit-3782 - [0:0] -:limit-3783 - [0:0] -:limit-3784 - [0:0] -:limit-3785 - [0:0] -:limit-3786 - [0:0] -:limit-3787 - [0:0] -:limit-3788 - [0:0] :limit-379 - [0:0] -:limit-3790 - [0:0] -:limit-3791 - [0:0] -:limit-3792 - [0:0] -:limit-3793 - [0:0] -:limit-3794 - [0:0] -:limit-3796 - [0:0] -:limit-3797 - [0:0] -:limit-3798 - [0:0] -:limit-3799 - [0:0] :limit-38 - [0:0] :limit-380 - [0:0] -:limit-3800 - [0:0] -:limit-3801 - [0:0] -:limit-3802 - [0:0] -:limit-3803 - [0:0] -:limit-3804 - [0:0] -:limit-3805 - [0:0] -:limit-3806 - [0:0] -:limit-3807 - [0:0] -:limit-3808 - [0:0] :limit-381 - [0:0] -:limit-3810 - [0:0] -:limit-3811 - [0:0] -:limit-3812 - [0:0] -:limit-3813 - [0:0] -:limit-3814 - [0:0] -:limit-3816 - [0:0] -:limit-3817 - [0:0] -:limit-3818 - [0:0] -:limit-3819 - [0:0] :limit-382 - [0:0] -:limit-3820 - [0:0] -:limit-3821 - [0:0] -:limit-3822 - [0:0] -:limit-3823 - [0:0] -:limit-3824 - [0:0] -:limit-3825 - [0:0] -:limit-3826 - [0:0] -:limit-3827 - [0:0] -:limit-3828 - [0:0] :limit-383 - [0:0] -:limit-3830 - [0:0] -:limit-3831 - [0:0] -:limit-3832 - [0:0] -:limit-3833 - [0:0] -:limit-3834 - [0:0] -:limit-3836 - [0:0] -:limit-3837 - [0:0] -:limit-3838 - [0:0] -:limit-3839 - [0:0] :limit-384 - [0:0] -:limit-3840 - [0:0] -:limit-3841 - [0:0] -:limit-3842 - [0:0] -:limit-3843 - [0:0] -:limit-3844 - [0:0] -:limit-3845 - [0:0] -:limit-3846 - [0:0] -:limit-3847 - [0:0] -:limit-3848 - [0:0] -:limit-3849 - [0:0] :limit-385 - [0:0] -:limit-3850 - [0:0] -:limit-3851 - [0:0] -:limit-3852 - [0:0] -:limit-3853 - [0:0] -:limit-3854 - [0:0] -:limit-3855 - [0:0] -:limit-3856 - [0:0] -:limit-3857 - [0:0] -:limit-3858 - [0:0] -:limit-3859 - [0:0] :limit-386 - [0:0] -:limit-3860 - [0:0] -:limit-3861 - [0:0] -:limit-3862 - [0:0] -:limit-3863 - [0:0] -:limit-3864 - [0:0] -:limit-3865 - [0:0] -:limit-3866 - [0:0] -:limit-3867 - [0:0] -:limit-3868 - [0:0] -:limit-3869 - [0:0] :limit-387 - [0:0] -:limit-3870 - [0:0] -:limit-3871 - [0:0] -:limit-3872 - [0:0] -:limit-3873 - [0:0] -:limit-3874 - [0:0] -:limit-3875 - [0:0] -:limit-3876 - [0:0] -:limit-3877 - [0:0] -:limit-3878 - [0:0] -:limit-3879 - [0:0] :limit-388 - [0:0] -:limit-3880 - [0:0] -:limit-3881 - [0:0] -:limit-3882 - [0:0] -:limit-3883 - [0:0] -:limit-3884 - [0:0] -:limit-3885 - [0:0] -:limit-3886 - [0:0] -:limit-3887 - [0:0] -:limit-3888 - [0:0] -:limit-3889 - [0:0] :limit-389 - [0:0] -:limit-3890 - [0:0] -:limit-3891 - [0:0] -:limit-3892 - [0:0] -:limit-3893 - [0:0] -:limit-3894 - [0:0] -:limit-3895 - [0:0] -:limit-3896 - [0:0] -:limit-3897 - [0:0] -:limit-3898 - [0:0] -:limit-3899 - [0:0] :limit-39 - [0:0] :limit-390 - [0:0] -:limit-3900 - [0:0] -:limit-3901 - [0:0] -:limit-3902 - [0:0] -:limit-3903 - [0:0] :limit-391 - [0:0] :limit-392 - [0:0] :limit-393 - [0:0] @@ -3748,12 +2852,905 @@ :limit-997 - [0:0] :limit-998 - [0:0] :limit-999 - [0:0] +:limit-ntp-0 - [0:0] +:limit-ntp-1 - [0:0] +:limit-ntp-10 - [0:0] +:limit-ntp-100 - [0:0] +:limit-ntp-101 - [0:0] +:limit-ntp-102 - [0:0] +:limit-ntp-103 - [0:0] +:limit-ntp-104 - [0:0] +:limit-ntp-105 - [0:0] +:limit-ntp-106 - [0:0] +:limit-ntp-107 - [0:0] +:limit-ntp-108 - [0:0] +:limit-ntp-109 - [0:0] +:limit-ntp-11 - [0:0] +:limit-ntp-110 - [0:0] +:limit-ntp-111 - [0:0] +:limit-ntp-112 - [0:0] +:limit-ntp-113 - [0:0] +:limit-ntp-114 - [0:0] +:limit-ntp-115 - [0:0] +:limit-ntp-116 - [0:0] +:limit-ntp-117 - [0:0] +:limit-ntp-118 - [0:0] +:limit-ntp-119 - [0:0] +:limit-ntp-12 - [0:0] +:limit-ntp-120 - [0:0] +:limit-ntp-122 - [0:0] +:limit-ntp-123 - [0:0] +:limit-ntp-124 - [0:0] +:limit-ntp-125 - [0:0] +:limit-ntp-126 - [0:0] +:limit-ntp-128 - [0:0] +:limit-ntp-129 - [0:0] +:limit-ntp-13 - [0:0] +:limit-ntp-130 - [0:0] +:limit-ntp-131 - [0:0] +:limit-ntp-132 - [0:0] +:limit-ntp-133 - [0:0] +:limit-ntp-134 - [0:0] +:limit-ntp-135 - [0:0] +:limit-ntp-136 - [0:0] +:limit-ntp-137 - [0:0] +:limit-ntp-138 - [0:0] +:limit-ntp-139 - [0:0] +:limit-ntp-14 - [0:0] +:limit-ntp-140 - [0:0] +:limit-ntp-142 - [0:0] +:limit-ntp-143 - [0:0] +:limit-ntp-144 - [0:0] +:limit-ntp-145 - [0:0] +:limit-ntp-146 - [0:0] +:limit-ntp-148 - [0:0] +:limit-ntp-149 - [0:0] +:limit-ntp-15 - [0:0] +:limit-ntp-150 - [0:0] +:limit-ntp-151 - [0:0] +:limit-ntp-152 - [0:0] +:limit-ntp-153 - [0:0] +:limit-ntp-154 - [0:0] +:limit-ntp-155 - [0:0] +:limit-ntp-156 - [0:0] +:limit-ntp-157 - [0:0] +:limit-ntp-158 - [0:0] +:limit-ntp-159 - [0:0] +:limit-ntp-16 - [0:0] +:limit-ntp-160 - [0:0] +:limit-ntp-162 - [0:0] +:limit-ntp-163 - [0:0] +:limit-ntp-164 - [0:0] +:limit-ntp-165 - [0:0] +:limit-ntp-166 - [0:0] +:limit-ntp-168 - [0:0] +:limit-ntp-169 - [0:0] +:limit-ntp-17 - [0:0] +:limit-ntp-170 - [0:0] +:limit-ntp-171 - [0:0] +:limit-ntp-172 - [0:0] +:limit-ntp-173 - [0:0] +:limit-ntp-174 - [0:0] +:limit-ntp-175 - [0:0] +:limit-ntp-176 - [0:0] +:limit-ntp-177 - [0:0] +:limit-ntp-178 - [0:0] +:limit-ntp-179 - [0:0] +:limit-ntp-18 - [0:0] +:limit-ntp-180 - [0:0] +:limit-ntp-182 - [0:0] +:limit-ntp-183 - [0:0] +:limit-ntp-184 - [0:0] +:limit-ntp-185 - [0:0] +:limit-ntp-186 - [0:0] +:limit-ntp-188 - [0:0] +:limit-ntp-189 - [0:0] +:limit-ntp-19 - [0:0] +:limit-ntp-190 - [0:0] +:limit-ntp-191 - [0:0] +:limit-ntp-192 - [0:0] +:limit-ntp-193 - [0:0] +:limit-ntp-194 - [0:0] +:limit-ntp-195 - [0:0] +:limit-ntp-196 - [0:0] +:limit-ntp-197 - [0:0] +:limit-ntp-198 - [0:0] +:limit-ntp-199 - [0:0] +:limit-ntp-2 - [0:0] +:limit-ntp-20 - [0:0] +:limit-ntp-200 - [0:0] +:limit-ntp-201 - [0:0] +:limit-ntp-202 - [0:0] +:limit-ntp-203 - [0:0] +:limit-ntp-204 - [0:0] +:limit-ntp-205 - [0:0] +:limit-ntp-206 - [0:0] +:limit-ntp-207 - [0:0] +:limit-ntp-208 - [0:0] +:limit-ntp-209 - [0:0] +:limit-ntp-21 - [0:0] +:limit-ntp-210 - [0:0] +:limit-ntp-212 - [0:0] +:limit-ntp-213 - [0:0] +:limit-ntp-214 - [0:0] +:limit-ntp-215 - [0:0] +:limit-ntp-216 - [0:0] +:limit-ntp-218 - [0:0] +:limit-ntp-219 - [0:0] +:limit-ntp-22 - [0:0] +:limit-ntp-220 - [0:0] +:limit-ntp-221 - [0:0] +:limit-ntp-222 - [0:0] +:limit-ntp-223 - [0:0] +:limit-ntp-224 - [0:0] +:limit-ntp-225 - [0:0] +:limit-ntp-226 - [0:0] +:limit-ntp-227 - [0:0] +:limit-ntp-228 - [0:0] +:limit-ntp-229 - [0:0] +:limit-ntp-23 - [0:0] +:limit-ntp-230 - [0:0] +:limit-ntp-232 - [0:0] +:limit-ntp-233 - [0:0] +:limit-ntp-234 - [0:0] +:limit-ntp-235 - [0:0] +:limit-ntp-236 - [0:0] +:limit-ntp-238 - [0:0] +:limit-ntp-239 - [0:0] +:limit-ntp-24 - [0:0] +:limit-ntp-240 - [0:0] +:limit-ntp-241 - [0:0] +:limit-ntp-242 - [0:0] +:limit-ntp-243 - [0:0] +:limit-ntp-244 - [0:0] +:limit-ntp-245 - [0:0] +:limit-ntp-246 - [0:0] +:limit-ntp-247 - [0:0] +:limit-ntp-248 - [0:0] +:limit-ntp-249 - [0:0] +:limit-ntp-25 - [0:0] +:limit-ntp-250 - [0:0] +:limit-ntp-252 - [0:0] +:limit-ntp-253 - [0:0] +:limit-ntp-254 - [0:0] +:limit-ntp-255 - [0:0] +:limit-ntp-256 - [0:0] +:limit-ntp-258 - [0:0] +:limit-ntp-259 - [0:0] +:limit-ntp-26 - [0:0] +:limit-ntp-260 - [0:0] +:limit-ntp-261 - [0:0] +:limit-ntp-262 - [0:0] +:limit-ntp-263 - [0:0] +:limit-ntp-264 - [0:0] +:limit-ntp-265 - [0:0] +:limit-ntp-266 - [0:0] +:limit-ntp-267 - [0:0] +:limit-ntp-268 - [0:0] +:limit-ntp-269 - [0:0] +:limit-ntp-27 - [0:0] +:limit-ntp-270 - [0:0] +:limit-ntp-272 - [0:0] +:limit-ntp-273 - [0:0] +:limit-ntp-274 - [0:0] +:limit-ntp-275 - [0:0] +:limit-ntp-276 - [0:0] +:limit-ntp-278 - [0:0] +:limit-ntp-279 - [0:0] +:limit-ntp-28 - [0:0] +:limit-ntp-280 - [0:0] +:limit-ntp-281 - [0:0] +:limit-ntp-282 - [0:0] +:limit-ntp-283 - [0:0] +:limit-ntp-284 - [0:0] +:limit-ntp-285 - [0:0] +:limit-ntp-286 - [0:0] +:limit-ntp-287 - [0:0] +:limit-ntp-288 - [0:0] +:limit-ntp-289 - [0:0] +:limit-ntp-29 - [0:0] +:limit-ntp-290 - [0:0] +:limit-ntp-291 - [0:0] +:limit-ntp-292 - [0:0] +:limit-ntp-293 - [0:0] +:limit-ntp-294 - [0:0] +:limit-ntp-295 - [0:0] +:limit-ntp-296 - [0:0] +:limit-ntp-297 - [0:0] +:limit-ntp-298 - [0:0] +:limit-ntp-299 - [0:0] +:limit-ntp-3 - [0:0] +:limit-ntp-30 - [0:0] +:limit-ntp-300 - [0:0] +:limit-ntp-302 - [0:0] +:limit-ntp-303 - [0:0] +:limit-ntp-304 - [0:0] +:limit-ntp-305 - [0:0] +:limit-ntp-306 - [0:0] +:limit-ntp-308 - [0:0] +:limit-ntp-309 - [0:0] +:limit-ntp-310 - [0:0] +:limit-ntp-311 - [0:0] +:limit-ntp-312 - [0:0] +:limit-ntp-313 - [0:0] +:limit-ntp-314 - [0:0] +:limit-ntp-315 - [0:0] +:limit-ntp-316 - [0:0] +:limit-ntp-317 - [0:0] +:limit-ntp-318 - [0:0] +:limit-ntp-319 - [0:0] +:limit-ntp-32 - [0:0] +:limit-ntp-320 - [0:0] +:limit-ntp-322 - [0:0] +:limit-ntp-323 - [0:0] +:limit-ntp-324 - [0:0] +:limit-ntp-325 - [0:0] +:limit-ntp-326 - [0:0] +:limit-ntp-328 - [0:0] +:limit-ntp-329 - [0:0] +:limit-ntp-33 - [0:0] +:limit-ntp-330 - [0:0] +:limit-ntp-331 - [0:0] +:limit-ntp-332 - [0:0] +:limit-ntp-333 - [0:0] +:limit-ntp-334 - [0:0] +:limit-ntp-335 - [0:0] +:limit-ntp-336 - [0:0] +:limit-ntp-337 - [0:0] +:limit-ntp-338 - [0:0] +:limit-ntp-339 - [0:0] +:limit-ntp-34 - [0:0] +:limit-ntp-340 - [0:0] +:limit-ntp-342 - [0:0] +:limit-ntp-343 - [0:0] +:limit-ntp-344 - [0:0] +:limit-ntp-345 - [0:0] +:limit-ntp-346 - [0:0] +:limit-ntp-348 - [0:0] +:limit-ntp-349 - [0:0] +:limit-ntp-35 - [0:0] +:limit-ntp-350 - [0:0] +:limit-ntp-351 - [0:0] +:limit-ntp-352 - [0:0] +:limit-ntp-353 - [0:0] +:limit-ntp-354 - [0:0] +:limit-ntp-355 - [0:0] +:limit-ntp-356 - [0:0] +:limit-ntp-357 - [0:0] +:limit-ntp-358 - [0:0] +:limit-ntp-359 - [0:0] +:limit-ntp-36 - [0:0] +:limit-ntp-360 - [0:0] +:limit-ntp-362 - [0:0] +:limit-ntp-363 - [0:0] +:limit-ntp-364 - [0:0] +:limit-ntp-365 - [0:0] +:limit-ntp-366 - [0:0] +:limit-ntp-368 - [0:0] +:limit-ntp-369 - [0:0] +:limit-ntp-370 - [0:0] +:limit-ntp-371 - [0:0] +:limit-ntp-372 - [0:0] +:limit-ntp-373 - [0:0] +:limit-ntp-374 - [0:0] +:limit-ntp-375 - [0:0] +:limit-ntp-376 - [0:0] +:limit-ntp-377 - [0:0] +:limit-ntp-378 - [0:0] +:limit-ntp-379 - [0:0] +:limit-ntp-38 - [0:0] +:limit-ntp-380 - [0:0] +:limit-ntp-381 - [0:0] +:limit-ntp-382 - [0:0] +:limit-ntp-383 - [0:0] +:limit-ntp-384 - [0:0] +:limit-ntp-385 - [0:0] +:limit-ntp-386 - [0:0] +:limit-ntp-387 - [0:0] +:limit-ntp-388 - [0:0] +:limit-ntp-389 - [0:0] +:limit-ntp-39 - [0:0] +:limit-ntp-390 - [0:0] +:limit-ntp-392 - [0:0] +:limit-ntp-393 - [0:0] +:limit-ntp-394 - [0:0] +:limit-ntp-395 - [0:0] +:limit-ntp-396 - [0:0] +:limit-ntp-398 - [0:0] +:limit-ntp-399 - [0:0] +:limit-ntp-4 - [0:0] +:limit-ntp-40 - [0:0] +:limit-ntp-400 - [0:0] +:limit-ntp-401 - [0:0] +:limit-ntp-402 - [0:0] +:limit-ntp-403 - [0:0] +:limit-ntp-404 - [0:0] +:limit-ntp-405 - [0:0] +:limit-ntp-406 - [0:0] +:limit-ntp-407 - [0:0] +:limit-ntp-408 - [0:0] +:limit-ntp-409 - [0:0] +:limit-ntp-41 - [0:0] +:limit-ntp-410 - [0:0] +:limit-ntp-412 - [0:0] +:limit-ntp-413 - [0:0] +:limit-ntp-414 - [0:0] +:limit-ntp-415 - [0:0] +:limit-ntp-416 - [0:0] +:limit-ntp-418 - [0:0] +:limit-ntp-419 - [0:0] +:limit-ntp-42 - [0:0] +:limit-ntp-420 - [0:0] +:limit-ntp-421 - [0:0] +:limit-ntp-422 - [0:0] +:limit-ntp-423 - [0:0] +:limit-ntp-424 - [0:0] +:limit-ntp-425 - [0:0] +:limit-ntp-426 - [0:0] +:limit-ntp-427 - [0:0] +:limit-ntp-428 - [0:0] +:limit-ntp-429 - [0:0] +:limit-ntp-43 - [0:0] +:limit-ntp-430 - [0:0] +:limit-ntp-432 - [0:0] +:limit-ntp-433 - [0:0] +:limit-ntp-434 - [0:0] +:limit-ntp-435 - [0:0] +:limit-ntp-436 - [0:0] +:limit-ntp-438 - [0:0] +:limit-ntp-439 - [0:0] +:limit-ntp-44 - [0:0] +:limit-ntp-440 - [0:0] +:limit-ntp-441 - [0:0] +:limit-ntp-442 - [0:0] +:limit-ntp-443 - [0:0] +:limit-ntp-444 - [0:0] +:limit-ntp-445 - [0:0] +:limit-ntp-446 - [0:0] +:limit-ntp-447 - [0:0] +:limit-ntp-448 - [0:0] +:limit-ntp-449 - [0:0] +:limit-ntp-45 - [0:0] +:limit-ntp-450 - [0:0] +:limit-ntp-452 - [0:0] +:limit-ntp-453 - [0:0] +:limit-ntp-454 - [0:0] +:limit-ntp-455 - [0:0] +:limit-ntp-456 - [0:0] +:limit-ntp-458 - [0:0] +:limit-ntp-459 - [0:0] +:limit-ntp-46 - [0:0] +:limit-ntp-460 - [0:0] +:limit-ntp-461 - [0:0] +:limit-ntp-462 - [0:0] +:limit-ntp-463 - [0:0] +:limit-ntp-464 - [0:0] +:limit-ntp-465 - [0:0] +:limit-ntp-466 - [0:0] +:limit-ntp-467 - [0:0] +:limit-ntp-468 - [0:0] +:limit-ntp-469 - [0:0] +:limit-ntp-47 - [0:0] +:limit-ntp-470 - [0:0] +:limit-ntp-471 - [0:0] +:limit-ntp-472 - [0:0] +:limit-ntp-473 - [0:0] +:limit-ntp-474 - [0:0] +:limit-ntp-475 - [0:0] +:limit-ntp-476 - [0:0] +:limit-ntp-477 - [0:0] +:limit-ntp-478 - [0:0] +:limit-ntp-479 - [0:0] +:limit-ntp-48 - [0:0] +:limit-ntp-480 - [0:0] +:limit-ntp-482 - [0:0] +:limit-ntp-483 - [0:0] +:limit-ntp-484 - [0:0] +:limit-ntp-485 - [0:0] +:limit-ntp-486 - [0:0] +:limit-ntp-488 - [0:0] +:limit-ntp-489 - [0:0] +:limit-ntp-49 - [0:0] +:limit-ntp-490 - [0:0] +:limit-ntp-491 - [0:0] +:limit-ntp-492 - [0:0] +:limit-ntp-493 - [0:0] +:limit-ntp-494 - [0:0] +:limit-ntp-495 - [0:0] +:limit-ntp-496 - [0:0] +:limit-ntp-497 - [0:0] +:limit-ntp-498 - [0:0] +:limit-ntp-499 - [0:0] +:limit-ntp-5 - [0:0] +:limit-ntp-50 - [0:0] +:limit-ntp-500 - [0:0] +:limit-ntp-502 - [0:0] +:limit-ntp-503 - [0:0] +:limit-ntp-504 - [0:0] +:limit-ntp-505 - [0:0] +:limit-ntp-506 - [0:0] +:limit-ntp-508 - [0:0] +:limit-ntp-509 - [0:0] +:limit-ntp-510 - [0:0] +:limit-ntp-511 - [0:0] +:limit-ntp-512 - [0:0] +:limit-ntp-513 - [0:0] +:limit-ntp-514 - [0:0] +:limit-ntp-515 - [0:0] +:limit-ntp-516 - [0:0] +:limit-ntp-517 - [0:0] +:limit-ntp-518 - [0:0] +:limit-ntp-519 - [0:0] +:limit-ntp-52 - [0:0] +:limit-ntp-520 - [0:0] +:limit-ntp-522 - [0:0] +:limit-ntp-523 - [0:0] +:limit-ntp-524 - [0:0] +:limit-ntp-525 - [0:0] +:limit-ntp-526 - [0:0] +:limit-ntp-528 - [0:0] +:limit-ntp-529 - [0:0] +:limit-ntp-53 - [0:0] +:limit-ntp-530 - [0:0] +:limit-ntp-531 - [0:0] +:limit-ntp-532 - [0:0] +:limit-ntp-533 - [0:0] +:limit-ntp-534 - [0:0] +:limit-ntp-535 - [0:0] +:limit-ntp-536 - [0:0] +:limit-ntp-537 - [0:0] +:limit-ntp-538 - [0:0] +:limit-ntp-539 - [0:0] +:limit-ntp-54 - [0:0] +:limit-ntp-540 - [0:0] +:limit-ntp-542 - [0:0] +:limit-ntp-543 - [0:0] +:limit-ntp-544 - [0:0] +:limit-ntp-545 - [0:0] +:limit-ntp-546 - [0:0] +:limit-ntp-548 - [0:0] +:limit-ntp-549 - [0:0] +:limit-ntp-55 - [0:0] +:limit-ntp-550 - [0:0] +:limit-ntp-551 - [0:0] +:limit-ntp-552 - [0:0] +:limit-ntp-553 - [0:0] +:limit-ntp-554 - [0:0] +:limit-ntp-555 - [0:0] +:limit-ntp-556 - [0:0] +:limit-ntp-557 - [0:0] +:limit-ntp-558 - [0:0] +:limit-ntp-559 - [0:0] +:limit-ntp-56 - [0:0] +:limit-ntp-560 - [0:0] +:limit-ntp-561 - [0:0] +:limit-ntp-562 - [0:0] +:limit-ntp-563 - [0:0] +:limit-ntp-564 - [0:0] +:limit-ntp-565 - [0:0] +:limit-ntp-566 - [0:0] +:limit-ntp-567 - [0:0] +:limit-ntp-568 - [0:0] +:limit-ntp-569 - [0:0] +:limit-ntp-570 - [0:0] +:limit-ntp-572 - [0:0] +:limit-ntp-573 - [0:0] +:limit-ntp-574 - [0:0] +:limit-ntp-575 - [0:0] +:limit-ntp-576 - [0:0] +:limit-ntp-578 - [0:0] +:limit-ntp-579 - [0:0] +:limit-ntp-58 - [0:0] +:limit-ntp-580 - [0:0] +:limit-ntp-581 - [0:0] +:limit-ntp-582 - [0:0] +:limit-ntp-583 - [0:0] +:limit-ntp-584 - [0:0] +:limit-ntp-585 - [0:0] +:limit-ntp-586 - [0:0] +:limit-ntp-587 - [0:0] +:limit-ntp-588 - [0:0] +:limit-ntp-589 - [0:0] +:limit-ntp-59 - [0:0] +:limit-ntp-590 - [0:0] +:limit-ntp-592 - [0:0] +:limit-ntp-593 - [0:0] +:limit-ntp-594 - [0:0] +:limit-ntp-595 - [0:0] +:limit-ntp-596 - [0:0] +:limit-ntp-598 - [0:0] +:limit-ntp-599 - [0:0] +:limit-ntp-6 - [0:0] +:limit-ntp-60 - [0:0] +:limit-ntp-600 - [0:0] +:limit-ntp-601 - [0:0] +:limit-ntp-602 - [0:0] +:limit-ntp-603 - [0:0] +:limit-ntp-604 - [0:0] +:limit-ntp-605 - [0:0] +:limit-ntp-606 - [0:0] +:limit-ntp-607 - [0:0] +:limit-ntp-608 - [0:0] +:limit-ntp-609 - [0:0] +:limit-ntp-61 - [0:0] +:limit-ntp-610 - [0:0] +:limit-ntp-612 - [0:0] +:limit-ntp-613 - [0:0] +:limit-ntp-614 - [0:0] +:limit-ntp-615 - [0:0] +:limit-ntp-616 - [0:0] +:limit-ntp-618 - [0:0] +:limit-ntp-619 - [0:0] +:limit-ntp-62 - [0:0] +:limit-ntp-620 - [0:0] +:limit-ntp-621 - [0:0] +:limit-ntp-622 - [0:0] +:limit-ntp-623 - [0:0] +:limit-ntp-624 - [0:0] +:limit-ntp-625 - [0:0] +:limit-ntp-626 - [0:0] +:limit-ntp-627 - [0:0] +:limit-ntp-628 - [0:0] +:limit-ntp-629 - [0:0] +:limit-ntp-63 - [0:0] +:limit-ntp-630 - [0:0] +:limit-ntp-632 - [0:0] +:limit-ntp-633 - [0:0] +:limit-ntp-634 - [0:0] +:limit-ntp-635 - [0:0] +:limit-ntp-636 - [0:0] +:limit-ntp-638 - [0:0] +:limit-ntp-639 - [0:0] +:limit-ntp-64 - [0:0] +:limit-ntp-640 - [0:0] +:limit-ntp-641 - [0:0] +:limit-ntp-642 - [0:0] +:limit-ntp-643 - [0:0] +:limit-ntp-644 - [0:0] +:limit-ntp-645 - [0:0] +:limit-ntp-646 - [0:0] +:limit-ntp-647 - [0:0] +:limit-ntp-648 - [0:0] +:limit-ntp-649 - [0:0] +:limit-ntp-65 - [0:0] +:limit-ntp-650 - [0:0] +:limit-ntp-651 - [0:0] +:limit-ntp-652 - [0:0] +:limit-ntp-653 - [0:0] +:limit-ntp-654 - [0:0] +:limit-ntp-655 - [0:0] +:limit-ntp-656 - [0:0] +:limit-ntp-657 - [0:0] +:limit-ntp-658 - [0:0] +:limit-ntp-659 - [0:0] +:limit-ntp-66 - [0:0] +:limit-ntp-660 - [0:0] +:limit-ntp-662 - [0:0] +:limit-ntp-663 - [0:0] +:limit-ntp-664 - [0:0] +:limit-ntp-665 - [0:0] +:limit-ntp-666 - [0:0] +:limit-ntp-668 - [0:0] +:limit-ntp-669 - [0:0] +:limit-ntp-67 - [0:0] +:limit-ntp-670 - [0:0] +:limit-ntp-671 - [0:0] +:limit-ntp-672 - [0:0] +:limit-ntp-673 - [0:0] +:limit-ntp-674 - [0:0] +:limit-ntp-675 - [0:0] +:limit-ntp-676 - [0:0] +:limit-ntp-677 - [0:0] +:limit-ntp-678 - [0:0] +:limit-ntp-679 - [0:0] +:limit-ntp-68 - [0:0] +:limit-ntp-680 - [0:0] +:limit-ntp-682 - [0:0] +:limit-ntp-683 - [0:0] +:limit-ntp-684 - [0:0] +:limit-ntp-685 - [0:0] +:limit-ntp-686 - [0:0] +:limit-ntp-688 - [0:0] +:limit-ntp-689 - [0:0] +:limit-ntp-69 - [0:0] +:limit-ntp-690 - [0:0] +:limit-ntp-691 - [0:0] +:limit-ntp-692 - [0:0] +:limit-ntp-693 - [0:0] +:limit-ntp-694 - [0:0] +:limit-ntp-695 - [0:0] +:limit-ntp-696 - [0:0] +:limit-ntp-697 - [0:0] +:limit-ntp-698 - [0:0] +:limit-ntp-699 - [0:0] +:limit-ntp-7 - [0:0] +:limit-ntp-70 - [0:0] +:limit-ntp-700 - [0:0] +:limit-ntp-702 - [0:0] +:limit-ntp-703 - [0:0] +:limit-ntp-704 - [0:0] +:limit-ntp-705 - [0:0] +:limit-ntp-706 - [0:0] +:limit-ntp-708 - [0:0] +:limit-ntp-709 - [0:0] +:limit-ntp-710 - [0:0] +:limit-ntp-711 - [0:0] +:limit-ntp-712 - [0:0] +:limit-ntp-713 - [0:0] +:limit-ntp-714 - [0:0] +:limit-ntp-715 - [0:0] +:limit-ntp-716 - [0:0] +:limit-ntp-717 - [0:0] +:limit-ntp-718 - [0:0] +:limit-ntp-719 - [0:0] +:limit-ntp-72 - [0:0] +:limit-ntp-720 - [0:0] +:limit-ntp-722 - [0:0] +:limit-ntp-723 - [0:0] +:limit-ntp-724 - [0:0] +:limit-ntp-725 - [0:0] +:limit-ntp-726 - [0:0] +:limit-ntp-728 - [0:0] +:limit-ntp-729 - [0:0] +:limit-ntp-73 - [0:0] +:limit-ntp-730 - [0:0] +:limit-ntp-731 - [0:0] +:limit-ntp-732 - [0:0] +:limit-ntp-733 - [0:0] +:limit-ntp-734 - [0:0] +:limit-ntp-735 - [0:0] +:limit-ntp-736 - [0:0] +:limit-ntp-737 - [0:0] +:limit-ntp-738 - [0:0] +:limit-ntp-739 - [0:0] +:limit-ntp-74 - [0:0] +:limit-ntp-740 - [0:0] +:limit-ntp-741 - [0:0] +:limit-ntp-742 - [0:0] +:limit-ntp-743 - [0:0] +:limit-ntp-744 - [0:0] +:limit-ntp-745 - [0:0] +:limit-ntp-746 - [0:0] +:limit-ntp-747 - [0:0] +:limit-ntp-748 - [0:0] +:limit-ntp-749 - [0:0] +:limit-ntp-75 - [0:0] +:limit-ntp-750 - [0:0] +:limit-ntp-752 - [0:0] +:limit-ntp-753 - [0:0] +:limit-ntp-754 - [0:0] +:limit-ntp-755 - [0:0] +:limit-ntp-756 - [0:0] +:limit-ntp-758 - [0:0] +:limit-ntp-759 - [0:0] +:limit-ntp-76 - [0:0] +:limit-ntp-760 - [0:0] +:limit-ntp-761 - [0:0] +:limit-ntp-762 - [0:0] +:limit-ntp-763 - [0:0] +:limit-ntp-764 - [0:0] +:limit-ntp-765 - [0:0] +:limit-ntp-766 - [0:0] +:limit-ntp-767 - [0:0] +:limit-ntp-768 - [0:0] +:limit-ntp-769 - [0:0] +:limit-ntp-770 - [0:0] +:limit-ntp-772 - [0:0] +:limit-ntp-773 - [0:0] +:limit-ntp-774 - [0:0] +:limit-ntp-775 - [0:0] +:limit-ntp-776 - [0:0] +:limit-ntp-778 - [0:0] +:limit-ntp-779 - [0:0] +:limit-ntp-78 - [0:0] +:limit-ntp-780 - [0:0] +:limit-ntp-781 - [0:0] +:limit-ntp-782 - [0:0] +:limit-ntp-783 - [0:0] +:limit-ntp-784 - [0:0] +:limit-ntp-785 - [0:0] +:limit-ntp-786 - [0:0] +:limit-ntp-787 - [0:0] +:limit-ntp-788 - [0:0] +:limit-ntp-789 - [0:0] +:limit-ntp-79 - [0:0] +:limit-ntp-790 - [0:0] +:limit-ntp-792 - [0:0] +:limit-ntp-793 - [0:0] +:limit-ntp-794 - [0:0] +:limit-ntp-795 - [0:0] +:limit-ntp-796 - [0:0] +:limit-ntp-798 - [0:0] +:limit-ntp-799 - [0:0] +:limit-ntp-8 - [0:0] +:limit-ntp-80 - [0:0] +:limit-ntp-800 - [0:0] +:limit-ntp-801 - [0:0] +:limit-ntp-802 - [0:0] +:limit-ntp-803 - [0:0] +:limit-ntp-804 - [0:0] +:limit-ntp-805 - [0:0] +:limit-ntp-806 - [0:0] +:limit-ntp-807 - [0:0] +:limit-ntp-808 - [0:0] +:limit-ntp-809 - [0:0] +:limit-ntp-81 - [0:0] +:limit-ntp-810 - [0:0] +:limit-ntp-812 - [0:0] +:limit-ntp-813 - [0:0] +:limit-ntp-814 - [0:0] +:limit-ntp-815 - [0:0] +:limit-ntp-816 - [0:0] +:limit-ntp-818 - [0:0] +:limit-ntp-819 - [0:0] +:limit-ntp-82 - [0:0] +:limit-ntp-820 - [0:0] +:limit-ntp-821 - [0:0] +:limit-ntp-822 - [0:0] +:limit-ntp-823 - [0:0] +:limit-ntp-824 - [0:0] +:limit-ntp-825 - [0:0] +:limit-ntp-826 - [0:0] +:limit-ntp-827 - [0:0] +:limit-ntp-828 - [0:0] +:limit-ntp-829 - [0:0] +:limit-ntp-83 - [0:0] +:limit-ntp-830 - [0:0] +:limit-ntp-831 - [0:0] +:limit-ntp-832 - [0:0] +:limit-ntp-833 - [0:0] +:limit-ntp-834 - [0:0] +:limit-ntp-835 - [0:0] +:limit-ntp-836 - [0:0] +:limit-ntp-837 - [0:0] +:limit-ntp-838 - [0:0] +:limit-ntp-839 - [0:0] +:limit-ntp-84 - [0:0] +:limit-ntp-840 - [0:0] +:limit-ntp-842 - [0:0] +:limit-ntp-843 - [0:0] +:limit-ntp-844 - [0:0] +:limit-ntp-845 - [0:0] +:limit-ntp-846 - [0:0] +:limit-ntp-848 - [0:0] +:limit-ntp-849 - [0:0] +:limit-ntp-85 - [0:0] +:limit-ntp-850 - [0:0] +:limit-ntp-851 - [0:0] +:limit-ntp-852 - [0:0] +:limit-ntp-853 - [0:0] +:limit-ntp-854 - [0:0] +:limit-ntp-855 - [0:0] +:limit-ntp-856 - [0:0] +:limit-ntp-857 - [0:0] +:limit-ntp-858 - [0:0] +:limit-ntp-859 - [0:0] +:limit-ntp-86 - [0:0] +:limit-ntp-860 - [0:0] +:limit-ntp-862 - [0:0] +:limit-ntp-863 - [0:0] +:limit-ntp-864 - [0:0] +:limit-ntp-865 - [0:0] +:limit-ntp-866 - [0:0] +:limit-ntp-868 - [0:0] +:limit-ntp-869 - [0:0] +:limit-ntp-87 - [0:0] +:limit-ntp-870 - [0:0] +:limit-ntp-871 - [0:0] +:limit-ntp-872 - [0:0] +:limit-ntp-873 - [0:0] +:limit-ntp-874 - [0:0] +:limit-ntp-875 - [0:0] +:limit-ntp-876 - [0:0] +:limit-ntp-877 - [0:0] +:limit-ntp-878 - [0:0] +:limit-ntp-879 - [0:0] +:limit-ntp-88 - [0:0] +:limit-ntp-880 - [0:0] +:limit-ntp-882 - [0:0] +:limit-ntp-883 - [0:0] +:limit-ntp-884 - [0:0] +:limit-ntp-885 - [0:0] +:limit-ntp-886 - [0:0] +:limit-ntp-888 - [0:0] +:limit-ntp-889 - [0:0] +:limit-ntp-89 - [0:0] +:limit-ntp-890 - [0:0] +:limit-ntp-891 - [0:0] +:limit-ntp-892 - [0:0] +:limit-ntp-893 - [0:0] +:limit-ntp-894 - [0:0] +:limit-ntp-895 - [0:0] +:limit-ntp-896 - [0:0] +:limit-ntp-897 - [0:0] +:limit-ntp-898 - [0:0] +:limit-ntp-899 - [0:0] +:limit-ntp-9 - [0:0] +:limit-ntp-90 - [0:0] +:limit-ntp-900 - [0:0] +:limit-ntp-902 - [0:0] +:limit-ntp-903 - [0:0] +:limit-ntp-904 - [0:0] +:limit-ntp-905 - [0:0] +:limit-ntp-906 - [0:0] +:limit-ntp-908 - [0:0] +:limit-ntp-909 - [0:0] +:limit-ntp-910 - [0:0] +:limit-ntp-911 - [0:0] +:limit-ntp-912 - [0:0] +:limit-ntp-913 - [0:0] +:limit-ntp-914 - [0:0] +:limit-ntp-915 - [0:0] +:limit-ntp-916 - [0:0] +:limit-ntp-917 - [0:0] +:limit-ntp-918 - [0:0] +:limit-ntp-919 - [0:0] +:limit-ntp-92 - [0:0] +:limit-ntp-920 - [0:0] +:limit-ntp-921 - [0:0] +:limit-ntp-922 - [0:0] +:limit-ntp-923 - [0:0] +:limit-ntp-924 - [0:0] +:limit-ntp-925 - [0:0] +:limit-ntp-926 - [0:0] +:limit-ntp-927 - [0:0] +:limit-ntp-928 - [0:0] +:limit-ntp-929 - [0:0] +:limit-ntp-93 - [0:0] +:limit-ntp-930 - [0:0] +:limit-ntp-931 - [0:0] +:limit-ntp-932 - [0:0] +:limit-ntp-933 - [0:0] +:limit-ntp-934 - [0:0] +:limit-ntp-935 - [0:0] +:limit-ntp-936 - [0:0] +:limit-ntp-937 - [0:0] +:limit-ntp-938 - [0:0] +:limit-ntp-939 - [0:0] +:limit-ntp-94 - [0:0] +:limit-ntp-940 - [0:0] +:limit-ntp-941 - [0:0] +:limit-ntp-942 - [0:0] +:limit-ntp-943 - [0:0] +:limit-ntp-944 - [0:0] +:limit-ntp-945 - [0:0] +:limit-ntp-946 - [0:0] +:limit-ntp-947 - [0:0] +:limit-ntp-948 - [0:0] +:limit-ntp-949 - [0:0] +:limit-ntp-95 - [0:0] +:limit-ntp-950 - [0:0] +:limit-ntp-951 - [0:0] +:limit-ntp-952 - [0:0] +:limit-ntp-953 - [0:0] +:limit-ntp-954 - [0:0] +:limit-ntp-955 - [0:0] +:limit-ntp-956 - [0:0] +:limit-ntp-957 - [0:0] +:limit-ntp-958 - [0:0] +:limit-ntp-959 - [0:0] +:limit-ntp-96 - [0:0] +:limit-ntp-960 - [0:0] +:limit-ntp-961 - [0:0] +:limit-ntp-962 - [0:0] +:limit-ntp-963 - [0:0] +:limit-ntp-964 - [0:0] +:limit-ntp-965 - [0:0] +:limit-ntp-966 - [0:0] +:limit-ntp-967 - [0:0] +:limit-ntp-968 - [0:0] +:limit-ntp-969 - [0:0] +:limit-ntp-970 - [0:0] +:limit-ntp-971 - [0:0] +:limit-ntp-972 - [0:0] +:limit-ntp-973 - [0:0] +:limit-ntp-974 - [0:0] +:limit-ntp-975 - [0:0] +:limit-ntp-98 - [0:0] +:limit-ntp-99 - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] :logaccept-10 - [0:0] -:logaccept-100 - [0:0] -:logaccept-101 - [0:0] -:logaccept-102 - [0:0] :logaccept-11 - [0:0] :logaccept-12 - [0:0] :logaccept-13 - [0:0] @@ -3819,38 +3816,8 @@ :logaccept-68 - [0:0] :logaccept-69 - [0:0] :logaccept-7 - [0:0] -:logaccept-70 - [0:0] -:logaccept-71 - [0:0] -:logaccept-72 - [0:0] -:logaccept-73 - [0:0] -:logaccept-74 - [0:0] -:logaccept-75 - [0:0] -:logaccept-76 - [0:0] -:logaccept-77 - [0:0] -:logaccept-78 - [0:0] -:logaccept-79 - [0:0] :logaccept-8 - [0:0] -:logaccept-80 - [0:0] -:logaccept-81 - [0:0] -:logaccept-82 - [0:0] -:logaccept-83 - [0:0] -:logaccept-84 - [0:0] -:logaccept-85 - [0:0] -:logaccept-86 - [0:0] -:logaccept-87 - [0:0] -:logaccept-88 - [0:0] -:logaccept-89 - [0:0] :logaccept-9 - [0:0] -:logaccept-90 - [0:0] -:logaccept-91 - [0:0] -:logaccept-92 - [0:0] -:logaccept-93 - [0:0] -:logaccept-94 - [0:0] -:logaccept-95 - [0:0] -:logaccept-96 - [0:0] -:logaccept-97 - [0:0] -:logaccept-98 - [0:0] -:logaccept-99 - [0:0] :logaccept-final-0 - [0:0] :logaccept-final-1 - [0:0] :logaccept-final-10 - [0:0] @@ -4157,6 +4124,39 @@ :logaccept-final-97 - [0:0] :logaccept-final-98 - [0:0] :logaccept-final-99 - [0:0] +:logaccept-ntp-0 - [0:0] +:logaccept-ntp-1 - [0:0] +:logaccept-ntp-10 - [0:0] +:logaccept-ntp-11 - [0:0] +:logaccept-ntp-12 - [0:0] +:logaccept-ntp-13 - [0:0] +:logaccept-ntp-14 - [0:0] +:logaccept-ntp-15 - [0:0] +:logaccept-ntp-16 - [0:0] +:logaccept-ntp-17 - [0:0] +:logaccept-ntp-18 - [0:0] +:logaccept-ntp-19 - [0:0] +:logaccept-ntp-2 - [0:0] +:logaccept-ntp-20 - [0:0] +:logaccept-ntp-21 - [0:0] +:logaccept-ntp-22 - [0:0] +:logaccept-ntp-23 - [0:0] +:logaccept-ntp-24 - [0:0] +:logaccept-ntp-25 - [0:0] +:logaccept-ntp-26 - [0:0] +:logaccept-ntp-27 - [0:0] +:logaccept-ntp-28 - [0:0] +:logaccept-ntp-29 - [0:0] +:logaccept-ntp-3 - [0:0] +:logaccept-ntp-30 - [0:0] +:logaccept-ntp-31 - [0:0] +:logaccept-ntp-32 - [0:0] +:logaccept-ntp-4 - [0:0] +:logaccept-ntp-5 - [0:0] +:logaccept-ntp-6 - [0:0] +:logaccept-ntp-7 - [0:0] +:logaccept-ntp-8 - [0:0] +:logaccept-ntp-9 - [0:0] :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-10 - [0:0] @@ -4887,618 +4887,68 @@ :logdrop-1652 - [0:0] :logdrop-1653 - [0:0] :logdrop-1654 - [0:0] -:logdrop-1655 - [0:0] -:logdrop-1656 - [0:0] -:logdrop-1657 - [0:0] -:logdrop-1658 - [0:0] -:logdrop-1659 - [0:0] :logdrop-166 - [0:0] -:logdrop-1660 - [0:0] -:logdrop-1661 - [0:0] -:logdrop-1662 - [0:0] -:logdrop-1663 - [0:0] -:logdrop-1664 - [0:0] -:logdrop-1665 - [0:0] -:logdrop-1666 - [0:0] -:logdrop-1667 - [0:0] -:logdrop-1668 - [0:0] -:logdrop-1669 - [0:0] :logdrop-167 - [0:0] -:logdrop-1670 - [0:0] -:logdrop-1671 - [0:0] -:logdrop-1672 - [0:0] -:logdrop-1673 - [0:0] -:logdrop-1674 - [0:0] -:logdrop-1675 - [0:0] -:logdrop-1676 - [0:0] -:logdrop-1677 - [0:0] -:logdrop-1678 - [0:0] -:logdrop-1679 - [0:0] :logdrop-168 - [0:0] -:logdrop-1680 - [0:0] -:logdrop-1681 - [0:0] -:logdrop-1682 - [0:0] -:logdrop-1683 - [0:0] -:logdrop-1684 - [0:0] -:logdrop-1685 - [0:0] -:logdrop-1686 - [0:0] -:logdrop-1687 - [0:0] -:logdrop-1688 - [0:0] -:logdrop-1689 - [0:0] :logdrop-169 - [0:0] -:logdrop-1690 - [0:0] -:logdrop-1691 - [0:0] -:logdrop-1692 - [0:0] -:logdrop-1693 - [0:0] -:logdrop-1694 - [0:0] -:logdrop-1695 - [0:0] -:logdrop-1696 - [0:0] -:logdrop-1697 - [0:0] -:logdrop-1698 - [0:0] -:logdrop-1699 - [0:0] :logdrop-17 - [0:0] :logdrop-170 - [0:0] -:logdrop-1700 - [0:0] -:logdrop-1701 - [0:0] -:logdrop-1702 - [0:0] -:logdrop-1703 - [0:0] -:logdrop-1704 - [0:0] -:logdrop-1705 - [0:0] -:logdrop-1706 - [0:0] -:logdrop-1707 - [0:0] -:logdrop-1708 - [0:0] -:logdrop-1709 - [0:0] :logdrop-171 - [0:0] -:logdrop-1710 - [0:0] -:logdrop-1711 - [0:0] -:logdrop-1712 - [0:0] -:logdrop-1713 - [0:0] -:logdrop-1714 - [0:0] -:logdrop-1715 - [0:0] -:logdrop-1716 - [0:0] -:logdrop-1717 - [0:0] -:logdrop-1718 - [0:0] -:logdrop-1719 - [0:0] :logdrop-172 - [0:0] -:logdrop-1720 - [0:0] -:logdrop-1721 - [0:0] -:logdrop-1722 - [0:0] -:logdrop-1723 - [0:0] -:logdrop-1724 - [0:0] -:logdrop-1725 - [0:0] -:logdrop-1726 - [0:0] -:logdrop-1727 - [0:0] -:logdrop-1728 - [0:0] -:logdrop-1729 - [0:0] :logdrop-173 - [0:0] -:logdrop-1730 - [0:0] -:logdrop-1731 - [0:0] -:logdrop-1732 - [0:0] -:logdrop-1733 - [0:0] -:logdrop-1734 - [0:0] -:logdrop-1735 - [0:0] -:logdrop-1736 - [0:0] -:logdrop-1737 - [0:0] -:logdrop-1738 - [0:0] -:logdrop-1739 - [0:0] :logdrop-174 - [0:0] -:logdrop-1740 - [0:0] -:logdrop-1741 - [0:0] -:logdrop-1742 - [0:0] -:logdrop-1743 - [0:0] -:logdrop-1744 - [0:0] -:logdrop-1745 - [0:0] -:logdrop-1746 - [0:0] -:logdrop-1747 - [0:0] -:logdrop-1748 - [0:0] -:logdrop-1749 - [0:0] :logdrop-175 - [0:0] -:logdrop-1750 - [0:0] -:logdrop-1751 - [0:0] -:logdrop-1752 - [0:0] -:logdrop-1753 - [0:0] -:logdrop-1754 - [0:0] -:logdrop-1755 - [0:0] -:logdrop-1756 - [0:0] -:logdrop-1757 - [0:0] -:logdrop-1758 - [0:0] -:logdrop-1759 - [0:0] :logdrop-176 - [0:0] -:logdrop-1760 - [0:0] -:logdrop-1761 - [0:0] -:logdrop-1762 - [0:0] -:logdrop-1763 - [0:0] -:logdrop-1764 - [0:0] -:logdrop-1765 - [0:0] -:logdrop-1766 - [0:0] -:logdrop-1767 - [0:0] -:logdrop-1768 - [0:0] -:logdrop-1769 - [0:0] :logdrop-177 - [0:0] -:logdrop-1770 - [0:0] -:logdrop-1771 - [0:0] -:logdrop-1772 - [0:0] -:logdrop-1773 - [0:0] -:logdrop-1774 - [0:0] -:logdrop-1775 - [0:0] -:logdrop-1776 - [0:0] -:logdrop-1777 - [0:0] -:logdrop-1778 - [0:0] -:logdrop-1779 - [0:0] :logdrop-178 - [0:0] -:logdrop-1780 - [0:0] -:logdrop-1781 - [0:0] -:logdrop-1782 - [0:0] -:logdrop-1783 - [0:0] -:logdrop-1784 - [0:0] -:logdrop-1785 - [0:0] -:logdrop-1786 - [0:0] -:logdrop-1787 - [0:0] -:logdrop-1788 - [0:0] -:logdrop-1789 - [0:0] :logdrop-179 - [0:0] -:logdrop-1790 - [0:0] -:logdrop-1791 - [0:0] -:logdrop-1792 - [0:0] -:logdrop-1793 - [0:0] -:logdrop-1794 - [0:0] -:logdrop-1795 - [0:0] -:logdrop-1796 - [0:0] -:logdrop-1797 - [0:0] -:logdrop-1798 - [0:0] -:logdrop-1799 - [0:0] :logdrop-18 - [0:0] :logdrop-180 - [0:0] -:logdrop-1800 - [0:0] -:logdrop-1801 - [0:0] -:logdrop-1802 - [0:0] -:logdrop-1803 - [0:0] -:logdrop-1804 - [0:0] -:logdrop-1805 - [0:0] -:logdrop-1806 - [0:0] -:logdrop-1807 - [0:0] -:logdrop-1808 - [0:0] -:logdrop-1809 - [0:0] :logdrop-181 - [0:0] -:logdrop-1810 - [0:0] -:logdrop-1811 - [0:0] -:logdrop-1812 - [0:0] -:logdrop-1813 - [0:0] -:logdrop-1814 - [0:0] -:logdrop-1815 - [0:0] -:logdrop-1816 - [0:0] -:logdrop-1817 - [0:0] -:logdrop-1818 - [0:0] -:logdrop-1819 - [0:0] :logdrop-182 - [0:0] -:logdrop-1820 - [0:0] -:logdrop-1821 - [0:0] -:logdrop-1822 - [0:0] -:logdrop-1823 - [0:0] -:logdrop-1824 - [0:0] -:logdrop-1825 - [0:0] -:logdrop-1826 - [0:0] -:logdrop-1827 - [0:0] -:logdrop-1828 - [0:0] -:logdrop-1829 - [0:0] :logdrop-183 - [0:0] -:logdrop-1830 - [0:0] -:logdrop-1831 - [0:0] -:logdrop-1832 - [0:0] -:logdrop-1833 - [0:0] -:logdrop-1834 - [0:0] -:logdrop-1835 - [0:0] -:logdrop-1836 - [0:0] -:logdrop-1837 - [0:0] -:logdrop-1838 - [0:0] -:logdrop-1839 - [0:0] :logdrop-184 - [0:0] -:logdrop-1840 - [0:0] -:logdrop-1841 - [0:0] -:logdrop-1842 - [0:0] -:logdrop-1843 - [0:0] -:logdrop-1844 - [0:0] -:logdrop-1845 - [0:0] -:logdrop-1846 - [0:0] -:logdrop-1847 - [0:0] -:logdrop-1848 - [0:0] -:logdrop-1849 - [0:0] :logdrop-185 - [0:0] -:logdrop-1850 - [0:0] -:logdrop-1851 - [0:0] -:logdrop-1852 - [0:0] -:logdrop-1853 - [0:0] -:logdrop-1854 - [0:0] -:logdrop-1855 - [0:0] -:logdrop-1856 - [0:0] -:logdrop-1857 - [0:0] -:logdrop-1858 - [0:0] -:logdrop-1859 - [0:0] :logdrop-186 - [0:0] -:logdrop-1860 - [0:0] -:logdrop-1861 - [0:0] -:logdrop-1862 - [0:0] -:logdrop-1863 - [0:0] -:logdrop-1864 - [0:0] -:logdrop-1865 - [0:0] -:logdrop-1866 - [0:0] -:logdrop-1867 - [0:0] -:logdrop-1868 - [0:0] -:logdrop-1869 - [0:0] :logdrop-187 - [0:0] -:logdrop-1870 - [0:0] -:logdrop-1871 - [0:0] -:logdrop-1872 - [0:0] -:logdrop-1873 - [0:0] -:logdrop-1874 - [0:0] -:logdrop-1875 - [0:0] -:logdrop-1876 - [0:0] -:logdrop-1877 - [0:0] -:logdrop-1878 - [0:0] -:logdrop-1879 - [0:0] :logdrop-188 - [0:0] -:logdrop-1880 - [0:0] -:logdrop-1881 - [0:0] -:logdrop-1882 - [0:0] -:logdrop-1883 - [0:0] -:logdrop-1884 - [0:0] -:logdrop-1885 - [0:0] -:logdrop-1886 - [0:0] -:logdrop-1887 - [0:0] -:logdrop-1888 - [0:0] -:logdrop-1889 - [0:0] :logdrop-189 - [0:0] -:logdrop-1890 - [0:0] -:logdrop-1891 - [0:0] -:logdrop-1892 - [0:0] -:logdrop-1893 - [0:0] -:logdrop-1894 - [0:0] -:logdrop-1895 - [0:0] -:logdrop-1896 - [0:0] -:logdrop-1897 - [0:0] -:logdrop-1898 - [0:0] -:logdrop-1899 - [0:0] :logdrop-19 - [0:0] :logdrop-190 - [0:0] -:logdrop-1900 - [0:0] -:logdrop-1901 - [0:0] -:logdrop-1902 - [0:0] -:logdrop-1903 - [0:0] -:logdrop-1904 - [0:0] -:logdrop-1905 - [0:0] -:logdrop-1906 - [0:0] -:logdrop-1907 - [0:0] -:logdrop-1908 - [0:0] -:logdrop-1909 - [0:0] :logdrop-191 - [0:0] -:logdrop-1910 - [0:0] -:logdrop-1911 - [0:0] -:logdrop-1912 - [0:0] -:logdrop-1913 - [0:0] -:logdrop-1914 - [0:0] -:logdrop-1915 - [0:0] -:logdrop-1916 - [0:0] -:logdrop-1917 - [0:0] -:logdrop-1918 - [0:0] -:logdrop-1919 - [0:0] :logdrop-192 - [0:0] -:logdrop-1920 - [0:0] -:logdrop-1921 - [0:0] -:logdrop-1922 - [0:0] -:logdrop-1923 - [0:0] -:logdrop-1924 - [0:0] -:logdrop-1925 - [0:0] -:logdrop-1926 - [0:0] -:logdrop-1927 - [0:0] -:logdrop-1928 - [0:0] -:logdrop-1929 - [0:0] :logdrop-193 - [0:0] -:logdrop-1930 - [0:0] -:logdrop-1931 - [0:0] -:logdrop-1932 - [0:0] -:logdrop-1933 - [0:0] -:logdrop-1934 - [0:0] -:logdrop-1935 - [0:0] -:logdrop-1936 - [0:0] -:logdrop-1937 - [0:0] -:logdrop-1938 - [0:0] -:logdrop-1939 - [0:0] :logdrop-194 - [0:0] -:logdrop-1940 - [0:0] -:logdrop-1941 - [0:0] -:logdrop-1942 - [0:0] -:logdrop-1943 - [0:0] -:logdrop-1944 - [0:0] -:logdrop-1945 - [0:0] -:logdrop-1946 - [0:0] -:logdrop-1947 - [0:0] -:logdrop-1948 - [0:0] -:logdrop-1949 - [0:0] :logdrop-195 - [0:0] -:logdrop-1950 - [0:0] -:logdrop-1951 - [0:0] -:logdrop-1952 - [0:0] -:logdrop-1953 - [0:0] -:logdrop-1954 - [0:0] -:logdrop-1955 - [0:0] -:logdrop-1956 - [0:0] -:logdrop-1957 - [0:0] -:logdrop-1958 - [0:0] -:logdrop-1959 - [0:0] :logdrop-196 - [0:0] -:logdrop-1960 - [0:0] -:logdrop-1961 - [0:0] -:logdrop-1962 - [0:0] -:logdrop-1963 - [0:0] -:logdrop-1964 - [0:0] -:logdrop-1965 - [0:0] -:logdrop-1966 - [0:0] -:logdrop-1967 - [0:0] -:logdrop-1968 - [0:0] -:logdrop-1969 - [0:0] :logdrop-197 - [0:0] -:logdrop-1970 - [0:0] -:logdrop-1971 - [0:0] -:logdrop-1972 - [0:0] -:logdrop-1973 - [0:0] -:logdrop-1974 - [0:0] -:logdrop-1975 - [0:0] -:logdrop-1976 - [0:0] -:logdrop-1977 - [0:0] -:logdrop-1978 - [0:0] -:logdrop-1979 - [0:0] :logdrop-198 - [0:0] -:logdrop-1980 - [0:0] -:logdrop-1981 - [0:0] -:logdrop-1982 - [0:0] -:logdrop-1983 - [0:0] -:logdrop-1984 - [0:0] -:logdrop-1985 - [0:0] -:logdrop-1986 - [0:0] -:logdrop-1987 - [0:0] -:logdrop-1988 - [0:0] -:logdrop-1989 - [0:0] :logdrop-199 - [0:0] -:logdrop-1990 - [0:0] -:logdrop-1991 - [0:0] -:logdrop-1992 - [0:0] -:logdrop-1993 - [0:0] -:logdrop-1994 - [0:0] -:logdrop-1995 - [0:0] -:logdrop-1996 - [0:0] -:logdrop-1997 - [0:0] -:logdrop-1998 - [0:0] -:logdrop-1999 - [0:0] :logdrop-2 - [0:0] :logdrop-20 - [0:0] :logdrop-200 - [0:0] -:logdrop-2000 - [0:0] -:logdrop-2001 - [0:0] -:logdrop-2002 - [0:0] -:logdrop-2003 - [0:0] -:logdrop-2004 - [0:0] -:logdrop-2005 - [0:0] -:logdrop-2006 - [0:0] -:logdrop-2007 - [0:0] -:logdrop-2008 - [0:0] -:logdrop-2009 - [0:0] :logdrop-201 - [0:0] -:logdrop-2010 - [0:0] -:logdrop-2011 - [0:0] -:logdrop-2012 - [0:0] -:logdrop-2013 - [0:0] -:logdrop-2014 - [0:0] -:logdrop-2015 - [0:0] -:logdrop-2016 - [0:0] -:logdrop-2017 - [0:0] -:logdrop-2018 - [0:0] -:logdrop-2019 - [0:0] :logdrop-202 - [0:0] -:logdrop-2020 - [0:0] -:logdrop-2021 - [0:0] -:logdrop-2022 - [0:0] -:logdrop-2023 - [0:0] -:logdrop-2024 - [0:0] -:logdrop-2025 - [0:0] -:logdrop-2026 - [0:0] -:logdrop-2027 - [0:0] -:logdrop-2028 - [0:0] -:logdrop-2029 - [0:0] :logdrop-203 - [0:0] -:logdrop-2030 - [0:0] -:logdrop-2031 - [0:0] -:logdrop-2032 - [0:0] -:logdrop-2033 - [0:0] -:logdrop-2034 - [0:0] -:logdrop-2035 - [0:0] -:logdrop-2036 - [0:0] -:logdrop-2037 - [0:0] -:logdrop-2038 - [0:0] -:logdrop-2039 - [0:0] :logdrop-204 - [0:0] -:logdrop-2040 - [0:0] -:logdrop-2041 - [0:0] -:logdrop-2042 - [0:0] -:logdrop-2043 - [0:0] -:logdrop-2044 - [0:0] -:logdrop-2045 - [0:0] -:logdrop-2046 - [0:0] -:logdrop-2047 - [0:0] -:logdrop-2048 - [0:0] -:logdrop-2049 - [0:0] :logdrop-205 - [0:0] -:logdrop-2050 - [0:0] -:logdrop-2051 - [0:0] -:logdrop-2052 - [0:0] -:logdrop-2053 - [0:0] -:logdrop-2054 - [0:0] -:logdrop-2055 - [0:0] -:logdrop-2056 - [0:0] -:logdrop-2057 - [0:0] -:logdrop-2058 - [0:0] -:logdrop-2059 - [0:0] :logdrop-206 - [0:0] -:logdrop-2060 - [0:0] -:logdrop-2061 - [0:0] -:logdrop-2062 - [0:0] -:logdrop-2063 - [0:0] -:logdrop-2064 - [0:0] -:logdrop-2065 - [0:0] -:logdrop-2066 - [0:0] -:logdrop-2067 - [0:0] -:logdrop-2068 - [0:0] -:logdrop-2069 - [0:0] :logdrop-207 - [0:0] -:logdrop-2070 - [0:0] -:logdrop-2071 - [0:0] -:logdrop-2072 - [0:0] -:logdrop-2073 - [0:0] -:logdrop-2074 - [0:0] -:logdrop-2075 - [0:0] -:logdrop-2076 - [0:0] -:logdrop-2077 - [0:0] -:logdrop-2078 - [0:0] -:logdrop-2079 - [0:0] :logdrop-208 - [0:0] -:logdrop-2080 - [0:0] -:logdrop-2081 - [0:0] -:logdrop-2082 - [0:0] -:logdrop-2083 - [0:0] -:logdrop-2084 - [0:0] -:logdrop-2085 - [0:0] -:logdrop-2086 - [0:0] -:logdrop-2087 - [0:0] -:logdrop-2088 - [0:0] -:logdrop-2089 - [0:0] :logdrop-209 - [0:0] -:logdrop-2090 - [0:0] -:logdrop-2091 - [0:0] -:logdrop-2092 - [0:0] -:logdrop-2093 - [0:0] -:logdrop-2094 - [0:0] -:logdrop-2095 - [0:0] -:logdrop-2096 - [0:0] -:logdrop-2097 - [0:0] -:logdrop-2098 - [0:0] -:logdrop-2099 - [0:0] :logdrop-21 - [0:0] :logdrop-210 - [0:0] -:logdrop-2100 - [0:0] -:logdrop-2101 - [0:0] -:logdrop-2102 - [0:0] -:logdrop-2103 - [0:0] -:logdrop-2104 - [0:0] -:logdrop-2105 - [0:0] -:logdrop-2106 - [0:0] -:logdrop-2107 - [0:0] -:logdrop-2108 - [0:0] -:logdrop-2109 - [0:0] :logdrop-211 - [0:0] -:logdrop-2110 - [0:0] -:logdrop-2111 - [0:0] -:logdrop-2112 - [0:0] -:logdrop-2113 - [0:0] -:logdrop-2114 - [0:0] -:logdrop-2115 - [0:0] -:logdrop-2116 - [0:0] -:logdrop-2117 - [0:0] -:logdrop-2118 - [0:0] -:logdrop-2119 - [0:0] :logdrop-212 - [0:0] -:logdrop-2120 - [0:0] -:logdrop-2121 - [0:0] -:logdrop-2122 - [0:0] -:logdrop-2123 - [0:0] -:logdrop-2124 - [0:0] -:logdrop-2125 - [0:0] -:logdrop-2126 - [0:0] -:logdrop-2127 - [0:0] -:logdrop-2128 - [0:0] -:logdrop-2129 - [0:0] :logdrop-213 - [0:0] -:logdrop-2130 - [0:0] -:logdrop-2131 - [0:0] -:logdrop-2132 - [0:0] -:logdrop-2133 - [0:0] -:logdrop-2134 - [0:0] -:logdrop-2135 - [0:0] -:logdrop-2136 - [0:0] -:logdrop-2137 - [0:0] -:logdrop-2138 - [0:0] -:logdrop-2139 - [0:0] :logdrop-214 - [0:0] -:logdrop-2140 - [0:0] -:logdrop-2141 - [0:0] -:logdrop-2142 - [0:0] -:logdrop-2143 - [0:0] -:logdrop-2144 - [0:0] -:logdrop-2145 - [0:0] -:logdrop-2146 - [0:0] -:logdrop-2147 - [0:0] -:logdrop-2148 - [0:0] -:logdrop-2149 - [0:0] :logdrop-215 - [0:0] -:logdrop-2150 - [0:0] -:logdrop-2151 - [0:0] -:logdrop-2152 - [0:0] -:logdrop-2153 - [0:0] -:logdrop-2154 - [0:0] -:logdrop-2155 - [0:0] -:logdrop-2156 - [0:0] -:logdrop-2157 - [0:0] -:logdrop-2158 - [0:0] -:logdrop-2159 - [0:0] :logdrop-216 - [0:0] -:logdrop-2160 - [0:0] -:logdrop-2161 - [0:0] -:logdrop-2162 - [0:0] -:logdrop-2163 - [0:0] -:logdrop-2164 - [0:0] -:logdrop-2165 - [0:0] -:logdrop-2166 - [0:0] -:logdrop-2167 - [0:0] -:logdrop-2168 - [0:0] -:logdrop-2169 - [0:0] :logdrop-217 - [0:0] -:logdrop-2170 - [0:0] -:logdrop-2171 - [0:0] -:logdrop-2172 - [0:0] -:logdrop-2173 - [0:0] -:logdrop-2174 - [0:0] -:logdrop-2175 - [0:0] -:logdrop-2176 - [0:0] -:logdrop-2177 - [0:0] -:logdrop-2178 - [0:0] -:logdrop-2179 - [0:0] :logdrop-218 - [0:0] -:logdrop-2180 - [0:0] -:logdrop-2181 - [0:0] -:logdrop-2182 - [0:0] -:logdrop-2183 - [0:0] -:logdrop-2184 - [0:0] -:logdrop-2185 - [0:0] -:logdrop-2186 - [0:0] -:logdrop-2187 - [0:0] -:logdrop-2188 - [0:0] -:logdrop-2189 - [0:0] :logdrop-219 - [0:0] -:logdrop-2190 - [0:0] -:logdrop-2191 - [0:0] -:logdrop-2192 - [0:0] -:logdrop-2193 - [0:0] -:logdrop-2194 - [0:0] -:logdrop-2195 - [0:0] -:logdrop-2196 - [0:0] -:logdrop-2197 - [0:0] -:logdrop-2198 - [0:0] -:logdrop-2199 - [0:0] :logdrop-22 - [0:0] :logdrop-220 - [0:0] -:logdrop-2200 - [0:0] -:logdrop-2201 - [0:0] -:logdrop-2202 - [0:0] -:logdrop-2203 - [0:0] -:logdrop-2204 - [0:0] :logdrop-221 - [0:0] :logdrop-222 - [0:0] :logdrop-223 - [0:0] @@ -6362,6 +5812,556 @@ :logdrop-997 - [0:0] :logdrop-998 - [0:0] :logdrop-999 - [0:0] +:logdrop-ntp-0 - [0:0] +:logdrop-ntp-1 - [0:0] +:logdrop-ntp-10 - [0:0] +:logdrop-ntp-100 - [0:0] +:logdrop-ntp-101 - [0:0] +:logdrop-ntp-102 - [0:0] +:logdrop-ntp-103 - [0:0] +:logdrop-ntp-104 - [0:0] +:logdrop-ntp-105 - [0:0] +:logdrop-ntp-106 - [0:0] +:logdrop-ntp-107 - [0:0] +:logdrop-ntp-108 - [0:0] +:logdrop-ntp-109 - [0:0] +:logdrop-ntp-11 - [0:0] +:logdrop-ntp-110 - [0:0] +:logdrop-ntp-111 - [0:0] +:logdrop-ntp-112 - [0:0] +:logdrop-ntp-113 - [0:0] +:logdrop-ntp-114 - [0:0] +:logdrop-ntp-115 - [0:0] +:logdrop-ntp-116 - [0:0] +:logdrop-ntp-117 - [0:0] +:logdrop-ntp-118 - [0:0] +:logdrop-ntp-119 - [0:0] +:logdrop-ntp-12 - [0:0] +:logdrop-ntp-120 - [0:0] +:logdrop-ntp-121 - [0:0] +:logdrop-ntp-122 - [0:0] +:logdrop-ntp-123 - [0:0] +:logdrop-ntp-124 - [0:0] +:logdrop-ntp-125 - [0:0] +:logdrop-ntp-126 - [0:0] +:logdrop-ntp-127 - [0:0] +:logdrop-ntp-128 - [0:0] +:logdrop-ntp-129 - [0:0] +:logdrop-ntp-13 - [0:0] +:logdrop-ntp-130 - [0:0] +:logdrop-ntp-131 - [0:0] +:logdrop-ntp-132 - [0:0] +:logdrop-ntp-133 - [0:0] +:logdrop-ntp-134 - [0:0] +:logdrop-ntp-135 - [0:0] +:logdrop-ntp-136 - [0:0] +:logdrop-ntp-137 - [0:0] +:logdrop-ntp-138 - [0:0] +:logdrop-ntp-139 - [0:0] +:logdrop-ntp-14 - [0:0] +:logdrop-ntp-140 - [0:0] +:logdrop-ntp-141 - [0:0] +:logdrop-ntp-142 - [0:0] +:logdrop-ntp-143 - [0:0] +:logdrop-ntp-144 - [0:0] +:logdrop-ntp-145 - [0:0] +:logdrop-ntp-146 - [0:0] +:logdrop-ntp-147 - [0:0] +:logdrop-ntp-148 - [0:0] +:logdrop-ntp-149 - [0:0] +:logdrop-ntp-15 - [0:0] +:logdrop-ntp-150 - [0:0] +:logdrop-ntp-151 - [0:0] +:logdrop-ntp-152 - [0:0] +:logdrop-ntp-153 - [0:0] +:logdrop-ntp-154 - [0:0] +:logdrop-ntp-155 - [0:0] +:logdrop-ntp-156 - [0:0] +:logdrop-ntp-157 - [0:0] +:logdrop-ntp-158 - [0:0] +:logdrop-ntp-159 - [0:0] +:logdrop-ntp-16 - [0:0] +:logdrop-ntp-160 - [0:0] +:logdrop-ntp-161 - [0:0] +:logdrop-ntp-162 - [0:0] +:logdrop-ntp-163 - [0:0] +:logdrop-ntp-164 - [0:0] +:logdrop-ntp-165 - [0:0] +:logdrop-ntp-166 - [0:0] +:logdrop-ntp-167 - [0:0] +:logdrop-ntp-168 - [0:0] +:logdrop-ntp-169 - [0:0] +:logdrop-ntp-17 - [0:0] +:logdrop-ntp-170 - [0:0] +:logdrop-ntp-171 - [0:0] +:logdrop-ntp-172 - [0:0] +:logdrop-ntp-173 - [0:0] +:logdrop-ntp-174 - [0:0] +:logdrop-ntp-175 - [0:0] +:logdrop-ntp-176 - [0:0] +:logdrop-ntp-177 - [0:0] +:logdrop-ntp-178 - [0:0] +:logdrop-ntp-179 - [0:0] +:logdrop-ntp-18 - [0:0] +:logdrop-ntp-180 - [0:0] +:logdrop-ntp-181 - [0:0] +:logdrop-ntp-182 - [0:0] +:logdrop-ntp-183 - [0:0] +:logdrop-ntp-184 - [0:0] +:logdrop-ntp-185 - [0:0] +:logdrop-ntp-186 - [0:0] +:logdrop-ntp-187 - [0:0] +:logdrop-ntp-188 - [0:0] +:logdrop-ntp-189 - [0:0] +:logdrop-ntp-19 - [0:0] +:logdrop-ntp-190 - [0:0] +:logdrop-ntp-191 - [0:0] +:logdrop-ntp-192 - [0:0] +:logdrop-ntp-193 - [0:0] +:logdrop-ntp-194 - [0:0] +:logdrop-ntp-195 - [0:0] +:logdrop-ntp-196 - [0:0] +:logdrop-ntp-197 - [0:0] +:logdrop-ntp-198 - [0:0] +:logdrop-ntp-199 - [0:0] +:logdrop-ntp-2 - [0:0] +:logdrop-ntp-20 - [0:0] +:logdrop-ntp-200 - [0:0] +:logdrop-ntp-201 - [0:0] +:logdrop-ntp-202 - [0:0] +:logdrop-ntp-203 - [0:0] +:logdrop-ntp-204 - [0:0] +:logdrop-ntp-205 - [0:0] +:logdrop-ntp-206 - [0:0] +:logdrop-ntp-207 - [0:0] +:logdrop-ntp-208 - [0:0] +:logdrop-ntp-209 - [0:0] +:logdrop-ntp-21 - [0:0] +:logdrop-ntp-210 - [0:0] +:logdrop-ntp-211 - [0:0] +:logdrop-ntp-212 - [0:0] +:logdrop-ntp-213 - [0:0] +:logdrop-ntp-214 - [0:0] +:logdrop-ntp-215 - [0:0] +:logdrop-ntp-216 - [0:0] +:logdrop-ntp-217 - [0:0] +:logdrop-ntp-218 - [0:0] +:logdrop-ntp-219 - [0:0] +:logdrop-ntp-22 - [0:0] +:logdrop-ntp-220 - [0:0] +:logdrop-ntp-221 - [0:0] +:logdrop-ntp-222 - [0:0] +:logdrop-ntp-223 - [0:0] +:logdrop-ntp-224 - [0:0] +:logdrop-ntp-225 - [0:0] +:logdrop-ntp-226 - [0:0] +:logdrop-ntp-227 - [0:0] +:logdrop-ntp-228 - [0:0] +:logdrop-ntp-229 - [0:0] +:logdrop-ntp-23 - [0:0] +:logdrop-ntp-230 - [0:0] +:logdrop-ntp-231 - [0:0] +:logdrop-ntp-232 - [0:0] +:logdrop-ntp-233 - [0:0] +:logdrop-ntp-234 - [0:0] +:logdrop-ntp-235 - [0:0] +:logdrop-ntp-236 - [0:0] +:logdrop-ntp-237 - [0:0] +:logdrop-ntp-238 - [0:0] +:logdrop-ntp-239 - [0:0] +:logdrop-ntp-24 - [0:0] +:logdrop-ntp-240 - [0:0] +:logdrop-ntp-241 - [0:0] +:logdrop-ntp-242 - [0:0] +:logdrop-ntp-243 - [0:0] +:logdrop-ntp-244 - [0:0] +:logdrop-ntp-245 - [0:0] +:logdrop-ntp-246 - [0:0] +:logdrop-ntp-247 - [0:0] +:logdrop-ntp-248 - [0:0] +:logdrop-ntp-249 - [0:0] +:logdrop-ntp-25 - [0:0] +:logdrop-ntp-250 - [0:0] +:logdrop-ntp-251 - [0:0] +:logdrop-ntp-252 - [0:0] +:logdrop-ntp-253 - [0:0] +:logdrop-ntp-254 - [0:0] +:logdrop-ntp-255 - [0:0] +:logdrop-ntp-256 - [0:0] +:logdrop-ntp-257 - [0:0] +:logdrop-ntp-258 - [0:0] +:logdrop-ntp-259 - [0:0] +:logdrop-ntp-26 - [0:0] +:logdrop-ntp-260 - [0:0] +:logdrop-ntp-261 - [0:0] +:logdrop-ntp-262 - [0:0] +:logdrop-ntp-263 - [0:0] +:logdrop-ntp-264 - [0:0] +:logdrop-ntp-265 - [0:0] +:logdrop-ntp-266 - [0:0] +:logdrop-ntp-267 - [0:0] +:logdrop-ntp-268 - [0:0] +:logdrop-ntp-269 - [0:0] +:logdrop-ntp-27 - [0:0] +:logdrop-ntp-270 - [0:0] +:logdrop-ntp-271 - [0:0] +:logdrop-ntp-272 - [0:0] +:logdrop-ntp-273 - [0:0] +:logdrop-ntp-274 - [0:0] +:logdrop-ntp-275 - [0:0] +:logdrop-ntp-276 - [0:0] +:logdrop-ntp-277 - [0:0] +:logdrop-ntp-278 - [0:0] +:logdrop-ntp-279 - [0:0] +:logdrop-ntp-28 - [0:0] +:logdrop-ntp-280 - [0:0] +:logdrop-ntp-281 - [0:0] +:logdrop-ntp-282 - [0:0] +:logdrop-ntp-283 - [0:0] +:logdrop-ntp-284 - [0:0] +:logdrop-ntp-285 - [0:0] +:logdrop-ntp-286 - [0:0] +:logdrop-ntp-287 - [0:0] +:logdrop-ntp-288 - [0:0] +:logdrop-ntp-289 - [0:0] +:logdrop-ntp-29 - [0:0] +:logdrop-ntp-290 - [0:0] +:logdrop-ntp-291 - [0:0] +:logdrop-ntp-292 - [0:0] +:logdrop-ntp-293 - [0:0] +:logdrop-ntp-294 - [0:0] +:logdrop-ntp-295 - [0:0] +:logdrop-ntp-296 - [0:0] +:logdrop-ntp-297 - [0:0] +:logdrop-ntp-298 - [0:0] +:logdrop-ntp-299 - [0:0] +:logdrop-ntp-3 - [0:0] +:logdrop-ntp-30 - [0:0] +:logdrop-ntp-300 - [0:0] +:logdrop-ntp-301 - [0:0] +:logdrop-ntp-302 - [0:0] +:logdrop-ntp-303 - [0:0] +:logdrop-ntp-304 - [0:0] +:logdrop-ntp-305 - [0:0] +:logdrop-ntp-306 - [0:0] +:logdrop-ntp-307 - [0:0] +:logdrop-ntp-308 - [0:0] +:logdrop-ntp-309 - [0:0] +:logdrop-ntp-31 - [0:0] +:logdrop-ntp-310 - [0:0] +:logdrop-ntp-311 - [0:0] +:logdrop-ntp-312 - [0:0] +:logdrop-ntp-313 - [0:0] +:logdrop-ntp-314 - [0:0] +:logdrop-ntp-315 - [0:0] +:logdrop-ntp-316 - [0:0] +:logdrop-ntp-317 - [0:0] +:logdrop-ntp-318 - [0:0] +:logdrop-ntp-319 - [0:0] +:logdrop-ntp-32 - [0:0] +:logdrop-ntp-320 - [0:0] +:logdrop-ntp-321 - [0:0] +:logdrop-ntp-322 - [0:0] +:logdrop-ntp-323 - [0:0] +:logdrop-ntp-324 - [0:0] +:logdrop-ntp-325 - [0:0] +:logdrop-ntp-326 - [0:0] +:logdrop-ntp-327 - [0:0] +:logdrop-ntp-328 - [0:0] +:logdrop-ntp-329 - [0:0] +:logdrop-ntp-33 - [0:0] +:logdrop-ntp-330 - [0:0] +:logdrop-ntp-331 - [0:0] +:logdrop-ntp-332 - [0:0] +:logdrop-ntp-333 - [0:0] +:logdrop-ntp-334 - [0:0] +:logdrop-ntp-335 - [0:0] +:logdrop-ntp-336 - [0:0] +:logdrop-ntp-337 - [0:0] +:logdrop-ntp-338 - [0:0] +:logdrop-ntp-339 - [0:0] +:logdrop-ntp-34 - [0:0] +:logdrop-ntp-340 - [0:0] +:logdrop-ntp-341 - [0:0] +:logdrop-ntp-342 - [0:0] +:logdrop-ntp-343 - [0:0] +:logdrop-ntp-344 - [0:0] +:logdrop-ntp-345 - [0:0] +:logdrop-ntp-346 - [0:0] +:logdrop-ntp-347 - [0:0] +:logdrop-ntp-348 - [0:0] +:logdrop-ntp-349 - [0:0] +:logdrop-ntp-35 - [0:0] +:logdrop-ntp-350 - [0:0] +:logdrop-ntp-351 - [0:0] +:logdrop-ntp-352 - [0:0] +:logdrop-ntp-353 - [0:0] +:logdrop-ntp-354 - [0:0] +:logdrop-ntp-355 - [0:0] +:logdrop-ntp-356 - [0:0] +:logdrop-ntp-357 - [0:0] +:logdrop-ntp-358 - [0:0] +:logdrop-ntp-359 - [0:0] +:logdrop-ntp-36 - [0:0] +:logdrop-ntp-360 - [0:0] +:logdrop-ntp-361 - [0:0] +:logdrop-ntp-362 - [0:0] +:logdrop-ntp-363 - [0:0] +:logdrop-ntp-364 - [0:0] +:logdrop-ntp-365 - [0:0] +:logdrop-ntp-366 - [0:0] +:logdrop-ntp-367 - [0:0] +:logdrop-ntp-368 - [0:0] +:logdrop-ntp-369 - [0:0] +:logdrop-ntp-37 - [0:0] +:logdrop-ntp-370 - [0:0] +:logdrop-ntp-371 - [0:0] +:logdrop-ntp-372 - [0:0] +:logdrop-ntp-373 - [0:0] +:logdrop-ntp-374 - [0:0] +:logdrop-ntp-375 - [0:0] +:logdrop-ntp-376 - [0:0] +:logdrop-ntp-377 - [0:0] +:logdrop-ntp-378 - [0:0] +:logdrop-ntp-379 - [0:0] +:logdrop-ntp-38 - [0:0] +:logdrop-ntp-380 - [0:0] +:logdrop-ntp-381 - [0:0] +:logdrop-ntp-382 - [0:0] +:logdrop-ntp-383 - [0:0] +:logdrop-ntp-384 - [0:0] +:logdrop-ntp-385 - [0:0] +:logdrop-ntp-386 - [0:0] +:logdrop-ntp-387 - [0:0] +:logdrop-ntp-388 - [0:0] +:logdrop-ntp-389 - [0:0] +:logdrop-ntp-39 - [0:0] +:logdrop-ntp-390 - [0:0] +:logdrop-ntp-391 - [0:0] +:logdrop-ntp-392 - [0:0] +:logdrop-ntp-393 - [0:0] +:logdrop-ntp-394 - [0:0] +:logdrop-ntp-395 - [0:0] +:logdrop-ntp-396 - [0:0] +:logdrop-ntp-397 - [0:0] +:logdrop-ntp-398 - [0:0] +:logdrop-ntp-399 - [0:0] +:logdrop-ntp-4 - [0:0] +:logdrop-ntp-40 - [0:0] +:logdrop-ntp-400 - [0:0] +:logdrop-ntp-401 - [0:0] +:logdrop-ntp-402 - [0:0] +:logdrop-ntp-403 - [0:0] +:logdrop-ntp-404 - [0:0] +:logdrop-ntp-405 - [0:0] +:logdrop-ntp-406 - [0:0] +:logdrop-ntp-407 - [0:0] +:logdrop-ntp-408 - [0:0] +:logdrop-ntp-409 - [0:0] +:logdrop-ntp-41 - [0:0] +:logdrop-ntp-410 - [0:0] +:logdrop-ntp-411 - [0:0] +:logdrop-ntp-412 - [0:0] +:logdrop-ntp-413 - [0:0] +:logdrop-ntp-414 - [0:0] +:logdrop-ntp-415 - [0:0] +:logdrop-ntp-416 - [0:0] +:logdrop-ntp-417 - [0:0] +:logdrop-ntp-418 - [0:0] +:logdrop-ntp-419 - [0:0] +:logdrop-ntp-42 - [0:0] +:logdrop-ntp-420 - [0:0] +:logdrop-ntp-421 - [0:0] +:logdrop-ntp-422 - [0:0] +:logdrop-ntp-423 - [0:0] +:logdrop-ntp-424 - [0:0] +:logdrop-ntp-425 - [0:0] +:logdrop-ntp-426 - [0:0] +:logdrop-ntp-427 - [0:0] +:logdrop-ntp-428 - [0:0] +:logdrop-ntp-429 - [0:0] +:logdrop-ntp-43 - [0:0] +:logdrop-ntp-430 - [0:0] +:logdrop-ntp-431 - [0:0] +:logdrop-ntp-432 - [0:0] +:logdrop-ntp-433 - [0:0] +:logdrop-ntp-434 - [0:0] +:logdrop-ntp-435 - [0:0] +:logdrop-ntp-436 - [0:0] +:logdrop-ntp-437 - [0:0] +:logdrop-ntp-438 - [0:0] +:logdrop-ntp-439 - [0:0] +:logdrop-ntp-44 - [0:0] +:logdrop-ntp-440 - [0:0] +:logdrop-ntp-441 - [0:0] +:logdrop-ntp-442 - [0:0] +:logdrop-ntp-443 - [0:0] +:logdrop-ntp-444 - [0:0] +:logdrop-ntp-445 - [0:0] +:logdrop-ntp-446 - [0:0] +:logdrop-ntp-447 - [0:0] +:logdrop-ntp-448 - [0:0] +:logdrop-ntp-449 - [0:0] +:logdrop-ntp-45 - [0:0] +:logdrop-ntp-450 - [0:0] +:logdrop-ntp-451 - [0:0] +:logdrop-ntp-452 - [0:0] +:logdrop-ntp-453 - [0:0] +:logdrop-ntp-454 - [0:0] +:logdrop-ntp-455 - [0:0] +:logdrop-ntp-456 - [0:0] +:logdrop-ntp-457 - [0:0] +:logdrop-ntp-458 - [0:0] +:logdrop-ntp-459 - [0:0] +:logdrop-ntp-46 - [0:0] +:logdrop-ntp-460 - [0:0] +:logdrop-ntp-461 - [0:0] +:logdrop-ntp-462 - [0:0] +:logdrop-ntp-463 - [0:0] +:logdrop-ntp-464 - [0:0] +:logdrop-ntp-465 - [0:0] +:logdrop-ntp-466 - [0:0] +:logdrop-ntp-467 - [0:0] +:logdrop-ntp-468 - [0:0] +:logdrop-ntp-469 - [0:0] +:logdrop-ntp-47 - [0:0] +:logdrop-ntp-470 - [0:0] +:logdrop-ntp-471 - [0:0] +:logdrop-ntp-472 - [0:0] +:logdrop-ntp-473 - [0:0] +:logdrop-ntp-474 - [0:0] +:logdrop-ntp-475 - [0:0] +:logdrop-ntp-476 - [0:0] +:logdrop-ntp-477 - [0:0] +:logdrop-ntp-478 - [0:0] +:logdrop-ntp-479 - [0:0] +:logdrop-ntp-48 - [0:0] +:logdrop-ntp-480 - [0:0] +:logdrop-ntp-481 - [0:0] +:logdrop-ntp-482 - [0:0] +:logdrop-ntp-483 - [0:0] +:logdrop-ntp-484 - [0:0] +:logdrop-ntp-485 - [0:0] +:logdrop-ntp-486 - [0:0] +:logdrop-ntp-487 - [0:0] +:logdrop-ntp-488 - [0:0] +:logdrop-ntp-489 - [0:0] +:logdrop-ntp-49 - [0:0] +:logdrop-ntp-490 - [0:0] +:logdrop-ntp-491 - [0:0] +:logdrop-ntp-492 - [0:0] +:logdrop-ntp-493 - [0:0] +:logdrop-ntp-494 - [0:0] +:logdrop-ntp-495 - [0:0] +:logdrop-ntp-496 - [0:0] +:logdrop-ntp-497 - [0:0] +:logdrop-ntp-498 - [0:0] +:logdrop-ntp-499 - [0:0] +:logdrop-ntp-5 - [0:0] +:logdrop-ntp-50 - [0:0] +:logdrop-ntp-500 - [0:0] +:logdrop-ntp-501 - [0:0] +:logdrop-ntp-502 - [0:0] +:logdrop-ntp-503 - [0:0] +:logdrop-ntp-504 - [0:0] +:logdrop-ntp-505 - [0:0] +:logdrop-ntp-506 - [0:0] +:logdrop-ntp-507 - [0:0] +:logdrop-ntp-508 - [0:0] +:logdrop-ntp-509 - [0:0] +:logdrop-ntp-51 - [0:0] +:logdrop-ntp-510 - [0:0] +:logdrop-ntp-511 - [0:0] +:logdrop-ntp-512 - [0:0] +:logdrop-ntp-513 - [0:0] +:logdrop-ntp-514 - [0:0] +:logdrop-ntp-515 - [0:0] +:logdrop-ntp-516 - [0:0] +:logdrop-ntp-517 - [0:0] +:logdrop-ntp-518 - [0:0] +:logdrop-ntp-519 - [0:0] +:logdrop-ntp-52 - [0:0] +:logdrop-ntp-520 - [0:0] +:logdrop-ntp-521 - [0:0] +:logdrop-ntp-522 - [0:0] +:logdrop-ntp-523 - [0:0] +:logdrop-ntp-524 - [0:0] +:logdrop-ntp-525 - [0:0] +:logdrop-ntp-526 - [0:0] +:logdrop-ntp-527 - [0:0] +:logdrop-ntp-528 - [0:0] +:logdrop-ntp-529 - [0:0] +:logdrop-ntp-53 - [0:0] +:logdrop-ntp-530 - [0:0] +:logdrop-ntp-531 - [0:0] +:logdrop-ntp-532 - [0:0] +:logdrop-ntp-533 - [0:0] +:logdrop-ntp-534 - [0:0] +:logdrop-ntp-535 - [0:0] +:logdrop-ntp-536 - [0:0] +:logdrop-ntp-537 - [0:0] +:logdrop-ntp-538 - [0:0] +:logdrop-ntp-539 - [0:0] +:logdrop-ntp-54 - [0:0] +:logdrop-ntp-540 - [0:0] +:logdrop-ntp-541 - [0:0] +:logdrop-ntp-542 - [0:0] +:logdrop-ntp-543 - [0:0] +:logdrop-ntp-544 - [0:0] +:logdrop-ntp-545 - [0:0] +:logdrop-ntp-546 - [0:0] +:logdrop-ntp-547 - [0:0] +:logdrop-ntp-548 - [0:0] +:logdrop-ntp-549 - [0:0] +:logdrop-ntp-55 - [0:0] +:logdrop-ntp-56 - [0:0] +:logdrop-ntp-57 - [0:0] +:logdrop-ntp-58 - [0:0] +:logdrop-ntp-59 - [0:0] +:logdrop-ntp-6 - [0:0] +:logdrop-ntp-60 - [0:0] +:logdrop-ntp-61 - [0:0] +:logdrop-ntp-62 - [0:0] +:logdrop-ntp-63 - [0:0] +:logdrop-ntp-64 - [0:0] +:logdrop-ntp-65 - [0:0] +:logdrop-ntp-66 - [0:0] +:logdrop-ntp-67 - [0:0] +:logdrop-ntp-68 - [0:0] +:logdrop-ntp-69 - [0:0] +:logdrop-ntp-7 - [0:0] +:logdrop-ntp-70 - [0:0] +:logdrop-ntp-71 - [0:0] +:logdrop-ntp-72 - [0:0] +:logdrop-ntp-73 - [0:0] +:logdrop-ntp-74 - [0:0] +:logdrop-ntp-75 - [0:0] +:logdrop-ntp-76 - [0:0] +:logdrop-ntp-77 - [0:0] +:logdrop-ntp-78 - [0:0] +:logdrop-ntp-79 - [0:0] +:logdrop-ntp-8 - [0:0] +:logdrop-ntp-80 - [0:0] +:logdrop-ntp-81 - [0:0] +:logdrop-ntp-82 - [0:0] +:logdrop-ntp-83 - [0:0] +:logdrop-ntp-84 - [0:0] +:logdrop-ntp-85 - [0:0] +:logdrop-ntp-86 - [0:0] +:logdrop-ntp-87 - [0:0] +:logdrop-ntp-88 - [0:0] +:logdrop-ntp-89 - [0:0] +:logdrop-ntp-9 - [0:0] +:logdrop-ntp-90 - [0:0] +:logdrop-ntp-91 - [0:0] +:logdrop-ntp-92 - [0:0] +:logdrop-ntp-93 - [0:0] +:logdrop-ntp-94 - [0:0] +:logdrop-ntp-95 - [0:0] +:logdrop-ntp-96 - [0:0] +:logdrop-ntp-97 - [0:0] +:logdrop-ntp-98 - [0:0] +:logdrop-ntp-99 - [0:0] :logpass-0 - [0:0] :logpass-1 - [0:0] :logpass-2 - [0:0] @@ -8837,25 +8837,25 @@ -A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -j ACCEPT --A FORWARD -j logdrop-2200 +-A FORWARD -j logdrop-1650 -A FORWARD -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-99 --A FORWARD -j logdrop-2201 +-A FORWARD -j logaccept-66 +-A FORWARD -j logdrop-1651 -A FORWARD -j logpass-0 --A FORWARD -j logaccept-100 --A FORWARD -j logdrop-2202 +-A FORWARD -j logaccept-67 +-A FORWARD -j logdrop-1652 -A FORWARD -j logpass-1 --A FORWARD -j logaccept-101 --A FORWARD -j logdrop-2203 +-A FORWARD -j logaccept-68 +-A FORWARD -j logdrop-1653 -A FORWARD -j logpass-2 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-102 --A FORWARD -j logdrop-2204 +-A FORWARD -j logaccept-69 +-A FORWARD -j logdrop-1654 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -o eth1 -d fc00::/7 -j ACCEPT -A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT @@ -10374,982 +10374,982 @@ -A INPUT -j logaccept-final-304 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-305 --A INPUT -i eth0 -j limit-2928 --A INPUT -i eth0 -j limit-2929 --A INPUT -i eth0 -j limit-2930 --A INPUT -i eth0 -j limit-2931 --A INPUT -i eth0 -j limit-2932 --A INPUT -i eth0 -j limit-2933 --A INPUT -i eth0 -j limit-2934 --A INPUT -i eth0 -j limit-2935 --A INPUT -i eth0 -j limit-2936 --A INPUT -i eth0 -j limit-2937 --A INPUT -i eth0 -j limit-2938 --A INPUT -i eth0 -j limit-2939 --A INPUT -i eth0 -j limit-2940 --A INPUT -i eth0 -j limit-2941 --A INPUT -i eth0 -j limit-2942 --A INPUT -i eth0 -j limit-2943 --A INPUT -i eth0 -j limit-2944 --A INPUT -i eth0 -j limit-2945 --A INPUT -i eth0 -j limit-2946 --A INPUT -i eth0 -j limit-2947 --A INPUT -i eth0 -j limit-2948 --A INPUT -i eth0 -j limit-2949 --A INPUT -i eth0 -j limit-2950 --A INPUT -i eth0 -j limit-2951 --A INPUT -i eth0 -j limit-2952 --A INPUT -i eth0 -j limit-2953 --A INPUT -i eth0 -j limit-2954 --A INPUT -i eth0 -j limit-2955 --A INPUT -i eth0 -j limit-2956 --A INPUT -i eth0 -j limit-2957 --A INPUT -i eth0 -j limit-2958 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2960 --A INPUT -i eth0 -j limit-2961 --A INPUT -i eth0 -j limit-2962 --A INPUT -i eth0 -j limit-2963 --A INPUT -i eth0 -j limit-2964 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2966 --A INPUT -i eth0 -j limit-2967 --A INPUT -i eth0 -j limit-2968 --A INPUT -i eth0 -j limit-2969 --A INPUT -i eth0 -j limit-2970 --A INPUT -i eth0 -j limit-2971 --A INPUT -i eth0 -j limit-2972 --A INPUT -i eth0 -j limit-2973 --A INPUT -i eth0 -j limit-2974 --A INPUT -i eth0 -j limit-2975 --A INPUT -i eth0 -j limit-2976 --A INPUT -i eth0 -j limit-2977 --A INPUT -i eth0 -j limit-2978 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2980 --A INPUT -i eth0 -j limit-2981 --A INPUT -i eth0 -j limit-2982 --A INPUT -i eth0 -j limit-2983 --A INPUT -i eth0 -j limit-2984 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2986 --A INPUT -i eth0 -j limit-2987 --A INPUT -i eth0 -j limit-2988 --A INPUT -i eth0 -j limit-2989 --A INPUT -i eth0 -j limit-2990 --A INPUT -i eth0 -j limit-2991 --A INPUT -i eth0 -j limit-2992 --A INPUT -i eth0 -j limit-2993 --A INPUT -i eth0 -j limit-2994 --A INPUT -i eth0 -j limit-2995 --A INPUT -i eth0 -j limit-2996 --A INPUT -i eth0 -j limit-2997 --A INPUT -i eth0 -j limit-2998 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3000 --A INPUT -i eth0 -j limit-3001 --A INPUT -i eth0 -j limit-3002 --A INPUT -i eth0 -j limit-3003 --A INPUT -i eth0 -j limit-3004 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3006 --A INPUT -i eth0 -j limit-3007 --A INPUT -i eth0 -j limit-3008 --A INPUT -i eth0 -j limit-3009 --A INPUT -i eth0 -j limit-3010 --A INPUT -i eth0 -j limit-3011 --A INPUT -i eth0 -j limit-3012 --A INPUT -i eth0 -j limit-3013 --A INPUT -i eth0 -j limit-3014 --A INPUT -i eth0 -j limit-3015 --A INPUT -i eth0 -j limit-3016 --A INPUT -i eth0 -j limit-3017 --A INPUT -i eth0 -j limit-3018 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3020 --A INPUT -i eth0 -j limit-3021 --A INPUT -i eth0 -j limit-3022 --A INPUT -i eth0 -j limit-3023 --A INPUT -i eth0 -j limit-3024 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3026 --A INPUT -i eth0 -j limit-3027 --A INPUT -i eth0 -j limit-3028 --A INPUT -i eth0 -j limit-3029 --A INPUT -i eth0 -j limit-3030 --A INPUT -i eth0 -j limit-3031 --A INPUT -i eth0 -j limit-3032 --A INPUT -i eth0 -j limit-3033 --A INPUT -i eth0 -j limit-3034 --A INPUT -i eth0 -j limit-3035 --A INPUT -i eth0 -j limit-3036 --A INPUT -i eth0 -j limit-3037 --A INPUT -i eth0 -j limit-3038 --A INPUT -i eth0 -j limit-3039 --A INPUT -i eth0 -j limit-3040 --A INPUT -i eth0 -j limit-3041 --A INPUT -i eth0 -j limit-3042 --A INPUT -i eth0 -j limit-3043 --A INPUT -i eth0 -j limit-3044 --A INPUT -i eth0 -j limit-3045 --A INPUT -i eth0 -j limit-3046 --A INPUT -i eth0 -j limit-3047 --A INPUT -i eth0 -j limit-3048 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1681 --A INPUT -i eth0 -j limit-3050 --A INPUT -i eth0 -j limit-3051 --A INPUT -i eth0 -j limit-3052 --A INPUT -i eth0 -j limit-3053 --A INPUT -i eth0 -j limit-3054 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1687 --A INPUT -i eth0 -j limit-3056 --A INPUT -i eth0 -j limit-3057 --A INPUT -i eth0 -j limit-3058 --A INPUT -i eth0 -j limit-3059 --A INPUT -i eth0 -j limit-3060 --A INPUT -i eth0 -j limit-3061 --A INPUT -i eth0 -j limit-3062 --A INPUT -i eth0 -j limit-3063 --A INPUT -i eth0 -j limit-3064 --A INPUT -i eth0 -j limit-3065 --A INPUT -i eth0 -j limit-3066 --A INPUT -i eth0 -j limit-3067 --A INPUT -i eth0 -j limit-3068 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1701 --A INPUT -i eth0 -j limit-3070 --A INPUT -i eth0 -j limit-3071 --A INPUT -i eth0 -j limit-3072 --A INPUT -i eth0 -j limit-3073 --A INPUT -i eth0 -j limit-3074 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1707 --A INPUT -i eth0 -j limit-3076 --A INPUT -i eth0 -j limit-3077 --A INPUT -i eth0 -j limit-3078 --A INPUT -i eth0 -j limit-3079 --A INPUT -i eth0 -j limit-3080 --A INPUT -i eth0 -j limit-3081 --A INPUT -i eth0 -j limit-3082 --A INPUT -i eth0 -j limit-3083 --A INPUT -i eth0 -j limit-3084 --A INPUT -i eth0 -j limit-3085 --A INPUT -i eth0 -j limit-3086 --A INPUT -i eth0 -j limit-3087 --A INPUT -i eth0 -j limit-3088 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1721 --A INPUT -i eth0 -j limit-3090 --A INPUT -i eth0 -j limit-3091 --A INPUT -i eth0 -j limit-3092 --A INPUT -i eth0 -j limit-3093 --A INPUT -i eth0 -j limit-3094 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1727 --A INPUT -i eth0 -j limit-3096 --A INPUT -i eth0 -j limit-3097 --A INPUT -i eth0 -j limit-3098 --A INPUT -i eth0 -j limit-3099 --A INPUT -i eth0 -j limit-3100 --A INPUT -i eth0 -j limit-3101 --A INPUT -i eth0 -j limit-3102 --A INPUT -i eth0 -j limit-3103 --A INPUT -i eth0 -j limit-3104 --A INPUT -i eth0 -j limit-3105 --A INPUT -i eth0 -j limit-3106 --A INPUT -i eth0 -j limit-3107 --A INPUT -i eth0 -j limit-3108 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1741 --A INPUT -i eth0 -j limit-3110 --A INPUT -i eth0 -j limit-3111 --A INPUT -i eth0 -j limit-3112 --A INPUT -i eth0 -j limit-3113 --A INPUT -i eth0 -j limit-3114 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1747 --A INPUT -i eth0 -j limit-3116 --A INPUT -i eth0 -j limit-3117 --A INPUT -i eth0 -j limit-3118 --A INPUT -i eth0 -j limit-3119 --A INPUT -i eth0 -j limit-3120 --A INPUT -i eth0 -j limit-3121 --A INPUT -i eth0 -j limit-3122 --A INPUT -i eth0 -j limit-3123 --A INPUT -i eth0 -j limit-3124 --A INPUT -i eth0 -j limit-3125 --A INPUT -i eth0 -j limit-3126 --A INPUT -i eth0 -j limit-3127 --A INPUT -i eth0 -j limit-3128 --A INPUT -i eth0 -j limit-3129 --A INPUT -i eth0 -j limit-3130 --A INPUT -i eth0 -j limit-3131 --A INPUT -i eth0 -j limit-3132 --A INPUT -i eth0 -j limit-3133 --A INPUT -i eth0 -j limit-3134 --A INPUT -i eth0 -j limit-3135 --A INPUT -i eth0 -j limit-3136 --A INPUT -i eth0 -j limit-3137 --A INPUT -i eth0 -j limit-3138 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1771 --A INPUT -i eth0 -j limit-3140 --A INPUT -i eth0 -j limit-3141 --A INPUT -i eth0 -j limit-3142 --A INPUT -i eth0 -j limit-3143 --A INPUT -i eth0 -j limit-3144 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1777 --A INPUT -i eth0 -j limit-3146 --A INPUT -i eth0 -j limit-3147 --A INPUT -i eth0 -j limit-3148 --A INPUT -i eth0 -j limit-3149 --A INPUT -i eth0 -j limit-3150 --A INPUT -i eth0 -j limit-3151 --A INPUT -i eth0 -j limit-3152 --A INPUT -i eth0 -j limit-3153 --A INPUT -i eth0 -j limit-3154 --A INPUT -i eth0 -j limit-3155 --A INPUT -i eth0 -j limit-3156 --A INPUT -i eth0 -j limit-3157 --A INPUT -i eth0 -j limit-3158 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1791 --A INPUT -i eth0 -j limit-3160 --A INPUT -i eth0 -j limit-3161 --A INPUT -i eth0 -j limit-3162 --A INPUT -i eth0 -j limit-3163 --A INPUT -i eth0 -j limit-3164 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1797 --A INPUT -i eth0 -j limit-3166 --A INPUT -i eth0 -j limit-3167 --A INPUT -i eth0 -j limit-3168 --A INPUT -i eth0 -j limit-3169 --A INPUT -i eth0 -j limit-3170 --A INPUT -i eth0 -j limit-3171 --A INPUT -i eth0 -j limit-3172 --A INPUT -i eth0 -j limit-3173 --A INPUT -i eth0 -j limit-3174 --A INPUT -i eth0 -j limit-3175 --A INPUT -i eth0 -j limit-3176 --A INPUT -i eth0 -j limit-3177 --A INPUT -i eth0 -j limit-3178 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1811 --A INPUT -i eth0 -j limit-3180 --A INPUT -i eth0 -j limit-3181 --A INPUT -i eth0 -j limit-3182 --A INPUT -i eth0 -j limit-3183 --A INPUT -i eth0 -j limit-3184 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1817 --A INPUT -i eth0 -j limit-3186 --A INPUT -i eth0 -j limit-3187 --A INPUT -i eth0 -j limit-3188 --A INPUT -i eth0 -j limit-3189 --A INPUT -i eth0 -j limit-3190 --A INPUT -i eth0 -j limit-3191 --A INPUT -i eth0 -j limit-3192 --A INPUT -i eth0 -j limit-3193 --A INPUT -i eth0 -j limit-3194 --A INPUT -i eth0 -j limit-3195 --A INPUT -i eth0 -j limit-3196 --A INPUT -i eth0 -j limit-3197 --A INPUT -i eth0 -j limit-3198 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1831 --A INPUT -i eth0 -j limit-3200 --A INPUT -i eth0 -j limit-3201 --A INPUT -i eth0 -j limit-3202 --A INPUT -i eth0 -j limit-3203 --A INPUT -i eth0 -j limit-3204 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1837 --A INPUT -i eth0 -j limit-3206 --A INPUT -i eth0 -j limit-3207 --A INPUT -i eth0 -j limit-3208 --A INPUT -i eth0 -j limit-3209 --A INPUT -i eth0 -j limit-3210 --A INPUT -i eth0 -j limit-3211 --A INPUT -i eth0 -j limit-3212 --A INPUT -i eth0 -j limit-3213 --A INPUT -i eth0 -j limit-3214 --A INPUT -i eth0 -j limit-3215 --A INPUT -i eth0 -j limit-3216 --A INPUT -i eth0 -j limit-3217 --A INPUT -i eth0 -j limit-3218 --A INPUT -i eth0 -j limit-3219 --A INPUT -i eth0 -j limit-3220 --A INPUT -i eth0 -j limit-3221 --A INPUT -i eth0 -j limit-3222 --A INPUT -i eth0 -j limit-3223 --A INPUT -i eth0 -j limit-3224 --A INPUT -i eth0 -j limit-3225 --A INPUT -i eth0 -j limit-3226 --A INPUT -i eth0 -j limit-3227 --A INPUT -i eth0 -j limit-3228 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3230 --A INPUT -i eth0 -j limit-3231 --A INPUT -i eth0 -j limit-3232 --A INPUT -i eth0 -j limit-3233 --A INPUT -i eth0 -j limit-3234 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3236 --A INPUT -i eth0 -j limit-3237 --A INPUT -i eth0 -j limit-3238 --A INPUT -i eth0 -j limit-3239 --A INPUT -i eth0 -j limit-3240 --A INPUT -i eth0 -j limit-3241 --A INPUT -i eth0 -j limit-3242 --A INPUT -i eth0 -j limit-3243 --A INPUT -i eth0 -j limit-3244 --A INPUT -i eth0 -j limit-3245 --A INPUT -i eth0 -j limit-3246 --A INPUT -i eth0 -j limit-3247 --A INPUT -i eth0 -j limit-3248 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3250 --A INPUT -i eth0 -j limit-3251 --A INPUT -i eth0 -j limit-3252 --A INPUT -i eth0 -j limit-3253 --A INPUT -i eth0 -j limit-3254 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3256 --A INPUT -i eth0 -j limit-3257 --A INPUT -i eth0 -j limit-3258 --A INPUT -i eth0 -j limit-3259 --A INPUT -i eth0 -j limit-3260 --A INPUT -i eth0 -j limit-3261 --A INPUT -i eth0 -j limit-3262 --A INPUT -i eth0 -j limit-3263 --A INPUT -i eth0 -j limit-3264 --A INPUT -i eth0 -j limit-3265 --A INPUT -i eth0 -j limit-3266 --A INPUT -i eth0 -j limit-3267 --A INPUT -i eth0 -j limit-3268 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3270 --A INPUT -i eth0 -j limit-3271 --A INPUT -i eth0 -j limit-3272 --A INPUT -i eth0 -j limit-3273 --A INPUT -i eth0 -j limit-3274 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3276 --A INPUT -i eth0 -j limit-3277 --A INPUT -i eth0 -j limit-3278 --A INPUT -i eth0 -j limit-3279 --A INPUT -i eth0 -j limit-3280 --A INPUT -i eth0 -j limit-3281 --A INPUT -i eth0 -j limit-3282 --A INPUT -i eth0 -j limit-3283 --A INPUT -i eth0 -j limit-3284 --A INPUT -i eth0 -j limit-3285 --A INPUT -i eth0 -j limit-3286 --A INPUT -i eth0 -j limit-3287 --A INPUT -i eth0 -j limit-3288 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3290 --A INPUT -i eth0 -j limit-3291 --A INPUT -i eth0 -j limit-3292 --A INPUT -i eth0 -j limit-3293 --A INPUT -i eth0 -j limit-3294 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-3296 --A INPUT -i eth0 -j limit-3297 --A INPUT -i eth0 -j limit-3298 --A INPUT -i eth0 -j limit-3299 --A INPUT -i eth0 -j limit-3300 --A INPUT -i eth0 -j limit-3301 --A INPUT -i eth0 -j limit-3302 --A INPUT -i eth0 -j limit-3303 --A INPUT -i eth0 -j limit-3304 --A INPUT -i eth0 -j limit-3305 --A INPUT -i eth0 -j limit-3306 --A INPUT -i eth0 -j limit-3307 --A INPUT -i eth0 -j limit-3308 --A INPUT -i eth0 -j limit-3309 --A INPUT -i eth0 -j limit-3310 --A INPUT -i eth0 -j limit-3311 --A INPUT -i eth0 -j limit-3312 --A INPUT -i eth0 -j limit-3313 --A INPUT -i eth0 -j limit-3314 --A INPUT -i eth0 -j limit-3315 --A INPUT -i eth0 -j limit-3316 --A INPUT -i eth0 -j limit-3317 --A INPUT -i eth0 -j limit-3318 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1861 --A INPUT -i eth0 -j limit-3320 --A INPUT -i eth0 -j limit-3321 --A INPUT -i eth0 -j limit-3322 --A INPUT -i eth0 -j limit-3323 --A INPUT -i eth0 -j limit-3324 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1867 --A INPUT -i eth0 -j limit-3326 --A INPUT -i eth0 -j limit-3327 --A INPUT -i eth0 -j limit-3328 --A INPUT -i eth0 -j limit-3329 --A INPUT -i eth0 -j limit-3330 --A INPUT -i eth0 -j limit-3331 --A INPUT -i eth0 -j limit-3332 --A INPUT -i eth0 -j limit-3333 --A INPUT -i eth0 -j limit-3334 --A INPUT -i eth0 -j limit-3335 --A INPUT -i eth0 -j limit-3336 --A INPUT -i eth0 -j limit-3337 --A INPUT -i eth0 -j limit-3338 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1881 --A INPUT -i eth0 -j limit-3340 --A INPUT -i eth0 -j limit-3341 --A INPUT -i eth0 -j limit-3342 --A INPUT -i eth0 -j limit-3343 --A INPUT -i eth0 -j limit-3344 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1887 --A INPUT -i eth0 -j limit-3346 --A INPUT -i eth0 -j limit-3347 --A INPUT -i eth0 -j limit-3348 --A INPUT -i eth0 -j limit-3349 --A INPUT -i eth0 -j limit-3350 --A INPUT -i eth0 -j limit-3351 --A INPUT -i eth0 -j limit-3352 --A INPUT -i eth0 -j limit-3353 --A INPUT -i eth0 -j limit-3354 --A INPUT -i eth0 -j limit-3355 --A INPUT -i eth0 -j limit-3356 --A INPUT -i eth0 -j limit-3357 --A INPUT -i eth0 -j limit-3358 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1901 --A INPUT -i eth0 -j limit-3360 --A INPUT -i eth0 -j limit-3361 --A INPUT -i eth0 -j limit-3362 --A INPUT -i eth0 -j limit-3363 --A INPUT -i eth0 -j limit-3364 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1907 --A INPUT -i eth0 -j limit-3366 --A INPUT -i eth0 -j limit-3367 --A INPUT -i eth0 -j limit-3368 --A INPUT -i eth0 -j limit-3369 --A INPUT -i eth0 -j limit-3370 --A INPUT -i eth0 -j limit-3371 --A INPUT -i eth0 -j limit-3372 --A INPUT -i eth0 -j limit-3373 --A INPUT -i eth0 -j limit-3374 --A INPUT -i eth0 -j limit-3375 --A INPUT -i eth0 -j limit-3376 --A INPUT -i eth0 -j limit-3377 --A INPUT -i eth0 -j limit-3378 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1921 --A INPUT -i eth0 -j limit-3380 --A INPUT -i eth0 -j limit-3381 --A INPUT -i eth0 -j limit-3382 --A INPUT -i eth0 -j limit-3383 --A INPUT -i eth0 -j limit-3384 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1927 --A INPUT -i eth0 -j limit-3386 --A INPUT -i eth0 -j limit-3387 --A INPUT -i eth0 -j limit-3388 --A INPUT -i eth0 -j limit-3389 --A INPUT -i eth0 -j limit-3390 --A INPUT -i eth0 -j limit-3391 --A INPUT -i eth0 -j limit-3392 --A INPUT -i eth0 -j limit-3393 --A INPUT -i eth0 -j limit-3394 --A INPUT -i eth0 -j limit-3395 --A INPUT -i eth0 -j limit-3396 --A INPUT -i eth0 -j limit-3397 --A INPUT -i eth0 -j limit-3398 --A INPUT -i eth0 -j limit-3399 --A INPUT -i eth0 -j limit-3400 --A INPUT -i eth0 -j limit-3401 --A INPUT -i eth0 -j limit-3402 --A INPUT -i eth0 -j limit-3403 --A INPUT -i eth0 -j limit-3404 --A INPUT -i eth0 -j limit-3405 --A INPUT -i eth0 -j limit-3406 --A INPUT -i eth0 -j limit-3407 --A INPUT -i eth0 -j limit-3408 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3410 --A INPUT -i eth0 -j limit-3411 --A INPUT -i eth0 -j limit-3412 --A INPUT -i eth0 -j limit-3413 --A INPUT -i eth0 -j limit-3414 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3416 --A INPUT -i eth0 -j limit-3417 --A INPUT -i eth0 -j limit-3418 --A INPUT -i eth0 -j limit-3419 --A INPUT -i eth0 -j limit-3420 --A INPUT -i eth0 -j limit-3421 --A INPUT -i eth0 -j limit-3422 --A INPUT -i eth0 -j limit-3423 --A INPUT -i eth0 -j limit-3424 --A INPUT -i eth0 -j limit-3425 --A INPUT -i eth0 -j limit-3426 --A INPUT -i eth0 -j limit-3427 --A INPUT -i eth0 -j limit-3428 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3430 --A INPUT -i eth0 -j limit-3431 --A INPUT -i eth0 -j limit-3432 --A INPUT -i eth0 -j limit-3433 --A INPUT -i eth0 -j limit-3434 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3436 --A INPUT -i eth0 -j limit-3437 --A INPUT -i eth0 -j limit-3438 --A INPUT -i eth0 -j limit-3439 --A INPUT -i eth0 -j limit-3440 --A INPUT -i eth0 -j limit-3441 --A INPUT -i eth0 -j limit-3442 --A INPUT -i eth0 -j limit-3443 --A INPUT -i eth0 -j limit-3444 --A INPUT -i eth0 -j limit-3445 --A INPUT -i eth0 -j limit-3446 --A INPUT -i eth0 -j limit-3447 --A INPUT -i eth0 -j limit-3448 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3450 --A INPUT -i eth0 -j limit-3451 --A INPUT -i eth0 -j limit-3452 --A INPUT -i eth0 -j limit-3453 --A INPUT -i eth0 -j limit-3454 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3456 --A INPUT -i eth0 -j limit-3457 --A INPUT -i eth0 -j limit-3458 --A INPUT -i eth0 -j limit-3459 --A INPUT -i eth0 -j limit-3460 --A INPUT -i eth0 -j limit-3461 --A INPUT -i eth0 -j limit-3462 --A INPUT -i eth0 -j limit-3463 --A INPUT -i eth0 -j limit-3464 --A INPUT -i eth0 -j limit-3465 --A INPUT -i eth0 -j limit-3466 --A INPUT -i eth0 -j limit-3467 --A INPUT -i eth0 -j limit-3468 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3470 --A INPUT -i eth0 -j limit-3471 --A INPUT -i eth0 -j limit-3472 --A INPUT -i eth0 -j limit-3473 --A INPUT -i eth0 -j limit-3474 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3476 --A INPUT -i eth0 -j limit-3477 --A INPUT -i eth0 -j limit-3478 --A INPUT -i eth0 -j limit-3479 --A INPUT -i eth0 -j limit-3480 --A INPUT -i eth0 -j limit-3481 --A INPUT -i eth0 -j limit-3482 --A INPUT -i eth0 -j limit-3483 --A INPUT -i eth0 -j limit-3484 --A INPUT -i eth0 -j limit-3485 --A INPUT -i eth0 -j limit-3486 --A INPUT -i eth0 -j limit-3487 --A INPUT -i eth0 -j limit-3488 --A INPUT -i eth0 -j limit-3489 --A INPUT -i eth0 -j limit-3490 --A INPUT -i eth0 -j limit-3491 --A INPUT -i eth0 -j limit-3492 --A INPUT -i eth0 -j limit-3493 --A INPUT -i eth0 -j limit-3494 --A INPUT -i eth0 -j limit-3495 --A INPUT -i eth0 -j limit-3496 --A INPUT -i eth0 -j limit-3497 --A INPUT -i eth0 -j limit-3498 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1951 --A INPUT -i eth0 -j limit-3500 --A INPUT -i eth0 -j limit-3501 --A INPUT -i eth0 -j limit-3502 --A INPUT -i eth0 -j limit-3503 --A INPUT -i eth0 -j limit-3504 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1957 --A INPUT -i eth0 -j limit-3506 --A INPUT -i eth0 -j limit-3507 --A INPUT -i eth0 -j limit-3508 --A INPUT -i eth0 -j limit-3509 --A INPUT -i eth0 -j limit-3510 --A INPUT -i eth0 -j limit-3511 --A INPUT -i eth0 -j limit-3512 --A INPUT -i eth0 -j limit-3513 --A INPUT -i eth0 -j limit-3514 --A INPUT -i eth0 -j limit-3515 --A INPUT -i eth0 -j limit-3516 --A INPUT -i eth0 -j limit-3517 --A INPUT -i eth0 -j limit-3518 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1971 --A INPUT -i eth0 -j limit-3520 --A INPUT -i eth0 -j limit-3521 --A INPUT -i eth0 -j limit-3522 --A INPUT -i eth0 -j limit-3523 --A INPUT -i eth0 -j limit-3524 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1977 --A INPUT -i eth0 -j limit-3526 --A INPUT -i eth0 -j limit-3527 --A INPUT -i eth0 -j limit-3528 --A INPUT -i eth0 -j limit-3529 --A INPUT -i eth0 -j limit-3530 --A INPUT -i eth0 -j limit-3531 --A INPUT -i eth0 -j limit-3532 --A INPUT -i eth0 -j limit-3533 --A INPUT -i eth0 -j limit-3534 --A INPUT -i eth0 -j limit-3535 --A INPUT -i eth0 -j limit-3536 --A INPUT -i eth0 -j limit-3537 --A INPUT -i eth0 -j limit-3538 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1991 --A INPUT -i eth0 -j limit-3540 --A INPUT -i eth0 -j limit-3541 --A INPUT -i eth0 -j limit-3542 --A INPUT -i eth0 -j limit-3543 --A INPUT -i eth0 -j limit-3544 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1997 --A INPUT -i eth0 -j limit-3546 --A INPUT -i eth0 -j limit-3547 --A INPUT -i eth0 -j limit-3548 --A INPUT -i eth0 -j limit-3549 --A INPUT -i eth0 -j limit-3550 --A INPUT -i eth0 -j limit-3551 --A INPUT -i eth0 -j limit-3552 --A INPUT -i eth0 -j limit-3553 --A INPUT -i eth0 -j limit-3554 --A INPUT -i eth0 -j limit-3555 --A INPUT -i eth0 -j limit-3556 --A INPUT -i eth0 -j limit-3557 --A INPUT -i eth0 -j limit-3558 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2011 --A INPUT -i eth0 -j limit-3560 --A INPUT -i eth0 -j limit-3561 --A INPUT -i eth0 -j limit-3562 --A INPUT -i eth0 -j limit-3563 --A INPUT -i eth0 -j limit-3564 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2017 --A INPUT -i eth0 -j limit-3566 --A INPUT -i eth0 -j limit-3567 --A INPUT -i eth0 -j limit-3568 --A INPUT -i eth0 -j limit-3569 --A INPUT -i eth0 -j limit-3570 --A INPUT -i eth0 -j limit-3571 --A INPUT -i eth0 -j limit-3572 --A INPUT -i eth0 -j limit-3573 --A INPUT -i eth0 -j limit-3574 --A INPUT -i eth0 -j limit-3575 --A INPUT -i eth0 -j limit-3576 --A INPUT -i eth0 -j limit-3577 --A INPUT -i eth0 -j limit-3578 --A INPUT -i eth0 -j limit-3579 --A INPUT -i eth0 -j limit-3580 --A INPUT -i eth0 -j limit-3581 --A INPUT -i eth0 -j limit-3582 --A INPUT -i eth0 -j limit-3583 --A INPUT -i eth0 -j limit-3584 --A INPUT -i eth0 -j limit-3585 --A INPUT -i eth0 -j limit-3586 --A INPUT -i eth0 -j limit-3587 --A INPUT -i eth0 -j limit-3588 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2041 --A INPUT -i eth0 -j limit-3590 --A INPUT -i eth0 -j limit-3591 --A INPUT -i eth0 -j limit-3592 --A INPUT -i eth0 -j limit-3593 --A INPUT -i eth0 -j limit-3594 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2047 --A INPUT -i eth0 -j limit-3596 --A INPUT -i eth0 -j limit-3597 --A INPUT -i eth0 -j limit-3598 --A INPUT -i eth0 -j limit-3599 --A INPUT -i eth0 -j limit-3600 --A INPUT -i eth0 -j limit-3601 --A INPUT -i eth0 -j limit-3602 --A INPUT -i eth0 -j limit-3603 --A INPUT -i eth0 -j limit-3604 --A INPUT -i eth0 -j limit-3605 --A INPUT -i eth0 -j limit-3606 --A INPUT -i eth0 -j limit-3607 --A INPUT -i eth0 -j limit-3608 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2061 --A INPUT -i eth0 -j limit-3610 --A INPUT -i eth0 -j limit-3611 --A INPUT -i eth0 -j limit-3612 --A INPUT -i eth0 -j limit-3613 --A INPUT -i eth0 -j limit-3614 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2067 --A INPUT -i eth0 -j limit-3616 --A INPUT -i eth0 -j limit-3617 --A INPUT -i eth0 -j limit-3618 --A INPUT -i eth0 -j limit-3619 --A INPUT -i eth0 -j limit-3620 --A INPUT -i eth0 -j limit-3621 --A INPUT -i eth0 -j limit-3622 --A INPUT -i eth0 -j limit-3623 --A INPUT -i eth0 -j limit-3624 --A INPUT -i eth0 -j limit-3625 --A INPUT -i eth0 -j limit-3626 --A INPUT -i eth0 -j limit-3627 --A INPUT -i eth0 -j limit-3628 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2081 --A INPUT -i eth0 -j limit-3630 --A INPUT -i eth0 -j limit-3631 --A INPUT -i eth0 -j limit-3632 --A INPUT -i eth0 -j limit-3633 --A INPUT -i eth0 -j limit-3634 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2087 --A INPUT -i eth0 -j limit-3636 --A INPUT -i eth0 -j limit-3637 --A INPUT -i eth0 -j limit-3638 --A INPUT -i eth0 -j limit-3639 --A INPUT -i eth0 -j limit-3640 --A INPUT -i eth0 -j limit-3641 --A INPUT -i eth0 -j limit-3642 --A INPUT -i eth0 -j limit-3643 --A INPUT -i eth0 -j limit-3644 --A INPUT -i eth0 -j limit-3645 --A INPUT -i eth0 -j limit-3646 --A INPUT -i eth0 -j limit-3647 --A INPUT -i eth0 -j limit-3648 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2101 --A INPUT -i eth0 -j limit-3650 --A INPUT -i eth0 -j limit-3651 --A INPUT -i eth0 -j limit-3652 --A INPUT -i eth0 -j limit-3653 --A INPUT -i eth0 -j limit-3654 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2107 --A INPUT -i eth0 -j limit-3656 --A INPUT -i eth0 -j limit-3657 --A INPUT -i eth0 -j limit-3658 --A INPUT -i eth0 -j limit-3659 --A INPUT -i eth0 -j limit-3660 --A INPUT -i eth0 -j limit-3661 --A INPUT -i eth0 -j limit-3662 --A INPUT -i eth0 -j limit-3663 --A INPUT -i eth0 -j limit-3664 --A INPUT -i eth0 -j limit-3665 --A INPUT -i eth0 -j limit-3666 --A INPUT -i eth0 -j limit-3667 --A INPUT -i eth0 -j limit-3668 --A INPUT -i eth0 -j limit-3669 --A INPUT -i eth0 -j limit-3670 --A INPUT -i eth0 -j limit-3671 --A INPUT -i eth0 -j limit-3672 --A INPUT -i eth0 -j limit-3673 --A INPUT -i eth0 -j limit-3674 --A INPUT -i eth0 -j limit-3675 --A INPUT -i eth0 -j limit-3676 --A INPUT -i eth0 -j limit-3677 --A INPUT -i eth0 -j limit-3678 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3680 --A INPUT -i eth0 -j limit-3681 --A INPUT -i eth0 -j limit-3682 --A INPUT -i eth0 -j limit-3683 --A INPUT -i eth0 -j limit-3684 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3686 --A INPUT -i eth0 -j limit-3687 --A INPUT -i eth0 -j limit-3688 --A INPUT -i eth0 -j limit-3689 --A INPUT -i eth0 -j limit-3690 --A INPUT -i eth0 -j limit-3691 --A INPUT -i eth0 -j limit-3692 --A INPUT -i eth0 -j limit-3693 --A INPUT -i eth0 -j limit-3694 --A INPUT -i eth0 -j limit-3695 --A INPUT -i eth0 -j limit-3696 --A INPUT -i eth0 -j limit-3697 --A INPUT -i eth0 -j limit-3698 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3700 --A INPUT -i eth0 -j limit-3701 --A INPUT -i eth0 -j limit-3702 --A INPUT -i eth0 -j limit-3703 --A INPUT -i eth0 -j limit-3704 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3706 --A INPUT -i eth0 -j limit-3707 --A INPUT -i eth0 -j limit-3708 --A INPUT -i eth0 -j limit-3709 --A INPUT -i eth0 -j limit-3710 --A INPUT -i eth0 -j limit-3711 --A INPUT -i eth0 -j limit-3712 --A INPUT -i eth0 -j limit-3713 --A INPUT -i eth0 -j limit-3714 --A INPUT -i eth0 -j limit-3715 --A INPUT -i eth0 -j limit-3716 --A INPUT -i eth0 -j limit-3717 --A INPUT -i eth0 -j limit-3718 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3720 --A INPUT -i eth0 -j limit-3721 --A INPUT -i eth0 -j limit-3722 --A INPUT -i eth0 -j limit-3723 --A INPUT -i eth0 -j limit-3724 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3726 --A INPUT -i eth0 -j limit-3727 --A INPUT -i eth0 -j limit-3728 --A INPUT -i eth0 -j limit-3729 --A INPUT -i eth0 -j limit-3730 --A INPUT -i eth0 -j limit-3731 --A INPUT -i eth0 -j limit-3732 --A INPUT -i eth0 -j limit-3733 --A INPUT -i eth0 -j limit-3734 --A INPUT -i eth0 -j limit-3735 --A INPUT -i eth0 -j limit-3736 --A INPUT -i eth0 -j limit-3737 --A INPUT -i eth0 -j limit-3738 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3740 --A INPUT -i eth0 -j limit-3741 --A INPUT -i eth0 -j limit-3742 --A INPUT -i eth0 -j limit-3743 --A INPUT -i eth0 -j limit-3744 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-3746 --A INPUT -i eth0 -j limit-3747 --A INPUT -i eth0 -j limit-3748 --A INPUT -i eth0 -j limit-3749 --A INPUT -i eth0 -j limit-3750 --A INPUT -i eth0 -j limit-3751 --A INPUT -i eth0 -j limit-3752 --A INPUT -i eth0 -j limit-3753 --A INPUT -i eth0 -j limit-3754 --A INPUT -i eth0 -j limit-3755 --A INPUT -i eth0 -j limit-3756 --A INPUT -i eth0 -j limit-3757 --A INPUT -i eth0 -j limit-3758 --A INPUT -i eth0 -j limit-3759 --A INPUT -i eth0 -j limit-3760 --A INPUT -i eth0 -j limit-3761 --A INPUT -i eth0 -j limit-3762 --A INPUT -i eth0 -j limit-3763 --A INPUT -i eth0 -j limit-3764 --A INPUT -i eth0 -j limit-3765 --A INPUT -i eth0 -j limit-3766 --A INPUT -i eth0 -j limit-3767 --A INPUT -i eth0 -j limit-3768 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2131 --A INPUT -i eth0 -j limit-3770 --A INPUT -i eth0 -j limit-3771 --A INPUT -i eth0 -j limit-3772 --A INPUT -i eth0 -j limit-3773 --A INPUT -i eth0 -j limit-3774 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2137 --A INPUT -i eth0 -j limit-3776 --A INPUT -i eth0 -j limit-3777 --A INPUT -i eth0 -j limit-3778 --A INPUT -i eth0 -j limit-3779 --A INPUT -i eth0 -j limit-3780 --A INPUT -i eth0 -j limit-3781 --A INPUT -i eth0 -j limit-3782 --A INPUT -i eth0 -j limit-3783 --A INPUT -i eth0 -j limit-3784 --A INPUT -i eth0 -j limit-3785 --A INPUT -i eth0 -j limit-3786 --A INPUT -i eth0 -j limit-3787 --A INPUT -i eth0 -j limit-3788 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2151 --A INPUT -i eth0 -j limit-3790 --A INPUT -i eth0 -j limit-3791 --A INPUT -i eth0 -j limit-3792 --A INPUT -i eth0 -j limit-3793 --A INPUT -i eth0 -j limit-3794 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2157 --A INPUT -i eth0 -j limit-3796 --A INPUT -i eth0 -j limit-3797 --A INPUT -i eth0 -j limit-3798 --A INPUT -i eth0 -j limit-3799 --A INPUT -i eth0 -j limit-3800 --A INPUT -i eth0 -j limit-3801 --A INPUT -i eth0 -j limit-3802 --A INPUT -i eth0 -j limit-3803 --A INPUT -i eth0 -j limit-3804 --A INPUT -i eth0 -j limit-3805 --A INPUT -i eth0 -j limit-3806 --A INPUT -i eth0 -j limit-3807 --A INPUT -i eth0 -j limit-3808 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2171 --A INPUT -i eth0 -j limit-3810 --A INPUT -i eth0 -j limit-3811 --A INPUT -i eth0 -j limit-3812 --A INPUT -i eth0 -j limit-3813 --A INPUT -i eth0 -j limit-3814 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2177 --A INPUT -i eth0 -j limit-3816 --A INPUT -i eth0 -j limit-3817 --A INPUT -i eth0 -j limit-3818 --A INPUT -i eth0 -j limit-3819 --A INPUT -i eth0 -j limit-3820 --A INPUT -i eth0 -j limit-3821 --A INPUT -i eth0 -j limit-3822 --A INPUT -i eth0 -j limit-3823 --A INPUT -i eth0 -j limit-3824 --A INPUT -i eth0 -j limit-3825 --A INPUT -i eth0 -j limit-3826 --A INPUT -i eth0 -j limit-3827 --A INPUT -i eth0 -j limit-3828 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2191 --A INPUT -i eth0 -j limit-3830 --A INPUT -i eth0 -j limit-3831 --A INPUT -i eth0 -j limit-3832 --A INPUT -i eth0 -j limit-3833 --A INPUT -i eth0 -j limit-3834 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2197 --A INPUT -i eth0 -j limit-3836 --A INPUT -i eth0 -j limit-3837 --A INPUT -i eth0 -j limit-3838 --A INPUT -i eth0 -j limit-3839 --A INPUT -i eth0 -j limit-3840 --A INPUT -i eth0 -j limit-3841 --A INPUT -i eth0 -j limit-3842 --A INPUT -i eth0 -j limit-3843 --A INPUT -i eth0 -j limit-3844 --A INPUT -i eth0 -j limit-3845 --A INPUT -i eth0 -j limit-3846 --A INPUT -i eth0 -j limit-3847 --A INPUT -i eth0 -j limit-3848 --A INPUT -i eth0 -j limit-3849 --A INPUT -i eth0 -j limit-3850 --A INPUT -i eth0 -j limit-3851 --A INPUT -i eth0 -j limit-3852 --A INPUT -i eth0 -j limit-3853 --A INPUT -i eth0 -j limit-3854 --A INPUT -i eth0 -j limit-3855 --A INPUT -i eth0 -j limit-3856 --A INPUT -i eth0 -j limit-3857 --A INPUT -i eth0 -j limit-3858 --A INPUT -i eth0 -j limit-3859 --A INPUT -i eth0 -j limit-3860 --A INPUT -i eth0 -j limit-3861 --A INPUT -i eth0 -j limit-3862 --A INPUT -i eth0 -j limit-3863 --A INPUT -i eth0 -j limit-3864 --A INPUT -i eth0 -j limit-3865 --A INPUT -i eth0 -j limit-3866 --A INPUT -i eth0 -j limit-3867 --A INPUT -i eth0 -j limit-3868 --A INPUT -i eth0 -j limit-3869 --A INPUT -i eth0 -j limit-3870 --A INPUT -i eth0 -j limit-3871 --A INPUT -i eth0 -j limit-3872 --A INPUT -i eth0 -j limit-3873 --A INPUT -i eth0 -j limit-3874 --A INPUT -i eth0 -j limit-3875 --A INPUT -i eth0 -j limit-3876 --A INPUT -i eth0 -j limit-3877 --A INPUT -i eth0 -j limit-3878 --A INPUT -i eth0 -j limit-3879 --A INPUT -i eth0 -j limit-3880 --A INPUT -i eth0 -j limit-3881 --A INPUT -i eth0 -j limit-3882 --A INPUT -i eth0 -j limit-3883 --A INPUT -i eth0 -j limit-3884 --A INPUT -i eth0 -j limit-3885 --A INPUT -i eth0 -j limit-3886 --A INPUT -i eth0 -j limit-3887 --A INPUT -i eth0 -j limit-3888 --A INPUT -i eth0 -j limit-3889 --A INPUT -i eth0 -j limit-3890 --A INPUT -i eth0 -j limit-3891 --A INPUT -i eth0 -j limit-3892 --A INPUT -i eth0 -j limit-3893 --A INPUT -i eth0 -j limit-3894 --A INPUT -i eth0 -j limit-3895 --A INPUT -i eth0 -j limit-3896 --A INPUT -i eth0 -j limit-3897 --A INPUT -i eth0 -j limit-3898 --A INPUT -i eth0 -j limit-3899 --A INPUT -i eth0 -j limit-3900 --A INPUT -i eth0 -j limit-3901 --A INPUT -i eth0 -j limit-3902 --A INPUT -i eth0 -j limit-3903 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-0 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-1 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-2 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-3 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-4 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-5 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-6 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-7 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-8 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-9 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-10 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-11 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-12 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-13 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-14 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-15 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-16 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-17 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-18 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-19 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-20 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-21 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-22 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-23 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-24 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-25 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-26 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-27 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-28 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-29 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-30 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-32 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-33 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-34 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-35 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-36 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-38 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-39 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-40 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-41 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-42 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-43 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-44 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-45 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-46 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-47 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-48 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-49 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-50 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-52 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-53 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-54 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-55 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-56 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-58 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-59 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-60 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-61 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-62 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-63 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-64 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-65 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-66 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-67 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-68 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-69 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-70 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-72 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-73 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-74 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-75 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-76 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-78 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-79 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-80 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-81 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-82 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-83 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-84 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-85 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-86 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-87 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-88 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-89 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-90 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-92 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-93 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-94 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-95 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-96 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-98 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-99 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-100 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-101 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-102 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-103 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-104 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-105 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-106 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-107 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-108 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-109 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-110 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-111 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-112 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-113 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-114 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-115 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-116 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-117 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-118 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-119 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-120 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-31 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-122 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-123 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-124 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-125 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-126 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-37 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-128 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-129 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-130 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-131 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-132 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-133 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-134 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-135 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-136 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-137 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-138 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-139 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-140 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-51 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-142 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-143 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-144 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-145 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-146 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-57 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-148 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-149 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-150 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-151 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-152 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-153 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-154 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-155 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-156 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-157 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-158 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-159 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-160 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-71 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-162 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-163 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-164 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-165 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-166 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-77 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-168 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-169 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-170 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-171 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-172 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-173 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-174 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-175 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-176 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-177 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-178 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-179 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-180 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-91 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-182 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-183 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-184 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-185 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-186 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-97 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-188 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-189 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-190 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-191 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-192 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-193 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-194 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-195 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-196 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-197 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-198 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-199 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-200 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-201 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-202 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-203 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-204 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-205 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-206 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-207 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-208 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-209 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-210 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-121 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-212 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-213 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-214 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-215 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-216 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-127 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-218 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-219 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-220 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-221 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-222 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-223 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-224 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-225 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-226 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-227 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-228 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-229 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-230 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-141 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-232 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-233 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-234 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-235 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-236 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-147 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-238 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-239 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-240 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-241 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-242 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-243 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-244 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-245 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-246 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-247 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-248 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-249 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-250 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-161 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-252 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-253 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-254 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-255 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-256 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-167 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-258 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-259 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-260 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-261 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-262 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-263 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-264 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-265 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-266 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-267 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-268 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-269 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-270 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-181 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-272 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-273 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-274 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-275 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-276 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-187 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-278 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-279 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-280 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-281 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-282 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-283 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-284 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-285 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-286 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-287 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-288 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-289 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-290 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-291 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-292 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-293 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-294 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-295 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-296 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-297 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-298 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-299 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-300 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-302 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-303 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-304 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-305 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-306 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-308 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-309 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-310 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-311 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-312 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-313 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-314 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-315 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-316 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-317 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-318 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-319 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-320 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-322 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-323 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-324 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-325 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-326 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-328 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-329 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-330 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-331 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-332 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-333 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-334 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-335 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-336 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-337 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-338 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-339 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-340 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-342 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-343 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-344 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-345 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-346 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-348 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-349 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-350 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-351 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-352 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-353 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-354 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-355 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-356 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-357 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-358 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-359 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-360 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-362 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-363 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-364 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-365 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-366 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-368 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-369 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-370 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-371 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-372 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-373 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-374 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-375 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-376 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-377 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-378 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-379 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-380 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-381 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-382 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-383 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-384 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-385 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-386 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-387 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-388 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-389 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-390 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-211 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-392 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-393 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-394 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-395 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-396 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-217 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-398 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-399 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-400 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-401 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-402 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-403 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-404 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-405 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-406 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-407 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-408 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-409 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-410 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-231 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-412 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-413 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-414 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-415 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-416 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-237 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-418 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-419 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-420 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-421 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-422 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-423 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-424 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-425 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-426 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-427 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-428 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-429 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-430 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-251 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-432 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-433 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-434 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-435 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-436 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-257 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-438 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-439 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-440 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-441 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-442 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-443 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-444 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-445 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-446 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-447 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-448 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-449 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-450 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-271 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-452 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-453 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-454 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-455 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-456 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-277 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-458 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-459 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-460 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-461 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-462 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-463 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-464 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-465 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-466 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-467 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-468 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-469 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-470 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-471 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-472 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-473 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-474 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-475 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-476 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-477 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-478 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-479 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-480 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-482 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-483 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-484 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-485 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-486 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-488 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-489 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-490 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-491 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-492 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-493 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-494 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-495 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-496 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-497 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-498 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-499 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-500 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-502 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-503 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-504 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-505 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-506 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-508 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-509 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-510 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-511 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-512 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-513 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-514 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-515 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-516 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-517 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-518 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-519 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-520 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-522 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-523 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-524 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-525 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-526 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-528 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-529 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-530 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-531 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-532 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-533 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-534 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-535 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-536 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-537 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-538 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-539 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-540 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-542 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-543 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-544 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-545 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-546 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-548 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-549 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-550 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-551 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-552 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-553 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-554 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-555 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-556 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-557 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-558 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-559 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-560 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-561 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-562 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-563 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-564 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-565 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-566 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-567 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-568 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-569 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-570 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-301 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-572 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-573 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-574 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-575 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-576 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-307 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-578 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-579 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-580 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-581 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-582 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-583 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-584 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-585 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-586 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-587 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-588 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-589 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-590 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-321 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-592 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-593 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-594 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-595 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-596 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-327 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-598 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-599 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-600 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-601 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-602 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-603 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-604 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-605 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-606 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-607 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-608 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-609 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-610 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-341 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-612 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-613 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-614 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-615 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-616 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-347 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-618 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-619 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-620 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-621 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-622 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-623 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-624 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-625 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-626 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-627 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-628 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-629 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-630 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-361 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-632 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-633 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-634 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-635 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-636 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-367 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-638 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-639 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-640 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-641 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-642 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-643 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-644 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-645 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-646 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-647 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-648 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-649 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-650 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-651 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-652 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-653 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-654 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-655 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-656 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-657 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-658 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-659 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-660 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-391 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-662 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-663 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-664 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-665 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-666 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-397 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-668 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-669 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-670 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-671 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-672 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-673 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-674 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-675 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-676 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-677 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-678 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-679 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-680 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-411 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-682 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-683 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-684 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-685 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-686 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-417 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-688 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-689 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-690 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-691 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-692 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-693 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-694 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-695 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-696 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-697 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-698 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-699 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-700 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-431 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-702 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-703 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-704 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-705 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-706 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-437 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-708 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-709 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-710 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-711 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-712 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-713 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-714 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-715 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-716 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-717 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-718 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-719 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-720 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-451 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-722 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-723 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-724 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-725 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-726 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-457 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-728 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-729 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-730 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-731 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-732 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-733 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-734 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-735 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-736 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-737 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-738 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-739 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-740 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-741 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-742 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-743 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-744 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-745 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-746 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-747 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-748 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-749 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-750 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-752 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-753 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-754 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-755 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-756 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-758 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-759 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-760 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-761 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-762 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-763 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-764 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-765 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-766 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-767 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-768 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-769 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-770 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-772 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-773 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-774 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-775 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-776 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-778 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-779 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-780 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-781 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-782 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-783 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-784 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-785 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-786 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-787 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-788 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-789 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-790 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-792 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-793 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-794 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-795 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-796 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-798 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-799 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-800 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-801 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-802 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-803 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-804 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-805 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-806 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-807 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-808 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-809 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-810 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-812 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-813 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-814 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-815 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-816 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-818 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-819 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-820 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-821 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-822 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-823 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-824 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-825 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-826 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-827 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-828 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-829 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-830 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-831 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-832 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-833 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-834 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-835 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-836 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-837 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-838 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-839 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-840 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-481 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-842 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-843 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-844 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-845 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-846 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-487 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-848 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-849 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-850 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-851 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-852 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-853 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-854 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-855 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-856 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-857 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-858 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-859 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-860 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-501 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-862 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-863 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-864 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-865 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-866 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-507 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-868 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-869 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-870 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-871 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-872 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-873 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-874 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-875 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-876 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-877 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-878 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-879 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-880 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-521 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-882 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-883 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-884 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-885 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-886 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-527 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-888 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-889 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-890 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-891 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-892 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-893 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-894 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-895 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-896 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-897 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-898 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-899 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-900 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-541 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-902 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-903 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-904 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-905 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-906 +-A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-547 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-908 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-909 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-910 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-911 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-912 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-913 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-914 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-915 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-916 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-917 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-918 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-919 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-920 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-921 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-922 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-923 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-924 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-925 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-926 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-927 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-928 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-929 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-930 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-931 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-932 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-933 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-934 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-935 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-936 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-937 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-938 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-939 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-940 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-941 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-942 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-943 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-944 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-945 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-946 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-947 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-948 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-949 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-950 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-951 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-952 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-953 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-954 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-955 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-956 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-957 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-958 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-959 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-960 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-961 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-962 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-963 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-964 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-965 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-966 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-967 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-968 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-969 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-970 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-971 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-972 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-973 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-974 +-A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-975 -A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -m recent --name user:C --rsource --mask fe00:: --set @@ -11357,25 +11357,25 @@ -A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -j ACCEPT --A INPUT -j logdrop-2200 +-A INPUT -j logdrop-1650 -A INPUT -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-99 --A INPUT -j logdrop-2201 +-A INPUT -j logaccept-66 +-A INPUT -j logdrop-1651 -A INPUT -j logpass-0 --A INPUT -j logaccept-100 --A INPUT -j logdrop-2202 +-A INPUT -j logaccept-67 +-A INPUT -j logdrop-1652 -A INPUT -j logpass-1 --A INPUT -j logaccept-101 --A INPUT -j logdrop-2203 +-A INPUT -j logaccept-68 +-A INPUT -j logdrop-1653 -A INPUT -j logpass-2 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-102 --A INPUT -j logdrop-2204 +-A INPUT -j logaccept-69 +-A INPUT -j logdrop-1654 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmpv6 -j ACCEPT @@ -14821,516 +14821,516 @@ -A OUTPUT -j logaccept-final-304 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-305 --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT +-A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -m recent --name user:C --rsource --mask fe00:: --set @@ -15338,25 +15338,25 @@ -A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-2200 +-A OUTPUT -j logdrop-1650 -A OUTPUT -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-99 --A OUTPUT -j logdrop-2201 +-A OUTPUT -j logaccept-66 +-A OUTPUT -j logdrop-1651 -A OUTPUT -j logpass-0 --A OUTPUT -j logaccept-100 --A OUTPUT -j logdrop-2202 +-A OUTPUT -j logaccept-67 +-A OUTPUT -j logdrop-1652 -A OUTPUT -j logpass-1 --A OUTPUT -j logaccept-101 --A OUTPUT -j logdrop-2203 +-A OUTPUT -j logaccept-68 +-A OUTPUT -j logdrop-1653 -A OUTPUT -j logpass-2 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-102 --A OUTPUT -j logdrop-2204 +-A OUTPUT -j logaccept-69 +-A OUTPUT -j logdrop-1654 -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT -A OUTPUT -p icmpv6 -j ACCEPT @@ -19276,2137 +19276,224 @@ -A limit-2926 -j DROP -A limit-2927 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2927 -j RETURN -A limit-2927 -j DROP --A limit-2928 -m recent --name limit-2928 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1650 --A limit-2928 -m recent --name limit-2928 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2929 -m recent --name limit-2929 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1651 --A limit-2929 -m recent --name limit-2929 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2930 -m recent --name limit-2930 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1652 --A limit-2930 -m limit --limit 1/second -j LOG --A limit-2930 -m recent --name limit-2930 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2931 -m recent --name limit-2931 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1653 --A limit-2931 -m recent --name limit-2931 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2932 -m recent --name limit-2932 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1654 --A limit-2932 -j TEE --gateway fc00::2 --A limit-2932 -m recent --name limit-2932 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2933 -m recent --name limit-2933 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1655 --A limit-2933 -m recent --name limit-2933 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-2934 -m recent --name limit-2934 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1656 --A limit-2934 -m recent --name limit-2934 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2935 -m recent --name limit-2935 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1657 --A limit-2935 -m recent --name limit-2935 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2936 -m recent --name limit-2936 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1658 --A limit-2936 -m recent --name limit-2936 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2937 -m recent --name limit-2937 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1659 --A limit-2938 -m recent --name limit-2938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2938 -m recent --name limit-2938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2939 -m recent --name limit-2939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2939 -m recent --name limit-2939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-294 -j TEE --gateway fc00::2 -A limit-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2940 -m recent --name limit-2940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2940 -m limit --limit 1/second -j LOG --A limit-2940 -m recent --name limit-2940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2941 -m recent --name limit-2941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2941 -m recent --name limit-2941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2942 -m recent --name limit-2942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2942 -j TEE --gateway fc00::2 --A limit-2942 -m recent --name limit-2942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2943 -m recent --name limit-2943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2943 -m recent --name limit-2943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-2944 -m recent --name limit-2944 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2944 -m recent --name limit-2944 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2945 -m recent --name limit-2945 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2945 -m recent --name limit-2945 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2946 -m recent --name limit-2946 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2946 -m recent --name limit-2946 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2947 -m recent --name limit-2947 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-2950 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2950 -m limit --limit 1/second -j LOG --A limit-2950 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2951 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2951 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2952 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2952 -j TEE --gateway fc00::2 --A limit-2952 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2953 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2953 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-2954 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2954 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2955 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2955 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2956 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2956 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2957 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2958 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2958 -j ACCEPT -A limit-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2960 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2960 -m limit --limit 1/second -j LOG --A limit-2960 -j ACCEPT --A limit-2961 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2961 -m limit --limit 1/second -j LOG --A limit-2962 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2962 -j TEE --gateway fc00::2 --A limit-2962 -j ACCEPT --A limit-2963 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2963 -j TEE --gateway fc00::2 --A limit-2964 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2964 -j ACCEPT --A limit-2966 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2966 -j ACCEPT --A limit-2967 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2968 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2968 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2969 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2969 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2970 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2970 -m limit --limit 1/second -j LOG --A limit-2970 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2971 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2971 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2972 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2972 -j TEE --gateway fc00::2 --A limit-2972 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2973 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2973 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-2974 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2974 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2975 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2975 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2976 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2976 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2977 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2978 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2978 -j ACCEPT -A limit-298 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-298 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2980 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2980 -m limit --limit 1/second -j LOG --A limit-2980 -j ACCEPT --A limit-2981 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2981 -m limit --limit 1/second -j LOG --A limit-2982 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2982 -j TEE --gateway fc00::2 --A limit-2982 -j ACCEPT --A limit-2983 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2983 -j TEE --gateway fc00::2 --A limit-2984 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2984 -j ACCEPT --A limit-2986 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2986 -j ACCEPT --A limit-2987 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2988 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2988 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2989 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2989 -m recent --name user:C --rsource --mask fe00:: --set -A limit-299 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2990 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2990 -m limit --limit 1/second -j LOG --A limit-2990 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2991 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2991 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2992 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2992 -j TEE --gateway fc00::2 --A limit-2992 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2993 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2993 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-2994 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2994 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2995 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2995 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2996 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2996 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2997 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2998 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2998 -j ACCEPT -A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-3 -A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-30 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-30 -j ACCEPT -A limit-300 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-300 -j ACCEPT --A limit-3000 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3000 -m limit --limit 1/second -j LOG --A limit-3000 -j ACCEPT --A limit-3001 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3001 -m limit --limit 1/second -j LOG --A limit-3002 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3002 -j TEE --gateway fc00::2 --A limit-3002 -j ACCEPT --A limit-3003 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3003 -j TEE --gateway fc00::2 --A limit-3004 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3004 -j ACCEPT --A limit-3006 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3006 -j ACCEPT --A limit-3007 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3008 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3008 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3009 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3009 -m recent --name user:C --rdest --mask fe00:: --set -A limit-301 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3010 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3010 -m limit --limit 1/second -j LOG --A limit-3010 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3011 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3011 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3012 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3012 -j TEE --gateway fc00::2 --A limit-3012 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3013 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3013 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3014 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3014 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3015 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3015 -m recent --name user:C --rdest --mask fe00:: --set --A limit-3016 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3016 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3017 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3018 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3018 -j ACCEPT -A limit-302 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-302 -m limit --limit 1/second -j LOG -A limit-302 -j ACCEPT --A limit-3020 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3020 -m limit --limit 1/second -j LOG --A limit-3020 -j ACCEPT --A limit-3021 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3021 -m limit --limit 1/second -j LOG --A limit-3022 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3022 -j TEE --gateway fc00::2 --A limit-3022 -j ACCEPT --A limit-3023 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3023 -j TEE --gateway fc00::2 --A limit-3024 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3024 -j ACCEPT --A limit-3026 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3026 -j ACCEPT --A limit-3027 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3028 -m recent --name limit-3028 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1660 --A limit-3028 -m recent --name limit-3028 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3029 -m recent --name limit-3029 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1661 --A limit-3029 -m recent --name limit-3029 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-303 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-303 -m limit --limit 1/second -j LOG --A limit-3030 -m recent --name limit-3030 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1662 --A limit-3030 -m limit --limit 1/second -j LOG --A limit-3030 -m recent --name limit-3030 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3031 -m recent --name limit-3031 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1663 --A limit-3031 -m recent --name limit-3031 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3032 -m recent --name limit-3032 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1664 --A limit-3032 -j TEE --gateway fc00::2 --A limit-3032 -m recent --name limit-3032 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3033 -m recent --name limit-3033 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1665 --A limit-3033 -m recent --name limit-3033 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3034 -m recent --name limit-3034 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1666 --A limit-3034 -m recent --name limit-3034 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3035 -m recent --name limit-3035 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1667 --A limit-3035 -m recent --name limit-3035 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3036 -m recent --name limit-3036 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1668 --A limit-3036 -m recent --name limit-3036 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3037 -m recent --name limit-3037 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1669 --A limit-3038 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1670 --A limit-3038 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3039 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1671 --A limit-3039 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-304 -j TEE --gateway fc00::2 -A limit-304 -j ACCEPT --A limit-3040 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1672 --A limit-3040 -m limit --limit 1/second -j LOG --A limit-3040 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3041 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1673 --A limit-3041 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3042 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1674 --A limit-3042 -j TEE --gateway fc00::2 --A limit-3042 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3043 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1675 --A limit-3043 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3044 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1676 --A limit-3044 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3045 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1677 --A limit-3045 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3046 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1678 --A limit-3046 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3047 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1679 --A limit-3048 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1680 --A limit-3048 -j ACCEPT -A limit-305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-305 -j TEE --gateway fc00::2 --A limit-3050 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1682 --A limit-3050 -m limit --limit 1/second -j LOG --A limit-3050 -j ACCEPT --A limit-3051 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1683 --A limit-3051 -m limit --limit 1/second -j LOG --A limit-3052 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1684 --A limit-3052 -j TEE --gateway fc00::2 --A limit-3052 -j ACCEPT --A limit-3053 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1685 --A limit-3053 -j TEE --gateway fc00::2 --A limit-3054 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1686 --A limit-3054 -j ACCEPT --A limit-3056 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1688 --A limit-3056 -j ACCEPT --A limit-3057 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1689 --A limit-3058 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1690 --A limit-3058 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3059 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1691 --A limit-3059 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-306 -j ACCEPT --A limit-3060 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1692 --A limit-3060 -m limit --limit 1/second -j LOG --A limit-3060 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3061 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1693 --A limit-3061 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3062 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1694 --A limit-3062 -j TEE --gateway fc00::2 --A limit-3062 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3063 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1695 --A limit-3063 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3064 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1696 --A limit-3064 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3065 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1697 --A limit-3065 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3066 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1698 --A limit-3066 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3067 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1699 --A limit-3068 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1700 --A limit-3068 -j ACCEPT -A limit-307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3070 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1702 --A limit-3070 -m limit --limit 1/second -j LOG --A limit-3070 -j ACCEPT --A limit-3071 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1703 --A limit-3071 -m limit --limit 1/second -j LOG --A limit-3072 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1704 --A limit-3072 -j TEE --gateway fc00::2 --A limit-3072 -j ACCEPT --A limit-3073 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1705 --A limit-3073 -j TEE --gateway fc00::2 --A limit-3074 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1706 --A limit-3074 -j ACCEPT --A limit-3076 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1708 --A limit-3076 -j ACCEPT --A limit-3077 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1709 --A limit-3078 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1710 --A limit-3078 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3079 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1711 --A limit-3079 -m recent --name user:C --rsource --mask fe00:: --set -A limit-308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-308 -j ACCEPT --A limit-3080 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1712 --A limit-3080 -m limit --limit 1/second -j LOG --A limit-3080 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3081 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1713 --A limit-3081 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3082 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1714 --A limit-3082 -j TEE --gateway fc00::2 --A limit-3082 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3083 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1715 --A limit-3083 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3084 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1716 --A limit-3084 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3085 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1717 --A limit-3085 -m recent --name user:C --rsource --mask fe00:: --set --A limit-3086 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1718 --A limit-3086 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3087 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1719 --A limit-3088 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1720 --A limit-3088 -j ACCEPT -A limit-309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3090 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1722 --A limit-3090 -m limit --limit 1/second -j LOG --A limit-3090 -j ACCEPT --A limit-3091 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1723 --A limit-3091 -m limit --limit 1/second -j LOG --A limit-3092 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1724 --A limit-3092 -j TEE --gateway fc00::2 --A limit-3092 -j ACCEPT --A limit-3093 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1725 --A limit-3093 -j TEE --gateway fc00::2 --A limit-3094 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1726 --A limit-3094 -j ACCEPT --A limit-3096 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1728 --A limit-3096 -j ACCEPT --A limit-3097 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1729 --A limit-3098 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1730 --A limit-3098 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3099 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1731 --A limit-3099 -m recent --name user:C --rdest --mask fe00:: --set -A limit-31 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-310 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-310 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3100 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1732 --A limit-3100 -m limit --limit 1/second -j LOG --A limit-3100 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3101 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1733 --A limit-3101 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3102 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1734 --A limit-3102 -j TEE --gateway fc00::2 --A limit-3102 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3103 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1735 --A limit-3103 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3104 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1736 --A limit-3104 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3105 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1737 --A limit-3105 -m recent --name user:C --rdest --mask fe00:: --set --A limit-3106 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1738 --A limit-3106 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3107 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1739 --A limit-3108 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1740 --A limit-3108 -j ACCEPT -A limit-311 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-311 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3110 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1742 --A limit-3110 -m limit --limit 1/second -j LOG --A limit-3110 -j ACCEPT --A limit-3111 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1743 --A limit-3111 -m limit --limit 1/second -j LOG --A limit-3112 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1744 --A limit-3112 -j TEE --gateway fc00::2 --A limit-3112 -j ACCEPT --A limit-3113 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1745 --A limit-3113 -j TEE --gateway fc00::2 --A limit-3114 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1746 --A limit-3114 -j ACCEPT --A limit-3116 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1748 --A limit-3116 -j ACCEPT --A limit-3117 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1749 --A limit-3118 -m recent --name limit-3118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1750 --A limit-3118 -m recent --name limit-3118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3119 -m recent --name limit-3119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1751 --A limit-3119 -m recent --name limit-3119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-312 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-312 -m limit --limit 1/second -j LOG -A limit-312 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3120 -m recent --name limit-3120 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1752 --A limit-3120 -m limit --limit 1/second -j LOG --A limit-3120 -m recent --name limit-3120 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3121 -m recent --name limit-3121 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1753 --A limit-3121 -m recent --name limit-3121 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3122 -m recent --name limit-3122 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1754 --A limit-3122 -j TEE --gateway fc00::2 --A limit-3122 -m recent --name limit-3122 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3123 -m recent --name limit-3123 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1755 --A limit-3123 -m recent --name limit-3123 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3124 -m recent --name limit-3124 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1756 --A limit-3124 -m recent --name limit-3124 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3125 -m recent --name limit-3125 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1757 --A limit-3125 -m recent --name limit-3125 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3126 -m recent --name limit-3126 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1758 --A limit-3126 -m recent --name limit-3126 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3127 -m recent --name limit-3127 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1759 --A limit-3128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1760 --A limit-3128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1761 --A limit-3129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-313 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-313 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1762 --A limit-3130 -m limit --limit 1/second -j LOG --A limit-3130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3131 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1763 --A limit-3131 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3132 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1764 --A limit-3132 -j TEE --gateway fc00::2 --A limit-3132 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3133 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1765 --A limit-3133 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3134 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1766 --A limit-3134 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3135 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1767 --A limit-3135 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3136 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1768 --A limit-3136 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3137 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1769 --A limit-3138 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1770 --A limit-3138 -j ACCEPT -A limit-314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-314 -j TEE --gateway fc00::2 -A limit-314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3140 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1772 --A limit-3140 -m limit --limit 1/second -j LOG --A limit-3140 -j ACCEPT --A limit-3141 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1773 --A limit-3141 -m limit --limit 1/second -j LOG --A limit-3142 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1774 --A limit-3142 -j TEE --gateway fc00::2 --A limit-3142 -j ACCEPT --A limit-3143 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1775 --A limit-3143 -j TEE --gateway fc00::2 --A limit-3144 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1776 --A limit-3144 -j ACCEPT --A limit-3146 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1778 --A limit-3146 -j ACCEPT --A limit-3147 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1779 --A limit-3148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1780 --A limit-3148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1781 --A limit-3149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3150 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1782 --A limit-3150 -m limit --limit 1/second -j LOG --A limit-3150 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3151 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1783 --A limit-3151 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1784 --A limit-3152 -j TEE --gateway fc00::2 --A limit-3152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1785 --A limit-3153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1786 --A limit-3154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3155 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1787 --A limit-3155 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3156 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1788 --A limit-3156 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3157 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1789 --A limit-3158 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1790 --A limit-3158 -j ACCEPT -A limit-316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3160 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1792 --A limit-3160 -m limit --limit 1/second -j LOG --A limit-3160 -j ACCEPT --A limit-3161 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1793 --A limit-3161 -m limit --limit 1/second -j LOG --A limit-3162 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1794 --A limit-3162 -j TEE --gateway fc00::2 --A limit-3162 -j ACCEPT --A limit-3163 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1795 --A limit-3163 -j TEE --gateway fc00::2 --A limit-3164 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1796 --A limit-3164 -j ACCEPT --A limit-3166 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1798 --A limit-3166 -j ACCEPT --A limit-3167 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1799 --A limit-3168 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1800 --A limit-3168 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3169 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1801 --A limit-3169 -m recent --name user:C --rsource --mask fe00:: --set -A limit-317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3170 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1802 --A limit-3170 -m limit --limit 1/second -j LOG --A limit-3170 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3171 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1803 --A limit-3171 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3172 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1804 --A limit-3172 -j TEE --gateway fc00::2 --A limit-3172 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3173 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1805 --A limit-3173 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3174 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1806 --A limit-3174 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3175 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1807 --A limit-3175 -m recent --name user:C --rsource --mask fe00:: --set --A limit-3176 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1808 --A limit-3176 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3177 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1809 --A limit-3178 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1810 --A limit-3178 -j ACCEPT -A limit-318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3180 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1812 --A limit-3180 -m limit --limit 1/second -j LOG --A limit-3180 -j ACCEPT --A limit-3181 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1813 --A limit-3181 -m limit --limit 1/second -j LOG --A limit-3182 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1814 --A limit-3182 -j TEE --gateway fc00::2 --A limit-3182 -j ACCEPT --A limit-3183 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1815 --A limit-3183 -j TEE --gateway fc00::2 --A limit-3184 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1816 --A limit-3184 -j ACCEPT --A limit-3186 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1818 --A limit-3186 -j ACCEPT --A limit-3187 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1819 --A limit-3188 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1820 --A limit-3188 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3189 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1821 --A limit-3189 -m recent --name user:C --rdest --mask fe00:: --set -A limit-319 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3190 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1822 --A limit-3190 -m limit --limit 1/second -j LOG --A limit-3190 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3191 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1823 --A limit-3191 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3192 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1824 --A limit-3192 -j TEE --gateway fc00::2 --A limit-3192 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3193 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1825 --A limit-3193 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3194 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1826 --A limit-3194 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3195 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1827 --A limit-3195 -m recent --name user:C --rdest --mask fe00:: --set --A limit-3196 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1828 --A limit-3196 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3197 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1829 --A limit-3198 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1830 --A limit-3198 -j ACCEPT -A limit-32 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-32 -m limit --limit 1/second -j LOG -A limit-32 -j ACCEPT -A limit-320 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-320 -j ACCEPT --A limit-3200 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1832 --A limit-3200 -m limit --limit 1/second -j LOG --A limit-3200 -j ACCEPT --A limit-3201 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1833 --A limit-3201 -m limit --limit 1/second -j LOG --A limit-3202 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1834 --A limit-3202 -j TEE --gateway fc00::2 --A limit-3202 -j ACCEPT --A limit-3203 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1835 --A limit-3203 -j TEE --gateway fc00::2 --A limit-3204 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1836 --A limit-3204 -j ACCEPT --A limit-3206 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1838 --A limit-3206 -j ACCEPT --A limit-3207 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1839 --A limit-3208 -m recent --name limit-3208 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3208 -m recent --name limit-3208 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3209 -m recent --name limit-3209 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3209 -m recent --name limit-3209 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-321 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3210 -m recent --name limit-3210 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3210 -m limit --limit 1/second -j LOG --A limit-3210 -m recent --name limit-3210 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3211 -m recent --name limit-3211 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3211 -m recent --name limit-3211 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3212 -m recent --name limit-3212 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3212 -j TEE --gateway fc00::2 --A limit-3212 -m recent --name limit-3212 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3213 -m recent --name limit-3213 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3213 -m recent --name limit-3213 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3214 -m recent --name limit-3214 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3214 -m recent --name limit-3214 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3215 -m recent --name limit-3215 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3215 -m recent --name limit-3215 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3216 -m recent --name limit-3216 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3216 -m recent --name limit-3216 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3217 -m recent --name limit-3217 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3218 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3218 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3219 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3219 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-322 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-322 -m limit --limit 1/second -j LOG -A limit-322 -j ACCEPT --A limit-3220 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3220 -m limit --limit 1/second -j LOG --A limit-3220 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3221 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3221 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3222 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3222 -j TEE --gateway fc00::2 --A limit-3222 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3223 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3223 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3224 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3224 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3225 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3225 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3226 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3226 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3227 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3228 -j ACCEPT -A limit-323 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-323 -m limit --limit 1/second -j LOG --A limit-3230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3230 -m limit --limit 1/second -j LOG --A limit-3230 -j ACCEPT --A limit-3231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3231 -m limit --limit 1/second -j LOG --A limit-3232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3232 -j TEE --gateway fc00::2 --A limit-3232 -j ACCEPT --A limit-3233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3233 -j TEE --gateway fc00::2 --A limit-3234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3234 -j ACCEPT --A limit-3236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3236 -j ACCEPT --A limit-3237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-324 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-324 -j TEE --gateway fc00::2 -A limit-324 -j ACCEPT --A limit-3240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3240 -m limit --limit 1/second -j LOG --A limit-3240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3242 -j TEE --gateway fc00::2 --A limit-3242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3247 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-3248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3248 -j ACCEPT -A limit-325 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-325 -j TEE --gateway fc00::2 --A limit-3250 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3250 -m limit --limit 1/second -j LOG --A limit-3250 -j ACCEPT --A limit-3251 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3251 -m limit --limit 1/second -j LOG --A limit-3252 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3252 -j TEE --gateway fc00::2 --A limit-3252 -j ACCEPT --A limit-3253 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3253 -j TEE --gateway fc00::2 --A limit-3254 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3254 -j ACCEPT --A limit-3256 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3256 -j ACCEPT --A limit-3257 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3258 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3258 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3259 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3259 -m recent --name user:C --rsource --mask fe00:: --set -A limit-326 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-326 -j ACCEPT --A limit-3260 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3260 -m limit --limit 1/second -j LOG --A limit-3260 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3261 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3261 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3262 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3262 -j TEE --gateway fc00::2 --A limit-3262 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3263 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3263 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3264 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3264 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3265 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3265 -m recent --name user:C --rsource --mask fe00:: --set --A limit-3266 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3266 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3267 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3268 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3268 -j ACCEPT -A limit-327 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3270 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3270 -m limit --limit 1/second -j LOG --A limit-3270 -j ACCEPT --A limit-3271 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3271 -m limit --limit 1/second -j LOG --A limit-3272 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3272 -j TEE --gateway fc00::2 --A limit-3272 -j ACCEPT --A limit-3273 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3273 -j TEE --gateway fc00::2 --A limit-3274 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3274 -j ACCEPT --A limit-3276 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3276 -j ACCEPT --A limit-3277 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3278 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3278 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3279 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3279 -m recent --name user:C --rdest --mask fe00:: --set -A limit-328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-328 -j ACCEPT --A limit-3280 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3280 -m limit --limit 1/second -j LOG --A limit-3280 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3281 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3281 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3282 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3282 -j TEE --gateway fc00::2 --A limit-3282 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3283 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3283 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3284 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3284 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3285 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3285 -m recent --name user:C --rdest --mask fe00:: --set --A limit-3286 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3286 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3287 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3288 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3288 -j ACCEPT -A limit-329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3290 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3290 -m limit --limit 1/second -j LOG --A limit-3290 -j ACCEPT --A limit-3291 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3291 -m limit --limit 1/second -j LOG --A limit-3292 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3292 -j TEE --gateway fc00::2 --A limit-3292 -j ACCEPT --A limit-3293 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3293 -j TEE --gateway fc00::2 --A limit-3294 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3294 -j ACCEPT --A limit-3296 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3296 -j ACCEPT --A limit-3297 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3298 -m recent --name limit-3298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1840 --A limit-3298 -m recent --name limit-3298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3299 -m recent --name limit-3299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1841 --A limit-3299 -m recent --name limit-3299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-33 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-33 -m limit --limit 1/second -j LOG -A limit-330 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-330 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3300 -m recent --name limit-3300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1842 --A limit-3300 -m limit --limit 1/second -j LOG --A limit-3300 -m recent --name limit-3300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3301 -m recent --name limit-3301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1843 --A limit-3301 -m recent --name limit-3301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3302 -m recent --name limit-3302 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1844 --A limit-3302 -j TEE --gateway fc00::2 --A limit-3302 -m recent --name limit-3302 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3303 -m recent --name limit-3303 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1845 --A limit-3303 -m recent --name limit-3303 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3304 -m recent --name limit-3304 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1846 --A limit-3304 -m recent --name limit-3304 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3305 -m recent --name limit-3305 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1847 --A limit-3305 -m recent --name limit-3305 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3306 -m recent --name limit-3306 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1848 --A limit-3306 -m recent --name limit-3306 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3307 -m recent --name limit-3307 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1849 --A limit-3308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1850 --A limit-3308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1851 --A limit-3309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-331 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-331 -m recent --name user:C --rsource --mask fe00:: --set --A limit-3310 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1852 --A limit-3310 -m limit --limit 1/second -j LOG --A limit-3310 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3311 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1853 --A limit-3311 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3312 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1854 --A limit-3312 -j TEE --gateway fc00::2 --A limit-3312 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3313 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1855 --A limit-3313 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3314 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1856 --A limit-3314 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3315 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1857 --A limit-3315 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3316 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1858 --A limit-3316 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3317 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1859 --A limit-3318 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1860 --A limit-3318 -j ACCEPT -A limit-332 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-332 -m limit --limit 1/second -j LOG -A limit-332 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3320 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1862 --A limit-3320 -m limit --limit 1/second -j LOG --A limit-3320 -j ACCEPT --A limit-3321 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1863 --A limit-3321 -m limit --limit 1/second -j LOG --A limit-3322 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1864 --A limit-3322 -j TEE --gateway fc00::2 --A limit-3322 -j ACCEPT --A limit-3323 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1865 --A limit-3323 -j TEE --gateway fc00::2 --A limit-3324 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1866 --A limit-3324 -j ACCEPT --A limit-3326 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1868 --A limit-3326 -j ACCEPT --A limit-3327 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1869 --A limit-3328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1870 --A limit-3328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1871 --A limit-3329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-333 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-333 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3330 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1872 --A limit-3330 -m limit --limit 1/second -j LOG --A limit-3330 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3331 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1873 --A limit-3331 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3332 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1874 --A limit-3332 -j TEE --gateway fc00::2 --A limit-3332 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3333 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1875 --A limit-3333 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3334 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1876 --A limit-3334 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3335 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1877 --A limit-3335 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3336 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1878 --A limit-3336 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3337 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1879 --A limit-3338 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1880 --A limit-3338 -j ACCEPT -A limit-334 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-334 -j TEE --gateway fc00::2 -A limit-334 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3340 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1882 --A limit-3340 -m limit --limit 1/second -j LOG --A limit-3340 -j ACCEPT --A limit-3341 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1883 --A limit-3341 -m limit --limit 1/second -j LOG --A limit-3342 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1884 --A limit-3342 -j TEE --gateway fc00::2 --A limit-3342 -j ACCEPT --A limit-3343 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1885 --A limit-3343 -j TEE --gateway fc00::2 --A limit-3344 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1886 --A limit-3344 -j ACCEPT --A limit-3346 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1888 --A limit-3346 -j ACCEPT --A limit-3347 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1889 --A limit-3348 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1890 --A limit-3348 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3349 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1891 --A limit-3349 -m recent --name user:C --rsource --mask fe00:: --set -A limit-335 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-335 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3350 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1892 --A limit-3350 -m limit --limit 1/second -j LOG --A limit-3350 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3351 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1893 --A limit-3351 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3352 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1894 --A limit-3352 -j TEE --gateway fc00::2 --A limit-3352 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3353 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1895 --A limit-3353 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3354 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1896 --A limit-3354 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3355 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1897 --A limit-3355 -m recent --name user:C --rsource --mask fe00:: --set --A limit-3356 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1898 --A limit-3356 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3357 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1899 --A limit-3358 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1900 --A limit-3358 -j ACCEPT -A limit-336 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-336 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3360 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1902 --A limit-3360 -m limit --limit 1/second -j LOG --A limit-3360 -j ACCEPT --A limit-3361 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1903 --A limit-3361 -m limit --limit 1/second -j LOG --A limit-3362 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1904 --A limit-3362 -j TEE --gateway fc00::2 --A limit-3362 -j ACCEPT --A limit-3363 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1905 --A limit-3363 -j TEE --gateway fc00::2 --A limit-3364 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1906 --A limit-3364 -j ACCEPT --A limit-3366 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1908 --A limit-3366 -j ACCEPT --A limit-3367 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1909 --A limit-3368 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1910 --A limit-3368 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3369 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1911 --A limit-3369 -m recent --name user:C --rdest --mask fe00:: --set -A limit-337 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-337 -m recent --name user:C --rsource --mask fe00:: --set --A limit-3370 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1912 --A limit-3370 -m limit --limit 1/second -j LOG --A limit-3370 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3371 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1913 --A limit-3371 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3372 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1914 --A limit-3372 -j TEE --gateway fc00::2 --A limit-3372 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3373 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1915 --A limit-3373 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3374 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1916 --A limit-3374 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3375 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1917 --A limit-3375 -m recent --name user:C --rdest --mask fe00:: --set --A limit-3376 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1918 --A limit-3376 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3377 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1919 --A limit-3378 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1920 --A limit-3378 -j ACCEPT -A limit-338 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-338 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3380 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1922 --A limit-3380 -m limit --limit 1/second -j LOG --A limit-3380 -j ACCEPT --A limit-3381 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1923 --A limit-3381 -m limit --limit 1/second -j LOG --A limit-3382 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1924 --A limit-3382 -j TEE --gateway fc00::2 --A limit-3382 -j ACCEPT --A limit-3383 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1925 --A limit-3383 -j TEE --gateway fc00::2 --A limit-3384 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1926 --A limit-3384 -j ACCEPT --A limit-3386 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1928 --A limit-3386 -j ACCEPT --A limit-3387 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1929 --A limit-3388 -m recent --name limit-3388 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3388 -m recent --name limit-3388 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3389 -m recent --name limit-3389 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3389 -m recent --name limit-3389 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-339 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3390 -m recent --name limit-3390 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3390 -m limit --limit 1/second -j LOG --A limit-3390 -m recent --name limit-3390 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3391 -m recent --name limit-3391 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3391 -m recent --name limit-3391 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3392 -m recent --name limit-3392 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3392 -j TEE --gateway fc00::2 --A limit-3392 -m recent --name limit-3392 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3393 -m recent --name limit-3393 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3393 -m recent --name limit-3393 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3394 -m recent --name limit-3394 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3394 -m recent --name limit-3394 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3395 -m recent --name limit-3395 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3395 -m recent --name limit-3395 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3396 -m recent --name limit-3396 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3396 -m recent --name limit-3396 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3397 -m recent --name limit-3397 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3398 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3398 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3399 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3399 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-34 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-34 -j TEE --gateway fc00::2 -A limit-34 -j ACCEPT -A limit-340 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-340 -j ACCEPT --A limit-3400 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3400 -m limit --limit 1/second -j LOG --A limit-3400 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3401 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3401 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3402 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3402 -j TEE --gateway fc00::2 --A limit-3402 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3403 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3403 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3404 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3404 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3405 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3405 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3406 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3406 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3407 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3408 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3408 -j ACCEPT -A limit-341 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3410 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3410 -m limit --limit 1/second -j LOG --A limit-3410 -j ACCEPT --A limit-3411 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3411 -m limit --limit 1/second -j LOG --A limit-3412 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3412 -j TEE --gateway fc00::2 --A limit-3412 -j ACCEPT --A limit-3413 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3413 -j TEE --gateway fc00::2 --A limit-3414 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3414 -j ACCEPT --A limit-3416 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3416 -j ACCEPT --A limit-3417 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3418 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3418 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3419 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3419 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-342 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-342 -m limit --limit 1/second -j LOG -A limit-342 -j ACCEPT --A limit-3420 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3420 -m limit --limit 1/second -j LOG --A limit-3420 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3421 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3421 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3422 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3422 -j TEE --gateway fc00::2 --A limit-3422 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3423 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3423 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3424 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3424 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3425 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3425 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3426 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3426 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3427 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3428 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3428 -j ACCEPT -A limit-343 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-343 -m limit --limit 1/second -j LOG --A limit-3430 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3430 -m limit --limit 1/second -j LOG --A limit-3430 -j ACCEPT --A limit-3431 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3431 -m limit --limit 1/second -j LOG --A limit-3432 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3432 -j TEE --gateway fc00::2 --A limit-3432 -j ACCEPT --A limit-3433 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3433 -j TEE --gateway fc00::2 --A limit-3434 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3434 -j ACCEPT --A limit-3436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3436 -j ACCEPT --A limit-3437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3438 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3438 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3439 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3439 -m recent --name user:C --rsource --mask fe00:: --set -A limit-344 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-344 -j TEE --gateway fc00::2 -A limit-344 -j ACCEPT --A limit-3440 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3440 -m limit --limit 1/second -j LOG --A limit-3440 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3441 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3441 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3442 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3442 -j TEE --gateway fc00::2 --A limit-3442 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3443 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3443 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3444 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3444 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3445 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3445 -m recent --name user:C --rsource --mask fe00:: --set --A limit-3446 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3446 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3447 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3448 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3448 -j ACCEPT -A limit-345 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-345 -j TEE --gateway fc00::2 --A limit-3450 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3450 -m limit --limit 1/second -j LOG --A limit-3450 -j ACCEPT --A limit-3451 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3451 -m limit --limit 1/second -j LOG --A limit-3452 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3452 -j TEE --gateway fc00::2 --A limit-3452 -j ACCEPT --A limit-3453 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3453 -j TEE --gateway fc00::2 --A limit-3454 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3454 -j ACCEPT --A limit-3456 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3456 -j ACCEPT --A limit-3457 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3458 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3458 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3459 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3459 -m recent --name user:C --rdest --mask fe00:: --set -A limit-346 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-346 -j ACCEPT --A limit-3460 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3460 -m limit --limit 1/second -j LOG --A limit-3460 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3461 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3461 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3462 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3462 -j TEE --gateway fc00::2 --A limit-3462 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3463 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3463 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3464 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3464 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3465 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3465 -m recent --name user:C --rdest --mask fe00:: --set --A limit-3466 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3466 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3467 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3468 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3468 -j ACCEPT -A limit-347 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3470 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3470 -m limit --limit 1/second -j LOG --A limit-3470 -j ACCEPT --A limit-3471 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3471 -m limit --limit 1/second -j LOG --A limit-3472 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3472 -j TEE --gateway fc00::2 --A limit-3472 -j ACCEPT --A limit-3473 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3473 -j TEE --gateway fc00::2 --A limit-3474 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3474 -j ACCEPT --A limit-3476 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3476 -j ACCEPT --A limit-3477 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3478 -m recent --name limit-3478 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1930 --A limit-3478 -m recent --name limit-3478 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3479 -m recent --name limit-3479 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1931 --A limit-3479 -m recent --name limit-3479 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-348 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-348 -j ACCEPT --A limit-3480 -m recent --name limit-3480 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1932 --A limit-3480 -m limit --limit 1/second -j LOG --A limit-3480 -m recent --name limit-3480 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3481 -m recent --name limit-3481 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1933 --A limit-3481 -m recent --name limit-3481 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3482 -m recent --name limit-3482 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1934 --A limit-3482 -j TEE --gateway fc00::2 --A limit-3482 -m recent --name limit-3482 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3483 -m recent --name limit-3483 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1935 --A limit-3483 -m recent --name limit-3483 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3484 -m recent --name limit-3484 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1936 --A limit-3484 -m recent --name limit-3484 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3485 -m recent --name limit-3485 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1937 --A limit-3485 -m recent --name limit-3485 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3486 -m recent --name limit-3486 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1938 --A limit-3486 -m recent --name limit-3486 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3487 -m recent --name limit-3487 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1939 --A limit-3488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1940 --A limit-3488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1941 --A limit-3489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-349 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3490 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1942 --A limit-3490 -m limit --limit 1/second -j LOG --A limit-3490 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3491 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1943 --A limit-3491 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3492 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1944 --A limit-3492 -j TEE --gateway fc00::2 --A limit-3492 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3493 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1945 --A limit-3493 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3494 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1946 --A limit-3494 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3495 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1947 --A limit-3495 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3496 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1948 --A limit-3496 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3497 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1949 --A limit-3498 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1950 --A limit-3498 -j ACCEPT -A limit-35 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-35 -j TEE --gateway fc00::2 -A limit-350 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-350 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3500 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1952 --A limit-3500 -m limit --limit 1/second -j LOG --A limit-3500 -j ACCEPT --A limit-3501 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1953 --A limit-3501 -m limit --limit 1/second -j LOG --A limit-3502 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1954 --A limit-3502 -j TEE --gateway fc00::2 --A limit-3502 -j ACCEPT --A limit-3503 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1955 --A limit-3503 -j TEE --gateway fc00::2 --A limit-3504 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1956 --A limit-3504 -j ACCEPT --A limit-3506 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1958 --A limit-3506 -j ACCEPT --A limit-3507 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1959 --A limit-3508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1960 --A limit-3508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1961 --A limit-3509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-351 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-351 -m recent --name user:C --rdest --mask fe00:: --set --A limit-3510 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1962 --A limit-3510 -m limit --limit 1/second -j LOG --A limit-3510 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3511 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1963 --A limit-3511 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3512 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1964 --A limit-3512 -j TEE --gateway fc00::2 --A limit-3512 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3513 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1965 --A limit-3513 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3514 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1966 --A limit-3514 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3515 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1967 --A limit-3515 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3516 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1968 --A limit-3516 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3517 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1969 --A limit-3518 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1970 --A limit-3518 -j ACCEPT -A limit-352 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-352 -m limit --limit 1/second -j LOG -A limit-352 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3520 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1972 --A limit-3520 -m limit --limit 1/second -j LOG --A limit-3520 -j ACCEPT --A limit-3521 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1973 --A limit-3521 -m limit --limit 1/second -j LOG --A limit-3522 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1974 --A limit-3522 -j TEE --gateway fc00::2 --A limit-3522 -j ACCEPT --A limit-3523 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1975 --A limit-3523 -j TEE --gateway fc00::2 --A limit-3524 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1976 --A limit-3524 -j ACCEPT --A limit-3526 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1978 --A limit-3526 -j ACCEPT --A limit-3527 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1979 --A limit-3528 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1980 --A limit-3528 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3529 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1981 --A limit-3529 -m recent --name user:C --rsource --mask fe00:: --set -A limit-353 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-353 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3530 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1982 --A limit-3530 -m limit --limit 1/second -j LOG --A limit-3530 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3531 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1983 --A limit-3531 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3532 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1984 --A limit-3532 -j TEE --gateway fc00::2 --A limit-3532 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3533 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1985 --A limit-3533 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3534 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1986 --A limit-3534 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3535 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1987 --A limit-3535 -m recent --name user:C --rsource --mask fe00:: --set --A limit-3536 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1988 --A limit-3536 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3537 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1989 --A limit-3538 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1990 --A limit-3538 -j ACCEPT -A limit-354 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-354 -j TEE --gateway fc00::2 -A limit-354 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3540 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1992 --A limit-3540 -m limit --limit 1/second -j LOG --A limit-3540 -j ACCEPT --A limit-3541 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1993 --A limit-3541 -m limit --limit 1/second -j LOG --A limit-3542 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1994 --A limit-3542 -j TEE --gateway fc00::2 --A limit-3542 -j ACCEPT --A limit-3543 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1995 --A limit-3543 -j TEE --gateway fc00::2 --A limit-3544 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1996 --A limit-3544 -j ACCEPT --A limit-3546 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1998 --A limit-3546 -j ACCEPT --A limit-3547 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1999 --A limit-3548 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2000 --A limit-3548 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3549 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2001 --A limit-3549 -m recent --name user:C --rdest --mask fe00:: --set -A limit-355 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-355 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3550 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2002 --A limit-3550 -m limit --limit 1/second -j LOG --A limit-3550 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3551 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2003 --A limit-3551 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3552 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2004 --A limit-3552 -j TEE --gateway fc00::2 --A limit-3552 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3553 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2005 --A limit-3553 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3554 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2006 --A limit-3554 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3555 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2007 --A limit-3555 -m recent --name user:C --rdest --mask fe00:: --set --A limit-3556 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2008 --A limit-3556 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3557 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2009 --A limit-3558 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2010 --A limit-3558 -j ACCEPT -A limit-356 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-356 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3560 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2012 --A limit-3560 -m limit --limit 1/second -j LOG --A limit-3560 -j ACCEPT --A limit-3561 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2013 --A limit-3561 -m limit --limit 1/second -j LOG --A limit-3562 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2014 --A limit-3562 -j TEE --gateway fc00::2 --A limit-3562 -j ACCEPT --A limit-3563 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2015 --A limit-3563 -j TEE --gateway fc00::2 --A limit-3564 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2016 --A limit-3564 -j ACCEPT --A limit-3566 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2018 --A limit-3566 -j ACCEPT --A limit-3567 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2019 --A limit-3568 -m recent --name limit-3568 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2020 --A limit-3568 -m recent --name limit-3568 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3569 -m recent --name limit-3569 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2021 --A limit-3569 -m recent --name limit-3569 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-357 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-357 -m recent --name user:C --rdest --mask fe00:: --set --A limit-3570 -m recent --name limit-3570 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2022 --A limit-3570 -m limit --limit 1/second -j LOG --A limit-3570 -m recent --name limit-3570 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3571 -m recent --name limit-3571 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2023 --A limit-3571 -m recent --name limit-3571 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3572 -m recent --name limit-3572 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2024 --A limit-3572 -j TEE --gateway fc00::2 --A limit-3572 -m recent --name limit-3572 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3573 -m recent --name limit-3573 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2025 --A limit-3573 -m recent --name limit-3573 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3574 -m recent --name limit-3574 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2026 --A limit-3574 -m recent --name limit-3574 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3575 -m recent --name limit-3575 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2027 --A limit-3575 -m recent --name limit-3575 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3576 -m recent --name limit-3576 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2028 --A limit-3576 -m recent --name limit-3576 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3577 -m recent --name limit-3577 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2029 --A limit-3578 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2030 --A limit-3578 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3579 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2031 --A limit-3579 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-358 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-358 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3580 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2032 --A limit-3580 -m limit --limit 1/second -j LOG --A limit-3580 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3581 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2033 --A limit-3581 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3582 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2034 --A limit-3582 -j TEE --gateway fc00::2 --A limit-3582 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3583 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2035 --A limit-3583 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3584 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2036 --A limit-3584 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3585 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2037 --A limit-3585 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2038 --A limit-3586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2039 --A limit-3588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2040 --A limit-3588 -j ACCEPT -A limit-359 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-3590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2042 --A limit-3590 -m limit --limit 1/second -j LOG --A limit-3590 -j ACCEPT --A limit-3591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2043 --A limit-3591 -m limit --limit 1/second -j LOG --A limit-3592 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2044 --A limit-3592 -j TEE --gateway fc00::2 --A limit-3592 -j ACCEPT --A limit-3593 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2045 --A limit-3593 -j TEE --gateway fc00::2 --A limit-3594 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2046 --A limit-3594 -j ACCEPT --A limit-3596 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2048 --A limit-3596 -j ACCEPT --A limit-3597 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2049 --A limit-3598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2050 --A limit-3598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2051 --A limit-3599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-36 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-36 -j ACCEPT -A limit-360 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-360 -j ACCEPT --A limit-3600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2052 --A limit-3600 -m limit --limit 1/second -j LOG --A limit-3600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2053 --A limit-3601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2054 --A limit-3602 -j TEE --gateway fc00::2 --A limit-3602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2055 --A limit-3603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2056 --A limit-3604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3605 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2057 --A limit-3605 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2058 --A limit-3606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3607 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2059 --A limit-3608 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2060 --A limit-3608 -j ACCEPT -A limit-361 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3610 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2062 --A limit-3610 -m limit --limit 1/second -j LOG --A limit-3610 -j ACCEPT --A limit-3611 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2063 --A limit-3611 -m limit --limit 1/second -j LOG --A limit-3612 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2064 --A limit-3612 -j TEE --gateway fc00::2 --A limit-3612 -j ACCEPT --A limit-3613 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2065 --A limit-3613 -j TEE --gateway fc00::2 --A limit-3614 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2066 --A limit-3614 -j ACCEPT --A limit-3616 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2068 --A limit-3616 -j ACCEPT --A limit-3617 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2069 --A limit-3618 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2070 --A limit-3618 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3619 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2071 --A limit-3619 -m recent --name user:C --rsource --mask fe00:: --set -A limit-362 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-362 -m limit --limit 1/second -j LOG -A limit-362 -j ACCEPT --A limit-3620 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2072 --A limit-3620 -m limit --limit 1/second -j LOG --A limit-3620 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3621 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2073 --A limit-3621 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3622 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2074 --A limit-3622 -j TEE --gateway fc00::2 --A limit-3622 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3623 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2075 --A limit-3623 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3624 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2076 --A limit-3624 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3625 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2077 --A limit-3625 -m recent --name user:C --rsource --mask fe00:: --set --A limit-3626 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2078 --A limit-3626 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3627 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2079 --A limit-3628 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2080 --A limit-3628 -j ACCEPT -A limit-363 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-363 -m limit --limit 1/second -j LOG --A limit-3630 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2082 --A limit-3630 -m limit --limit 1/second -j LOG --A limit-3630 -j ACCEPT --A limit-3631 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2083 --A limit-3631 -m limit --limit 1/second -j LOG --A limit-3632 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2084 --A limit-3632 -j TEE --gateway fc00::2 --A limit-3632 -j ACCEPT --A limit-3633 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2085 --A limit-3633 -j TEE --gateway fc00::2 --A limit-3634 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2086 --A limit-3634 -j ACCEPT --A limit-3636 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2088 --A limit-3636 -j ACCEPT --A limit-3637 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2089 --A limit-3638 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2090 --A limit-3638 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3639 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2091 --A limit-3639 -m recent --name user:C --rdest --mask fe00:: --set -A limit-364 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-364 -j TEE --gateway fc00::2 -A limit-364 -j ACCEPT --A limit-3640 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2092 --A limit-3640 -m limit --limit 1/second -j LOG --A limit-3640 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3641 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2093 --A limit-3641 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3642 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2094 --A limit-3642 -j TEE --gateway fc00::2 --A limit-3642 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3643 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2095 --A limit-3643 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3644 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2096 --A limit-3644 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3645 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2097 --A limit-3645 -m recent --name user:C --rdest --mask fe00:: --set --A limit-3646 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2098 --A limit-3646 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3647 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2099 --A limit-3648 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2100 --A limit-3648 -j ACCEPT -A limit-365 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-365 -j TEE --gateway fc00::2 --A limit-3650 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2102 --A limit-3650 -m limit --limit 1/second -j LOG --A limit-3650 -j ACCEPT --A limit-3651 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2103 --A limit-3651 -m limit --limit 1/second -j LOG --A limit-3652 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2104 --A limit-3652 -j TEE --gateway fc00::2 --A limit-3652 -j ACCEPT --A limit-3653 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2105 --A limit-3653 -j TEE --gateway fc00::2 --A limit-3654 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2106 --A limit-3654 -j ACCEPT --A limit-3656 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2108 --A limit-3656 -j ACCEPT --A limit-3657 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2109 --A limit-3658 -m recent --name limit-3658 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3658 -m recent --name limit-3658 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3659 -m recent --name limit-3659 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3659 -m recent --name limit-3659 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-366 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-366 -j ACCEPT --A limit-3660 -m recent --name limit-3660 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3660 -m limit --limit 1/second -j LOG --A limit-3660 -m recent --name limit-3660 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3661 -m recent --name limit-3661 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3661 -m recent --name limit-3661 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3662 -m recent --name limit-3662 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3662 -j TEE --gateway fc00::2 --A limit-3662 -m recent --name limit-3662 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3663 -m recent --name limit-3663 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3663 -m recent --name limit-3663 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3664 -m recent --name limit-3664 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3664 -m recent --name limit-3664 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3665 -m recent --name limit-3665 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3665 -m recent --name limit-3665 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3666 -m recent --name limit-3666 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3666 -m recent --name limit-3666 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3667 -m recent --name limit-3667 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3668 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3668 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3669 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3669 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-367 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3670 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3670 -m limit --limit 1/second -j LOG --A limit-3670 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3671 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3671 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3672 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3672 -j TEE --gateway fc00::2 --A limit-3672 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3673 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3673 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3674 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3674 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3675 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3675 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3676 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3676 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3677 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3678 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3678 -j ACCEPT -A limit-368 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-368 -j ACCEPT --A limit-3680 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3680 -m limit --limit 1/second -j LOG --A limit-3680 -j ACCEPT --A limit-3681 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3681 -m limit --limit 1/second -j LOG --A limit-3682 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3682 -j TEE --gateway fc00::2 --A limit-3682 -j ACCEPT --A limit-3683 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3683 -j TEE --gateway fc00::2 --A limit-3684 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3684 -j ACCEPT --A limit-3686 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3686 -j ACCEPT --A limit-3687 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3688 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3688 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3689 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3689 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-369 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-3690 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3690 -m limit --limit 1/second -j LOG --A limit-3690 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3691 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3691 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3692 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3692 -j TEE --gateway fc00::2 --A limit-3692 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3693 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3693 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3694 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3694 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3695 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3695 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3696 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3696 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3697 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-3698 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3698 -j ACCEPT -A limit-37 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-370 -m recent --name limit-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-190 -A limit-370 -m recent --name limit-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3700 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3700 -m limit --limit 1/second -j LOG --A limit-3700 -j ACCEPT --A limit-3701 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3701 -m limit --limit 1/second -j LOG --A limit-3702 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3702 -j TEE --gateway fc00::2 --A limit-3702 -j ACCEPT --A limit-3703 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3703 -j TEE --gateway fc00::2 --A limit-3704 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3704 -j ACCEPT --A limit-3706 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3706 -j ACCEPT --A limit-3707 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3708 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3708 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3709 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3709 -m recent --name user:C --rsource --mask fe00:: --set -A limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-191 -A limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3710 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3710 -m limit --limit 1/second -j LOG --A limit-3710 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3711 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3711 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3712 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3712 -j TEE --gateway fc00::2 --A limit-3712 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3713 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3713 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3714 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3714 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3715 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3715 -m recent --name user:C --rsource --mask fe00:: --set --A limit-3716 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3716 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3717 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3718 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3718 -j ACCEPT -A limit-372 -m recent --name limit-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-192 -A limit-372 -m limit --limit 1/second -j LOG -A limit-372 -m recent --name limit-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3720 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3720 -m limit --limit 1/second -j LOG --A limit-3720 -j ACCEPT --A limit-3721 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3721 -m limit --limit 1/second -j LOG --A limit-3722 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3722 -j TEE --gateway fc00::2 --A limit-3722 -j ACCEPT --A limit-3723 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3723 -j TEE --gateway fc00::2 --A limit-3724 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3724 -j ACCEPT --A limit-3726 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3726 -j ACCEPT --A limit-3727 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3728 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3728 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3729 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3729 -m recent --name user:C --rdest --mask fe00:: --set -A limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-193 -A limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3730 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3730 -m limit --limit 1/second -j LOG --A limit-3730 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3731 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3731 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3732 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3732 -j TEE --gateway fc00::2 --A limit-3732 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3733 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3733 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3734 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3734 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3735 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3735 -m recent --name user:C --rdest --mask fe00:: --set --A limit-3736 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3736 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3737 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-3738 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3738 -j ACCEPT -A limit-374 -m recent --name limit-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-194 -A limit-374 -j TEE --gateway fc00::2 -A limit-374 -m recent --name limit-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3740 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3740 -m limit --limit 1/second -j LOG --A limit-3740 -j ACCEPT --A limit-3741 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3741 -m limit --limit 1/second -j LOG --A limit-3742 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3742 -j TEE --gateway fc00::2 --A limit-3742 -j ACCEPT --A limit-3743 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3743 -j TEE --gateway fc00::2 --A limit-3744 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3744 -j ACCEPT --A limit-3746 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3746 -j ACCEPT --A limit-3747 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-3748 -m recent --name limit-3748 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2110 --A limit-3748 -m recent --name limit-3748 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3749 -m recent --name limit-3749 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2111 --A limit-3749 -m recent --name limit-3749 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-375 -m recent --name limit-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-195 -A limit-375 -m recent --name limit-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3750 -m recent --name limit-3750 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2112 --A limit-3750 -m limit --limit 1/second -j LOG --A limit-3750 -m recent --name limit-3750 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3751 -m recent --name limit-3751 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2113 --A limit-3751 -m recent --name limit-3751 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3752 -m recent --name limit-3752 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2114 --A limit-3752 -j TEE --gateway fc00::2 --A limit-3752 -m recent --name limit-3752 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3753 -m recent --name limit-3753 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2115 --A limit-3753 -m recent --name limit-3753 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3754 -m recent --name limit-3754 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2116 --A limit-3754 -m recent --name limit-3754 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3755 -m recent --name limit-3755 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2117 --A limit-3755 -m recent --name limit-3755 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3756 -m recent --name limit-3756 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2118 --A limit-3756 -m recent --name limit-3756 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3757 -m recent --name limit-3757 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2119 --A limit-3758 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2120 --A limit-3758 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3759 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2121 --A limit-3759 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-376 -m recent --name limit-376 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-196 -A limit-376 -m recent --name limit-376 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3760 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2122 --A limit-3760 -m limit --limit 1/second -j LOG --A limit-3760 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3761 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2123 --A limit-3761 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3762 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2124 --A limit-3762 -j TEE --gateway fc00::2 --A limit-3762 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3763 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2125 --A limit-3763 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3764 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2126 --A limit-3764 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3765 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2127 --A limit-3765 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3766 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2128 --A limit-3766 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3767 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2129 --A limit-3768 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2130 --A limit-3768 -j ACCEPT -A limit-377 -m recent --name limit-377 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-197 -A limit-377 -m recent --name limit-377 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3770 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2132 --A limit-3770 -m limit --limit 1/second -j LOG --A limit-3770 -j ACCEPT --A limit-3771 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2133 --A limit-3771 -m limit --limit 1/second -j LOG --A limit-3772 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2134 --A limit-3772 -j TEE --gateway fc00::2 --A limit-3772 -j ACCEPT --A limit-3773 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2135 --A limit-3773 -j TEE --gateway fc00::2 --A limit-3774 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2136 --A limit-3774 -j ACCEPT --A limit-3776 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2138 --A limit-3776 -j ACCEPT --A limit-3777 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2139 --A limit-3778 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2140 --A limit-3778 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3779 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2141 --A limit-3779 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-378 -m recent --name limit-378 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-198 -A limit-378 -m recent --name limit-378 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3780 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2142 --A limit-3780 -m limit --limit 1/second -j LOG --A limit-3780 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3781 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2143 --A limit-3781 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3782 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2144 --A limit-3782 -j TEE --gateway fc00::2 --A limit-3782 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3783 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2145 --A limit-3783 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3784 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2146 --A limit-3784 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3785 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2147 --A limit-3785 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3786 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2148 --A limit-3786 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3787 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2149 --A limit-3788 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2150 --A limit-3788 -j ACCEPT -A limit-379 -m recent --name limit-379 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-199 --A limit-3790 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2152 --A limit-3790 -m limit --limit 1/second -j LOG --A limit-3790 -j ACCEPT --A limit-3791 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2153 --A limit-3791 -m limit --limit 1/second -j LOG --A limit-3792 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2154 --A limit-3792 -j TEE --gateway fc00::2 --A limit-3792 -j ACCEPT --A limit-3793 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2155 --A limit-3793 -j TEE --gateway fc00::2 --A limit-3794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2156 --A limit-3794 -j ACCEPT --A limit-3796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2158 --A limit-3796 -j ACCEPT --A limit-3797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2159 --A limit-3798 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2160 --A limit-3798 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3799 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2161 --A limit-3799 -m recent --name user:C --rsource --mask fe00:: --set -A limit-38 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-38 -j ACCEPT -A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-200 -A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3800 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2162 --A limit-3800 -m limit --limit 1/second -j LOG --A limit-3800 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3801 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2163 --A limit-3801 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3802 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2164 --A limit-3802 -j TEE --gateway fc00::2 --A limit-3802 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3803 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2165 --A limit-3803 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3804 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2166 --A limit-3804 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3805 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2167 --A limit-3805 -m recent --name user:C --rsource --mask fe00:: --set --A limit-3806 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2168 --A limit-3806 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-3807 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2169 --A limit-3808 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2170 --A limit-3808 -j ACCEPT -A limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-201 -A limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3810 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2172 --A limit-3810 -m limit --limit 1/second -j LOG --A limit-3810 -j ACCEPT --A limit-3811 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2173 --A limit-3811 -m limit --limit 1/second -j LOG --A limit-3812 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2174 --A limit-3812 -j TEE --gateway fc00::2 --A limit-3812 -j ACCEPT --A limit-3813 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2175 --A limit-3813 -j TEE --gateway fc00::2 --A limit-3814 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2176 --A limit-3814 -j ACCEPT --A limit-3816 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2178 --A limit-3816 -j ACCEPT --A limit-3817 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2179 --A limit-3818 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2180 --A limit-3818 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3819 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2181 --A limit-3819 -m recent --name user:C --rdest --mask fe00:: --set -A limit-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-202 -A limit-382 -m limit --limit 1/second -j LOG -A limit-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3820 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2182 --A limit-3820 -m limit --limit 1/second -j LOG --A limit-3820 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3821 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2183 --A limit-3821 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-3822 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2184 --A limit-3822 -j TEE --gateway fc00::2 --A limit-3822 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3823 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2185 --A limit-3823 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 --A limit-3824 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2186 --A limit-3824 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3825 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2187 --A limit-3825 -m recent --name user:C --rdest --mask fe00:: --set --A limit-3826 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2188 --A limit-3826 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-3827 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2189 --A limit-3828 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2190 --A limit-3828 -j ACCEPT -A limit-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-203 -A limit-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3830 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2192 --A limit-3830 -m limit --limit 1/second -j LOG --A limit-3830 -j ACCEPT --A limit-3831 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2193 --A limit-3831 -m limit --limit 1/second -j LOG --A limit-3832 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2194 --A limit-3832 -j TEE --gateway fc00::2 --A limit-3832 -j ACCEPT --A limit-3833 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2195 --A limit-3833 -j TEE --gateway fc00::2 --A limit-3834 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2196 --A limit-3834 -j ACCEPT --A limit-3836 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2198 --A limit-3836 -j ACCEPT --A limit-3837 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2199 --A limit-3838 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3838 -j ACCEPT --A limit-3838 -m limit --limit 1/second -j LOG --A limit-3838 -j DROP --A limit-3839 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3839 -j RETURN --A limit-3839 -m limit --limit 1/second -j LOG --A limit-3839 -j DROP -A limit-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-204 -A limit-384 -j TEE --gateway fc00::2 -A limit-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3840 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3840 -j logaccept-66 --A limit-3840 -m limit --limit 1/second -j LOG --A limit-3840 -j DROP --A limit-3841 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3841 -j logaccept-67 --A limit-3841 -m limit --limit 1/second -j LOG --A limit-3841 -j DROP --A limit-3842 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3842 -j ACCEPT --A limit-3842 -m limit --limit 1/second -j LOG --A limit-3842 -j DROP --A limit-3843 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3843 -j logaccept-68 --A limit-3843 -m limit --limit 1/second -j LOG --A limit-3843 -j DROP --A limit-3844 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3844 -j ACCEPT --A limit-3844 -j DROP --A limit-3845 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3845 -j RETURN --A limit-3845 -j DROP --A limit-3846 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3846 -j logaccept-69 --A limit-3846 -j DROP --A limit-3847 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3847 -j logaccept-70 --A limit-3847 -j DROP --A limit-3848 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3848 -j ACCEPT --A limit-3848 -j DROP --A limit-3849 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3849 -j logaccept-71 --A limit-3849 -j DROP -A limit-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-205 -A limit-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 --A limit-3850 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3850 -j ACCEPT --A limit-3850 -m limit --limit 1/second -j LOG --A limit-3850 -j DROP --A limit-3851 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3851 -j RETURN --A limit-3851 -m limit --limit 1/second -j LOG --A limit-3851 -j DROP --A limit-3852 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3852 -j logaccept-72 --A limit-3852 -m limit --limit 1/second -j LOG --A limit-3852 -j DROP --A limit-3853 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3853 -j logaccept-73 --A limit-3853 -m limit --limit 1/second -j LOG --A limit-3853 -j DROP --A limit-3854 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3854 -j ACCEPT --A limit-3854 -m limit --limit 1/second -j LOG --A limit-3854 -j DROP --A limit-3855 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3855 -j logaccept-74 --A limit-3855 -m limit --limit 1/second -j LOG --A limit-3855 -j DROP --A limit-3856 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3856 -j ACCEPT --A limit-3856 -j TEE --gateway fc00::2 --A limit-3856 -j DROP --A limit-3857 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3857 -j RETURN --A limit-3857 -j TEE --gateway fc00::2 --A limit-3857 -j DROP --A limit-3858 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3858 -j logaccept-75 --A limit-3858 -j TEE --gateway fc00::2 --A limit-3858 -j DROP --A limit-3859 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3859 -j logaccept-76 --A limit-3859 -j TEE --gateway fc00::2 --A limit-3859 -j DROP -A limit-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-206 -A limit-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3860 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3860 -j ACCEPT --A limit-3860 -j TEE --gateway fc00::2 --A limit-3860 -j DROP --A limit-3861 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3861 -j logaccept-77 --A limit-3861 -j TEE --gateway fc00::2 --A limit-3861 -j DROP --A limit-3862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3862 -j ACCEPT --A limit-3862 -j DROP --A limit-3863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3863 -j RETURN --A limit-3863 -j DROP --A limit-3864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3864 -j logaccept-78 --A limit-3864 -j DROP --A limit-3865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3865 -j logaccept-79 --A limit-3865 -j DROP --A limit-3866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3866 -j ACCEPT --A limit-3866 -j DROP --A limit-3867 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3867 -j logaccept-80 --A limit-3867 -j DROP --A limit-3868 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3868 -j ACCEPT --A limit-3868 -j DROP --A limit-3869 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3869 -j RETURN --A limit-3869 -j DROP -A limit-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-207 -A limit-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3870 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3870 -j logaccept-81 --A limit-3870 -j DROP --A limit-3871 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3871 -j logaccept-82 --A limit-3871 -j DROP --A limit-3872 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3872 -j ACCEPT --A limit-3872 -j DROP --A limit-3873 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3873 -j logaccept-83 --A limit-3873 -j DROP --A limit-3874 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3874 -j ACCEPT --A limit-3874 -j DROP --A limit-3875 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3875 -j RETURN --A limit-3875 -j DROP --A limit-3876 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3876 -j logaccept-84 --A limit-3876 -j DROP --A limit-3877 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3877 -j logaccept-85 --A limit-3877 -j DROP --A limit-3878 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3878 -j ACCEPT --A limit-3878 -j DROP --A limit-3879 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3879 -j logaccept-86 --A limit-3879 -j DROP -A limit-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-208 -A limit-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-3880 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3880 -j ACCEPT --A limit-3880 -m limit --limit 1/second -j LOG --A limit-3880 -j DROP --A limit-3881 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3881 -j RETURN --A limit-3881 -m limit --limit 1/second -j LOG --A limit-3881 -j DROP --A limit-3882 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3882 -j logaccept-87 --A limit-3882 -m limit --limit 1/second -j LOG --A limit-3882 -j DROP --A limit-3883 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3883 -j logaccept-88 --A limit-3883 -m limit --limit 1/second -j LOG --A limit-3883 -j DROP --A limit-3884 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3884 -j ACCEPT --A limit-3884 -m limit --limit 1/second -j LOG --A limit-3884 -j DROP --A limit-3885 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3885 -j logaccept-89 --A limit-3885 -m limit --limit 1/second -j LOG --A limit-3885 -j DROP --A limit-3886 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3886 -j ACCEPT --A limit-3886 -j TEE --gateway fc00::2 --A limit-3886 -j DROP --A limit-3887 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3887 -j RETURN --A limit-3887 -j TEE --gateway fc00::2 --A limit-3887 -j DROP --A limit-3888 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3888 -j logaccept-90 --A limit-3888 -j TEE --gateway fc00::2 --A limit-3888 -j DROP --A limit-3889 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3889 -j logaccept-91 --A limit-3889 -j TEE --gateway fc00::2 --A limit-3889 -j DROP -A limit-389 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-209 --A limit-3890 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3890 -j ACCEPT --A limit-3890 -j TEE --gateway fc00::2 --A limit-3890 -j DROP --A limit-3891 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3891 -j logaccept-92 --A limit-3891 -j TEE --gateway fc00::2 --A limit-3891 -j DROP --A limit-3892 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3892 -j ACCEPT --A limit-3892 -j DROP --A limit-3893 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3893 -j RETURN --A limit-3893 -j DROP --A limit-3894 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3894 -j logaccept-93 --A limit-3894 -j DROP --A limit-3895 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3895 -j logaccept-94 --A limit-3895 -j DROP --A limit-3896 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3896 -j ACCEPT --A limit-3896 -j DROP --A limit-3897 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3897 -j logaccept-95 --A limit-3897 -j DROP --A limit-3898 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3898 -j ACCEPT --A limit-3898 -j DROP --A limit-3899 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3899 -j RETURN --A limit-3899 -j DROP -A limit-39 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-390 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-210 -A limit-390 -j ACCEPT --A limit-3900 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3900 -j logaccept-96 --A limit-3900 -j DROP --A limit-3901 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3901 -j logaccept-97 --A limit-3901 -j DROP --A limit-3902 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3902 -j ACCEPT --A limit-3902 -j DROP --A limit-3903 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3903 -j logaccept-98 --A limit-3903 -j DROP -A limit-391 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-211 -A limit-392 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-212 -A limit-392 -m limit --limit 1/second -j LOG @@ -22794,18 +20881,1925 @@ -A limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-0 -m recent --name limit-ntp-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-0 +-A limit-ntp-0 -m recent --name limit-ntp-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-1 -m recent --name limit-ntp-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-1 +-A limit-ntp-1 -m recent --name limit-ntp-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-10 -m recent --name limit-ntp-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-10 -m recent --name limit-ntp-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-100 -m recent --name limit-ntp-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-10 +-A limit-ntp-100 -m recent --name limit-ntp-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-101 -m recent --name limit-ntp-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-11 +-A limit-ntp-101 -m recent --name limit-ntp-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-102 -m recent --name limit-ntp-102 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-12 +-A limit-ntp-102 -m limit --limit 1/second -j LOG +-A limit-ntp-102 -m recent --name limit-ntp-102 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-103 -m recent --name limit-ntp-103 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-13 +-A limit-ntp-103 -m recent --name limit-ntp-103 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-104 -m recent --name limit-ntp-104 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-14 +-A limit-ntp-104 -j TEE --gateway fc00::2 +-A limit-ntp-104 -m recent --name limit-ntp-104 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-15 +-A limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-106 -m recent --name limit-ntp-106 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-16 +-A limit-ntp-106 -m recent --name limit-ntp-106 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-107 -m recent --name limit-ntp-107 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-17 +-A limit-ntp-107 -m recent --name limit-ntp-107 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-108 -m recent --name limit-ntp-108 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-18 +-A limit-ntp-108 -m recent --name limit-ntp-108 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-109 -m recent --name limit-ntp-109 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-19 +-A limit-ntp-11 -m recent --name limit-ntp-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-11 -m recent --name limit-ntp-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-110 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-20 +-A limit-ntp-110 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-111 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-21 +-A limit-ntp-111 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-112 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-22 +-A limit-ntp-112 -m limit --limit 1/second -j LOG +-A limit-ntp-112 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-113 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-23 +-A limit-ntp-113 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-114 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-24 +-A limit-ntp-114 -j TEE --gateway fc00::2 +-A limit-ntp-114 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-115 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-25 +-A limit-ntp-115 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-116 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-26 +-A limit-ntp-116 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-117 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-27 +-A limit-ntp-117 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-118 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-28 +-A limit-ntp-118 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-119 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-29 +-A limit-ntp-12 -m recent --name limit-ntp-12 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-12 -m limit --limit 1/second -j LOG +-A limit-ntp-12 -m recent --name limit-ntp-12 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-30 +-A limit-ntp-120 -j ACCEPT +-A limit-ntp-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-32 +-A limit-ntp-122 -m limit --limit 1/second -j LOG +-A limit-ntp-122 -j ACCEPT +-A limit-ntp-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-33 +-A limit-ntp-123 -m limit --limit 1/second -j LOG +-A limit-ntp-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-34 +-A limit-ntp-124 -j TEE --gateway fc00::2 +-A limit-ntp-124 -j ACCEPT +-A limit-ntp-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-35 +-A limit-ntp-125 -j TEE --gateway fc00::2 +-A limit-ntp-126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-36 +-A limit-ntp-126 -j ACCEPT +-A limit-ntp-128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-38 +-A limit-ntp-128 -j ACCEPT +-A limit-ntp-129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-39 +-A limit-ntp-13 -m recent --name limit-ntp-13 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-13 -m recent --name limit-ntp-13 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-130 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-40 +-A limit-ntp-130 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-131 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-41 +-A limit-ntp-131 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-42 +-A limit-ntp-132 -m limit --limit 1/second -j LOG +-A limit-ntp-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-43 +-A limit-ntp-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-44 +-A limit-ntp-134 -j TEE --gateway fc00::2 +-A limit-ntp-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-45 +-A limit-ntp-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-46 +-A limit-ntp-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-47 +-A limit-ntp-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-48 +-A limit-ntp-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-139 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-49 +-A limit-ntp-14 -m recent --name limit-ntp-14 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-14 -j TEE --gateway fc00::2 +-A limit-ntp-14 -m recent --name limit-ntp-14 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-50 +-A limit-ntp-140 -j ACCEPT +-A limit-ntp-142 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-52 +-A limit-ntp-142 -m limit --limit 1/second -j LOG +-A limit-ntp-142 -j ACCEPT +-A limit-ntp-143 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-53 +-A limit-ntp-143 -m limit --limit 1/second -j LOG +-A limit-ntp-144 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-54 +-A limit-ntp-144 -j TEE --gateway fc00::2 +-A limit-ntp-144 -j ACCEPT +-A limit-ntp-145 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-55 +-A limit-ntp-145 -j TEE --gateway fc00::2 +-A limit-ntp-146 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-56 +-A limit-ntp-146 -j ACCEPT +-A limit-ntp-148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-58 +-A limit-ntp-148 -j ACCEPT +-A limit-ntp-149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-59 +-A limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-150 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-60 +-A limit-ntp-150 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-151 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-61 +-A limit-ntp-151 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-152 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-62 +-A limit-ntp-152 -m limit --limit 1/second -j LOG +-A limit-ntp-152 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-153 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-63 +-A limit-ntp-153 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-154 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-64 +-A limit-ntp-154 -j TEE --gateway fc00::2 +-A limit-ntp-154 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-155 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-65 +-A limit-ntp-155 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-156 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-66 +-A limit-ntp-156 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-157 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-67 +-A limit-ntp-157 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-158 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-68 +-A limit-ntp-158 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-159 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-69 +-A limit-ntp-16 -m recent --name limit-ntp-16 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-16 -m recent --name limit-ntp-16 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-160 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-70 +-A limit-ntp-160 -j ACCEPT +-A limit-ntp-162 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-72 +-A limit-ntp-162 -m limit --limit 1/second -j LOG +-A limit-ntp-162 -j ACCEPT +-A limit-ntp-163 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-73 +-A limit-ntp-163 -m limit --limit 1/second -j LOG +-A limit-ntp-164 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-74 +-A limit-ntp-164 -j TEE --gateway fc00::2 +-A limit-ntp-164 -j ACCEPT +-A limit-ntp-165 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-75 +-A limit-ntp-165 -j TEE --gateway fc00::2 +-A limit-ntp-166 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-76 +-A limit-ntp-166 -j ACCEPT +-A limit-ntp-168 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-78 +-A limit-ntp-168 -j ACCEPT +-A limit-ntp-169 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-79 +-A limit-ntp-17 -m recent --name limit-ntp-17 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-17 -m recent --name limit-ntp-17 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-170 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-80 +-A limit-ntp-170 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-171 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-81 +-A limit-ntp-171 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-172 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-82 +-A limit-ntp-172 -m limit --limit 1/second -j LOG +-A limit-ntp-172 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-173 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-83 +-A limit-ntp-173 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-174 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-84 +-A limit-ntp-174 -j TEE --gateway fc00::2 +-A limit-ntp-174 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-175 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-85 +-A limit-ntp-175 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-176 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-86 +-A limit-ntp-176 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-177 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-87 +-A limit-ntp-177 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-178 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-88 +-A limit-ntp-178 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-179 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-89 +-A limit-ntp-18 -m recent --name limit-ntp-18 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-18 -m recent --name limit-ntp-18 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-180 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-90 +-A limit-ntp-180 -j ACCEPT +-A limit-ntp-182 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-92 +-A limit-ntp-182 -m limit --limit 1/second -j LOG +-A limit-ntp-182 -j ACCEPT +-A limit-ntp-183 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-93 +-A limit-ntp-183 -m limit --limit 1/second -j LOG +-A limit-ntp-184 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-94 +-A limit-ntp-184 -j TEE --gateway fc00::2 +-A limit-ntp-184 -j ACCEPT +-A limit-ntp-185 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-95 +-A limit-ntp-185 -j TEE --gateway fc00::2 +-A limit-ntp-186 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-96 +-A limit-ntp-186 -j ACCEPT +-A limit-ntp-188 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-98 +-A limit-ntp-188 -j ACCEPT +-A limit-ntp-189 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-99 +-A limit-ntp-19 -m recent --name limit-ntp-19 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-190 -m recent --name limit-ntp-190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-100 +-A limit-ntp-190 -m recent --name limit-ntp-190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-191 -m recent --name limit-ntp-191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-101 +-A limit-ntp-191 -m recent --name limit-ntp-191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-192 -m recent --name limit-ntp-192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-102 +-A limit-ntp-192 -m limit --limit 1/second -j LOG +-A limit-ntp-192 -m recent --name limit-ntp-192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-193 -m recent --name limit-ntp-193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-103 +-A limit-ntp-193 -m recent --name limit-ntp-193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-194 -m recent --name limit-ntp-194 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-104 +-A limit-ntp-194 -j TEE --gateway fc00::2 +-A limit-ntp-194 -m recent --name limit-ntp-194 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-105 +-A limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-196 -m recent --name limit-ntp-196 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-106 +-A limit-ntp-196 -m recent --name limit-ntp-196 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-197 -m recent --name limit-ntp-197 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-107 +-A limit-ntp-197 -m recent --name limit-ntp-197 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-198 -m recent --name limit-ntp-198 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-108 +-A limit-ntp-198 -m recent --name limit-ntp-198 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-199 -m recent --name limit-ntp-199 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-109 +-A limit-ntp-2 -m recent --name limit-ntp-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-2 +-A limit-ntp-2 -m limit --limit 1/second -j LOG +-A limit-ntp-2 -m recent --name limit-ntp-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-110 +-A limit-ntp-200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-201 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-111 +-A limit-ntp-201 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-112 +-A limit-ntp-202 -m limit --limit 1/second -j LOG +-A limit-ntp-202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-113 +-A limit-ntp-203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-114 +-A limit-ntp-204 -j TEE --gateway fc00::2 +-A limit-ntp-204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-205 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-115 +-A limit-ntp-205 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-206 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-116 +-A limit-ntp-206 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-207 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-117 +-A limit-ntp-207 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-208 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-118 +-A limit-ntp-208 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-209 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-119 +-A limit-ntp-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-210 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-120 +-A limit-ntp-210 -j ACCEPT +-A limit-ntp-212 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-122 +-A limit-ntp-212 -m limit --limit 1/second -j LOG +-A limit-ntp-212 -j ACCEPT +-A limit-ntp-213 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-123 +-A limit-ntp-213 -m limit --limit 1/second -j LOG +-A limit-ntp-214 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-124 +-A limit-ntp-214 -j TEE --gateway fc00::2 +-A limit-ntp-214 -j ACCEPT +-A limit-ntp-215 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-125 +-A limit-ntp-215 -j TEE --gateway fc00::2 +-A limit-ntp-216 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-126 +-A limit-ntp-216 -j ACCEPT +-A limit-ntp-218 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-128 +-A limit-ntp-218 -j ACCEPT +-A limit-ntp-219 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-129 +-A limit-ntp-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-22 -m limit --limit 1/second -j LOG +-A limit-ntp-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-220 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-130 +-A limit-ntp-220 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-221 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-131 +-A limit-ntp-221 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-222 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-132 +-A limit-ntp-222 -m limit --limit 1/second -j LOG +-A limit-ntp-222 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-223 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-133 +-A limit-ntp-223 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-224 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-134 +-A limit-ntp-224 -j TEE --gateway fc00::2 +-A limit-ntp-224 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-225 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-135 +-A limit-ntp-225 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-226 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-136 +-A limit-ntp-226 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-227 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-137 +-A limit-ntp-227 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-228 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-138 +-A limit-ntp-228 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-229 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-139 +-A limit-ntp-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-230 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-140 +-A limit-ntp-230 -j ACCEPT +-A limit-ntp-232 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-142 +-A limit-ntp-232 -m limit --limit 1/second -j LOG +-A limit-ntp-232 -j ACCEPT +-A limit-ntp-233 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-143 +-A limit-ntp-233 -m limit --limit 1/second -j LOG +-A limit-ntp-234 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-144 +-A limit-ntp-234 -j TEE --gateway fc00::2 +-A limit-ntp-234 -j ACCEPT +-A limit-ntp-235 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-145 +-A limit-ntp-235 -j TEE --gateway fc00::2 +-A limit-ntp-236 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-146 +-A limit-ntp-236 -j ACCEPT +-A limit-ntp-238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-148 +-A limit-ntp-238 -j ACCEPT +-A limit-ntp-239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-149 +-A limit-ntp-24 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-24 -j TEE --gateway fc00::2 +-A limit-ntp-24 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-240 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-150 +-A limit-ntp-240 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-241 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-151 +-A limit-ntp-241 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-242 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-152 +-A limit-ntp-242 -m limit --limit 1/second -j LOG +-A limit-ntp-242 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-243 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-153 +-A limit-ntp-243 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-244 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-154 +-A limit-ntp-244 -j TEE --gateway fc00::2 +-A limit-ntp-244 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-245 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-155 +-A limit-ntp-245 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-246 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-156 +-A limit-ntp-246 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-247 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-157 +-A limit-ntp-247 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-248 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-158 +-A limit-ntp-248 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-249 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-159 +-A limit-ntp-25 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-25 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-250 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-160 +-A limit-ntp-250 -j ACCEPT +-A limit-ntp-252 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-162 +-A limit-ntp-252 -m limit --limit 1/second -j LOG +-A limit-ntp-252 -j ACCEPT +-A limit-ntp-253 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-163 +-A limit-ntp-253 -m limit --limit 1/second -j LOG +-A limit-ntp-254 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-164 +-A limit-ntp-254 -j TEE --gateway fc00::2 +-A limit-ntp-254 -j ACCEPT +-A limit-ntp-255 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-165 +-A limit-ntp-255 -j TEE --gateway fc00::2 +-A limit-ntp-256 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-166 +-A limit-ntp-256 -j ACCEPT +-A limit-ntp-258 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-168 +-A limit-ntp-258 -j ACCEPT +-A limit-ntp-259 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-169 +-A limit-ntp-26 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-26 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-260 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-170 +-A limit-ntp-260 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-261 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-171 +-A limit-ntp-261 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-262 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-172 +-A limit-ntp-262 -m limit --limit 1/second -j LOG +-A limit-ntp-262 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-263 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-173 +-A limit-ntp-263 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-264 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-174 +-A limit-ntp-264 -j TEE --gateway fc00::2 +-A limit-ntp-264 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-265 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-175 +-A limit-ntp-265 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-266 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-176 +-A limit-ntp-266 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-267 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-177 +-A limit-ntp-267 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-268 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-178 +-A limit-ntp-268 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-269 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-179 +-A limit-ntp-27 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-27 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-270 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-180 +-A limit-ntp-270 -j ACCEPT +-A limit-ntp-272 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-182 +-A limit-ntp-272 -m limit --limit 1/second -j LOG +-A limit-ntp-272 -j ACCEPT +-A limit-ntp-273 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-183 +-A limit-ntp-273 -m limit --limit 1/second -j LOG +-A limit-ntp-274 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-184 +-A limit-ntp-274 -j TEE --gateway fc00::2 +-A limit-ntp-274 -j ACCEPT +-A limit-ntp-275 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-185 +-A limit-ntp-275 -j TEE --gateway fc00::2 +-A limit-ntp-276 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-186 +-A limit-ntp-276 -j ACCEPT +-A limit-ntp-278 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-188 +-A limit-ntp-278 -j ACCEPT +-A limit-ntp-279 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-189 +-A limit-ntp-28 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-28 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-280 -m recent --name limit-ntp-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-280 -m recent --name limit-ntp-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-281 -m recent --name limit-ntp-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-281 -m recent --name limit-ntp-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-282 -m recent --name limit-ntp-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-282 -m limit --limit 1/second -j LOG +-A limit-ntp-282 -m recent --name limit-ntp-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-283 -m recent --name limit-ntp-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-283 -m recent --name limit-ntp-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-284 -m recent --name limit-ntp-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-284 -j TEE --gateway fc00::2 +-A limit-ntp-284 -m recent --name limit-ntp-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-286 -m recent --name limit-ntp-286 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-286 -m recent --name limit-ntp-286 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-287 -m recent --name limit-ntp-287 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-287 -m recent --name limit-ntp-287 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-288 -m recent --name limit-ntp-288 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-288 -m recent --name limit-ntp-288 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-289 -m recent --name limit-ntp-289 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-29 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-292 -m limit --limit 1/second -j LOG +-A limit-ntp-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-294 -j TEE --gateway fc00::2 +-A limit-ntp-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-298 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-298 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-299 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-3 -m recent --name limit-ntp-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-3 +-A limit-ntp-3 -m recent --name limit-ntp-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-30 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-30 -j ACCEPT +-A limit-ntp-300 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-300 -j ACCEPT +-A limit-ntp-302 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-302 -m limit --limit 1/second -j LOG +-A limit-ntp-302 -j ACCEPT +-A limit-ntp-303 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-303 -m limit --limit 1/second -j LOG +-A limit-ntp-304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-304 -j TEE --gateway fc00::2 +-A limit-ntp-304 -j ACCEPT +-A limit-ntp-305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-305 -j TEE --gateway fc00::2 +-A limit-ntp-306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-306 -j ACCEPT +-A limit-ntp-308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-308 -j ACCEPT +-A limit-ntp-309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-310 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-310 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-311 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-311 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-312 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-312 -m limit --limit 1/second -j LOG +-A limit-ntp-312 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-313 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-313 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-314 -j TEE --gateway fc00::2 +-A limit-ntp-314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-319 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-32 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-32 -m limit --limit 1/second -j LOG +-A limit-ntp-32 -j ACCEPT +-A limit-ntp-320 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-320 -j ACCEPT +-A limit-ntp-322 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-322 -m limit --limit 1/second -j LOG +-A limit-ntp-322 -j ACCEPT +-A limit-ntp-323 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-323 -m limit --limit 1/second -j LOG +-A limit-ntp-324 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-324 -j TEE --gateway fc00::2 +-A limit-ntp-324 -j ACCEPT +-A limit-ntp-325 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-325 -j TEE --gateway fc00::2 +-A limit-ntp-326 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-326 -j ACCEPT +-A limit-ntp-328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-328 -j ACCEPT +-A limit-ntp-329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-33 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-33 -m limit --limit 1/second -j LOG +-A limit-ntp-330 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-330 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-331 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-331 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-332 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-332 -m limit --limit 1/second -j LOG +-A limit-ntp-332 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-333 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-333 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-334 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-334 -j TEE --gateway fc00::2 +-A limit-ntp-334 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-335 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-335 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-336 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-336 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-337 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-337 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-338 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-338 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-339 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-34 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-34 -j TEE --gateway fc00::2 +-A limit-ntp-34 -j ACCEPT +-A limit-ntp-340 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-340 -j ACCEPT +-A limit-ntp-342 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-342 -m limit --limit 1/second -j LOG +-A limit-ntp-342 -j ACCEPT +-A limit-ntp-343 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-343 -m limit --limit 1/second -j LOG +-A limit-ntp-344 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-344 -j TEE --gateway fc00::2 +-A limit-ntp-344 -j ACCEPT +-A limit-ntp-345 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-345 -j TEE --gateway fc00::2 +-A limit-ntp-346 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-346 -j ACCEPT +-A limit-ntp-348 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-348 -j ACCEPT +-A limit-ntp-349 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-35 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-35 -j TEE --gateway fc00::2 +-A limit-ntp-350 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-350 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-351 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-351 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-352 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-352 -m limit --limit 1/second -j LOG +-A limit-ntp-352 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-353 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-353 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-354 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-354 -j TEE --gateway fc00::2 +-A limit-ntp-354 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-355 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-355 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-356 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-356 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-357 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-357 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-358 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-358 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-359 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-36 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-36 -j ACCEPT +-A limit-ntp-360 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-360 -j ACCEPT +-A limit-ntp-362 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-362 -m limit --limit 1/second -j LOG +-A limit-ntp-362 -j ACCEPT +-A limit-ntp-363 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-363 -m limit --limit 1/second -j LOG +-A limit-ntp-364 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-364 -j TEE --gateway fc00::2 +-A limit-ntp-364 -j ACCEPT +-A limit-ntp-365 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-365 -j TEE --gateway fc00::2 +-A limit-ntp-366 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-366 -j ACCEPT +-A limit-ntp-368 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-368 -j ACCEPT +-A limit-ntp-369 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-370 -m recent --name limit-ntp-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-190 +-A limit-ntp-370 -m recent --name limit-ntp-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-371 -m recent --name limit-ntp-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-191 +-A limit-ntp-371 -m recent --name limit-ntp-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-372 -m recent --name limit-ntp-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-192 +-A limit-ntp-372 -m limit --limit 1/second -j LOG +-A limit-ntp-372 -m recent --name limit-ntp-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-373 -m recent --name limit-ntp-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-193 +-A limit-ntp-373 -m recent --name limit-ntp-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-374 -m recent --name limit-ntp-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-194 +-A limit-ntp-374 -j TEE --gateway fc00::2 +-A limit-ntp-374 -m recent --name limit-ntp-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-195 +-A limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-376 -m recent --name limit-ntp-376 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-196 +-A limit-ntp-376 -m recent --name limit-ntp-376 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-377 -m recent --name limit-ntp-377 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-197 +-A limit-ntp-377 -m recent --name limit-ntp-377 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-378 -m recent --name limit-ntp-378 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-198 +-A limit-ntp-378 -m recent --name limit-ntp-378 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-379 -m recent --name limit-ntp-379 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-199 +-A limit-ntp-38 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-38 -j ACCEPT +-A limit-ntp-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-200 +-A limit-ntp-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-201 +-A limit-ntp-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-202 +-A limit-ntp-382 -m limit --limit 1/second -j LOG +-A limit-ntp-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-203 +-A limit-ntp-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-204 +-A limit-ntp-384 -j TEE --gateway fc00::2 +-A limit-ntp-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-205 +-A limit-ntp-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-206 +-A limit-ntp-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-207 +-A limit-ntp-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-208 +-A limit-ntp-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-389 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-209 +-A limit-ntp-39 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-390 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-210 +-A limit-ntp-390 -j ACCEPT +-A limit-ntp-392 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-212 +-A limit-ntp-392 -m limit --limit 1/second -j LOG +-A limit-ntp-392 -j ACCEPT +-A limit-ntp-393 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-213 +-A limit-ntp-393 -m limit --limit 1/second -j LOG +-A limit-ntp-394 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-214 +-A limit-ntp-394 -j TEE --gateway fc00::2 +-A limit-ntp-394 -j ACCEPT +-A limit-ntp-395 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-215 +-A limit-ntp-395 -j TEE --gateway fc00::2 +-A limit-ntp-396 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-216 +-A limit-ntp-396 -j ACCEPT +-A limit-ntp-398 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-218 +-A limit-ntp-398 -j ACCEPT +-A limit-ntp-399 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-219 +-A limit-ntp-4 -m recent --name limit-ntp-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-4 +-A limit-ntp-4 -j TEE --gateway fc00::2 +-A limit-ntp-4 -m recent --name limit-ntp-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-40 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-40 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-400 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-220 +-A limit-ntp-400 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-401 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-221 +-A limit-ntp-401 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-402 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-222 +-A limit-ntp-402 -m limit --limit 1/second -j LOG +-A limit-ntp-402 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-403 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-223 +-A limit-ntp-403 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-404 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-224 +-A limit-ntp-404 -j TEE --gateway fc00::2 +-A limit-ntp-404 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-405 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-225 +-A limit-ntp-405 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-406 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-226 +-A limit-ntp-406 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-407 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-227 +-A limit-ntp-407 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-408 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-228 +-A limit-ntp-408 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-409 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-229 +-A limit-ntp-41 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-41 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-410 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-230 +-A limit-ntp-410 -j ACCEPT +-A limit-ntp-412 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-232 +-A limit-ntp-412 -m limit --limit 1/second -j LOG +-A limit-ntp-412 -j ACCEPT +-A limit-ntp-413 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-233 +-A limit-ntp-413 -m limit --limit 1/second -j LOG +-A limit-ntp-414 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-234 +-A limit-ntp-414 -j TEE --gateway fc00::2 +-A limit-ntp-414 -j ACCEPT +-A limit-ntp-415 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-235 +-A limit-ntp-415 -j TEE --gateway fc00::2 +-A limit-ntp-416 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-236 +-A limit-ntp-416 -j ACCEPT +-A limit-ntp-418 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-238 +-A limit-ntp-418 -j ACCEPT +-A limit-ntp-419 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-239 +-A limit-ntp-42 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-42 -m limit --limit 1/second -j LOG +-A limit-ntp-42 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-420 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-240 +-A limit-ntp-420 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-421 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-241 +-A limit-ntp-421 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-422 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-242 +-A limit-ntp-422 -m limit --limit 1/second -j LOG +-A limit-ntp-422 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-423 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-243 +-A limit-ntp-423 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-424 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-244 +-A limit-ntp-424 -j TEE --gateway fc00::2 +-A limit-ntp-424 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-425 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-245 +-A limit-ntp-425 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-426 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-246 +-A limit-ntp-426 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-427 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-247 +-A limit-ntp-427 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-428 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-248 +-A limit-ntp-428 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-429 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-249 +-A limit-ntp-43 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-43 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-430 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-250 +-A limit-ntp-430 -j ACCEPT +-A limit-ntp-432 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-252 +-A limit-ntp-432 -m limit --limit 1/second -j LOG +-A limit-ntp-432 -j ACCEPT +-A limit-ntp-433 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-253 +-A limit-ntp-433 -m limit --limit 1/second -j LOG +-A limit-ntp-434 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-254 +-A limit-ntp-434 -j TEE --gateway fc00::2 +-A limit-ntp-434 -j ACCEPT +-A limit-ntp-435 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-255 +-A limit-ntp-435 -j TEE --gateway fc00::2 +-A limit-ntp-436 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-256 +-A limit-ntp-436 -j ACCEPT +-A limit-ntp-438 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-258 +-A limit-ntp-438 -j ACCEPT +-A limit-ntp-439 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-259 +-A limit-ntp-44 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-44 -j TEE --gateway fc00::2 +-A limit-ntp-44 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-440 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-260 +-A limit-ntp-440 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-441 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-261 +-A limit-ntp-441 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-442 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-262 +-A limit-ntp-442 -m limit --limit 1/second -j LOG +-A limit-ntp-442 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-443 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-263 +-A limit-ntp-443 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-444 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-264 +-A limit-ntp-444 -j TEE --gateway fc00::2 +-A limit-ntp-444 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-445 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-265 +-A limit-ntp-445 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-446 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-266 +-A limit-ntp-446 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-447 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-267 +-A limit-ntp-447 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-448 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-268 +-A limit-ntp-448 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-449 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-269 +-A limit-ntp-45 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-45 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-450 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-270 +-A limit-ntp-450 -j ACCEPT +-A limit-ntp-452 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-272 +-A limit-ntp-452 -m limit --limit 1/second -j LOG +-A limit-ntp-452 -j ACCEPT +-A limit-ntp-453 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-273 +-A limit-ntp-453 -m limit --limit 1/second -j LOG +-A limit-ntp-454 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-274 +-A limit-ntp-454 -j TEE --gateway fc00::2 +-A limit-ntp-454 -j ACCEPT +-A limit-ntp-455 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-275 +-A limit-ntp-455 -j TEE --gateway fc00::2 +-A limit-ntp-456 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-276 +-A limit-ntp-456 -j ACCEPT +-A limit-ntp-458 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-278 +-A limit-ntp-458 -j ACCEPT +-A limit-ntp-459 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-279 +-A limit-ntp-46 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-46 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-460 -m recent --name limit-ntp-460 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-460 -m recent --name limit-ntp-460 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-461 -m recent --name limit-ntp-461 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-461 -m recent --name limit-ntp-461 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-462 -m recent --name limit-ntp-462 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-462 -m limit --limit 1/second -j LOG +-A limit-ntp-462 -m recent --name limit-ntp-462 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-463 -m recent --name limit-ntp-463 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-463 -m recent --name limit-ntp-463 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-464 -m recent --name limit-ntp-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-464 -j TEE --gateway fc00::2 +-A limit-ntp-464 -m recent --name limit-ntp-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-466 -m recent --name limit-ntp-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-466 -m recent --name limit-ntp-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-467 -m recent --name limit-ntp-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-467 -m recent --name limit-ntp-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-468 -m recent --name limit-ntp-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-468 -m recent --name limit-ntp-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-469 -m recent --name limit-ntp-469 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-47 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-47 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-472 -m limit --limit 1/second -j LOG +-A limit-ntp-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-474 -j TEE --gateway fc00::2 +-A limit-ntp-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-476 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-476 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-477 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-477 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-48 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-48 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-480 -j ACCEPT +-A limit-ntp-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-482 -m limit --limit 1/second -j LOG +-A limit-ntp-482 -j ACCEPT +-A limit-ntp-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-483 -m limit --limit 1/second -j LOG +-A limit-ntp-484 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-484 -j TEE --gateway fc00::2 +-A limit-ntp-484 -j ACCEPT +-A limit-ntp-485 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-485 -j TEE --gateway fc00::2 +-A limit-ntp-486 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-486 -j ACCEPT +-A limit-ntp-488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-488 -j ACCEPT +-A limit-ntp-489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-49 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-492 -m limit --limit 1/second -j LOG +-A limit-ntp-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-494 -j TEE --gateway fc00::2 +-A limit-ntp-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-499 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-5 +-A limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-50 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-50 -j ACCEPT +-A limit-ntp-500 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-500 -j ACCEPT +-A limit-ntp-502 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-502 -m limit --limit 1/second -j LOG +-A limit-ntp-502 -j ACCEPT +-A limit-ntp-503 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-503 -m limit --limit 1/second -j LOG +-A limit-ntp-504 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-504 -j TEE --gateway fc00::2 +-A limit-ntp-504 -j ACCEPT +-A limit-ntp-505 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-505 -j TEE --gateway fc00::2 +-A limit-ntp-506 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-506 -j ACCEPT +-A limit-ntp-508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-508 -j ACCEPT +-A limit-ntp-509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-510 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-510 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-511 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-511 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-512 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-512 -m limit --limit 1/second -j LOG +-A limit-ntp-512 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-513 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-513 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-514 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-514 -j TEE --gateway fc00::2 +-A limit-ntp-514 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-515 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-515 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-516 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-516 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-517 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-517 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-518 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-518 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-519 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-52 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-52 -m limit --limit 1/second -j LOG +-A limit-ntp-52 -j ACCEPT +-A limit-ntp-520 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-520 -j ACCEPT +-A limit-ntp-522 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-522 -m limit --limit 1/second -j LOG +-A limit-ntp-522 -j ACCEPT +-A limit-ntp-523 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-523 -m limit --limit 1/second -j LOG +-A limit-ntp-524 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-524 -j TEE --gateway fc00::2 +-A limit-ntp-524 -j ACCEPT +-A limit-ntp-525 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-525 -j TEE --gateway fc00::2 +-A limit-ntp-526 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-526 -j ACCEPT +-A limit-ntp-528 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-528 -j ACCEPT +-A limit-ntp-529 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-53 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-53 -m limit --limit 1/second -j LOG +-A limit-ntp-530 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-530 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-531 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-531 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-532 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-532 -m limit --limit 1/second -j LOG +-A limit-ntp-532 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-533 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-533 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-534 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-534 -j TEE --gateway fc00::2 +-A limit-ntp-534 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-535 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-535 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-536 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-536 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-537 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-537 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-538 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-538 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-539 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-54 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-54 -j TEE --gateway fc00::2 +-A limit-ntp-54 -j ACCEPT +-A limit-ntp-540 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-540 -j ACCEPT +-A limit-ntp-542 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-542 -m limit --limit 1/second -j LOG +-A limit-ntp-542 -j ACCEPT +-A limit-ntp-543 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-543 -m limit --limit 1/second -j LOG +-A limit-ntp-544 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-544 -j TEE --gateway fc00::2 +-A limit-ntp-544 -j ACCEPT +-A limit-ntp-545 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-545 -j TEE --gateway fc00::2 +-A limit-ntp-546 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-546 -j ACCEPT +-A limit-ntp-548 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-548 -j ACCEPT +-A limit-ntp-549 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-55 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-55 -j TEE --gateway fc00::2 +-A limit-ntp-550 -m recent --name limit-ntp-550 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-280 +-A limit-ntp-550 -m recent --name limit-ntp-550 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-551 -m recent --name limit-ntp-551 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-281 +-A limit-ntp-551 -m recent --name limit-ntp-551 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-552 -m recent --name limit-ntp-552 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-282 +-A limit-ntp-552 -m limit --limit 1/second -j LOG +-A limit-ntp-552 -m recent --name limit-ntp-552 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-553 -m recent --name limit-ntp-553 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-283 +-A limit-ntp-553 -m recent --name limit-ntp-553 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-554 -m recent --name limit-ntp-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-284 +-A limit-ntp-554 -j TEE --gateway fc00::2 +-A limit-ntp-554 -m recent --name limit-ntp-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-285 +-A limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-556 -m recent --name limit-ntp-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-286 +-A limit-ntp-556 -m recent --name limit-ntp-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-557 -m recent --name limit-ntp-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-287 +-A limit-ntp-557 -m recent --name limit-ntp-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-558 -m recent --name limit-ntp-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-288 +-A limit-ntp-558 -m recent --name limit-ntp-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-559 -m recent --name limit-ntp-559 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-289 +-A limit-ntp-56 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-56 -j ACCEPT +-A limit-ntp-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-290 +-A limit-ntp-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-291 +-A limit-ntp-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-292 +-A limit-ntp-562 -m limit --limit 1/second -j LOG +-A limit-ntp-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-293 +-A limit-ntp-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-294 +-A limit-ntp-564 -j TEE --gateway fc00::2 +-A limit-ntp-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-295 +-A limit-ntp-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-296 +-A limit-ntp-566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-297 +-A limit-ntp-567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-298 +-A limit-ntp-568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-569 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-299 +-A limit-ntp-570 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-300 +-A limit-ntp-570 -j ACCEPT +-A limit-ntp-572 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-302 +-A limit-ntp-572 -m limit --limit 1/second -j LOG +-A limit-ntp-572 -j ACCEPT +-A limit-ntp-573 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-303 +-A limit-ntp-573 -m limit --limit 1/second -j LOG +-A limit-ntp-574 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-304 +-A limit-ntp-574 -j TEE --gateway fc00::2 +-A limit-ntp-574 -j ACCEPT +-A limit-ntp-575 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-305 +-A limit-ntp-575 -j TEE --gateway fc00::2 +-A limit-ntp-576 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-306 +-A limit-ntp-576 -j ACCEPT +-A limit-ntp-578 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-308 +-A limit-ntp-578 -j ACCEPT +-A limit-ntp-579 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-309 +-A limit-ntp-58 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-58 -j ACCEPT +-A limit-ntp-580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-310 +-A limit-ntp-580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-311 +-A limit-ntp-581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-312 +-A limit-ntp-582 -m limit --limit 1/second -j LOG +-A limit-ntp-582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-313 +-A limit-ntp-583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-314 +-A limit-ntp-584 -j TEE --gateway fc00::2 +-A limit-ntp-584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-585 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-315 +-A limit-ntp-585 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-586 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-316 +-A limit-ntp-586 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-587 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-317 +-A limit-ntp-587 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-588 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-318 +-A limit-ntp-588 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-589 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-319 +-A limit-ntp-59 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-590 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-320 +-A limit-ntp-590 -j ACCEPT +-A limit-ntp-592 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-322 +-A limit-ntp-592 -m limit --limit 1/second -j LOG +-A limit-ntp-592 -j ACCEPT +-A limit-ntp-593 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-323 +-A limit-ntp-593 -m limit --limit 1/second -j LOG +-A limit-ntp-594 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-324 +-A limit-ntp-594 -j TEE --gateway fc00::2 +-A limit-ntp-594 -j ACCEPT +-A limit-ntp-595 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-325 +-A limit-ntp-595 -j TEE --gateway fc00::2 +-A limit-ntp-596 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-326 +-A limit-ntp-596 -j ACCEPT +-A limit-ntp-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-328 +-A limit-ntp-598 -j ACCEPT +-A limit-ntp-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-329 +-A limit-ntp-6 -m recent --name limit-ntp-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-6 +-A limit-ntp-6 -m recent --name limit-ntp-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-60 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-60 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-600 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-330 +-A limit-ntp-600 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-601 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-331 +-A limit-ntp-601 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-602 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-332 +-A limit-ntp-602 -m limit --limit 1/second -j LOG +-A limit-ntp-602 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-603 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-333 +-A limit-ntp-603 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-604 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-334 +-A limit-ntp-604 -j TEE --gateway fc00::2 +-A limit-ntp-604 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-605 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-335 +-A limit-ntp-605 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-606 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-336 +-A limit-ntp-606 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-607 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-337 +-A limit-ntp-607 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-608 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-338 +-A limit-ntp-608 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-609 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-339 +-A limit-ntp-61 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-61 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-610 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-340 +-A limit-ntp-610 -j ACCEPT +-A limit-ntp-612 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-342 +-A limit-ntp-612 -m limit --limit 1/second -j LOG +-A limit-ntp-612 -j ACCEPT +-A limit-ntp-613 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-343 +-A limit-ntp-613 -m limit --limit 1/second -j LOG +-A limit-ntp-614 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-344 +-A limit-ntp-614 -j TEE --gateway fc00::2 +-A limit-ntp-614 -j ACCEPT +-A limit-ntp-615 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-345 +-A limit-ntp-615 -j TEE --gateway fc00::2 +-A limit-ntp-616 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-346 +-A limit-ntp-616 -j ACCEPT +-A limit-ntp-618 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-348 +-A limit-ntp-618 -j ACCEPT +-A limit-ntp-619 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-349 +-A limit-ntp-62 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-62 -m limit --limit 1/second -j LOG +-A limit-ntp-62 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-620 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-350 +-A limit-ntp-620 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-621 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-351 +-A limit-ntp-621 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-622 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-352 +-A limit-ntp-622 -m limit --limit 1/second -j LOG +-A limit-ntp-622 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-623 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-353 +-A limit-ntp-623 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-624 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-354 +-A limit-ntp-624 -j TEE --gateway fc00::2 +-A limit-ntp-624 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-625 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-355 +-A limit-ntp-625 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-626 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-356 +-A limit-ntp-626 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-627 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-357 +-A limit-ntp-627 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-628 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-358 +-A limit-ntp-628 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-629 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-359 +-A limit-ntp-63 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-63 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-630 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-360 +-A limit-ntp-630 -j ACCEPT +-A limit-ntp-632 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-362 +-A limit-ntp-632 -m limit --limit 1/second -j LOG +-A limit-ntp-632 -j ACCEPT +-A limit-ntp-633 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-363 +-A limit-ntp-633 -m limit --limit 1/second -j LOG +-A limit-ntp-634 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-364 +-A limit-ntp-634 -j TEE --gateway fc00::2 +-A limit-ntp-634 -j ACCEPT +-A limit-ntp-635 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-365 +-A limit-ntp-635 -j TEE --gateway fc00::2 +-A limit-ntp-636 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-366 +-A limit-ntp-636 -j ACCEPT +-A limit-ntp-638 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-368 +-A limit-ntp-638 -j ACCEPT +-A limit-ntp-639 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-369 +-A limit-ntp-64 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-64 -j TEE --gateway fc00::2 +-A limit-ntp-64 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-640 -m recent --name limit-ntp-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-370 +-A limit-ntp-640 -m recent --name limit-ntp-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-641 -m recent --name limit-ntp-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-371 +-A limit-ntp-641 -m recent --name limit-ntp-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-642 -m recent --name limit-ntp-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-372 +-A limit-ntp-642 -m limit --limit 1/second -j LOG +-A limit-ntp-642 -m recent --name limit-ntp-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-643 -m recent --name limit-ntp-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-373 +-A limit-ntp-643 -m recent --name limit-ntp-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-644 -m recent --name limit-ntp-644 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-374 +-A limit-ntp-644 -j TEE --gateway fc00::2 +-A limit-ntp-644 -m recent --name limit-ntp-644 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-375 +-A limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-646 -m recent --name limit-ntp-646 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-376 +-A limit-ntp-646 -m recent --name limit-ntp-646 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-647 -m recent --name limit-ntp-647 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-377 +-A limit-ntp-647 -m recent --name limit-ntp-647 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-648 -m recent --name limit-ntp-648 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-378 +-A limit-ntp-648 -m recent --name limit-ntp-648 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-649 -m recent --name limit-ntp-649 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-379 +-A limit-ntp-65 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-65 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-380 +-A limit-ntp-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-381 +-A limit-ntp-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-652 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-382 +-A limit-ntp-652 -m limit --limit 1/second -j LOG +-A limit-ntp-652 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-653 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-383 +-A limit-ntp-653 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-654 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-384 +-A limit-ntp-654 -j TEE --gateway fc00::2 +-A limit-ntp-654 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-655 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-385 +-A limit-ntp-655 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-656 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-386 +-A limit-ntp-656 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-657 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-387 +-A limit-ntp-657 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-658 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-388 +-A limit-ntp-658 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-659 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-389 +-A limit-ntp-66 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-66 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-660 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-390 +-A limit-ntp-660 -j ACCEPT +-A limit-ntp-662 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-392 +-A limit-ntp-662 -m limit --limit 1/second -j LOG +-A limit-ntp-662 -j ACCEPT +-A limit-ntp-663 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-393 +-A limit-ntp-663 -m limit --limit 1/second -j LOG +-A limit-ntp-664 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-394 +-A limit-ntp-664 -j TEE --gateway fc00::2 +-A limit-ntp-664 -j ACCEPT +-A limit-ntp-665 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-395 +-A limit-ntp-665 -j TEE --gateway fc00::2 +-A limit-ntp-666 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-396 +-A limit-ntp-666 -j ACCEPT +-A limit-ntp-668 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-398 +-A limit-ntp-668 -j ACCEPT +-A limit-ntp-669 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-399 +-A limit-ntp-67 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-67 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-670 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-400 +-A limit-ntp-670 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-671 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-401 +-A limit-ntp-671 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-672 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-402 +-A limit-ntp-672 -m limit --limit 1/second -j LOG +-A limit-ntp-672 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-673 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-403 +-A limit-ntp-673 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-674 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-404 +-A limit-ntp-674 -j TEE --gateway fc00::2 +-A limit-ntp-674 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-675 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-405 +-A limit-ntp-675 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-676 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-406 +-A limit-ntp-676 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-677 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-407 +-A limit-ntp-677 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-678 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-408 +-A limit-ntp-678 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-679 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-409 +-A limit-ntp-68 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-68 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-680 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-410 +-A limit-ntp-680 -j ACCEPT +-A limit-ntp-682 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-412 +-A limit-ntp-682 -m limit --limit 1/second -j LOG +-A limit-ntp-682 -j ACCEPT +-A limit-ntp-683 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-413 +-A limit-ntp-683 -m limit --limit 1/second -j LOG +-A limit-ntp-684 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-414 +-A limit-ntp-684 -j TEE --gateway fc00::2 +-A limit-ntp-684 -j ACCEPT +-A limit-ntp-685 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-415 +-A limit-ntp-685 -j TEE --gateway fc00::2 +-A limit-ntp-686 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-416 +-A limit-ntp-686 -j ACCEPT +-A limit-ntp-688 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-418 +-A limit-ntp-688 -j ACCEPT +-A limit-ntp-689 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-419 +-A limit-ntp-69 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-690 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-420 +-A limit-ntp-690 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-691 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-421 +-A limit-ntp-691 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-692 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-422 +-A limit-ntp-692 -m limit --limit 1/second -j LOG +-A limit-ntp-692 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-693 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-423 +-A limit-ntp-693 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-694 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-424 +-A limit-ntp-694 -j TEE --gateway fc00::2 +-A limit-ntp-694 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-695 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-425 +-A limit-ntp-695 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-696 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-426 +-A limit-ntp-696 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-697 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-427 +-A limit-ntp-697 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-698 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-428 +-A limit-ntp-698 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-699 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-429 +-A limit-ntp-7 -m recent --name limit-ntp-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-7 +-A limit-ntp-7 -m recent --name limit-ntp-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-70 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-70 -j ACCEPT +-A limit-ntp-700 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-430 +-A limit-ntp-700 -j ACCEPT +-A limit-ntp-702 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-432 +-A limit-ntp-702 -m limit --limit 1/second -j LOG +-A limit-ntp-702 -j ACCEPT +-A limit-ntp-703 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-433 +-A limit-ntp-703 -m limit --limit 1/second -j LOG +-A limit-ntp-704 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-434 +-A limit-ntp-704 -j TEE --gateway fc00::2 +-A limit-ntp-704 -j ACCEPT +-A limit-ntp-705 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-435 +-A limit-ntp-705 -j TEE --gateway fc00::2 +-A limit-ntp-706 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-436 +-A limit-ntp-706 -j ACCEPT +-A limit-ntp-708 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-438 +-A limit-ntp-708 -j ACCEPT +-A limit-ntp-709 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-439 +-A limit-ntp-710 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-440 +-A limit-ntp-710 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-711 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-441 +-A limit-ntp-711 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-712 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-442 +-A limit-ntp-712 -m limit --limit 1/second -j LOG +-A limit-ntp-712 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-713 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-443 +-A limit-ntp-713 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-714 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-444 +-A limit-ntp-714 -j TEE --gateway fc00::2 +-A limit-ntp-714 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-715 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-445 +-A limit-ntp-715 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-716 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-446 +-A limit-ntp-716 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-717 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-447 +-A limit-ntp-717 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-718 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-448 +-A limit-ntp-718 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-719 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-449 +-A limit-ntp-72 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-72 -m limit --limit 1/second -j LOG +-A limit-ntp-72 -j ACCEPT +-A limit-ntp-720 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-450 +-A limit-ntp-720 -j ACCEPT +-A limit-ntp-722 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-452 +-A limit-ntp-722 -m limit --limit 1/second -j LOG +-A limit-ntp-722 -j ACCEPT +-A limit-ntp-723 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-453 +-A limit-ntp-723 -m limit --limit 1/second -j LOG +-A limit-ntp-724 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-454 +-A limit-ntp-724 -j TEE --gateway fc00::2 +-A limit-ntp-724 -j ACCEPT +-A limit-ntp-725 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-455 +-A limit-ntp-725 -j TEE --gateway fc00::2 +-A limit-ntp-726 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-456 +-A limit-ntp-726 -j ACCEPT +-A limit-ntp-728 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-458 +-A limit-ntp-728 -j ACCEPT +-A limit-ntp-729 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-459 +-A limit-ntp-73 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-73 -m limit --limit 1/second -j LOG +-A limit-ntp-730 -m recent --name limit-ntp-730 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-730 -m recent --name limit-ntp-730 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-731 -m recent --name limit-ntp-731 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-731 -m recent --name limit-ntp-731 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-732 -m recent --name limit-ntp-732 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-732 -m limit --limit 1/second -j LOG +-A limit-ntp-732 -m recent --name limit-ntp-732 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-733 -m recent --name limit-ntp-733 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-733 -m recent --name limit-ntp-733 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-734 -m recent --name limit-ntp-734 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-734 -j TEE --gateway fc00::2 +-A limit-ntp-734 -m recent --name limit-ntp-734 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-736 -m recent --name limit-ntp-736 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-736 -m recent --name limit-ntp-736 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-737 -m recent --name limit-ntp-737 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-737 -m recent --name limit-ntp-737 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-738 -m recent --name limit-ntp-738 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-738 -m recent --name limit-ntp-738 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-739 -m recent --name limit-ntp-739 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-74 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-74 -j TEE --gateway fc00::2 +-A limit-ntp-74 -j ACCEPT +-A limit-ntp-740 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-740 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-741 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-741 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-742 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-742 -m limit --limit 1/second -j LOG +-A limit-ntp-742 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-743 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-743 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-744 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-744 -j TEE --gateway fc00::2 +-A limit-ntp-744 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-745 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-745 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-746 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-746 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-747 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-747 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-748 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-748 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-749 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-75 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-75 -j TEE --gateway fc00::2 +-A limit-ntp-750 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-750 -j ACCEPT +-A limit-ntp-752 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-752 -m limit --limit 1/second -j LOG +-A limit-ntp-752 -j ACCEPT +-A limit-ntp-753 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-753 -m limit --limit 1/second -j LOG +-A limit-ntp-754 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-754 -j TEE --gateway fc00::2 +-A limit-ntp-754 -j ACCEPT +-A limit-ntp-755 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-755 -j TEE --gateway fc00::2 +-A limit-ntp-756 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-756 -j ACCEPT +-A limit-ntp-758 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-758 -j ACCEPT +-A limit-ntp-759 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-76 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-76 -j ACCEPT +-A limit-ntp-760 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-760 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-761 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-761 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-762 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-762 -m limit --limit 1/second -j LOG +-A limit-ntp-762 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-763 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-763 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-764 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-764 -j TEE --gateway fc00::2 +-A limit-ntp-764 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-765 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-765 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-766 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-766 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-767 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-767 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-768 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-768 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-769 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-770 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-770 -j ACCEPT +-A limit-ntp-772 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-772 -m limit --limit 1/second -j LOG +-A limit-ntp-772 -j ACCEPT +-A limit-ntp-773 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-773 -m limit --limit 1/second -j LOG +-A limit-ntp-774 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-774 -j TEE --gateway fc00::2 +-A limit-ntp-774 -j ACCEPT +-A limit-ntp-775 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-775 -j TEE --gateway fc00::2 +-A limit-ntp-776 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-776 -j ACCEPT +-A limit-ntp-778 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-778 -j ACCEPT +-A limit-ntp-779 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-78 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-78 -j ACCEPT +-A limit-ntp-780 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-780 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-781 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-781 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-782 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-782 -m limit --limit 1/second -j LOG +-A limit-ntp-782 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-783 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-783 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-784 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-784 -j TEE --gateway fc00::2 +-A limit-ntp-784 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-785 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-785 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-786 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-786 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-787 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-787 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-788 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-788 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-789 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-79 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-790 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-790 -j ACCEPT +-A limit-ntp-792 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-792 -m limit --limit 1/second -j LOG +-A limit-ntp-792 -j ACCEPT +-A limit-ntp-793 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-793 -m limit --limit 1/second -j LOG +-A limit-ntp-794 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-794 -j TEE --gateway fc00::2 +-A limit-ntp-794 -j ACCEPT +-A limit-ntp-795 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-795 -j TEE --gateway fc00::2 +-A limit-ntp-796 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-796 -j ACCEPT +-A limit-ntp-798 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-798 -j ACCEPT +-A limit-ntp-799 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-8 -m recent --name limit-ntp-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-8 +-A limit-ntp-8 -m recent --name limit-ntp-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-80 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-80 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-800 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-800 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-801 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-801 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-802 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-802 -m limit --limit 1/second -j LOG +-A limit-ntp-802 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-803 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-803 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-804 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-804 -j TEE --gateway fc00::2 +-A limit-ntp-804 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-805 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-805 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-806 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-806 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-807 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-807 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-808 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-808 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-809 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-81 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-81 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-810 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-810 -j ACCEPT +-A limit-ntp-812 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-812 -m limit --limit 1/second -j LOG +-A limit-ntp-812 -j ACCEPT +-A limit-ntp-813 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-813 -m limit --limit 1/second -j LOG +-A limit-ntp-814 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-814 -j TEE --gateway fc00::2 +-A limit-ntp-814 -j ACCEPT +-A limit-ntp-815 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-815 -j TEE --gateway fc00::2 +-A limit-ntp-816 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-816 -j ACCEPT +-A limit-ntp-818 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-818 -j ACCEPT +-A limit-ntp-819 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-ntp-82 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-82 -m limit --limit 1/second -j LOG +-A limit-ntp-82 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-820 -m recent --name limit-ntp-820 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-460 +-A limit-ntp-820 -m recent --name limit-ntp-820 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-821 -m recent --name limit-ntp-821 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-461 +-A limit-ntp-821 -m recent --name limit-ntp-821 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-822 -m recent --name limit-ntp-822 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-462 +-A limit-ntp-822 -m limit --limit 1/second -j LOG +-A limit-ntp-822 -m recent --name limit-ntp-822 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-823 -m recent --name limit-ntp-823 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-463 +-A limit-ntp-823 -m recent --name limit-ntp-823 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-824 -m recent --name limit-ntp-824 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-464 +-A limit-ntp-824 -j TEE --gateway fc00::2 +-A limit-ntp-824 -m recent --name limit-ntp-824 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-465 +-A limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-826 -m recent --name limit-ntp-826 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-466 +-A limit-ntp-826 -m recent --name limit-ntp-826 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-827 -m recent --name limit-ntp-827 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-467 +-A limit-ntp-827 -m recent --name limit-ntp-827 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-828 -m recent --name limit-ntp-828 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-468 +-A limit-ntp-828 -m recent --name limit-ntp-828 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-829 -m recent --name limit-ntp-829 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-469 +-A limit-ntp-83 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-83 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-830 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-470 +-A limit-ntp-830 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-831 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-471 +-A limit-ntp-831 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-832 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-472 +-A limit-ntp-832 -m limit --limit 1/second -j LOG +-A limit-ntp-832 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-833 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-473 +-A limit-ntp-833 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-834 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-474 +-A limit-ntp-834 -j TEE --gateway fc00::2 +-A limit-ntp-834 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-835 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-475 +-A limit-ntp-835 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-476 +-A limit-ntp-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-477 +-A limit-ntp-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-478 +-A limit-ntp-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-479 +-A limit-ntp-84 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-84 -j TEE --gateway fc00::2 +-A limit-ntp-84 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-480 +-A limit-ntp-840 -j ACCEPT +-A limit-ntp-842 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-482 +-A limit-ntp-842 -m limit --limit 1/second -j LOG +-A limit-ntp-842 -j ACCEPT +-A limit-ntp-843 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-483 +-A limit-ntp-843 -m limit --limit 1/second -j LOG +-A limit-ntp-844 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-484 +-A limit-ntp-844 -j TEE --gateway fc00::2 +-A limit-ntp-844 -j ACCEPT +-A limit-ntp-845 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-485 +-A limit-ntp-845 -j TEE --gateway fc00::2 +-A limit-ntp-846 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-486 +-A limit-ntp-846 -j ACCEPT +-A limit-ntp-848 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-488 +-A limit-ntp-848 -j ACCEPT +-A limit-ntp-849 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-489 +-A limit-ntp-85 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-85 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-490 +-A limit-ntp-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-491 +-A limit-ntp-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-492 +-A limit-ntp-852 -m limit --limit 1/second -j LOG +-A limit-ntp-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-493 +-A limit-ntp-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-ntp-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-494 +-A limit-ntp-854 -j TEE --gateway fc00::2 +-A limit-ntp-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-495 +-A limit-ntp-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-ntp-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-496 +-A limit-ntp-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-497 +-A limit-ntp-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-ntp-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-498 +-A limit-ntp-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-ntp-859 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-499 +-A limit-ntp-86 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-86 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-860 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-500 +-A limit-ntp-860 -j ACCEPT +-A limit-ntp-862 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-502 +-A limit-ntp-862 -m limit --limit 1/second -j LOG +-A limit-ntp-862 -j ACCEPT +-A limit-ntp-863 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-503 +-A limit-ntp-863 -m limit --limit 1/second -j LOG +-A limit-ntp-864 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-504 +-A limit-ntp-864 -j TEE --gateway fc00::2 +-A limit-ntp-864 -j ACCEPT +-A limit-ntp-865 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-505 +-A limit-ntp-865 -j TEE --gateway fc00::2 +-A limit-ntp-866 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-506 +-A limit-ntp-866 -j ACCEPT +-A limit-ntp-868 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-508 +-A limit-ntp-868 -j ACCEPT +-A limit-ntp-869 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-509 +-A limit-ntp-87 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-87 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-870 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-510 +-A limit-ntp-870 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-871 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-511 +-A limit-ntp-871 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-872 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-512 +-A limit-ntp-872 -m limit --limit 1/second -j LOG +-A limit-ntp-872 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-873 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-513 +-A limit-ntp-873 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-874 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-514 +-A limit-ntp-874 -j TEE --gateway fc00::2 +-A limit-ntp-874 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-875 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-515 +-A limit-ntp-875 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-876 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-516 +-A limit-ntp-876 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-877 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-517 +-A limit-ntp-877 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-ntp-878 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-518 +-A limit-ntp-878 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-ntp-879 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-519 +-A limit-ntp-88 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-88 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-880 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-520 +-A limit-ntp-880 -j ACCEPT +-A limit-ntp-882 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-522 +-A limit-ntp-882 -m limit --limit 1/second -j LOG +-A limit-ntp-882 -j ACCEPT +-A limit-ntp-883 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-523 +-A limit-ntp-883 -m limit --limit 1/second -j LOG +-A limit-ntp-884 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-524 +-A limit-ntp-884 -j TEE --gateway fc00::2 +-A limit-ntp-884 -j ACCEPT +-A limit-ntp-885 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-525 +-A limit-ntp-885 -j TEE --gateway fc00::2 +-A limit-ntp-886 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-526 +-A limit-ntp-886 -j ACCEPT +-A limit-ntp-888 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-528 +-A limit-ntp-888 -j ACCEPT +-A limit-ntp-889 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-529 +-A limit-ntp-89 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-890 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-530 +-A limit-ntp-890 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-891 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-531 +-A limit-ntp-891 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-892 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-532 +-A limit-ntp-892 -m limit --limit 1/second -j LOG +-A limit-ntp-892 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-893 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-533 +-A limit-ntp-893 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-ntp-894 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-534 +-A limit-ntp-894 -j TEE --gateway fc00::2 +-A limit-ntp-894 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-895 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-535 +-A limit-ntp-895 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-ntp-896 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-536 +-A limit-ntp-896 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-897 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-537 +-A limit-ntp-897 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-ntp-898 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-538 +-A limit-ntp-898 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-ntp-899 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-539 +-A limit-ntp-9 -m recent --name limit-ntp-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-9 +-A limit-ntp-90 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-90 -j ACCEPT +-A limit-ntp-900 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-540 +-A limit-ntp-900 -j ACCEPT +-A limit-ntp-902 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-542 +-A limit-ntp-902 -m limit --limit 1/second -j LOG +-A limit-ntp-902 -j ACCEPT +-A limit-ntp-903 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-543 +-A limit-ntp-903 -m limit --limit 1/second -j LOG +-A limit-ntp-904 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-544 +-A limit-ntp-904 -j TEE --gateway fc00::2 +-A limit-ntp-904 -j ACCEPT +-A limit-ntp-905 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-545 +-A limit-ntp-905 -j TEE --gateway fc00::2 +-A limit-ntp-906 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-546 +-A limit-ntp-906 -j ACCEPT +-A limit-ntp-908 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-548 +-A limit-ntp-908 -j ACCEPT +-A limit-ntp-909 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-549 +-A limit-ntp-910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-910 -j ACCEPT +-A limit-ntp-910 -m limit --limit 1/second -j LOG +-A limit-ntp-910 -j DROP +-A limit-ntp-911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-911 -j RETURN +-A limit-ntp-911 -m limit --limit 1/second -j LOG +-A limit-ntp-911 -j DROP +-A limit-ntp-912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-912 -j logaccept-ntp-0 +-A limit-ntp-912 -m limit --limit 1/second -j LOG +-A limit-ntp-912 -j DROP +-A limit-ntp-913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-913 -j logaccept-ntp-1 +-A limit-ntp-913 -m limit --limit 1/second -j LOG +-A limit-ntp-913 -j DROP +-A limit-ntp-914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-914 -j ACCEPT +-A limit-ntp-914 -m limit --limit 1/second -j LOG +-A limit-ntp-914 -j DROP +-A limit-ntp-915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-915 -j logaccept-ntp-2 +-A limit-ntp-915 -m limit --limit 1/second -j LOG +-A limit-ntp-915 -j DROP +-A limit-ntp-916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-916 -j ACCEPT +-A limit-ntp-916 -j DROP +-A limit-ntp-917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-917 -j RETURN +-A limit-ntp-917 -j DROP +-A limit-ntp-918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-918 -j logaccept-ntp-3 +-A limit-ntp-918 -j DROP +-A limit-ntp-919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-919 -j logaccept-ntp-4 +-A limit-ntp-919 -j DROP +-A limit-ntp-92 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-92 -m limit --limit 1/second -j LOG +-A limit-ntp-92 -j ACCEPT +-A limit-ntp-920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-920 -j ACCEPT +-A limit-ntp-920 -j DROP +-A limit-ntp-921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-921 -j logaccept-ntp-5 +-A limit-ntp-921 -j DROP +-A limit-ntp-922 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-922 -j ACCEPT +-A limit-ntp-922 -m limit --limit 1/second -j LOG +-A limit-ntp-922 -j DROP +-A limit-ntp-923 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-923 -j RETURN +-A limit-ntp-923 -m limit --limit 1/second -j LOG +-A limit-ntp-923 -j DROP +-A limit-ntp-924 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-924 -j logaccept-ntp-6 +-A limit-ntp-924 -m limit --limit 1/second -j LOG +-A limit-ntp-924 -j DROP +-A limit-ntp-925 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-925 -j logaccept-ntp-7 +-A limit-ntp-925 -m limit --limit 1/second -j LOG +-A limit-ntp-925 -j DROP +-A limit-ntp-926 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-926 -j ACCEPT +-A limit-ntp-926 -m limit --limit 1/second -j LOG +-A limit-ntp-926 -j DROP +-A limit-ntp-927 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-927 -j logaccept-ntp-8 +-A limit-ntp-927 -m limit --limit 1/second -j LOG +-A limit-ntp-927 -j DROP +-A limit-ntp-928 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-928 -j ACCEPT +-A limit-ntp-928 -j TEE --gateway fc00::2 +-A limit-ntp-928 -j DROP +-A limit-ntp-929 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-929 -j RETURN +-A limit-ntp-929 -j TEE --gateway fc00::2 +-A limit-ntp-929 -j DROP +-A limit-ntp-93 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-93 -m limit --limit 1/second -j LOG +-A limit-ntp-930 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-930 -j logaccept-ntp-9 +-A limit-ntp-930 -j TEE --gateway fc00::2 +-A limit-ntp-930 -j DROP +-A limit-ntp-931 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-931 -j logaccept-ntp-10 +-A limit-ntp-931 -j TEE --gateway fc00::2 +-A limit-ntp-931 -j DROP +-A limit-ntp-932 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-932 -j ACCEPT +-A limit-ntp-932 -j TEE --gateway fc00::2 +-A limit-ntp-932 -j DROP +-A limit-ntp-933 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-933 -j logaccept-ntp-11 +-A limit-ntp-933 -j TEE --gateway fc00::2 +-A limit-ntp-933 -j DROP +-A limit-ntp-934 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-934 -j ACCEPT +-A limit-ntp-934 -j DROP +-A limit-ntp-935 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-935 -j RETURN +-A limit-ntp-935 -j DROP +-A limit-ntp-936 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-936 -j logaccept-ntp-12 +-A limit-ntp-936 -j DROP +-A limit-ntp-937 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-937 -j logaccept-ntp-13 +-A limit-ntp-937 -j DROP +-A limit-ntp-938 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-938 -j ACCEPT +-A limit-ntp-938 -j DROP +-A limit-ntp-939 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-939 -j logaccept-ntp-14 +-A limit-ntp-939 -j DROP +-A limit-ntp-94 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-94 -j TEE --gateway fc00::2 +-A limit-ntp-94 -j ACCEPT +-A limit-ntp-940 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-940 -j ACCEPT +-A limit-ntp-940 -j DROP +-A limit-ntp-941 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-941 -j RETURN +-A limit-ntp-941 -j DROP +-A limit-ntp-942 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-942 -j logaccept-ntp-15 +-A limit-ntp-942 -j DROP +-A limit-ntp-943 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-943 -j logaccept-ntp-16 +-A limit-ntp-943 -j DROP +-A limit-ntp-944 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-944 -j ACCEPT +-A limit-ntp-944 -j DROP +-A limit-ntp-945 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-945 -j logaccept-ntp-17 +-A limit-ntp-945 -j DROP +-A limit-ntp-946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-946 -j ACCEPT +-A limit-ntp-946 -j DROP +-A limit-ntp-947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-947 -j RETURN +-A limit-ntp-947 -j DROP +-A limit-ntp-948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-948 -j logaccept-ntp-18 +-A limit-ntp-948 -j DROP +-A limit-ntp-949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-949 -j logaccept-ntp-19 +-A limit-ntp-949 -j DROP +-A limit-ntp-95 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-95 -j TEE --gateway fc00::2 +-A limit-ntp-950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-950 -j ACCEPT +-A limit-ntp-950 -j DROP +-A limit-ntp-951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-951 -j logaccept-ntp-20 +-A limit-ntp-951 -j DROP +-A limit-ntp-952 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-952 -j ACCEPT +-A limit-ntp-952 -m limit --limit 1/second -j LOG +-A limit-ntp-952 -j DROP +-A limit-ntp-953 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-953 -j RETURN +-A limit-ntp-953 -m limit --limit 1/second -j LOG +-A limit-ntp-953 -j DROP +-A limit-ntp-954 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-954 -j logaccept-ntp-21 +-A limit-ntp-954 -m limit --limit 1/second -j LOG +-A limit-ntp-954 -j DROP +-A limit-ntp-955 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-955 -j logaccept-ntp-22 +-A limit-ntp-955 -m limit --limit 1/second -j LOG +-A limit-ntp-955 -j DROP +-A limit-ntp-956 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-956 -j ACCEPT +-A limit-ntp-956 -m limit --limit 1/second -j LOG +-A limit-ntp-956 -j DROP +-A limit-ntp-957 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-957 -j logaccept-ntp-23 +-A limit-ntp-957 -m limit --limit 1/second -j LOG +-A limit-ntp-957 -j DROP +-A limit-ntp-958 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-958 -j ACCEPT +-A limit-ntp-958 -j TEE --gateway fc00::2 +-A limit-ntp-958 -j DROP +-A limit-ntp-959 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-959 -j RETURN +-A limit-ntp-959 -j TEE --gateway fc00::2 +-A limit-ntp-959 -j DROP +-A limit-ntp-96 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-96 -j ACCEPT +-A limit-ntp-960 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-960 -j logaccept-ntp-24 +-A limit-ntp-960 -j TEE --gateway fc00::2 +-A limit-ntp-960 -j DROP +-A limit-ntp-961 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-961 -j logaccept-ntp-25 +-A limit-ntp-961 -j TEE --gateway fc00::2 +-A limit-ntp-961 -j DROP +-A limit-ntp-962 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-962 -j ACCEPT +-A limit-ntp-962 -j TEE --gateway fc00::2 +-A limit-ntp-962 -j DROP +-A limit-ntp-963 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-963 -j logaccept-ntp-26 +-A limit-ntp-963 -j TEE --gateway fc00::2 +-A limit-ntp-963 -j DROP +-A limit-ntp-964 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-964 -j ACCEPT +-A limit-ntp-964 -j DROP +-A limit-ntp-965 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-965 -j RETURN +-A limit-ntp-965 -j DROP +-A limit-ntp-966 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-966 -j logaccept-ntp-27 +-A limit-ntp-966 -j DROP +-A limit-ntp-967 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-967 -j logaccept-ntp-28 +-A limit-ntp-967 -j DROP +-A limit-ntp-968 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-968 -j ACCEPT +-A limit-ntp-968 -j DROP +-A limit-ntp-969 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-969 -j logaccept-ntp-29 +-A limit-ntp-969 -j DROP +-A limit-ntp-970 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-970 -j ACCEPT +-A limit-ntp-970 -j DROP +-A limit-ntp-971 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-971 -j RETURN +-A limit-ntp-971 -j DROP +-A limit-ntp-972 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-972 -j logaccept-ntp-30 +-A limit-ntp-972 -j DROP +-A limit-ntp-973 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-973 -j logaccept-ntp-31 +-A limit-ntp-973 -j DROP +-A limit-ntp-974 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-974 -j ACCEPT +-A limit-ntp-974 -j DROP +-A limit-ntp-975 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-975 -j logaccept-ntp-32 +-A limit-ntp-975 -j DROP +-A limit-ntp-98 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-ntp-98 -j ACCEPT +-A limit-ntp-99 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT -A logaccept-1 -j TEE --gateway fc00::2 -A logaccept-1 -j ACCEPT -A logaccept-10 -j TEE --gateway fc00::2 -A logaccept-10 -j ACCEPT --A logaccept-100 -j LOG --A logaccept-100 -j TEE --gateway fc00::1 --A logaccept-100 -j ACCEPT --A logaccept-101 -j TEE --gateway fc00::2 --A logaccept-101 -j ACCEPT --A logaccept-102 -j ACCEPT -A logaccept-11 -j ACCEPT -A logaccept-12 -m limit --limit 1/second -j LOG -A logaccept-12 -j ACCEPT @@ -22907,66 +22901,17 @@ -A logaccept-65 -j ACCEPT -A logaccept-66 -m limit --limit 1/second -j LOG -A logaccept-66 -j ACCEPT --A logaccept-67 -j TEE --gateway fc00::2 +-A logaccept-67 -j LOG +-A logaccept-67 -j TEE --gateway fc00::1 -A logaccept-67 -j ACCEPT +-A logaccept-68 -j TEE --gateway fc00::2 -A logaccept-68 -j ACCEPT --A logaccept-69 -m limit --limit 1/second -j LOG -A logaccept-69 -j ACCEPT -A logaccept-7 -j TEE --gateway fc00::2 -A logaccept-7 -j ACCEPT --A logaccept-70 -j TEE --gateway fc00::2 --A logaccept-70 -j ACCEPT --A logaccept-71 -j ACCEPT --A logaccept-72 -m limit --limit 1/second -j LOG --A logaccept-72 -j ACCEPT --A logaccept-73 -j TEE --gateway fc00::2 --A logaccept-73 -j ACCEPT --A logaccept-74 -j ACCEPT --A logaccept-75 -m limit --limit 1/second -j LOG --A logaccept-75 -j ACCEPT --A logaccept-76 -j TEE --gateway fc00::2 --A logaccept-76 -j ACCEPT --A logaccept-77 -j ACCEPT --A logaccept-78 -m limit --limit 1/second -j LOG --A logaccept-78 -j ACCEPT --A logaccept-79 -j TEE --gateway fc00::2 --A logaccept-79 -j ACCEPT -A logaccept-8 -j ACCEPT --A logaccept-80 -j ACCEPT --A logaccept-81 -m limit --limit 1/second -j LOG --A logaccept-81 -j ACCEPT --A logaccept-82 -j TEE --gateway fc00::2 --A logaccept-82 -j ACCEPT --A logaccept-83 -j ACCEPT --A logaccept-84 -m limit --limit 1/second -j LOG --A logaccept-84 -j ACCEPT --A logaccept-85 -j TEE --gateway fc00::2 --A logaccept-85 -j ACCEPT --A logaccept-86 -j ACCEPT --A logaccept-87 -m limit --limit 1/second -j LOG --A logaccept-87 -j ACCEPT --A logaccept-88 -j TEE --gateway fc00::2 --A logaccept-88 -j ACCEPT --A logaccept-89 -j ACCEPT -A logaccept-9 -m limit --limit 1/second -j LOG -A logaccept-9 -j ACCEPT --A logaccept-90 -m limit --limit 1/second -j LOG --A logaccept-90 -j ACCEPT --A logaccept-91 -j TEE --gateway fc00::2 --A logaccept-91 -j ACCEPT --A logaccept-92 -j ACCEPT --A logaccept-93 -m limit --limit 1/second -j LOG --A logaccept-93 -j ACCEPT --A logaccept-94 -j TEE --gateway fc00::2 --A logaccept-94 -j ACCEPT --A logaccept-95 -j ACCEPT --A logaccept-96 -m limit --limit 1/second -j LOG --A logaccept-96 -j ACCEPT --A logaccept-97 -j TEE --gateway fc00::2 --A logaccept-97 -j ACCEPT --A logaccept-98 -j ACCEPT --A logaccept-99 -m limit --limit 1/second -j LOG --A logaccept-99 -j ACCEPT -A logaccept-final-0 -m limit --limit 1/second -j LOG -A logaccept-final-0 -j ACCEPT -A logaccept-final-1 -j TEE --gateway fc00::2 @@ -23477,6 +23422,61 @@ -A logaccept-final-98 -j ACCEPT -A logaccept-final-99 -m limit --limit 1/second -j LOG -A logaccept-final-99 -j ACCEPT +-A logaccept-ntp-0 -m limit --limit 1/second -j LOG +-A logaccept-ntp-0 -j ACCEPT +-A logaccept-ntp-1 -j TEE --gateway fc00::2 +-A logaccept-ntp-1 -j ACCEPT +-A logaccept-ntp-10 -j TEE --gateway fc00::2 +-A logaccept-ntp-10 -j ACCEPT +-A logaccept-ntp-11 -j ACCEPT +-A logaccept-ntp-12 -m limit --limit 1/second -j LOG +-A logaccept-ntp-12 -j ACCEPT +-A logaccept-ntp-13 -j TEE --gateway fc00::2 +-A logaccept-ntp-13 -j ACCEPT +-A logaccept-ntp-14 -j ACCEPT +-A logaccept-ntp-15 -m limit --limit 1/second -j LOG +-A logaccept-ntp-15 -j ACCEPT +-A logaccept-ntp-16 -j TEE --gateway fc00::2 +-A logaccept-ntp-16 -j ACCEPT +-A logaccept-ntp-17 -j ACCEPT +-A logaccept-ntp-18 -m limit --limit 1/second -j LOG +-A logaccept-ntp-18 -j ACCEPT +-A logaccept-ntp-19 -j TEE --gateway fc00::2 +-A logaccept-ntp-19 -j ACCEPT +-A logaccept-ntp-2 -j ACCEPT +-A logaccept-ntp-20 -j ACCEPT +-A logaccept-ntp-21 -m limit --limit 1/second -j LOG +-A logaccept-ntp-21 -j ACCEPT +-A logaccept-ntp-22 -j TEE --gateway fc00::2 +-A logaccept-ntp-22 -j ACCEPT +-A logaccept-ntp-23 -j ACCEPT +-A logaccept-ntp-24 -m limit --limit 1/second -j LOG +-A logaccept-ntp-24 -j ACCEPT +-A logaccept-ntp-25 -j TEE --gateway fc00::2 +-A logaccept-ntp-25 -j ACCEPT +-A logaccept-ntp-26 -j ACCEPT +-A logaccept-ntp-27 -m limit --limit 1/second -j LOG +-A logaccept-ntp-27 -j ACCEPT +-A logaccept-ntp-28 -j TEE --gateway fc00::2 +-A logaccept-ntp-28 -j ACCEPT +-A logaccept-ntp-29 -j ACCEPT +-A logaccept-ntp-3 -m limit --limit 1/second -j LOG +-A logaccept-ntp-3 -j ACCEPT +-A logaccept-ntp-30 -m limit --limit 1/second -j LOG +-A logaccept-ntp-30 -j ACCEPT +-A logaccept-ntp-31 -j TEE --gateway fc00::2 +-A logaccept-ntp-31 -j ACCEPT +-A logaccept-ntp-32 -j ACCEPT +-A logaccept-ntp-4 -j TEE --gateway fc00::2 +-A logaccept-ntp-4 -j ACCEPT +-A logaccept-ntp-5 -j ACCEPT +-A logaccept-ntp-6 -m limit --limit 1/second -j LOG +-A logaccept-ntp-6 -j ACCEPT +-A logaccept-ntp-7 -j TEE --gateway fc00::2 +-A logaccept-ntp-7 -j ACCEPT +-A logaccept-ntp-8 -j ACCEPT +-A logaccept-ntp-9 -m limit --limit 1/second -j LOG +-A logaccept-ntp-9 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG @@ -24661,1025 +24661,105 @@ -A logdrop-1650 -j DROP -A logdrop-1651 -m limit --limit 1/second -j LOG -A logdrop-1651 -j DROP --A logdrop-1652 -m limit --limit 1/second -j LOG +-A logdrop-1652 -j LOG +-A logdrop-1652 -j TEE --gateway fc00::1 -A logdrop-1652 -j DROP --A logdrop-1653 -m limit --limit 1/second -j LOG +-A logdrop-1653 -j TEE --gateway fc00::2 -A logdrop-1653 -j DROP --A logdrop-1654 -m limit --limit 1/second -j LOG -A logdrop-1654 -j DROP --A logdrop-1655 -m limit --limit 1/second -j LOG --A logdrop-1655 -j DROP --A logdrop-1656 -m limit --limit 1/second -j LOG --A logdrop-1656 -j DROP --A logdrop-1657 -m limit --limit 1/second -j LOG --A logdrop-1657 -j DROP --A logdrop-1658 -m limit --limit 1/second -j LOG --A logdrop-1658 -j DROP --A logdrop-1659 -m limit --limit 1/second -j LOG --A logdrop-1659 -j DROP -A logdrop-166 -j TEE --gateway fc00::2 -A logdrop-166 -j DROP --A logdrop-1660 -m limit --limit 1/second -j LOG --A logdrop-1660 -j DROP --A logdrop-1661 -m limit --limit 1/second -j LOG --A logdrop-1661 -j DROP --A logdrop-1662 -m limit --limit 1/second -j LOG --A logdrop-1662 -j DROP --A logdrop-1663 -m limit --limit 1/second -j LOG --A logdrop-1663 -j DROP --A logdrop-1664 -m limit --limit 1/second -j LOG --A logdrop-1664 -j DROP --A logdrop-1665 -m limit --limit 1/second -j LOG --A logdrop-1665 -j DROP --A logdrop-1666 -m limit --limit 1/second -j LOG --A logdrop-1666 -j DROP --A logdrop-1667 -m limit --limit 1/second -j LOG --A logdrop-1667 -j DROP --A logdrop-1668 -m limit --limit 1/second -j LOG --A logdrop-1668 -j DROP --A logdrop-1669 -m limit --limit 1/second -j LOG --A logdrop-1669 -j DROP -A logdrop-167 -j TEE --gateway fc00::2 -A logdrop-167 -j DROP --A logdrop-1670 -m limit --limit 1/second -j LOG --A logdrop-1670 -j DROP --A logdrop-1671 -m limit --limit 1/second -j LOG --A logdrop-1671 -j DROP --A logdrop-1672 -m limit --limit 1/second -j LOG --A logdrop-1672 -j DROP --A logdrop-1673 -m limit --limit 1/second -j LOG --A logdrop-1673 -j DROP --A logdrop-1674 -m limit --limit 1/second -j LOG --A logdrop-1674 -j DROP --A logdrop-1675 -m limit --limit 1/second -j LOG --A logdrop-1675 -j DROP --A logdrop-1676 -m limit --limit 1/second -j LOG --A logdrop-1676 -j DROP --A logdrop-1677 -m limit --limit 1/second -j LOG --A logdrop-1677 -j DROP --A logdrop-1678 -m limit --limit 1/second -j LOG --A logdrop-1678 -j DROP --A logdrop-1679 -m limit --limit 1/second -j LOG --A logdrop-1679 -j DROP -A logdrop-168 -j TEE --gateway fc00::2 -A logdrop-168 -j DROP --A logdrop-1680 -m limit --limit 1/second -j LOG --A logdrop-1680 -j DROP --A logdrop-1681 -m limit --limit 1/second -j LOG --A logdrop-1681 -j DROP --A logdrop-1682 -m limit --limit 1/second -j LOG --A logdrop-1682 -j DROP --A logdrop-1683 -m limit --limit 1/second -j LOG --A logdrop-1683 -j DROP --A logdrop-1684 -m limit --limit 1/second -j LOG --A logdrop-1684 -j DROP --A logdrop-1685 -m limit --limit 1/second -j LOG --A logdrop-1685 -j DROP --A logdrop-1686 -m limit --limit 1/second -j LOG --A logdrop-1686 -j DROP --A logdrop-1687 -m limit --limit 1/second -j LOG --A logdrop-1687 -j DROP --A logdrop-1688 -m limit --limit 1/second -j LOG --A logdrop-1688 -j DROP --A logdrop-1689 -m limit --limit 1/second -j LOG --A logdrop-1689 -j DROP -A logdrop-169 -j TEE --gateway fc00::2 -A logdrop-169 -j DROP --A logdrop-1690 -m limit --limit 1/second -j LOG --A logdrop-1690 -j DROP --A logdrop-1691 -m limit --limit 1/second -j LOG --A logdrop-1691 -j DROP --A logdrop-1692 -m limit --limit 1/second -j LOG --A logdrop-1692 -j DROP --A logdrop-1693 -m limit --limit 1/second -j LOG --A logdrop-1693 -j DROP --A logdrop-1694 -m limit --limit 1/second -j LOG --A logdrop-1694 -j DROP --A logdrop-1695 -m limit --limit 1/second -j LOG --A logdrop-1695 -j DROP --A logdrop-1696 -m limit --limit 1/second -j LOG --A logdrop-1696 -j DROP --A logdrop-1697 -m limit --limit 1/second -j LOG --A logdrop-1697 -j DROP --A logdrop-1698 -m limit --limit 1/second -j LOG --A logdrop-1698 -j DROP --A logdrop-1699 -m limit --limit 1/second -j LOG --A logdrop-1699 -j DROP -A logdrop-17 -m limit --limit 1/second -j LOG -A logdrop-17 -j DROP -A logdrop-170 -j TEE --gateway fc00::2 -A logdrop-170 -j DROP --A logdrop-1700 -m limit --limit 1/second -j LOG --A logdrop-1700 -j DROP --A logdrop-1701 -m limit --limit 1/second -j LOG --A logdrop-1701 -j DROP --A logdrop-1702 -m limit --limit 1/second -j LOG --A logdrop-1702 -j DROP --A logdrop-1703 -m limit --limit 1/second -j LOG --A logdrop-1703 -j DROP --A logdrop-1704 -m limit --limit 1/second -j LOG --A logdrop-1704 -j DROP --A logdrop-1705 -m limit --limit 1/second -j LOG --A logdrop-1705 -j DROP --A logdrop-1706 -m limit --limit 1/second -j LOG --A logdrop-1706 -j DROP --A logdrop-1707 -m limit --limit 1/second -j LOG --A logdrop-1707 -j DROP --A logdrop-1708 -m limit --limit 1/second -j LOG --A logdrop-1708 -j DROP --A logdrop-1709 -m limit --limit 1/second -j LOG --A logdrop-1709 -j DROP -A logdrop-171 -j TEE --gateway fc00::2 -A logdrop-171 -j DROP --A logdrop-1710 -m limit --limit 1/second -j LOG --A logdrop-1710 -j DROP --A logdrop-1711 -m limit --limit 1/second -j LOG --A logdrop-1711 -j DROP --A logdrop-1712 -m limit --limit 1/second -j LOG --A logdrop-1712 -j DROP --A logdrop-1713 -m limit --limit 1/second -j LOG --A logdrop-1713 -j DROP --A logdrop-1714 -m limit --limit 1/second -j LOG --A logdrop-1714 -j DROP --A logdrop-1715 -m limit --limit 1/second -j LOG --A logdrop-1715 -j DROP --A logdrop-1716 -m limit --limit 1/second -j LOG --A logdrop-1716 -j DROP --A logdrop-1717 -m limit --limit 1/second -j LOG --A logdrop-1717 -j DROP --A logdrop-1718 -m limit --limit 1/second -j LOG --A logdrop-1718 -j DROP --A logdrop-1719 -m limit --limit 1/second -j LOG --A logdrop-1719 -j DROP -A logdrop-172 -j TEE --gateway fc00::2 -A logdrop-172 -j DROP --A logdrop-1720 -m limit --limit 1/second -j LOG --A logdrop-1720 -j DROP --A logdrop-1721 -m limit --limit 1/second -j LOG --A logdrop-1721 -j DROP --A logdrop-1722 -m limit --limit 1/second -j LOG --A logdrop-1722 -j DROP --A logdrop-1723 -m limit --limit 1/second -j LOG --A logdrop-1723 -j DROP --A logdrop-1724 -m limit --limit 1/second -j LOG --A logdrop-1724 -j DROP --A logdrop-1725 -m limit --limit 1/second -j LOG --A logdrop-1725 -j DROP --A logdrop-1726 -m limit --limit 1/second -j LOG --A logdrop-1726 -j DROP --A logdrop-1727 -m limit --limit 1/second -j LOG --A logdrop-1727 -j DROP --A logdrop-1728 -m limit --limit 1/second -j LOG --A logdrop-1728 -j DROP --A logdrop-1729 -m limit --limit 1/second -j LOG --A logdrop-1729 -j DROP -A logdrop-173 -j TEE --gateway fc00::2 -A logdrop-173 -j DROP --A logdrop-1730 -m limit --limit 1/second -j LOG --A logdrop-1730 -j DROP --A logdrop-1731 -m limit --limit 1/second -j LOG --A logdrop-1731 -j DROP --A logdrop-1732 -m limit --limit 1/second -j LOG --A logdrop-1732 -j DROP --A logdrop-1733 -m limit --limit 1/second -j LOG --A logdrop-1733 -j DROP --A logdrop-1734 -m limit --limit 1/second -j LOG --A logdrop-1734 -j DROP --A logdrop-1735 -m limit --limit 1/second -j LOG --A logdrop-1735 -j DROP --A logdrop-1736 -m limit --limit 1/second -j LOG --A logdrop-1736 -j DROP --A logdrop-1737 -m limit --limit 1/second -j LOG --A logdrop-1737 -j DROP --A logdrop-1738 -m limit --limit 1/second -j LOG --A logdrop-1738 -j DROP --A logdrop-1739 -m limit --limit 1/second -j LOG --A logdrop-1739 -j DROP -A logdrop-174 -j TEE --gateway fc00::2 -A logdrop-174 -j DROP --A logdrop-1740 -m limit --limit 1/second -j LOG --A logdrop-1740 -j DROP --A logdrop-1741 -m limit --limit 1/second -j LOG --A logdrop-1741 -j DROP --A logdrop-1742 -m limit --limit 1/second -j LOG --A logdrop-1742 -j DROP --A logdrop-1743 -m limit --limit 1/second -j LOG --A logdrop-1743 -j DROP --A logdrop-1744 -m limit --limit 1/second -j LOG --A logdrop-1744 -j DROP --A logdrop-1745 -m limit --limit 1/second -j LOG --A logdrop-1745 -j DROP --A logdrop-1746 -m limit --limit 1/second -j LOG --A logdrop-1746 -j DROP --A logdrop-1747 -m limit --limit 1/second -j LOG --A logdrop-1747 -j DROP --A logdrop-1748 -m limit --limit 1/second -j LOG --A logdrop-1748 -j DROP --A logdrop-1749 -m limit --limit 1/second -j LOG --A logdrop-1749 -j DROP -A logdrop-175 -j TEE --gateway fc00::2 -A logdrop-175 -j DROP --A logdrop-1750 -j TEE --gateway fc00::2 --A logdrop-1750 -j DROP --A logdrop-1751 -j TEE --gateway fc00::2 --A logdrop-1751 -j DROP --A logdrop-1752 -j TEE --gateway fc00::2 --A logdrop-1752 -j DROP --A logdrop-1753 -j TEE --gateway fc00::2 --A logdrop-1753 -j DROP --A logdrop-1754 -j TEE --gateway fc00::2 --A logdrop-1754 -j DROP --A logdrop-1755 -j TEE --gateway fc00::2 --A logdrop-1755 -j DROP --A logdrop-1756 -j TEE --gateway fc00::2 --A logdrop-1756 -j DROP --A logdrop-1757 -j TEE --gateway fc00::2 --A logdrop-1757 -j DROP --A logdrop-1758 -j TEE --gateway fc00::2 --A logdrop-1758 -j DROP --A logdrop-1759 -j TEE --gateway fc00::2 --A logdrop-1759 -j DROP -A logdrop-176 -j TEE --gateway fc00::2 -A logdrop-176 -j DROP --A logdrop-1760 -j TEE --gateway fc00::2 --A logdrop-1760 -j DROP --A logdrop-1761 -j TEE --gateway fc00::2 --A logdrop-1761 -j DROP --A logdrop-1762 -j TEE --gateway fc00::2 --A logdrop-1762 -j DROP --A logdrop-1763 -j TEE --gateway fc00::2 --A logdrop-1763 -j DROP --A logdrop-1764 -j TEE --gateway fc00::2 --A logdrop-1764 -j DROP --A logdrop-1765 -j TEE --gateway fc00::2 --A logdrop-1765 -j DROP --A logdrop-1766 -j TEE --gateway fc00::2 --A logdrop-1766 -j DROP --A logdrop-1767 -j TEE --gateway fc00::2 --A logdrop-1767 -j DROP --A logdrop-1768 -j TEE --gateway fc00::2 --A logdrop-1768 -j DROP --A logdrop-1769 -j TEE --gateway fc00::2 --A logdrop-1769 -j DROP -A logdrop-177 -j TEE --gateway fc00::2 -A logdrop-177 -j DROP --A logdrop-1770 -j TEE --gateway fc00::2 --A logdrop-1770 -j DROP --A logdrop-1771 -j TEE --gateway fc00::2 --A logdrop-1771 -j DROP --A logdrop-1772 -j TEE --gateway fc00::2 --A logdrop-1772 -j DROP --A logdrop-1773 -j TEE --gateway fc00::2 --A logdrop-1773 -j DROP --A logdrop-1774 -j TEE --gateway fc00::2 --A logdrop-1774 -j DROP --A logdrop-1775 -j TEE --gateway fc00::2 --A logdrop-1775 -j DROP --A logdrop-1776 -j TEE --gateway fc00::2 --A logdrop-1776 -j DROP --A logdrop-1777 -j TEE --gateway fc00::2 --A logdrop-1777 -j DROP --A logdrop-1778 -j TEE --gateway fc00::2 --A logdrop-1778 -j DROP --A logdrop-1779 -j TEE --gateway fc00::2 --A logdrop-1779 -j DROP -A logdrop-178 -j TEE --gateway fc00::2 -A logdrop-178 -j DROP --A logdrop-1780 -j TEE --gateway fc00::2 --A logdrop-1780 -j DROP --A logdrop-1781 -j TEE --gateway fc00::2 --A logdrop-1781 -j DROP --A logdrop-1782 -j TEE --gateway fc00::2 --A logdrop-1782 -j DROP --A logdrop-1783 -j TEE --gateway fc00::2 --A logdrop-1783 -j DROP --A logdrop-1784 -j TEE --gateway fc00::2 --A logdrop-1784 -j DROP --A logdrop-1785 -j TEE --gateway fc00::2 --A logdrop-1785 -j DROP --A logdrop-1786 -j TEE --gateway fc00::2 --A logdrop-1786 -j DROP --A logdrop-1787 -j TEE --gateway fc00::2 --A logdrop-1787 -j DROP --A logdrop-1788 -j TEE --gateway fc00::2 --A logdrop-1788 -j DROP --A logdrop-1789 -j TEE --gateway fc00::2 --A logdrop-1789 -j DROP -A logdrop-179 -j TEE --gateway fc00::2 -A logdrop-179 -j DROP --A logdrop-1790 -j TEE --gateway fc00::2 --A logdrop-1790 -j DROP --A logdrop-1791 -j TEE --gateway fc00::2 --A logdrop-1791 -j DROP --A logdrop-1792 -j TEE --gateway fc00::2 --A logdrop-1792 -j DROP --A logdrop-1793 -j TEE --gateway fc00::2 --A logdrop-1793 -j DROP --A logdrop-1794 -j TEE --gateway fc00::2 --A logdrop-1794 -j DROP --A logdrop-1795 -j TEE --gateway fc00::2 --A logdrop-1795 -j DROP --A logdrop-1796 -j TEE --gateway fc00::2 --A logdrop-1796 -j DROP --A logdrop-1797 -j TEE --gateway fc00::2 --A logdrop-1797 -j DROP --A logdrop-1798 -j TEE --gateway fc00::2 --A logdrop-1798 -j DROP --A logdrop-1799 -j TEE --gateway fc00::2 --A logdrop-1799 -j DROP -A logdrop-18 -m limit --limit 1/second -j LOG -A logdrop-18 -j DROP -A logdrop-180 -j TEE --gateway fc00::2 -A logdrop-180 -j DROP --A logdrop-1800 -j TEE --gateway fc00::2 --A logdrop-1800 -j DROP --A logdrop-1801 -j TEE --gateway fc00::2 --A logdrop-1801 -j DROP --A logdrop-1802 -j TEE --gateway fc00::2 --A logdrop-1802 -j DROP --A logdrop-1803 -j TEE --gateway fc00::2 --A logdrop-1803 -j DROP --A logdrop-1804 -j TEE --gateway fc00::2 --A logdrop-1804 -j DROP --A logdrop-1805 -j TEE --gateway fc00::2 --A logdrop-1805 -j DROP --A logdrop-1806 -j TEE --gateway fc00::2 --A logdrop-1806 -j DROP --A logdrop-1807 -j TEE --gateway fc00::2 --A logdrop-1807 -j DROP --A logdrop-1808 -j TEE --gateway fc00::2 --A logdrop-1808 -j DROP --A logdrop-1809 -j TEE --gateway fc00::2 --A logdrop-1809 -j DROP -A logdrop-181 -j TEE --gateway fc00::2 -A logdrop-181 -j DROP --A logdrop-1810 -j TEE --gateway fc00::2 --A logdrop-1810 -j DROP --A logdrop-1811 -j TEE --gateway fc00::2 --A logdrop-1811 -j DROP --A logdrop-1812 -j TEE --gateway fc00::2 --A logdrop-1812 -j DROP --A logdrop-1813 -j TEE --gateway fc00::2 --A logdrop-1813 -j DROP --A logdrop-1814 -j TEE --gateway fc00::2 --A logdrop-1814 -j DROP --A logdrop-1815 -j TEE --gateway fc00::2 --A logdrop-1815 -j DROP --A logdrop-1816 -j TEE --gateway fc00::2 --A logdrop-1816 -j DROP --A logdrop-1817 -j TEE --gateway fc00::2 --A logdrop-1817 -j DROP --A logdrop-1818 -j TEE --gateway fc00::2 --A logdrop-1818 -j DROP --A logdrop-1819 -j TEE --gateway fc00::2 --A logdrop-1819 -j DROP -A logdrop-182 -j TEE --gateway fc00::2 -A logdrop-182 -j DROP --A logdrop-1820 -j TEE --gateway fc00::2 --A logdrop-1820 -j DROP --A logdrop-1821 -j TEE --gateway fc00::2 --A logdrop-1821 -j DROP --A logdrop-1822 -j TEE --gateway fc00::2 --A logdrop-1822 -j DROP --A logdrop-1823 -j TEE --gateway fc00::2 --A logdrop-1823 -j DROP --A logdrop-1824 -j TEE --gateway fc00::2 --A logdrop-1824 -j DROP --A logdrop-1825 -j TEE --gateway fc00::2 --A logdrop-1825 -j DROP --A logdrop-1826 -j TEE --gateway fc00::2 --A logdrop-1826 -j DROP --A logdrop-1827 -j TEE --gateway fc00::2 --A logdrop-1827 -j DROP --A logdrop-1828 -j TEE --gateway fc00::2 --A logdrop-1828 -j DROP --A logdrop-1829 -j TEE --gateway fc00::2 --A logdrop-1829 -j DROP -A logdrop-183 -j TEE --gateway fc00::2 -A logdrop-183 -j DROP --A logdrop-1830 -j TEE --gateway fc00::2 --A logdrop-1830 -j DROP --A logdrop-1831 -j TEE --gateway fc00::2 --A logdrop-1831 -j DROP --A logdrop-1832 -j TEE --gateway fc00::2 --A logdrop-1832 -j DROP --A logdrop-1833 -j TEE --gateway fc00::2 --A logdrop-1833 -j DROP --A logdrop-1834 -j TEE --gateway fc00::2 --A logdrop-1834 -j DROP --A logdrop-1835 -j TEE --gateway fc00::2 --A logdrop-1835 -j DROP --A logdrop-1836 -j TEE --gateway fc00::2 --A logdrop-1836 -j DROP --A logdrop-1837 -j TEE --gateway fc00::2 --A logdrop-1837 -j DROP --A logdrop-1838 -j TEE --gateway fc00::2 --A logdrop-1838 -j DROP --A logdrop-1839 -j TEE --gateway fc00::2 --A logdrop-1839 -j DROP -A logdrop-184 -j TEE --gateway fc00::2 -A logdrop-184 -j DROP --A logdrop-1840 -j DROP --A logdrop-1841 -j DROP --A logdrop-1842 -j DROP --A logdrop-1843 -j DROP --A logdrop-1844 -j DROP --A logdrop-1845 -j DROP --A logdrop-1846 -j DROP --A logdrop-1847 -j DROP --A logdrop-1848 -j DROP --A logdrop-1849 -j DROP -A logdrop-185 -j TEE --gateway fc00::2 -A logdrop-185 -j DROP --A logdrop-1850 -j DROP --A logdrop-1851 -j DROP --A logdrop-1852 -j DROP --A logdrop-1853 -j DROP --A logdrop-1854 -j DROP --A logdrop-1855 -j DROP --A logdrop-1856 -j DROP --A logdrop-1857 -j DROP --A logdrop-1858 -j DROP --A logdrop-1859 -j DROP -A logdrop-186 -j TEE --gateway fc00::2 -A logdrop-186 -j DROP --A logdrop-1860 -j DROP --A logdrop-1861 -j DROP --A logdrop-1862 -j DROP --A logdrop-1863 -j DROP --A logdrop-1864 -j DROP --A logdrop-1865 -j DROP --A logdrop-1866 -j DROP --A logdrop-1867 -j DROP --A logdrop-1868 -j DROP --A logdrop-1869 -j DROP -A logdrop-187 -j TEE --gateway fc00::2 -A logdrop-187 -j DROP --A logdrop-1870 -j DROP --A logdrop-1871 -j DROP --A logdrop-1872 -j DROP --A logdrop-1873 -j DROP --A logdrop-1874 -j DROP --A logdrop-1875 -j DROP --A logdrop-1876 -j DROP --A logdrop-1877 -j DROP --A logdrop-1878 -j DROP --A logdrop-1879 -j DROP -A logdrop-188 -j TEE --gateway fc00::2 -A logdrop-188 -j DROP --A logdrop-1880 -j DROP --A logdrop-1881 -j DROP --A logdrop-1882 -j DROP --A logdrop-1883 -j DROP --A logdrop-1884 -j DROP --A logdrop-1885 -j DROP --A logdrop-1886 -j DROP --A logdrop-1887 -j DROP --A logdrop-1888 -j DROP --A logdrop-1889 -j DROP -A logdrop-189 -j TEE --gateway fc00::2 -A logdrop-189 -j DROP --A logdrop-1890 -j DROP --A logdrop-1891 -j DROP --A logdrop-1892 -j DROP --A logdrop-1893 -j DROP --A logdrop-1894 -j DROP --A logdrop-1895 -j DROP --A logdrop-1896 -j DROP --A logdrop-1897 -j DROP --A logdrop-1898 -j DROP --A logdrop-1899 -j DROP -A logdrop-19 -m limit --limit 1/second -j LOG -A logdrop-19 -j DROP -A logdrop-190 -j DROP --A logdrop-1900 -j DROP --A logdrop-1901 -j DROP --A logdrop-1902 -j DROP --A logdrop-1903 -j DROP --A logdrop-1904 -j DROP --A logdrop-1905 -j DROP --A logdrop-1906 -j DROP --A logdrop-1907 -j DROP --A logdrop-1908 -j DROP --A logdrop-1909 -j DROP -A logdrop-191 -j DROP --A logdrop-1910 -j DROP --A logdrop-1911 -j DROP --A logdrop-1912 -j DROP --A logdrop-1913 -j DROP --A logdrop-1914 -j DROP --A logdrop-1915 -j DROP --A logdrop-1916 -j DROP --A logdrop-1917 -j DROP --A logdrop-1918 -j DROP --A logdrop-1919 -j DROP -A logdrop-192 -j DROP --A logdrop-1920 -j DROP --A logdrop-1921 -j DROP --A logdrop-1922 -j DROP --A logdrop-1923 -j DROP --A logdrop-1924 -j DROP --A logdrop-1925 -j DROP --A logdrop-1926 -j DROP --A logdrop-1927 -j DROP --A logdrop-1928 -j DROP --A logdrop-1929 -j DROP -A logdrop-193 -j DROP --A logdrop-1930 -m limit --limit 1/second -j LOG --A logdrop-1930 -j DROP --A logdrop-1931 -m limit --limit 1/second -j LOG --A logdrop-1931 -j DROP --A logdrop-1932 -m limit --limit 1/second -j LOG --A logdrop-1932 -j DROP --A logdrop-1933 -m limit --limit 1/second -j LOG --A logdrop-1933 -j DROP --A logdrop-1934 -m limit --limit 1/second -j LOG --A logdrop-1934 -j DROP --A logdrop-1935 -m limit --limit 1/second -j LOG --A logdrop-1935 -j DROP --A logdrop-1936 -m limit --limit 1/second -j LOG --A logdrop-1936 -j DROP --A logdrop-1937 -m limit --limit 1/second -j LOG --A logdrop-1937 -j DROP --A logdrop-1938 -m limit --limit 1/second -j LOG --A logdrop-1938 -j DROP --A logdrop-1939 -m limit --limit 1/second -j LOG --A logdrop-1939 -j DROP -A logdrop-194 -j DROP --A logdrop-1940 -m limit --limit 1/second -j LOG --A logdrop-1940 -j DROP --A logdrop-1941 -m limit --limit 1/second -j LOG --A logdrop-1941 -j DROP --A logdrop-1942 -m limit --limit 1/second -j LOG --A logdrop-1942 -j DROP --A logdrop-1943 -m limit --limit 1/second -j LOG --A logdrop-1943 -j DROP --A logdrop-1944 -m limit --limit 1/second -j LOG --A logdrop-1944 -j DROP --A logdrop-1945 -m limit --limit 1/second -j LOG --A logdrop-1945 -j DROP --A logdrop-1946 -m limit --limit 1/second -j LOG --A logdrop-1946 -j DROP --A logdrop-1947 -m limit --limit 1/second -j LOG --A logdrop-1947 -j DROP --A logdrop-1948 -m limit --limit 1/second -j LOG --A logdrop-1948 -j DROP --A logdrop-1949 -m limit --limit 1/second -j LOG --A logdrop-1949 -j DROP -A logdrop-195 -j DROP --A logdrop-1950 -m limit --limit 1/second -j LOG --A logdrop-1950 -j DROP --A logdrop-1951 -m limit --limit 1/second -j LOG --A logdrop-1951 -j DROP --A logdrop-1952 -m limit --limit 1/second -j LOG --A logdrop-1952 -j DROP --A logdrop-1953 -m limit --limit 1/second -j LOG --A logdrop-1953 -j DROP --A logdrop-1954 -m limit --limit 1/second -j LOG --A logdrop-1954 -j DROP --A logdrop-1955 -m limit --limit 1/second -j LOG --A logdrop-1955 -j DROP --A logdrop-1956 -m limit --limit 1/second -j LOG --A logdrop-1956 -j DROP --A logdrop-1957 -m limit --limit 1/second -j LOG --A logdrop-1957 -j DROP --A logdrop-1958 -m limit --limit 1/second -j LOG --A logdrop-1958 -j DROP --A logdrop-1959 -m limit --limit 1/second -j LOG --A logdrop-1959 -j DROP -A logdrop-196 -j DROP --A logdrop-1960 -m limit --limit 1/second -j LOG --A logdrop-1960 -j DROP --A logdrop-1961 -m limit --limit 1/second -j LOG --A logdrop-1961 -j DROP --A logdrop-1962 -m limit --limit 1/second -j LOG --A logdrop-1962 -j DROP --A logdrop-1963 -m limit --limit 1/second -j LOG --A logdrop-1963 -j DROP --A logdrop-1964 -m limit --limit 1/second -j LOG --A logdrop-1964 -j DROP --A logdrop-1965 -m limit --limit 1/second -j LOG --A logdrop-1965 -j DROP --A logdrop-1966 -m limit --limit 1/second -j LOG --A logdrop-1966 -j DROP --A logdrop-1967 -m limit --limit 1/second -j LOG --A logdrop-1967 -j DROP --A logdrop-1968 -m limit --limit 1/second -j LOG --A logdrop-1968 -j DROP --A logdrop-1969 -m limit --limit 1/second -j LOG --A logdrop-1969 -j DROP -A logdrop-197 -j DROP --A logdrop-1970 -m limit --limit 1/second -j LOG --A logdrop-1970 -j DROP --A logdrop-1971 -m limit --limit 1/second -j LOG --A logdrop-1971 -j DROP --A logdrop-1972 -m limit --limit 1/second -j LOG --A logdrop-1972 -j DROP --A logdrop-1973 -m limit --limit 1/second -j LOG --A logdrop-1973 -j DROP --A logdrop-1974 -m limit --limit 1/second -j LOG --A logdrop-1974 -j DROP --A logdrop-1975 -m limit --limit 1/second -j LOG --A logdrop-1975 -j DROP --A logdrop-1976 -m limit --limit 1/second -j LOG --A logdrop-1976 -j DROP --A logdrop-1977 -m limit --limit 1/second -j LOG --A logdrop-1977 -j DROP --A logdrop-1978 -m limit --limit 1/second -j LOG --A logdrop-1978 -j DROP --A logdrop-1979 -m limit --limit 1/second -j LOG --A logdrop-1979 -j DROP -A logdrop-198 -j DROP --A logdrop-1980 -m limit --limit 1/second -j LOG --A logdrop-1980 -j DROP --A logdrop-1981 -m limit --limit 1/second -j LOG --A logdrop-1981 -j DROP --A logdrop-1982 -m limit --limit 1/second -j LOG --A logdrop-1982 -j DROP --A logdrop-1983 -m limit --limit 1/second -j LOG --A logdrop-1983 -j DROP --A logdrop-1984 -m limit --limit 1/second -j LOG --A logdrop-1984 -j DROP --A logdrop-1985 -m limit --limit 1/second -j LOG --A logdrop-1985 -j DROP --A logdrop-1986 -m limit --limit 1/second -j LOG --A logdrop-1986 -j DROP --A logdrop-1987 -m limit --limit 1/second -j LOG --A logdrop-1987 -j DROP --A logdrop-1988 -m limit --limit 1/second -j LOG --A logdrop-1988 -j DROP --A logdrop-1989 -m limit --limit 1/second -j LOG --A logdrop-1989 -j DROP -A logdrop-199 -j DROP --A logdrop-1990 -m limit --limit 1/second -j LOG --A logdrop-1990 -j DROP --A logdrop-1991 -m limit --limit 1/second -j LOG --A logdrop-1991 -j DROP --A logdrop-1992 -m limit --limit 1/second -j LOG --A logdrop-1992 -j DROP --A logdrop-1993 -m limit --limit 1/second -j LOG --A logdrop-1993 -j DROP --A logdrop-1994 -m limit --limit 1/second -j LOG --A logdrop-1994 -j DROP --A logdrop-1995 -m limit --limit 1/second -j LOG --A logdrop-1995 -j DROP --A logdrop-1996 -m limit --limit 1/second -j LOG --A logdrop-1996 -j DROP --A logdrop-1997 -m limit --limit 1/second -j LOG --A logdrop-1997 -j DROP --A logdrop-1998 -m limit --limit 1/second -j LOG --A logdrop-1998 -j DROP --A logdrop-1999 -m limit --limit 1/second -j LOG --A logdrop-1999 -j DROP -A logdrop-2 -m limit --limit 1/second -j LOG -A logdrop-2 -j DROP -A logdrop-20 -m limit --limit 1/second -j LOG -A logdrop-20 -j DROP -A logdrop-200 -j DROP --A logdrop-2000 -m limit --limit 1/second -j LOG --A logdrop-2000 -j DROP --A logdrop-2001 -m limit --limit 1/second -j LOG --A logdrop-2001 -j DROP --A logdrop-2002 -m limit --limit 1/second -j LOG --A logdrop-2002 -j DROP --A logdrop-2003 -m limit --limit 1/second -j LOG --A logdrop-2003 -j DROP --A logdrop-2004 -m limit --limit 1/second -j LOG --A logdrop-2004 -j DROP --A logdrop-2005 -m limit --limit 1/second -j LOG --A logdrop-2005 -j DROP --A logdrop-2006 -m limit --limit 1/second -j LOG --A logdrop-2006 -j DROP --A logdrop-2007 -m limit --limit 1/second -j LOG --A logdrop-2007 -j DROP --A logdrop-2008 -m limit --limit 1/second -j LOG --A logdrop-2008 -j DROP --A logdrop-2009 -m limit --limit 1/second -j LOG --A logdrop-2009 -j DROP -A logdrop-201 -j DROP --A logdrop-2010 -m limit --limit 1/second -j LOG --A logdrop-2010 -j DROP --A logdrop-2011 -m limit --limit 1/second -j LOG --A logdrop-2011 -j DROP --A logdrop-2012 -m limit --limit 1/second -j LOG --A logdrop-2012 -j DROP --A logdrop-2013 -m limit --limit 1/second -j LOG --A logdrop-2013 -j DROP --A logdrop-2014 -m limit --limit 1/second -j LOG --A logdrop-2014 -j DROP --A logdrop-2015 -m limit --limit 1/second -j LOG --A logdrop-2015 -j DROP --A logdrop-2016 -m limit --limit 1/second -j LOG --A logdrop-2016 -j DROP --A logdrop-2017 -m limit --limit 1/second -j LOG --A logdrop-2017 -j DROP --A logdrop-2018 -m limit --limit 1/second -j LOG --A logdrop-2018 -j DROP --A logdrop-2019 -m limit --limit 1/second -j LOG --A logdrop-2019 -j DROP -A logdrop-202 -j DROP --A logdrop-2020 -j TEE --gateway fc00::2 --A logdrop-2020 -j DROP --A logdrop-2021 -j TEE --gateway fc00::2 --A logdrop-2021 -j DROP --A logdrop-2022 -j TEE --gateway fc00::2 --A logdrop-2022 -j DROP --A logdrop-2023 -j TEE --gateway fc00::2 --A logdrop-2023 -j DROP --A logdrop-2024 -j TEE --gateway fc00::2 --A logdrop-2024 -j DROP --A logdrop-2025 -j TEE --gateway fc00::2 --A logdrop-2025 -j DROP --A logdrop-2026 -j TEE --gateway fc00::2 --A logdrop-2026 -j DROP --A logdrop-2027 -j TEE --gateway fc00::2 --A logdrop-2027 -j DROP --A logdrop-2028 -j TEE --gateway fc00::2 --A logdrop-2028 -j DROP --A logdrop-2029 -j TEE --gateway fc00::2 --A logdrop-2029 -j DROP -A logdrop-203 -j DROP --A logdrop-2030 -j TEE --gateway fc00::2 --A logdrop-2030 -j DROP --A logdrop-2031 -j TEE --gateway fc00::2 --A logdrop-2031 -j DROP --A logdrop-2032 -j TEE --gateway fc00::2 --A logdrop-2032 -j DROP --A logdrop-2033 -j TEE --gateway fc00::2 --A logdrop-2033 -j DROP --A logdrop-2034 -j TEE --gateway fc00::2 --A logdrop-2034 -j DROP --A logdrop-2035 -j TEE --gateway fc00::2 --A logdrop-2035 -j DROP --A logdrop-2036 -j TEE --gateway fc00::2 --A logdrop-2036 -j DROP --A logdrop-2037 -j TEE --gateway fc00::2 --A logdrop-2037 -j DROP --A logdrop-2038 -j TEE --gateway fc00::2 --A logdrop-2038 -j DROP --A logdrop-2039 -j TEE --gateway fc00::2 --A logdrop-2039 -j DROP -A logdrop-204 -j DROP --A logdrop-2040 -j TEE --gateway fc00::2 --A logdrop-2040 -j DROP --A logdrop-2041 -j TEE --gateway fc00::2 --A logdrop-2041 -j DROP --A logdrop-2042 -j TEE --gateway fc00::2 --A logdrop-2042 -j DROP --A logdrop-2043 -j TEE --gateway fc00::2 --A logdrop-2043 -j DROP --A logdrop-2044 -j TEE --gateway fc00::2 --A logdrop-2044 -j DROP --A logdrop-2045 -j TEE --gateway fc00::2 --A logdrop-2045 -j DROP --A logdrop-2046 -j TEE --gateway fc00::2 --A logdrop-2046 -j DROP --A logdrop-2047 -j TEE --gateway fc00::2 --A logdrop-2047 -j DROP --A logdrop-2048 -j TEE --gateway fc00::2 --A logdrop-2048 -j DROP --A logdrop-2049 -j TEE --gateway fc00::2 --A logdrop-2049 -j DROP -A logdrop-205 -j DROP --A logdrop-2050 -j TEE --gateway fc00::2 --A logdrop-2050 -j DROP --A logdrop-2051 -j TEE --gateway fc00::2 --A logdrop-2051 -j DROP --A logdrop-2052 -j TEE --gateway fc00::2 --A logdrop-2052 -j DROP --A logdrop-2053 -j TEE --gateway fc00::2 --A logdrop-2053 -j DROP --A logdrop-2054 -j TEE --gateway fc00::2 --A logdrop-2054 -j DROP --A logdrop-2055 -j TEE --gateway fc00::2 --A logdrop-2055 -j DROP --A logdrop-2056 -j TEE --gateway fc00::2 --A logdrop-2056 -j DROP --A logdrop-2057 -j TEE --gateway fc00::2 --A logdrop-2057 -j DROP --A logdrop-2058 -j TEE --gateway fc00::2 --A logdrop-2058 -j DROP --A logdrop-2059 -j TEE --gateway fc00::2 --A logdrop-2059 -j DROP -A logdrop-206 -j DROP --A logdrop-2060 -j TEE --gateway fc00::2 --A logdrop-2060 -j DROP --A logdrop-2061 -j TEE --gateway fc00::2 --A logdrop-2061 -j DROP --A logdrop-2062 -j TEE --gateway fc00::2 --A logdrop-2062 -j DROP --A logdrop-2063 -j TEE --gateway fc00::2 --A logdrop-2063 -j DROP --A logdrop-2064 -j TEE --gateway fc00::2 --A logdrop-2064 -j DROP --A logdrop-2065 -j TEE --gateway fc00::2 --A logdrop-2065 -j DROP --A logdrop-2066 -j TEE --gateway fc00::2 --A logdrop-2066 -j DROP --A logdrop-2067 -j TEE --gateway fc00::2 --A logdrop-2067 -j DROP --A logdrop-2068 -j TEE --gateway fc00::2 --A logdrop-2068 -j DROP --A logdrop-2069 -j TEE --gateway fc00::2 --A logdrop-2069 -j DROP -A logdrop-207 -j DROP --A logdrop-2070 -j TEE --gateway fc00::2 --A logdrop-2070 -j DROP --A logdrop-2071 -j TEE --gateway fc00::2 --A logdrop-2071 -j DROP --A logdrop-2072 -j TEE --gateway fc00::2 --A logdrop-2072 -j DROP --A logdrop-2073 -j TEE --gateway fc00::2 --A logdrop-2073 -j DROP --A logdrop-2074 -j TEE --gateway fc00::2 --A logdrop-2074 -j DROP --A logdrop-2075 -j TEE --gateway fc00::2 --A logdrop-2075 -j DROP --A logdrop-2076 -j TEE --gateway fc00::2 --A logdrop-2076 -j DROP --A logdrop-2077 -j TEE --gateway fc00::2 --A logdrop-2077 -j DROP --A logdrop-2078 -j TEE --gateway fc00::2 --A logdrop-2078 -j DROP --A logdrop-2079 -j TEE --gateway fc00::2 --A logdrop-2079 -j DROP -A logdrop-208 -j DROP --A logdrop-2080 -j TEE --gateway fc00::2 --A logdrop-2080 -j DROP --A logdrop-2081 -j TEE --gateway fc00::2 --A logdrop-2081 -j DROP --A logdrop-2082 -j TEE --gateway fc00::2 --A logdrop-2082 -j DROP --A logdrop-2083 -j TEE --gateway fc00::2 --A logdrop-2083 -j DROP --A logdrop-2084 -j TEE --gateway fc00::2 --A logdrop-2084 -j DROP --A logdrop-2085 -j TEE --gateway fc00::2 --A logdrop-2085 -j DROP --A logdrop-2086 -j TEE --gateway fc00::2 --A logdrop-2086 -j DROP --A logdrop-2087 -j TEE --gateway fc00::2 --A logdrop-2087 -j DROP --A logdrop-2088 -j TEE --gateway fc00::2 --A logdrop-2088 -j DROP --A logdrop-2089 -j TEE --gateway fc00::2 --A logdrop-2089 -j DROP -A logdrop-209 -j DROP --A logdrop-2090 -j TEE --gateway fc00::2 --A logdrop-2090 -j DROP --A logdrop-2091 -j TEE --gateway fc00::2 --A logdrop-2091 -j DROP --A logdrop-2092 -j TEE --gateway fc00::2 --A logdrop-2092 -j DROP --A logdrop-2093 -j TEE --gateway fc00::2 --A logdrop-2093 -j DROP --A logdrop-2094 -j TEE --gateway fc00::2 --A logdrop-2094 -j DROP --A logdrop-2095 -j TEE --gateway fc00::2 --A logdrop-2095 -j DROP --A logdrop-2096 -j TEE --gateway fc00::2 --A logdrop-2096 -j DROP --A logdrop-2097 -j TEE --gateway fc00::2 --A logdrop-2097 -j DROP --A logdrop-2098 -j TEE --gateway fc00::2 --A logdrop-2098 -j DROP --A logdrop-2099 -j TEE --gateway fc00::2 --A logdrop-2099 -j DROP -A logdrop-21 -m limit --limit 1/second -j LOG -A logdrop-21 -j DROP -A logdrop-210 -j DROP --A logdrop-2100 -j TEE --gateway fc00::2 --A logdrop-2100 -j DROP --A logdrop-2101 -j TEE --gateway fc00::2 --A logdrop-2101 -j DROP --A logdrop-2102 -j TEE --gateway fc00::2 --A logdrop-2102 -j DROP --A logdrop-2103 -j TEE --gateway fc00::2 --A logdrop-2103 -j DROP --A logdrop-2104 -j TEE --gateway fc00::2 --A logdrop-2104 -j DROP --A logdrop-2105 -j TEE --gateway fc00::2 --A logdrop-2105 -j DROP --A logdrop-2106 -j TEE --gateway fc00::2 --A logdrop-2106 -j DROP --A logdrop-2107 -j TEE --gateway fc00::2 --A logdrop-2107 -j DROP --A logdrop-2108 -j TEE --gateway fc00::2 --A logdrop-2108 -j DROP --A logdrop-2109 -j TEE --gateway fc00::2 --A logdrop-2109 -j DROP -A logdrop-211 -j DROP --A logdrop-2110 -j DROP --A logdrop-2111 -j DROP --A logdrop-2112 -j DROP --A logdrop-2113 -j DROP --A logdrop-2114 -j DROP --A logdrop-2115 -j DROP --A logdrop-2116 -j DROP --A logdrop-2117 -j DROP --A logdrop-2118 -j DROP --A logdrop-2119 -j DROP -A logdrop-212 -j DROP --A logdrop-2120 -j DROP --A logdrop-2121 -j DROP --A logdrop-2122 -j DROP --A logdrop-2123 -j DROP --A logdrop-2124 -j DROP --A logdrop-2125 -j DROP --A logdrop-2126 -j DROP --A logdrop-2127 -j DROP --A logdrop-2128 -j DROP --A logdrop-2129 -j DROP -A logdrop-213 -j DROP --A logdrop-2130 -j DROP --A logdrop-2131 -j DROP --A logdrop-2132 -j DROP --A logdrop-2133 -j DROP --A logdrop-2134 -j DROP --A logdrop-2135 -j DROP --A logdrop-2136 -j DROP --A logdrop-2137 -j DROP --A logdrop-2138 -j DROP --A logdrop-2139 -j DROP -A logdrop-214 -j DROP --A logdrop-2140 -j DROP --A logdrop-2141 -j DROP --A logdrop-2142 -j DROP --A logdrop-2143 -j DROP --A logdrop-2144 -j DROP --A logdrop-2145 -j DROP --A logdrop-2146 -j DROP --A logdrop-2147 -j DROP --A logdrop-2148 -j DROP --A logdrop-2149 -j DROP -A logdrop-215 -j DROP --A logdrop-2150 -j DROP --A logdrop-2151 -j DROP --A logdrop-2152 -j DROP --A logdrop-2153 -j DROP --A logdrop-2154 -j DROP --A logdrop-2155 -j DROP --A logdrop-2156 -j DROP --A logdrop-2157 -j DROP --A logdrop-2158 -j DROP --A logdrop-2159 -j DROP -A logdrop-216 -j DROP --A logdrop-2160 -j DROP --A logdrop-2161 -j DROP --A logdrop-2162 -j DROP --A logdrop-2163 -j DROP --A logdrop-2164 -j DROP --A logdrop-2165 -j DROP --A logdrop-2166 -j DROP --A logdrop-2167 -j DROP --A logdrop-2168 -j DROP --A logdrop-2169 -j DROP -A logdrop-217 -j DROP --A logdrop-2170 -j DROP --A logdrop-2171 -j DROP --A logdrop-2172 -j DROP --A logdrop-2173 -j DROP --A logdrop-2174 -j DROP --A logdrop-2175 -j DROP --A logdrop-2176 -j DROP --A logdrop-2177 -j DROP --A logdrop-2178 -j DROP --A logdrop-2179 -j DROP -A logdrop-218 -j DROP --A logdrop-2180 -j DROP --A logdrop-2181 -j DROP --A logdrop-2182 -j DROP --A logdrop-2183 -j DROP --A logdrop-2184 -j DROP --A logdrop-2185 -j DROP --A logdrop-2186 -j DROP --A logdrop-2187 -j DROP --A logdrop-2188 -j DROP --A logdrop-2189 -j DROP -A logdrop-219 -j DROP --A logdrop-2190 -j DROP --A logdrop-2191 -j DROP --A logdrop-2192 -j DROP --A logdrop-2193 -j DROP --A logdrop-2194 -j DROP --A logdrop-2195 -j DROP --A logdrop-2196 -j DROP --A logdrop-2197 -j DROP --A logdrop-2198 -j DROP --A logdrop-2199 -j DROP -A logdrop-22 -m limit --limit 1/second -j LOG -A logdrop-22 -j DROP -A logdrop-220 -j DROP --A logdrop-2200 -m limit --limit 1/second -j LOG --A logdrop-2200 -j DROP --A logdrop-2201 -m limit --limit 1/second -j LOG --A logdrop-2201 -j DROP --A logdrop-2202 -j LOG --A logdrop-2202 -j TEE --gateway fc00::1 --A logdrop-2202 -j DROP --A logdrop-2203 -j TEE --gateway fc00::2 --A logdrop-2203 -j DROP --A logdrop-2204 -j DROP -A logdrop-221 -j DROP -A logdrop-222 -j DROP -A logdrop-223 -j DROP @@ -27167,6 +26247,926 @@ -A logdrop-998 -j DROP -A logdrop-999 -j TEE --gateway fc00::2 -A logdrop-999 -j DROP +-A logdrop-ntp-0 -m limit --limit 1/second -j LOG +-A logdrop-ntp-0 -j DROP +-A logdrop-ntp-1 -m limit --limit 1/second -j LOG +-A logdrop-ntp-1 -j DROP +-A logdrop-ntp-10 -m limit --limit 1/second -j LOG +-A logdrop-ntp-10 -j DROP +-A logdrop-ntp-100 -j TEE --gateway fc00::2 +-A logdrop-ntp-100 -j DROP +-A logdrop-ntp-101 -j TEE --gateway fc00::2 +-A logdrop-ntp-101 -j DROP +-A logdrop-ntp-102 -j TEE --gateway fc00::2 +-A logdrop-ntp-102 -j DROP +-A logdrop-ntp-103 -j TEE --gateway fc00::2 +-A logdrop-ntp-103 -j DROP +-A logdrop-ntp-104 -j TEE --gateway fc00::2 +-A logdrop-ntp-104 -j DROP +-A logdrop-ntp-105 -j TEE --gateway fc00::2 +-A logdrop-ntp-105 -j DROP +-A logdrop-ntp-106 -j TEE --gateway fc00::2 +-A logdrop-ntp-106 -j DROP +-A logdrop-ntp-107 -j TEE --gateway fc00::2 +-A logdrop-ntp-107 -j DROP +-A logdrop-ntp-108 -j TEE --gateway fc00::2 +-A logdrop-ntp-108 -j DROP +-A logdrop-ntp-109 -j TEE --gateway fc00::2 +-A logdrop-ntp-109 -j DROP +-A logdrop-ntp-11 -m limit --limit 1/second -j LOG +-A logdrop-ntp-11 -j DROP +-A logdrop-ntp-110 -j TEE --gateway fc00::2 +-A logdrop-ntp-110 -j DROP +-A logdrop-ntp-111 -j TEE --gateway fc00::2 +-A logdrop-ntp-111 -j DROP +-A logdrop-ntp-112 -j TEE --gateway fc00::2 +-A logdrop-ntp-112 -j DROP +-A logdrop-ntp-113 -j TEE --gateway fc00::2 +-A logdrop-ntp-113 -j DROP +-A logdrop-ntp-114 -j TEE --gateway fc00::2 +-A logdrop-ntp-114 -j DROP +-A logdrop-ntp-115 -j TEE --gateway fc00::2 +-A logdrop-ntp-115 -j DROP +-A logdrop-ntp-116 -j TEE --gateway fc00::2 +-A logdrop-ntp-116 -j DROP +-A logdrop-ntp-117 -j TEE --gateway fc00::2 +-A logdrop-ntp-117 -j DROP +-A logdrop-ntp-118 -j TEE --gateway fc00::2 +-A logdrop-ntp-118 -j DROP +-A logdrop-ntp-119 -j TEE --gateway fc00::2 +-A logdrop-ntp-119 -j DROP +-A logdrop-ntp-12 -m limit --limit 1/second -j LOG +-A logdrop-ntp-12 -j DROP +-A logdrop-ntp-120 -j TEE --gateway fc00::2 +-A logdrop-ntp-120 -j DROP +-A logdrop-ntp-121 -j TEE --gateway fc00::2 +-A logdrop-ntp-121 -j DROP +-A logdrop-ntp-122 -j TEE --gateway fc00::2 +-A logdrop-ntp-122 -j DROP +-A logdrop-ntp-123 -j TEE --gateway fc00::2 +-A logdrop-ntp-123 -j DROP +-A logdrop-ntp-124 -j TEE --gateway fc00::2 +-A logdrop-ntp-124 -j DROP +-A logdrop-ntp-125 -j TEE --gateway fc00::2 +-A logdrop-ntp-125 -j DROP +-A logdrop-ntp-126 -j TEE --gateway fc00::2 +-A logdrop-ntp-126 -j DROP +-A logdrop-ntp-127 -j TEE --gateway fc00::2 +-A logdrop-ntp-127 -j DROP +-A logdrop-ntp-128 -j TEE --gateway fc00::2 +-A logdrop-ntp-128 -j DROP +-A logdrop-ntp-129 -j TEE --gateway fc00::2 +-A logdrop-ntp-129 -j DROP +-A logdrop-ntp-13 -m limit --limit 1/second -j LOG +-A logdrop-ntp-13 -j DROP +-A logdrop-ntp-130 -j TEE --gateway fc00::2 +-A logdrop-ntp-130 -j DROP +-A logdrop-ntp-131 -j TEE --gateway fc00::2 +-A logdrop-ntp-131 -j DROP +-A logdrop-ntp-132 -j TEE --gateway fc00::2 +-A logdrop-ntp-132 -j DROP +-A logdrop-ntp-133 -j TEE --gateway fc00::2 +-A logdrop-ntp-133 -j DROP +-A logdrop-ntp-134 -j TEE --gateway fc00::2 +-A logdrop-ntp-134 -j DROP +-A logdrop-ntp-135 -j TEE --gateway fc00::2 +-A logdrop-ntp-135 -j DROP +-A logdrop-ntp-136 -j TEE --gateway fc00::2 +-A logdrop-ntp-136 -j DROP +-A logdrop-ntp-137 -j TEE --gateway fc00::2 +-A logdrop-ntp-137 -j DROP +-A logdrop-ntp-138 -j TEE --gateway fc00::2 +-A logdrop-ntp-138 -j DROP +-A logdrop-ntp-139 -j TEE --gateway fc00::2 +-A logdrop-ntp-139 -j DROP +-A logdrop-ntp-14 -m limit --limit 1/second -j LOG +-A logdrop-ntp-14 -j DROP +-A logdrop-ntp-140 -j TEE --gateway fc00::2 +-A logdrop-ntp-140 -j DROP +-A logdrop-ntp-141 -j TEE --gateway fc00::2 +-A logdrop-ntp-141 -j DROP +-A logdrop-ntp-142 -j TEE --gateway fc00::2 +-A logdrop-ntp-142 -j DROP +-A logdrop-ntp-143 -j TEE --gateway fc00::2 +-A logdrop-ntp-143 -j DROP +-A logdrop-ntp-144 -j TEE --gateway fc00::2 +-A logdrop-ntp-144 -j DROP +-A logdrop-ntp-145 -j TEE --gateway fc00::2 +-A logdrop-ntp-145 -j DROP +-A logdrop-ntp-146 -j TEE --gateway fc00::2 +-A logdrop-ntp-146 -j DROP +-A logdrop-ntp-147 -j TEE --gateway fc00::2 +-A logdrop-ntp-147 -j DROP +-A logdrop-ntp-148 -j TEE --gateway fc00::2 +-A logdrop-ntp-148 -j DROP +-A logdrop-ntp-149 -j TEE --gateway fc00::2 +-A logdrop-ntp-149 -j DROP +-A logdrop-ntp-15 -m limit --limit 1/second -j LOG +-A logdrop-ntp-15 -j DROP +-A logdrop-ntp-150 -j TEE --gateway fc00::2 +-A logdrop-ntp-150 -j DROP +-A logdrop-ntp-151 -j TEE --gateway fc00::2 +-A logdrop-ntp-151 -j DROP +-A logdrop-ntp-152 -j TEE --gateway fc00::2 +-A logdrop-ntp-152 -j DROP +-A logdrop-ntp-153 -j TEE --gateway fc00::2 +-A logdrop-ntp-153 -j DROP +-A logdrop-ntp-154 -j TEE --gateway fc00::2 +-A logdrop-ntp-154 -j DROP +-A logdrop-ntp-155 -j TEE --gateway fc00::2 +-A logdrop-ntp-155 -j DROP +-A logdrop-ntp-156 -j TEE --gateway fc00::2 +-A logdrop-ntp-156 -j DROP +-A logdrop-ntp-157 -j TEE --gateway fc00::2 +-A logdrop-ntp-157 -j DROP +-A logdrop-ntp-158 -j TEE --gateway fc00::2 +-A logdrop-ntp-158 -j DROP +-A logdrop-ntp-159 -j TEE --gateway fc00::2 +-A logdrop-ntp-159 -j DROP +-A logdrop-ntp-16 -m limit --limit 1/second -j LOG +-A logdrop-ntp-16 -j DROP +-A logdrop-ntp-160 -j TEE --gateway fc00::2 +-A logdrop-ntp-160 -j DROP +-A logdrop-ntp-161 -j TEE --gateway fc00::2 +-A logdrop-ntp-161 -j DROP +-A logdrop-ntp-162 -j TEE --gateway fc00::2 +-A logdrop-ntp-162 -j DROP +-A logdrop-ntp-163 -j TEE --gateway fc00::2 +-A logdrop-ntp-163 -j DROP +-A logdrop-ntp-164 -j TEE --gateway fc00::2 +-A logdrop-ntp-164 -j DROP +-A logdrop-ntp-165 -j TEE --gateway fc00::2 +-A logdrop-ntp-165 -j DROP +-A logdrop-ntp-166 -j TEE --gateway fc00::2 +-A logdrop-ntp-166 -j DROP +-A logdrop-ntp-167 -j TEE --gateway fc00::2 +-A logdrop-ntp-167 -j DROP +-A logdrop-ntp-168 -j TEE --gateway fc00::2 +-A logdrop-ntp-168 -j DROP +-A logdrop-ntp-169 -j TEE --gateway fc00::2 +-A logdrop-ntp-169 -j DROP +-A logdrop-ntp-17 -m limit --limit 1/second -j LOG +-A logdrop-ntp-17 -j DROP +-A logdrop-ntp-170 -j TEE --gateway fc00::2 +-A logdrop-ntp-170 -j DROP +-A logdrop-ntp-171 -j TEE --gateway fc00::2 +-A logdrop-ntp-171 -j DROP +-A logdrop-ntp-172 -j TEE --gateway fc00::2 +-A logdrop-ntp-172 -j DROP +-A logdrop-ntp-173 -j TEE --gateway fc00::2 +-A logdrop-ntp-173 -j DROP +-A logdrop-ntp-174 -j TEE --gateway fc00::2 +-A logdrop-ntp-174 -j DROP +-A logdrop-ntp-175 -j TEE --gateway fc00::2 +-A logdrop-ntp-175 -j DROP +-A logdrop-ntp-176 -j TEE --gateway fc00::2 +-A logdrop-ntp-176 -j DROP +-A logdrop-ntp-177 -j TEE --gateway fc00::2 +-A logdrop-ntp-177 -j DROP +-A logdrop-ntp-178 -j TEE --gateway fc00::2 +-A logdrop-ntp-178 -j DROP +-A logdrop-ntp-179 -j TEE --gateway fc00::2 +-A logdrop-ntp-179 -j DROP +-A logdrop-ntp-18 -m limit --limit 1/second -j LOG +-A logdrop-ntp-18 -j DROP +-A logdrop-ntp-180 -j TEE --gateway fc00::2 +-A logdrop-ntp-180 -j DROP +-A logdrop-ntp-181 -j TEE --gateway fc00::2 +-A logdrop-ntp-181 -j DROP +-A logdrop-ntp-182 -j TEE --gateway fc00::2 +-A logdrop-ntp-182 -j DROP +-A logdrop-ntp-183 -j TEE --gateway fc00::2 +-A logdrop-ntp-183 -j DROP +-A logdrop-ntp-184 -j TEE --gateway fc00::2 +-A logdrop-ntp-184 -j DROP +-A logdrop-ntp-185 -j TEE --gateway fc00::2 +-A logdrop-ntp-185 -j DROP +-A logdrop-ntp-186 -j TEE --gateway fc00::2 +-A logdrop-ntp-186 -j DROP +-A logdrop-ntp-187 -j TEE --gateway fc00::2 +-A logdrop-ntp-187 -j DROP +-A logdrop-ntp-188 -j TEE --gateway fc00::2 +-A logdrop-ntp-188 -j DROP +-A logdrop-ntp-189 -j TEE --gateway fc00::2 +-A logdrop-ntp-189 -j DROP +-A logdrop-ntp-19 -m limit --limit 1/second -j LOG +-A logdrop-ntp-19 -j DROP +-A logdrop-ntp-190 -j DROP +-A logdrop-ntp-191 -j DROP +-A logdrop-ntp-192 -j DROP +-A logdrop-ntp-193 -j DROP +-A logdrop-ntp-194 -j DROP +-A logdrop-ntp-195 -j DROP +-A logdrop-ntp-196 -j DROP +-A logdrop-ntp-197 -j DROP +-A logdrop-ntp-198 -j DROP +-A logdrop-ntp-199 -j DROP +-A logdrop-ntp-2 -m limit --limit 1/second -j LOG +-A logdrop-ntp-2 -j DROP +-A logdrop-ntp-20 -m limit --limit 1/second -j LOG +-A logdrop-ntp-20 -j DROP +-A logdrop-ntp-200 -j DROP +-A logdrop-ntp-201 -j DROP +-A logdrop-ntp-202 -j DROP +-A logdrop-ntp-203 -j DROP +-A logdrop-ntp-204 -j DROP +-A logdrop-ntp-205 -j DROP +-A logdrop-ntp-206 -j DROP +-A logdrop-ntp-207 -j DROP +-A logdrop-ntp-208 -j DROP +-A logdrop-ntp-209 -j DROP +-A logdrop-ntp-21 -m limit --limit 1/second -j LOG +-A logdrop-ntp-21 -j DROP +-A logdrop-ntp-210 -j DROP +-A logdrop-ntp-211 -j DROP +-A logdrop-ntp-212 -j DROP +-A logdrop-ntp-213 -j DROP +-A logdrop-ntp-214 -j DROP +-A logdrop-ntp-215 -j DROP +-A logdrop-ntp-216 -j DROP +-A logdrop-ntp-217 -j DROP +-A logdrop-ntp-218 -j DROP +-A logdrop-ntp-219 -j DROP +-A logdrop-ntp-22 -m limit --limit 1/second -j LOG +-A logdrop-ntp-22 -j DROP +-A logdrop-ntp-220 -j DROP +-A logdrop-ntp-221 -j DROP +-A logdrop-ntp-222 -j DROP +-A logdrop-ntp-223 -j DROP +-A logdrop-ntp-224 -j DROP +-A logdrop-ntp-225 -j DROP +-A logdrop-ntp-226 -j DROP +-A logdrop-ntp-227 -j DROP +-A logdrop-ntp-228 -j DROP +-A logdrop-ntp-229 -j DROP +-A logdrop-ntp-23 -m limit --limit 1/second -j LOG +-A logdrop-ntp-23 -j DROP +-A logdrop-ntp-230 -j DROP +-A logdrop-ntp-231 -j DROP +-A logdrop-ntp-232 -j DROP +-A logdrop-ntp-233 -j DROP +-A logdrop-ntp-234 -j DROP +-A logdrop-ntp-235 -j DROP +-A logdrop-ntp-236 -j DROP +-A logdrop-ntp-237 -j DROP +-A logdrop-ntp-238 -j DROP +-A logdrop-ntp-239 -j DROP +-A logdrop-ntp-24 -m limit --limit 1/second -j LOG +-A logdrop-ntp-24 -j DROP +-A logdrop-ntp-240 -j DROP +-A logdrop-ntp-241 -j DROP +-A logdrop-ntp-242 -j DROP +-A logdrop-ntp-243 -j DROP +-A logdrop-ntp-244 -j DROP +-A logdrop-ntp-245 -j DROP +-A logdrop-ntp-246 -j DROP +-A logdrop-ntp-247 -j DROP +-A logdrop-ntp-248 -j DROP +-A logdrop-ntp-249 -j DROP +-A logdrop-ntp-25 -m limit --limit 1/second -j LOG +-A logdrop-ntp-25 -j DROP +-A logdrop-ntp-250 -j DROP +-A logdrop-ntp-251 -j DROP +-A logdrop-ntp-252 -j DROP +-A logdrop-ntp-253 -j DROP +-A logdrop-ntp-254 -j DROP +-A logdrop-ntp-255 -j DROP +-A logdrop-ntp-256 -j DROP +-A logdrop-ntp-257 -j DROP +-A logdrop-ntp-258 -j DROP +-A logdrop-ntp-259 -j DROP +-A logdrop-ntp-26 -m limit --limit 1/second -j LOG +-A logdrop-ntp-26 -j DROP +-A logdrop-ntp-260 -j DROP +-A logdrop-ntp-261 -j DROP +-A logdrop-ntp-262 -j DROP +-A logdrop-ntp-263 -j DROP +-A logdrop-ntp-264 -j DROP +-A logdrop-ntp-265 -j DROP +-A logdrop-ntp-266 -j DROP +-A logdrop-ntp-267 -j DROP +-A logdrop-ntp-268 -j DROP +-A logdrop-ntp-269 -j DROP +-A logdrop-ntp-27 -m limit --limit 1/second -j LOG +-A logdrop-ntp-27 -j DROP +-A logdrop-ntp-270 -j DROP +-A logdrop-ntp-271 -j DROP +-A logdrop-ntp-272 -j DROP +-A logdrop-ntp-273 -j DROP +-A logdrop-ntp-274 -j DROP +-A logdrop-ntp-275 -j DROP +-A logdrop-ntp-276 -j DROP +-A logdrop-ntp-277 -j DROP +-A logdrop-ntp-278 -j DROP +-A logdrop-ntp-279 -j DROP +-A logdrop-ntp-28 -m limit --limit 1/second -j LOG +-A logdrop-ntp-28 -j DROP +-A logdrop-ntp-280 -m limit --limit 1/second -j LOG +-A logdrop-ntp-280 -j DROP +-A logdrop-ntp-281 -m limit --limit 1/second -j LOG +-A logdrop-ntp-281 -j DROP +-A logdrop-ntp-282 -m limit --limit 1/second -j LOG +-A logdrop-ntp-282 -j DROP +-A logdrop-ntp-283 -m limit --limit 1/second -j LOG +-A logdrop-ntp-283 -j DROP +-A logdrop-ntp-284 -m limit --limit 1/second -j LOG +-A logdrop-ntp-284 -j DROP +-A logdrop-ntp-285 -m limit --limit 1/second -j LOG +-A logdrop-ntp-285 -j DROP +-A logdrop-ntp-286 -m limit --limit 1/second -j LOG +-A logdrop-ntp-286 -j DROP +-A logdrop-ntp-287 -m limit --limit 1/second -j LOG +-A logdrop-ntp-287 -j DROP +-A logdrop-ntp-288 -m limit --limit 1/second -j LOG +-A logdrop-ntp-288 -j DROP +-A logdrop-ntp-289 -m limit --limit 1/second -j LOG +-A logdrop-ntp-289 -j DROP +-A logdrop-ntp-29 -m limit --limit 1/second -j LOG +-A logdrop-ntp-29 -j DROP +-A logdrop-ntp-290 -m limit --limit 1/second -j LOG +-A logdrop-ntp-290 -j DROP +-A logdrop-ntp-291 -m limit --limit 1/second -j LOG +-A logdrop-ntp-291 -j DROP +-A logdrop-ntp-292 -m limit --limit 1/second -j LOG +-A logdrop-ntp-292 -j DROP +-A logdrop-ntp-293 -m limit --limit 1/second -j LOG +-A logdrop-ntp-293 -j DROP +-A logdrop-ntp-294 -m limit --limit 1/second -j LOG +-A logdrop-ntp-294 -j DROP +-A logdrop-ntp-295 -m limit --limit 1/second -j LOG +-A logdrop-ntp-295 -j DROP +-A logdrop-ntp-296 -m limit --limit 1/second -j LOG +-A logdrop-ntp-296 -j DROP +-A logdrop-ntp-297 -m limit --limit 1/second -j LOG +-A logdrop-ntp-297 -j DROP +-A logdrop-ntp-298 -m limit --limit 1/second -j LOG +-A logdrop-ntp-298 -j DROP +-A logdrop-ntp-299 -m limit --limit 1/second -j LOG +-A logdrop-ntp-299 -j DROP +-A logdrop-ntp-3 -m limit --limit 1/second -j LOG +-A logdrop-ntp-3 -j DROP +-A logdrop-ntp-30 -m limit --limit 1/second -j LOG +-A logdrop-ntp-30 -j DROP +-A logdrop-ntp-300 -m limit --limit 1/second -j LOG +-A logdrop-ntp-300 -j DROP +-A logdrop-ntp-301 -m limit --limit 1/second -j LOG +-A logdrop-ntp-301 -j DROP +-A logdrop-ntp-302 -m limit --limit 1/second -j LOG +-A logdrop-ntp-302 -j DROP +-A logdrop-ntp-303 -m limit --limit 1/second -j LOG +-A logdrop-ntp-303 -j DROP +-A logdrop-ntp-304 -m limit --limit 1/second -j LOG +-A logdrop-ntp-304 -j DROP +-A logdrop-ntp-305 -m limit --limit 1/second -j LOG +-A logdrop-ntp-305 -j DROP +-A logdrop-ntp-306 -m limit --limit 1/second -j LOG +-A logdrop-ntp-306 -j DROP +-A logdrop-ntp-307 -m limit --limit 1/second -j LOG +-A logdrop-ntp-307 -j DROP +-A logdrop-ntp-308 -m limit --limit 1/second -j LOG +-A logdrop-ntp-308 -j DROP +-A logdrop-ntp-309 -m limit --limit 1/second -j LOG +-A logdrop-ntp-309 -j DROP +-A logdrop-ntp-31 -m limit --limit 1/second -j LOG +-A logdrop-ntp-31 -j DROP +-A logdrop-ntp-310 -m limit --limit 1/second -j LOG +-A logdrop-ntp-310 -j DROP +-A logdrop-ntp-311 -m limit --limit 1/second -j LOG +-A logdrop-ntp-311 -j DROP +-A logdrop-ntp-312 -m limit --limit 1/second -j LOG +-A logdrop-ntp-312 -j DROP +-A logdrop-ntp-313 -m limit --limit 1/second -j LOG +-A logdrop-ntp-313 -j DROP +-A logdrop-ntp-314 -m limit --limit 1/second -j LOG +-A logdrop-ntp-314 -j DROP +-A logdrop-ntp-315 -m limit --limit 1/second -j LOG +-A logdrop-ntp-315 -j DROP +-A logdrop-ntp-316 -m limit --limit 1/second -j LOG +-A logdrop-ntp-316 -j DROP +-A logdrop-ntp-317 -m limit --limit 1/second -j LOG +-A logdrop-ntp-317 -j DROP +-A logdrop-ntp-318 -m limit --limit 1/second -j LOG +-A logdrop-ntp-318 -j DROP +-A logdrop-ntp-319 -m limit --limit 1/second -j LOG +-A logdrop-ntp-319 -j DROP +-A logdrop-ntp-32 -m limit --limit 1/second -j LOG +-A logdrop-ntp-32 -j DROP +-A logdrop-ntp-320 -m limit --limit 1/second -j LOG +-A logdrop-ntp-320 -j DROP +-A logdrop-ntp-321 -m limit --limit 1/second -j LOG +-A logdrop-ntp-321 -j DROP +-A logdrop-ntp-322 -m limit --limit 1/second -j LOG +-A logdrop-ntp-322 -j DROP +-A logdrop-ntp-323 -m limit --limit 1/second -j LOG +-A logdrop-ntp-323 -j DROP +-A logdrop-ntp-324 -m limit --limit 1/second -j LOG +-A logdrop-ntp-324 -j DROP +-A logdrop-ntp-325 -m limit --limit 1/second -j LOG +-A logdrop-ntp-325 -j DROP +-A logdrop-ntp-326 -m limit --limit 1/second -j LOG +-A logdrop-ntp-326 -j DROP +-A logdrop-ntp-327 -m limit --limit 1/second -j LOG +-A logdrop-ntp-327 -j DROP +-A logdrop-ntp-328 -m limit --limit 1/second -j LOG +-A logdrop-ntp-328 -j DROP +-A logdrop-ntp-329 -m limit --limit 1/second -j LOG +-A logdrop-ntp-329 -j DROP +-A logdrop-ntp-33 -m limit --limit 1/second -j LOG +-A logdrop-ntp-33 -j DROP +-A logdrop-ntp-330 -m limit --limit 1/second -j LOG +-A logdrop-ntp-330 -j DROP +-A logdrop-ntp-331 -m limit --limit 1/second -j LOG +-A logdrop-ntp-331 -j DROP +-A logdrop-ntp-332 -m limit --limit 1/second -j LOG +-A logdrop-ntp-332 -j DROP +-A logdrop-ntp-333 -m limit --limit 1/second -j LOG +-A logdrop-ntp-333 -j DROP +-A logdrop-ntp-334 -m limit --limit 1/second -j LOG +-A logdrop-ntp-334 -j DROP +-A logdrop-ntp-335 -m limit --limit 1/second -j LOG +-A logdrop-ntp-335 -j DROP +-A logdrop-ntp-336 -m limit --limit 1/second -j LOG +-A logdrop-ntp-336 -j DROP +-A logdrop-ntp-337 -m limit --limit 1/second -j LOG +-A logdrop-ntp-337 -j DROP +-A logdrop-ntp-338 -m limit --limit 1/second -j LOG +-A logdrop-ntp-338 -j DROP +-A logdrop-ntp-339 -m limit --limit 1/second -j LOG +-A logdrop-ntp-339 -j DROP +-A logdrop-ntp-34 -m limit --limit 1/second -j LOG +-A logdrop-ntp-34 -j DROP +-A logdrop-ntp-340 -m limit --limit 1/second -j LOG +-A logdrop-ntp-340 -j DROP +-A logdrop-ntp-341 -m limit --limit 1/second -j LOG +-A logdrop-ntp-341 -j DROP +-A logdrop-ntp-342 -m limit --limit 1/second -j LOG +-A logdrop-ntp-342 -j DROP +-A logdrop-ntp-343 -m limit --limit 1/second -j LOG +-A logdrop-ntp-343 -j DROP +-A logdrop-ntp-344 -m limit --limit 1/second -j LOG +-A logdrop-ntp-344 -j DROP +-A logdrop-ntp-345 -m limit --limit 1/second -j LOG +-A logdrop-ntp-345 -j DROP +-A logdrop-ntp-346 -m limit --limit 1/second -j LOG +-A logdrop-ntp-346 -j DROP +-A logdrop-ntp-347 -m limit --limit 1/second -j LOG +-A logdrop-ntp-347 -j DROP +-A logdrop-ntp-348 -m limit --limit 1/second -j LOG +-A logdrop-ntp-348 -j DROP +-A logdrop-ntp-349 -m limit --limit 1/second -j LOG +-A logdrop-ntp-349 -j DROP +-A logdrop-ntp-35 -m limit --limit 1/second -j LOG +-A logdrop-ntp-35 -j DROP +-A logdrop-ntp-350 -m limit --limit 1/second -j LOG +-A logdrop-ntp-350 -j DROP +-A logdrop-ntp-351 -m limit --limit 1/second -j LOG +-A logdrop-ntp-351 -j DROP +-A logdrop-ntp-352 -m limit --limit 1/second -j LOG +-A logdrop-ntp-352 -j DROP +-A logdrop-ntp-353 -m limit --limit 1/second -j LOG +-A logdrop-ntp-353 -j DROP +-A logdrop-ntp-354 -m limit --limit 1/second -j LOG +-A logdrop-ntp-354 -j DROP +-A logdrop-ntp-355 -m limit --limit 1/second -j LOG +-A logdrop-ntp-355 -j DROP +-A logdrop-ntp-356 -m limit --limit 1/second -j LOG +-A logdrop-ntp-356 -j DROP +-A logdrop-ntp-357 -m limit --limit 1/second -j LOG +-A logdrop-ntp-357 -j DROP +-A logdrop-ntp-358 -m limit --limit 1/second -j LOG +-A logdrop-ntp-358 -j DROP +-A logdrop-ntp-359 -m limit --limit 1/second -j LOG +-A logdrop-ntp-359 -j DROP +-A logdrop-ntp-36 -m limit --limit 1/second -j LOG +-A logdrop-ntp-36 -j DROP +-A logdrop-ntp-360 -m limit --limit 1/second -j LOG +-A logdrop-ntp-360 -j DROP +-A logdrop-ntp-361 -m limit --limit 1/second -j LOG +-A logdrop-ntp-361 -j DROP +-A logdrop-ntp-362 -m limit --limit 1/second -j LOG +-A logdrop-ntp-362 -j DROP +-A logdrop-ntp-363 -m limit --limit 1/second -j LOG +-A logdrop-ntp-363 -j DROP +-A logdrop-ntp-364 -m limit --limit 1/second -j LOG +-A logdrop-ntp-364 -j DROP +-A logdrop-ntp-365 -m limit --limit 1/second -j LOG +-A logdrop-ntp-365 -j DROP +-A logdrop-ntp-366 -m limit --limit 1/second -j LOG +-A logdrop-ntp-366 -j DROP +-A logdrop-ntp-367 -m limit --limit 1/second -j LOG +-A logdrop-ntp-367 -j DROP +-A logdrop-ntp-368 -m limit --limit 1/second -j LOG +-A logdrop-ntp-368 -j DROP +-A logdrop-ntp-369 -m limit --limit 1/second -j LOG +-A logdrop-ntp-369 -j DROP +-A logdrop-ntp-37 -m limit --limit 1/second -j LOG +-A logdrop-ntp-37 -j DROP +-A logdrop-ntp-370 -j TEE --gateway fc00::2 +-A logdrop-ntp-370 -j DROP +-A logdrop-ntp-371 -j TEE --gateway fc00::2 +-A logdrop-ntp-371 -j DROP +-A logdrop-ntp-372 -j TEE --gateway fc00::2 +-A logdrop-ntp-372 -j DROP +-A logdrop-ntp-373 -j TEE --gateway fc00::2 +-A logdrop-ntp-373 -j DROP +-A logdrop-ntp-374 -j TEE --gateway fc00::2 +-A logdrop-ntp-374 -j DROP +-A logdrop-ntp-375 -j TEE --gateway fc00::2 +-A logdrop-ntp-375 -j DROP +-A logdrop-ntp-376 -j TEE --gateway fc00::2 +-A logdrop-ntp-376 -j DROP +-A logdrop-ntp-377 -j TEE --gateway fc00::2 +-A logdrop-ntp-377 -j DROP +-A logdrop-ntp-378 -j TEE --gateway fc00::2 +-A logdrop-ntp-378 -j DROP +-A logdrop-ntp-379 -j TEE --gateway fc00::2 +-A logdrop-ntp-379 -j DROP +-A logdrop-ntp-38 -m limit --limit 1/second -j LOG +-A logdrop-ntp-38 -j DROP +-A logdrop-ntp-380 -j TEE --gateway fc00::2 +-A logdrop-ntp-380 -j DROP +-A logdrop-ntp-381 -j TEE --gateway fc00::2 +-A logdrop-ntp-381 -j DROP +-A logdrop-ntp-382 -j TEE --gateway fc00::2 +-A logdrop-ntp-382 -j DROP +-A logdrop-ntp-383 -j TEE --gateway fc00::2 +-A logdrop-ntp-383 -j DROP +-A logdrop-ntp-384 -j TEE --gateway fc00::2 +-A logdrop-ntp-384 -j DROP +-A logdrop-ntp-385 -j TEE --gateway fc00::2 +-A logdrop-ntp-385 -j DROP +-A logdrop-ntp-386 -j TEE --gateway fc00::2 +-A logdrop-ntp-386 -j DROP +-A logdrop-ntp-387 -j TEE --gateway fc00::2 +-A logdrop-ntp-387 -j DROP +-A logdrop-ntp-388 -j TEE --gateway fc00::2 +-A logdrop-ntp-388 -j DROP +-A logdrop-ntp-389 -j TEE --gateway fc00::2 +-A logdrop-ntp-389 -j DROP +-A logdrop-ntp-39 -m limit --limit 1/second -j LOG +-A logdrop-ntp-39 -j DROP +-A logdrop-ntp-390 -j TEE --gateway fc00::2 +-A logdrop-ntp-390 -j DROP +-A logdrop-ntp-391 -j TEE --gateway fc00::2 +-A logdrop-ntp-391 -j DROP +-A logdrop-ntp-392 -j TEE --gateway fc00::2 +-A logdrop-ntp-392 -j DROP +-A logdrop-ntp-393 -j TEE --gateway fc00::2 +-A logdrop-ntp-393 -j DROP +-A logdrop-ntp-394 -j TEE --gateway fc00::2 +-A logdrop-ntp-394 -j DROP +-A logdrop-ntp-395 -j TEE --gateway fc00::2 +-A logdrop-ntp-395 -j DROP +-A logdrop-ntp-396 -j TEE --gateway fc00::2 +-A logdrop-ntp-396 -j DROP +-A logdrop-ntp-397 -j TEE --gateway fc00::2 +-A logdrop-ntp-397 -j DROP +-A logdrop-ntp-398 -j TEE --gateway fc00::2 +-A logdrop-ntp-398 -j DROP +-A logdrop-ntp-399 -j TEE --gateway fc00::2 +-A logdrop-ntp-399 -j DROP +-A logdrop-ntp-4 -m limit --limit 1/second -j LOG +-A logdrop-ntp-4 -j DROP +-A logdrop-ntp-40 -m limit --limit 1/second -j LOG +-A logdrop-ntp-40 -j DROP +-A logdrop-ntp-400 -j TEE --gateway fc00::2 +-A logdrop-ntp-400 -j DROP +-A logdrop-ntp-401 -j TEE --gateway fc00::2 +-A logdrop-ntp-401 -j DROP +-A logdrop-ntp-402 -j TEE --gateway fc00::2 +-A logdrop-ntp-402 -j DROP +-A logdrop-ntp-403 -j TEE --gateway fc00::2 +-A logdrop-ntp-403 -j DROP +-A logdrop-ntp-404 -j TEE --gateway fc00::2 +-A logdrop-ntp-404 -j DROP +-A logdrop-ntp-405 -j TEE --gateway fc00::2 +-A logdrop-ntp-405 -j DROP +-A logdrop-ntp-406 -j TEE --gateway fc00::2 +-A logdrop-ntp-406 -j DROP +-A logdrop-ntp-407 -j TEE --gateway fc00::2 +-A logdrop-ntp-407 -j DROP +-A logdrop-ntp-408 -j TEE --gateway fc00::2 +-A logdrop-ntp-408 -j DROP +-A logdrop-ntp-409 -j TEE --gateway fc00::2 +-A logdrop-ntp-409 -j DROP +-A logdrop-ntp-41 -m limit --limit 1/second -j LOG +-A logdrop-ntp-41 -j DROP +-A logdrop-ntp-410 -j TEE --gateway fc00::2 +-A logdrop-ntp-410 -j DROP +-A logdrop-ntp-411 -j TEE --gateway fc00::2 +-A logdrop-ntp-411 -j DROP +-A logdrop-ntp-412 -j TEE --gateway fc00::2 +-A logdrop-ntp-412 -j DROP +-A logdrop-ntp-413 -j TEE --gateway fc00::2 +-A logdrop-ntp-413 -j DROP +-A logdrop-ntp-414 -j TEE --gateway fc00::2 +-A logdrop-ntp-414 -j DROP +-A logdrop-ntp-415 -j TEE --gateway fc00::2 +-A logdrop-ntp-415 -j DROP +-A logdrop-ntp-416 -j TEE --gateway fc00::2 +-A logdrop-ntp-416 -j DROP +-A logdrop-ntp-417 -j TEE --gateway fc00::2 +-A logdrop-ntp-417 -j DROP +-A logdrop-ntp-418 -j TEE --gateway fc00::2 +-A logdrop-ntp-418 -j DROP +-A logdrop-ntp-419 -j TEE --gateway fc00::2 +-A logdrop-ntp-419 -j DROP +-A logdrop-ntp-42 -m limit --limit 1/second -j LOG +-A logdrop-ntp-42 -j DROP +-A logdrop-ntp-420 -j TEE --gateway fc00::2 +-A logdrop-ntp-420 -j DROP +-A logdrop-ntp-421 -j TEE --gateway fc00::2 +-A logdrop-ntp-421 -j DROP +-A logdrop-ntp-422 -j TEE --gateway fc00::2 +-A logdrop-ntp-422 -j DROP +-A logdrop-ntp-423 -j TEE --gateway fc00::2 +-A logdrop-ntp-423 -j DROP +-A logdrop-ntp-424 -j TEE --gateway fc00::2 +-A logdrop-ntp-424 -j DROP +-A logdrop-ntp-425 -j TEE --gateway fc00::2 +-A logdrop-ntp-425 -j DROP +-A logdrop-ntp-426 -j TEE --gateway fc00::2 +-A logdrop-ntp-426 -j DROP +-A logdrop-ntp-427 -j TEE --gateway fc00::2 +-A logdrop-ntp-427 -j DROP +-A logdrop-ntp-428 -j TEE --gateway fc00::2 +-A logdrop-ntp-428 -j DROP +-A logdrop-ntp-429 -j TEE --gateway fc00::2 +-A logdrop-ntp-429 -j DROP +-A logdrop-ntp-43 -m limit --limit 1/second -j LOG +-A logdrop-ntp-43 -j DROP +-A logdrop-ntp-430 -j TEE --gateway fc00::2 +-A logdrop-ntp-430 -j DROP +-A logdrop-ntp-431 -j TEE --gateway fc00::2 +-A logdrop-ntp-431 -j DROP +-A logdrop-ntp-432 -j TEE --gateway fc00::2 +-A logdrop-ntp-432 -j DROP +-A logdrop-ntp-433 -j TEE --gateway fc00::2 +-A logdrop-ntp-433 -j DROP +-A logdrop-ntp-434 -j TEE --gateway fc00::2 +-A logdrop-ntp-434 -j DROP +-A logdrop-ntp-435 -j TEE --gateway fc00::2 +-A logdrop-ntp-435 -j DROP +-A logdrop-ntp-436 -j TEE --gateway fc00::2 +-A logdrop-ntp-436 -j DROP +-A logdrop-ntp-437 -j TEE --gateway fc00::2 +-A logdrop-ntp-437 -j DROP +-A logdrop-ntp-438 -j TEE --gateway fc00::2 +-A logdrop-ntp-438 -j DROP +-A logdrop-ntp-439 -j TEE --gateway fc00::2 +-A logdrop-ntp-439 -j DROP +-A logdrop-ntp-44 -m limit --limit 1/second -j LOG +-A logdrop-ntp-44 -j DROP +-A logdrop-ntp-440 -j TEE --gateway fc00::2 +-A logdrop-ntp-440 -j DROP +-A logdrop-ntp-441 -j TEE --gateway fc00::2 +-A logdrop-ntp-441 -j DROP +-A logdrop-ntp-442 -j TEE --gateway fc00::2 +-A logdrop-ntp-442 -j DROP +-A logdrop-ntp-443 -j TEE --gateway fc00::2 +-A logdrop-ntp-443 -j DROP +-A logdrop-ntp-444 -j TEE --gateway fc00::2 +-A logdrop-ntp-444 -j DROP +-A logdrop-ntp-445 -j TEE --gateway fc00::2 +-A logdrop-ntp-445 -j DROP +-A logdrop-ntp-446 -j TEE --gateway fc00::2 +-A logdrop-ntp-446 -j DROP +-A logdrop-ntp-447 -j TEE --gateway fc00::2 +-A logdrop-ntp-447 -j DROP +-A logdrop-ntp-448 -j TEE --gateway fc00::2 +-A logdrop-ntp-448 -j DROP +-A logdrop-ntp-449 -j TEE --gateway fc00::2 +-A logdrop-ntp-449 -j DROP +-A logdrop-ntp-45 -m limit --limit 1/second -j LOG +-A logdrop-ntp-45 -j DROP +-A logdrop-ntp-450 -j TEE --gateway fc00::2 +-A logdrop-ntp-450 -j DROP +-A logdrop-ntp-451 -j TEE --gateway fc00::2 +-A logdrop-ntp-451 -j DROP +-A logdrop-ntp-452 -j TEE --gateway fc00::2 +-A logdrop-ntp-452 -j DROP +-A logdrop-ntp-453 -j TEE --gateway fc00::2 +-A logdrop-ntp-453 -j DROP +-A logdrop-ntp-454 -j TEE --gateway fc00::2 +-A logdrop-ntp-454 -j DROP +-A logdrop-ntp-455 -j TEE --gateway fc00::2 +-A logdrop-ntp-455 -j DROP +-A logdrop-ntp-456 -j TEE --gateway fc00::2 +-A logdrop-ntp-456 -j DROP +-A logdrop-ntp-457 -j TEE --gateway fc00::2 +-A logdrop-ntp-457 -j DROP +-A logdrop-ntp-458 -j TEE --gateway fc00::2 +-A logdrop-ntp-458 -j DROP +-A logdrop-ntp-459 -j TEE --gateway fc00::2 +-A logdrop-ntp-459 -j DROP +-A logdrop-ntp-46 -m limit --limit 1/second -j LOG +-A logdrop-ntp-46 -j DROP +-A logdrop-ntp-460 -j DROP +-A logdrop-ntp-461 -j DROP +-A logdrop-ntp-462 -j DROP +-A logdrop-ntp-463 -j DROP +-A logdrop-ntp-464 -j DROP +-A logdrop-ntp-465 -j DROP +-A logdrop-ntp-466 -j DROP +-A logdrop-ntp-467 -j DROP +-A logdrop-ntp-468 -j DROP +-A logdrop-ntp-469 -j DROP +-A logdrop-ntp-47 -m limit --limit 1/second -j LOG +-A logdrop-ntp-47 -j DROP +-A logdrop-ntp-470 -j DROP +-A logdrop-ntp-471 -j DROP +-A logdrop-ntp-472 -j DROP +-A logdrop-ntp-473 -j DROP +-A logdrop-ntp-474 -j DROP +-A logdrop-ntp-475 -j DROP +-A logdrop-ntp-476 -j DROP +-A logdrop-ntp-477 -j DROP +-A logdrop-ntp-478 -j DROP +-A logdrop-ntp-479 -j DROP +-A logdrop-ntp-48 -m limit --limit 1/second -j LOG +-A logdrop-ntp-48 -j DROP +-A logdrop-ntp-480 -j DROP +-A logdrop-ntp-481 -j DROP +-A logdrop-ntp-482 -j DROP +-A logdrop-ntp-483 -j DROP +-A logdrop-ntp-484 -j DROP +-A logdrop-ntp-485 -j DROP +-A logdrop-ntp-486 -j DROP +-A logdrop-ntp-487 -j DROP +-A logdrop-ntp-488 -j DROP +-A logdrop-ntp-489 -j DROP +-A logdrop-ntp-49 -m limit --limit 1/second -j LOG +-A logdrop-ntp-49 -j DROP +-A logdrop-ntp-490 -j DROP +-A logdrop-ntp-491 -j DROP +-A logdrop-ntp-492 -j DROP +-A logdrop-ntp-493 -j DROP +-A logdrop-ntp-494 -j DROP +-A logdrop-ntp-495 -j DROP +-A logdrop-ntp-496 -j DROP +-A logdrop-ntp-497 -j DROP +-A logdrop-ntp-498 -j DROP +-A logdrop-ntp-499 -j DROP +-A logdrop-ntp-5 -m limit --limit 1/second -j LOG +-A logdrop-ntp-5 -j DROP +-A logdrop-ntp-50 -m limit --limit 1/second -j LOG +-A logdrop-ntp-50 -j DROP +-A logdrop-ntp-500 -j DROP +-A logdrop-ntp-501 -j DROP +-A logdrop-ntp-502 -j DROP +-A logdrop-ntp-503 -j DROP +-A logdrop-ntp-504 -j DROP +-A logdrop-ntp-505 -j DROP +-A logdrop-ntp-506 -j DROP +-A logdrop-ntp-507 -j DROP +-A logdrop-ntp-508 -j DROP +-A logdrop-ntp-509 -j DROP +-A logdrop-ntp-51 -m limit --limit 1/second -j LOG +-A logdrop-ntp-51 -j DROP +-A logdrop-ntp-510 -j DROP +-A logdrop-ntp-511 -j DROP +-A logdrop-ntp-512 -j DROP +-A logdrop-ntp-513 -j DROP +-A logdrop-ntp-514 -j DROP +-A logdrop-ntp-515 -j DROP +-A logdrop-ntp-516 -j DROP +-A logdrop-ntp-517 -j DROP +-A logdrop-ntp-518 -j DROP +-A logdrop-ntp-519 -j DROP +-A logdrop-ntp-52 -m limit --limit 1/second -j LOG +-A logdrop-ntp-52 -j DROP +-A logdrop-ntp-520 -j DROP +-A logdrop-ntp-521 -j DROP +-A logdrop-ntp-522 -j DROP +-A logdrop-ntp-523 -j DROP +-A logdrop-ntp-524 -j DROP +-A logdrop-ntp-525 -j DROP +-A logdrop-ntp-526 -j DROP +-A logdrop-ntp-527 -j DROP +-A logdrop-ntp-528 -j DROP +-A logdrop-ntp-529 -j DROP +-A logdrop-ntp-53 -m limit --limit 1/second -j LOG +-A logdrop-ntp-53 -j DROP +-A logdrop-ntp-530 -j DROP +-A logdrop-ntp-531 -j DROP +-A logdrop-ntp-532 -j DROP +-A logdrop-ntp-533 -j DROP +-A logdrop-ntp-534 -j DROP +-A logdrop-ntp-535 -j DROP +-A logdrop-ntp-536 -j DROP +-A logdrop-ntp-537 -j DROP +-A logdrop-ntp-538 -j DROP +-A logdrop-ntp-539 -j DROP +-A logdrop-ntp-54 -m limit --limit 1/second -j LOG +-A logdrop-ntp-54 -j DROP +-A logdrop-ntp-540 -j DROP +-A logdrop-ntp-541 -j DROP +-A logdrop-ntp-542 -j DROP +-A logdrop-ntp-543 -j DROP +-A logdrop-ntp-544 -j DROP +-A logdrop-ntp-545 -j DROP +-A logdrop-ntp-546 -j DROP +-A logdrop-ntp-547 -j DROP +-A logdrop-ntp-548 -j DROP +-A logdrop-ntp-549 -j DROP +-A logdrop-ntp-55 -m limit --limit 1/second -j LOG +-A logdrop-ntp-55 -j DROP +-A logdrop-ntp-56 -m limit --limit 1/second -j LOG +-A logdrop-ntp-56 -j DROP +-A logdrop-ntp-57 -m limit --limit 1/second -j LOG +-A logdrop-ntp-57 -j DROP +-A logdrop-ntp-58 -m limit --limit 1/second -j LOG +-A logdrop-ntp-58 -j DROP +-A logdrop-ntp-59 -m limit --limit 1/second -j LOG +-A logdrop-ntp-59 -j DROP +-A logdrop-ntp-6 -m limit --limit 1/second -j LOG +-A logdrop-ntp-6 -j DROP +-A logdrop-ntp-60 -m limit --limit 1/second -j LOG +-A logdrop-ntp-60 -j DROP +-A logdrop-ntp-61 -m limit --limit 1/second -j LOG +-A logdrop-ntp-61 -j DROP +-A logdrop-ntp-62 -m limit --limit 1/second -j LOG +-A logdrop-ntp-62 -j DROP +-A logdrop-ntp-63 -m limit --limit 1/second -j LOG +-A logdrop-ntp-63 -j DROP +-A logdrop-ntp-64 -m limit --limit 1/second -j LOG +-A logdrop-ntp-64 -j DROP +-A logdrop-ntp-65 -m limit --limit 1/second -j LOG +-A logdrop-ntp-65 -j DROP +-A logdrop-ntp-66 -m limit --limit 1/second -j LOG +-A logdrop-ntp-66 -j DROP +-A logdrop-ntp-67 -m limit --limit 1/second -j LOG +-A logdrop-ntp-67 -j DROP +-A logdrop-ntp-68 -m limit --limit 1/second -j LOG +-A logdrop-ntp-68 -j DROP +-A logdrop-ntp-69 -m limit --limit 1/second -j LOG +-A logdrop-ntp-69 -j DROP +-A logdrop-ntp-7 -m limit --limit 1/second -j LOG +-A logdrop-ntp-7 -j DROP +-A logdrop-ntp-70 -m limit --limit 1/second -j LOG +-A logdrop-ntp-70 -j DROP +-A logdrop-ntp-71 -m limit --limit 1/second -j LOG +-A logdrop-ntp-71 -j DROP +-A logdrop-ntp-72 -m limit --limit 1/second -j LOG +-A logdrop-ntp-72 -j DROP +-A logdrop-ntp-73 -m limit --limit 1/second -j LOG +-A logdrop-ntp-73 -j DROP +-A logdrop-ntp-74 -m limit --limit 1/second -j LOG +-A logdrop-ntp-74 -j DROP +-A logdrop-ntp-75 -m limit --limit 1/second -j LOG +-A logdrop-ntp-75 -j DROP +-A logdrop-ntp-76 -m limit --limit 1/second -j LOG +-A logdrop-ntp-76 -j DROP +-A logdrop-ntp-77 -m limit --limit 1/second -j LOG +-A logdrop-ntp-77 -j DROP +-A logdrop-ntp-78 -m limit --limit 1/second -j LOG +-A logdrop-ntp-78 -j DROP +-A logdrop-ntp-79 -m limit --limit 1/second -j LOG +-A logdrop-ntp-79 -j DROP +-A logdrop-ntp-8 -m limit --limit 1/second -j LOG +-A logdrop-ntp-8 -j DROP +-A logdrop-ntp-80 -m limit --limit 1/second -j LOG +-A logdrop-ntp-80 -j DROP +-A logdrop-ntp-81 -m limit --limit 1/second -j LOG +-A logdrop-ntp-81 -j DROP +-A logdrop-ntp-82 -m limit --limit 1/second -j LOG +-A logdrop-ntp-82 -j DROP +-A logdrop-ntp-83 -m limit --limit 1/second -j LOG +-A logdrop-ntp-83 -j DROP +-A logdrop-ntp-84 -m limit --limit 1/second -j LOG +-A logdrop-ntp-84 -j DROP +-A logdrop-ntp-85 -m limit --limit 1/second -j LOG +-A logdrop-ntp-85 -j DROP +-A logdrop-ntp-86 -m limit --limit 1/second -j LOG +-A logdrop-ntp-86 -j DROP +-A logdrop-ntp-87 -m limit --limit 1/second -j LOG +-A logdrop-ntp-87 -j DROP +-A logdrop-ntp-88 -m limit --limit 1/second -j LOG +-A logdrop-ntp-88 -j DROP +-A logdrop-ntp-89 -m limit --limit 1/second -j LOG +-A logdrop-ntp-89 -j DROP +-A logdrop-ntp-9 -m limit --limit 1/second -j LOG +-A logdrop-ntp-9 -j DROP +-A logdrop-ntp-90 -m limit --limit 1/second -j LOG +-A logdrop-ntp-90 -j DROP +-A logdrop-ntp-91 -m limit --limit 1/second -j LOG +-A logdrop-ntp-91 -j DROP +-A logdrop-ntp-92 -m limit --limit 1/second -j LOG +-A logdrop-ntp-92 -j DROP +-A logdrop-ntp-93 -m limit --limit 1/second -j LOG +-A logdrop-ntp-93 -j DROP +-A logdrop-ntp-94 -m limit --limit 1/second -j LOG +-A logdrop-ntp-94 -j DROP +-A logdrop-ntp-95 -m limit --limit 1/second -j LOG +-A logdrop-ntp-95 -j DROP +-A logdrop-ntp-96 -m limit --limit 1/second -j LOG +-A logdrop-ntp-96 -j DROP +-A logdrop-ntp-97 -m limit --limit 1/second -j LOG +-A logdrop-ntp-97 -j DROP +-A logdrop-ntp-98 -m limit --limit 1/second -j LOG +-A logdrop-ntp-98 -j DROP +-A logdrop-ntp-99 -m limit --limit 1/second -j LOG +-A logdrop-ntp-99 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG -A logpass-1 -j LOG -A logpass-1 -j TEE --gateway fc00::1 @@ -27185,1493 +27185,1493 @@ COMMIT *raw :OUTPUT ACCEPT [0:0] :PREROUTING ACCEPT [0:0] --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack +-A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -i eth0 -j CT --notrack -A PREROUTING -i eth1 -s fc00::/7 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack |